Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2000-1219 State: PUBLISHED Published: 2005-04-21T04:00:00Z Last Updated: 2024-09-16T20:36:59.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: The -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all types of integer overflows, which may leave applications vulnerable to vulnerabilities related to overflows. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/540517 - http://gcc.gnu.org/ml/gcc-bugs/2002-05/msg00198.html
CVE ID: CVE-2000-1220 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T05:45:37.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2000/20000109 - http://seclists.org/lists/bugtraq/2000/Jan/0116.html - http://www.securityfocus.com/bid/927 - https://exchange.xforce.ibmcloud.com/vulnerabilities/3841 -
/2000/Jan/0116.html - http://www.securityfocus.com/bid/927 - https://exchange.xforce.ibmcloud.com/vulnerabilities/3841 - ftp://patches.sgi.com/support/free/security/advisories/20021104-01-P - http://www.l0pht.com/advisories/lpd_advisory - http://www.kb.cert.org/vuls/id/39001 - http://www.redhat.com/support/errata/RHSA-2000-002.html - http://www.atstake.com/research/advisories/2000/lpd_advisory.txt
CVE ID: CVE-2000-1221 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T05:45:37.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by modifying the DNS for the attacking IP. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2000/20000109 - http://www.atstake.com/research/advisories/2000/lpd_advisory.txt - http://www.securit
ebian.org/security/2000/20000109 - http://www.atstake.com/research/advisories/2000/lpd_advisory.txt - http://www.securityfocus.com/bid/927 - http://rhn.redhat.com/errata/RHSA-2000-002.html - http://www.kb.cert.org/vuls/id/30308 - ftp://patches.sgi.com/support/free/security/advisories/20021104-01-P - http://www.l0pht.com/advisories/lpd_advisory - https://exchange.xforce.ibmcloud.com/vulnerabilities/3840
CVE ID: CVE-2000-1222 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T05:45:37.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to gain privileges by modifying the path to point to a malicious hostname program. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6432 - http://www.kb.cert.org/vuls/id/17566
CVE ID: CVE-2000-1223 State: PUBLISHED Published: 2005-04-21T04:00:00Z Last Updated: 2024-09-17T03:53:36.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: quikstore.cgi in Quikstore Shopping Cart allows remote attackers to execute arbitrary commands via shell metacharacters in the URL portion of an HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/671444
CVE ID: CVE-2000-1224 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T05:45:37.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Caucho Technology Resin 1.2 and possibly earlier allows remote attackers to view JSP source via an HTTP request to a .jsp file with certain characters appended to the file name, such as (1) "..", (2) "%2e..", (3) "%81", (4) "%82", and others. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/146770 - http://marc.info/?l=bugtraq&m=97502269408279&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5568 - http://www.securityfocus.com/bid/1986
CVE ID: CVE-2000-1225 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T05:45:37.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xitami 2.5b installs the testcgi.exe program by default in the cgi-bin directory, which allows remote attackers to gain sensitive configuration information about the web server by accessing the program. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0109.html
CVE ID: CVE-2000-1226 State: PUBLISHED Published: 2005-06-21T04:00:00Z Last Updated: 2024-09-16T20:02:39.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause a denial of service (crash) by sending non-IP protocols that Snort does not know about, as demonstrated by an nmap protocol scan. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-06/0122.html - http://archives.neohapsis.com/archives/bugtraq/2000-06/0126.html
CVE ID: CVE-2000-1227 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T19:56:28.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service (unavailable connections) by sending multiple SMB SMBnegprots requests but not reading the response that is sent back. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/63322 - http://www.securityfocus.com/bid/1301
CVE ID: CVE-2000-1228 State: PUBLISHED Published: 2005-07-14T04:00:00 Last Updated: 2024-08-08T05:45:37.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2271 - http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html - http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm - http://hispahack.ccc.de/mi020.html
CVE ID: CVE-2000-1229 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T17:08:11.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Phorum 3.0.7 allows remote Phorum administrators to read arbitrary files via ".." (dot dot) sequences in the default .langfile name field in the Master Settings administrative function, which causes the file to be displayed in admin.php3. Additional Analyst Notes: - CVE Program Container: References: - http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm - http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html - http://hispahack.ccc.de/mi020.html
CVE ID: CVE-2000-1230 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T17:42:49.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with the PHP_AUTH_USER parameter set to "boogieman". Additional Analyst Notes: - CVE Program Container: References: - http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm - http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html - http://www.securityfocus.com/bid/2274 - http://hispahack.ccc.de/mi020.html
CVE ID: CVE-2000-1231 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-17T04:15:17.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: code.php3 in Phorum 3.0.7 allows remote attackers to read arbitrary files in the phorum directory via the query string. Additional Analyst Notes: - CVE Program Container: References: - http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm - http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html - http://hispahack.ccc.de/mi020.html
CVE ID: CVE-2000-1232 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-17T02:26:38.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: upgrade.php3 in Phorum 3.0.7 could allow remote attackers to modify certain Phorum database tables via an unknown method. Additional Analyst Notes: - CVE Program Container: References: - http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm - http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html - http://hispahack.ccc.de/mi020.html
CVE ID: CVE-2000-1233 State: PUBLISHED Published: 2005-07-14T04:00:00 Last Updated: 2024-08-08T05:45:37.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in read.php3 and other scripts in Phorum 3.0.7 allows remote attackers to execute arbitrary SQL queries via the sSQL parameter. Additional Analyst Notes: - CVE Program Container: References: - http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html - http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm - http://hispahack.ccc.de/mi020.html
CVE ID: CVE-2000-1234 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T19:50:41.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a "spam proxy" by setting the Mod and ForumName parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2272 - http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm - http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html - http://hispahack.ccc.de/mi020.html
CVE ID: CVE-2000-1235 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T23:11:09.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow remote attackers to view privileged database information via HTTP requests for Database Access Descriptor (DAD) files. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-12/0339.html - http://online.securityfocus.com/archive/1/155881 - http://www.iss.net/security_center/static/5818.php - http://archives.neohapsis.com/archives/
ocus.com/archive/1/155881 - http://www.iss.net/security_center/static/5818.php - http://archives.neohapsis.com/archives/bugtraq/2000-12/0372.html - http://www.securityfocus.com/bid/2150 - http://archives.neohapsis.com/archives/bugtraq/2000-12/0463.html
CVE ID: CVE-2000-1236 State: PUBLISHED Published: 2005-07-14T04:00:00 Last Updated: 2024-08-08T05:45:37.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query string of the URL. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-12/0339.html - http://online.securityfocus.com/archive/1/155881 - http://www.iss.net/security_center/static/5817.php - http://archives.neohapsis.com/archives/bugtraq/2000-12/0372.html - http://www.securityfocus.com/bid/2150
atic/5817.php - http://archives.neohapsis.com/archives/bugtraq/2000-12/0372.html - http://www.securityfocus.com/bid/2150 - http://archives.neohapsis.com/archives/bugtraq/2000-12/0463.html
CVE ID: CVE-2000-1237 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T17:37:43.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: The POP3 server in FTGate returns an -ERR code after receiving an invalid USER request, which makes it easier for remote attackers to determine valid usernames and conduct brute force password guessing. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-06/0282.html - http://www.iss.net/security_center/static/4793.php
CVE ID: CVE-2000-1238 State: PUBLISHED Published: 2005-11-16T21:17:00 Last Updated: 2024-08-08T05:45:37.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restricted JSP or servlet pages via a URL with multiple / (forward slash) characters before the restricted pages. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5588 - http://www.securityfocus.com/bid/5089 - ftp://ftpna.bea.com/pub/releases/patches/SecurityBEA00-0600.zip
CVE ID: CVE-2000-1239 State: PUBLISHED Published: 2006-03-15T17:00:00 Last Updated: 2024-08-08T05:45:37.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/3927 - http://www.securityfocus.com/bid/17085 - http://www-1.ibm.com/support/docview.wss?uid=swg21082896
CVE ID: CVE-2000-1240 State: PUBLISHED Published: 2006-03-23T11:00:00 Last Updated: 2024-08-08T05:45:37.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in siteman.php3 in AnyPortal(php) before 22 APR 00 allows remote attackers to obtain sensitive information via unknown attack vectors, which reveal the absolute path. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25441 - http://www.osvdb.org/23983
CVE ID: CVE-2000-1241 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-08T05:45:37.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Haakon Nilsen simple, integrated publishing system (SIPS) before 0.2.4 has an unknown impact and attack vectors, related to a "grave security fault." Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/forum/forum.php?forum_id=25971
CVE ID: CVE-2000-1242 State: PUBLISHED Published: 2006-12-10T11:00:00Z Last Updated: 2024-09-16T19:24:55.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP service in American Power Conversion (APC) PowerChute uses a default username and password, which allows remote attackers to gain system access. Additional Analyst Notes: - CVE Program Container: References: - http://governmentsecurity.org/articles/DefaultLoginsandPasswordsforNetworkedDevices.php - http://www.osvdb.org/30768
CVE ID: CVE-2000-1243 State: PUBLISHED Published: 2007-06-06T10:00:00 Last Updated: 2024-08-08T05:53:28.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Privacy leak in Dansie Shopping Cart 3.04, and probably earlier versions, sends sensitive information such as user credentials to an e-mail address controlled by the product developers. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-04/0066.html - http://www.securityfocus.com/archive/1/470457/100/0/threaded - http://archives.neohapsis.com/archives/bugtraq/2000-04/0051.html - http://archives.neohapsis.com/archives/bugtraq/2000-04/0071.html - http://archives.n
rchives/bugtraq/2000-04/0051.html - http://archives.neohapsis.com/archives/bugtraq/2000-04/0071.html - http://archives.neohapsis.com/archives/bugtraq/2000-04/0086.html
CVE ID: CVE-2000-1244 State: PUBLISHED Published: 2007-10-18T10:00:00Z Last Updated: 2024-09-16T16:43:49.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP header is missing the "From" field, which allows remote attackers to bypass virus protection. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-11/0158.html
CVE ID: CVE-2000-1245 State: PUBLISHED Published: 2010-04-05T15:15:00Z Last Updated: 2024-09-17T00:05:49.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allow remote attackers to bypass intended restrictions on anonymous access via unknown vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CVE ID: CVE-2000-1246 State: PUBLISHED Published: 2010-04-05T15:15:00Z Last Updated: 2024-09-16T16:19:05.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allows remote authenticated users to cause a denial of service (abend) by sending an RNTO command after a failed RNFR command. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CVE ID: CVE-2000-1247 State: PUBLISHED Published: 2011-10-05T01:00:00 Last Updated: 2024-08-08T05:53:28.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the jserv-status handler in jserv.conf in Apache JServ 1.1.2 includes an "allow from 127.0.0.1" line, which allows local users to discover JDBC passwords or other sensitive information via a direct request to the jserv/ URI. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8412 - http://marc.info/?l=java-apache-users&m=97036799917909&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51946 - http://archive.apache.org/dist/java/java.apa
99917909&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51946 - http://archive.apache.org/dist/java/java.apache.org-www.tar.gz
CVE ID: CVE-2000-1248 State: REJECTED Published: 2020-11-05T19:44:14 Last Updated: 2020-11-05T19:44:14 Description: No description available.
CVE ID: CVE-2000-1249 State: REJECTED Published: 2020-11-05T19:44:37 Last Updated: 2020-11-05T19:44:37 Description: No description available.
CVE ID: CVE-2000-1250 State: REJECTED Published: 2020-11-05T19:45:01 Last Updated: 2020-11-05T19:45:01 Description: No description available.
CVE ID: CVE-2000-1251 State: REJECTED Published: 2020-11-05T19:45:28 Last Updated: 2020-11-05T19:45:28 Description: No description available.
CVE ID: CVE-2000-1252 State: REJECTED Published: 2020-11-05T19:46:12 Last Updated: 2020-11-05T19:46:12 Description: No description available.
CVE ID: CVE-2000-1254 State: PUBLISHED Published: 2016-05-05T01:00:00 Last Updated: 2024-08-08T05:53:28.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: crypto/rsa/rsa_gen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging improper RSA key generation on 64-bit HP-UX platforms. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035750 - http://marc.info/?l=openssl-users&m=95961024500509 - http://www-01.ibm.com/support/docview.wss?uid=swg21995039 - http://www.securityfocus.com/b
nssl-users&m=95961024500509 - http://www-01.ibm.com/support/docview.wss?uid=swg21995039 - http://www.securityfocus.com/bid/90109 - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=db82b8f9bd432a59aea8e1014694e15fc457c2bb - http://www.openwall.com/lists/oss-security/2016/05/04/17
CVE ID: CVE-2001-0001 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:06:54.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: cookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to other user accounts by extracting the authentication information from a cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6183 - http://archives.neohapsis.com/archives/bugtraq/2001-02/0257.html
CVE ID: CVE-2001-0002 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:06:54.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location of cached content and open the content in the Local Computer Zone, then use compiled HTML help (.chm) files to execute arbitrary programs. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A920 - http://www.osvdb.org/7823 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015 - https://exchange.xforce.ibmcloud.
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5567 - http://www.securityfocus.com/bid/2456 - http://www.guninski.com/chmtempmain.html
CVE ID: CVE-2001-0003 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:06:54.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka the "Web Client NTLM Authentication" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5920 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-001 - http://www.secu
lnerabilities/5920 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-001 - http://www.securityfocus.com/bid/2199
CVE ID: CVE-2001-0004 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:06:55.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.htr" to the requested URL, which causes the files to be parsed by the .HTR ISAPI extension, aka a variant of the "File Fragment Reading via .HTR" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5903 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-004 - http
loud.com/vulnerabilities/5903 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-004 - http://marc.info/?l=bugtraq&m=97897954625305&w=2
CVE ID: CVE-2001-0005 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:06:55.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the parsing mechanism of the file loader in Microsoft PowerPoint 2000 allows attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2001/a012301-1.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/5996 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-002