Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2001-0487 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/search.wss?rs=0&q=IY17630&apar=only - http://www.iss.net/security_center/static/6996.php - http://www.osvdb.org/5611
CVE ID: CVE-2001-0488 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:21:38.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: pcltotiff in HP-UX 10.x has unnecessary set group id permissions, which allows local users to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2646 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6447 - http://www.osvdb.org/2188 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0104-149
CVE ID: CVE-2001-0489 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:21:38.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vuln-dev/2001-q2/0231.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6478 - http://archives.neohapsis.com/archives/linux/redhat/2001-q2/0043.html - http://www.securityfocus.com/bid/2657 - http://www.osvdb.org/1805 - http://www.debian.org/security/2001/dsa-057
CVE ID: CVE-2001-0490 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:38.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-04/0518.html
CVE ID: CVE-2001-0491 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:38.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in RaidenFTPD Server 2.1 before build 952 allows attackers to access files outside the ftp root via dot dot attacks, such as (1) .... in CWD, (2) .. in NLST, or (3) ... in NLST. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-04/0465.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6455
CVE ID: CVE-2001-0492 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:38.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netcruiser Web server version 0.1.2.8 and earlier allows remote attackers to determine the physical path of the server via a URL containing (1) con, (2) com2, or (3) com3. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2650 - http://archives.neohapsis.com/archives/bugtraq/2001-04/0427.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6468
CVE ID: CVE-2001-0493 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Small HTTP server 2.03 allows remote attackers to cause a denial of service via a URL that contains an MS-DOS device name such as aux. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-04/0428.html - http://www.securityfocus.com/bid/2649 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6446 - http://home.lanck.net/mf/srv/index.htm
CVE ID: CVE-2001-0494 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:21:38.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IPSwitch IMail SMTP server 6.06 and possibly prior versions allows remote attackers to execute arbitrary code via a long From: header. Additional Analyst Notes: - CVE Program Container: References: - http://ipswitch.com/Support/IMail/news.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6445 - http://www.osvdb.org/5610 - http://archives.neohapsis.com/archives/bugtraq/2001-04/0433.html
CVE ID: CVE-2001-0495 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:21:38.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal in DataWizard WebXQ server 1.204 allows remote attackers to view files outside of the web root via a .. (dot dot) attack. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-04/0490.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6466 - http://www.securityfocus.com/bid/2660 - http://www.osvdb.org/1799
CVE ID: CVE-2001-0496 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:38.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-059.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6856 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-046.php3
CVE ID: CVE-2001-0497 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key file used for DNS Transactional Signatures (TSIG), which allows attackers to obtain the keys and perform dynamic DNS updates. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6694 - http://www.osvdb.org/5609 - http://xforce.iss.net/alerts/advise78.php
CVE ID: CVE-2001-0498 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:21:38.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Transparent Network Substrate (TNS) over Net8 (SQLNet) in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a denial of service via a malformed SQLNet connection request with a large offset in the header extension. Additional Analyst Notes: - CVE Program Container: References: - http://www.nai.com/research/covert/advisories/049.asp
CVE ID: CVE-2001-0499 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:21:38.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands (1) STATUS, (2) PING, (3) SERVICES, (4) TRC_FILE, (5) SAVE_CONFIG, or (6) RELOAD. Additional Analyst Notes: - CVE Program Container: References: - http://www.nai.com/research/covert/advisories/050.asp - http://www.kb.cert.org/vuls/id/620495 - http://www.securityfocus.com/bid/2941 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6758 - http://www.cert
95 - http://www.securityfocus.com/bid/2941 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6758 - http://www.cert.org/advisories/CA-2001-16.html
CVE ID: CVE-2001-0500 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-033 - http://www.securityfocus.com/archive/1/191873 - http://www
.com/en-us/security-updates/securitybulletins/2001/ms01-033 - http://www.securityfocus.com/archive/1/191873 - http://www.securityfocus.com/bid/2880 - http://www.ciac.org/ciac/bulletins/l-098.shtml - http://www.iss.net/security_center/static/6705.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A197 - http://www.cert.org/advisories/CA-2001-13.html
CVE ID: CVE-2001-0501 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manner that escapes detection by the security scanner. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6732 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-034 - http://www.securityfocus.com/bid/2876 - http://marc.info/?l=bugtraq&m=99325144322224&w=2
CVE ID: CVE-2001-0502 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the directory principal is a domain user and the data attribute is the domain password, which allows local users to modify the login password of other users. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-036 - http://www.securityfocus.com/bid/2929 - http://www.ciac.org/ciac/bulletins/l-101.shtml - https://exchange.xf
/ms01-036 - http://www.securityfocus.com/bid/2929 - http://www.ciac.org/ciac/bulletins/l-101.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/6745
CVE ID: CVE-2001-0503 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service via a malformed string to the NetMeeting service port, aka a variant of the "NetMeeting Desktop Sharing" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/5368.php - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-077 - http://www.osvdb.org/5608
CVE ID: CVE-2001-0504 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to gain privileges and conduct activities such as mail relaying. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-037 - http://www.ciac.org/ciac/bulletins/l-107.shtml - http://www.securityfocus.com/bid/2988 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6803 - http://www.kb.cert.org/vuls/id/43
curityfocus.com/bid/2988 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6803 - http://www.kb.cert.org/vuls/id/435963
CVE ID: CVE-2001-0505 State: PUBLISHED Published: 2001-10-12T04:00:00 Last Updated: 2024-08-08T04:21:38.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed requests to (1) the Telnet service, or (2) the NFS service. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6882 - http://www.kb.cert.org/vuls/id/994851 - http://www.kb.cert.org/vuls/id/581603 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6883 - https://docs.microsoft.com/en-us/security-upda
s/id/581603 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6883 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-039 - http://www.securityfocus.com/bid/3089
CVE ID: CVE-2001-0506 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for a long filename, which triggers the overflow when the directory name is added, aka the "SSI privilege elevation" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/242541 - http://marc.info/?l=bugtraq&m=99802093532233&w=2 - http://www.securityfocus.com/bid/3190 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6984
m=99802093532233&w=2 - http://www.securityfocus.com/bid/3190 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6984 - http://www.ciac.org/ciac/bulletins/l-132.shtml - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-044
CVE ID: CVE-2001-0507 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the "System file listing privilege elevation" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A909 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6985 - http://online.securityfocus.com/archive/1/205069 - http://www.osvdb.org/5607 - https://oval.cisecurity.or
ilities/6985 - http://online.securityfocus.com/archive/1/205069 - http://www.osvdb.org/5607 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A912 - http://www.ciac.org/ciac/bulletins/l-132.shtml - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-044
CVE ID: CVE-2001-0508 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:21:38.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in IIS 5.0 allows remote attackers to cause a denial of service (restart) via a long, invalid WebDAV request. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/182579 - http://www.iss.net/security_center/static/6982.php - http://www.osvdb.org/5606 - http://www.securityfocus.com/bid/2690 - http://www.osvdb.org/5633 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-044
CVE ID: CVE-2001-0509 State: PUBLISHED Published: 2001-08-29T04:00:00 Last Updated: 2024-08-08T04:21:38.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote attackers to cause a denial of service via malformed inputs. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A82 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-041
CVE ID: CVE-2001-0513 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to process the request, which allows remote attackers to cause a denial of service by repeatedly connecting to the Oracle listener but not connecting to the redirected port. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6717 - http://www.kb.cert.org/vuls/id/105259 - http://xforce.iss.net/alerts/advise81.php - http://www.osvdb.org/5600
CVE ID: CVE-2001-0514 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: SNMP service in Atmel 802.11b VNET-B Access Point 1.3 and earlier, as used in Netgear ME102 and Linksys WAP11, accepts arbitrary community strings with requested MIB modifications, which allows remote attackers to obtain sensitive information such as WEP keys, cause a denial of service, or gain access to the network. Additional Analyst Notes: - CVE Program Container: References: - http://xforce.iss.net/alerts/advise83.php - http://www.securityfocus.com/bid/2896 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6576
CVE ID: CVE-2001-0515 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:21:38.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a malformed connection packet with a large offset_to_data value. Additional Analyst Notes: - CVE Program Container: References: - http://xforce.iss.net/alerts/advise82.php - http://otn.oracle.com/deploy/security/pdf/net8_dos_alert.pdf
CVE ID: CVE-2001-0516 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:21:38.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed connection packet that contains an incorrect requester_version value that does not match an expected offset to the data. Additional Analyst Notes: - CVE Program Container: References: - http://xforce.iss.net/alerts/advise82.php - http://otn.oracle.com/deploy/security/pdf/net8_dos_alert.pdf
CVE ID: CVE-2001-0517 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle listener in Oracle 8i on Solaris allows remote attackers to cause a denial of service via a malformed connection packet with a maximum transport data size that is set to 0. Additional Analyst Notes: - CVE Program Container: References: - http://xforce.iss.net/alerts/advise82.php - http://otn.oracle.com/deploy/security/pdf/net8_dos_alert.pdf - http://www.osvdb.org/5590 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6715
CVE ID: CVE-2001-0518 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle listener before Oracle 9i allows attackers to cause a denial of service by repeatedly sending the first portion of a fragmented Oracle command without sending the remainder of the command, which causes the listener to hang. Additional Analyst Notes: - CVE Program Container: References: - http://xforce.iss.net/alerts/advise82.php - http://otn.oracle.com/deploy/security/alerts.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/6716
CVE ID: CVE-2001-0519 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:21:38.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aladdin eSafe Gateway versions 2.x allows a remote attacker to circumvent HTML SCRIPT filtering via a special arrangement of HTML tags which includes SCRIPT tags embedded within other SCRIPT tags. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6580 - http://archives.neohapsis.com/archives/bugtraq/2001-05/0282.html
CVE ID: CVE-2001-0520 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:21:38.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent filtering of SCRIPT tags by embedding the scripts within certain HTML tags including (1) onload in the BODY tag, (2) href in the A tag, (3) the BUTTON tag, (4) the INPUT tag, or (5) any other tag in which scripts can be defined. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6580 - http://archives.neohapsis.com/archives/bugtraq/2001-05/0284.html
CVE ID: CVE-2001-0521 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:21:38.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent HTML SCRIPT filtering via the UNICODE encoding of SCRIPT tags within the HTML document. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6580 - http://archives.neohapsis.com/archives/bugtraq/2001-05/0285.html
CVE ID: CVE-2001-0522 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the original filename that is stored in an encrypted file. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/188218 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6642 - http://www.kb.cert.org/vuls/id/403051 - http://www.securityfocus.com/bid/2797 - http://www.calderasystems.com/support/security/advisories/CSSA-2001-0
d/403051 - http://www.securityfocus.com/bid/2797 - http://www.calderasystems.com/support/security/advisories/CSSA-2001-020.0.txt - http://www.redhat.com/support/errata/RHSA-2001-073.html - http://www.gnupg.org/whatsnew.html#rn20010529 - http://www.debian.org/security/2001/dsa-061 - http://www.turbolinux.com/pipermail/tl-security-announce/2001-June/000439.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000399 - http://www.osvdb.org/1845 - http://www.novell.com/linux/security/advisories/2001_020_gpg_txt.html - http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-023-01 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-053.php3
CVE ID: CVE-2001-0523 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:21:38.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: eEye SecureIIS versions 1.0.3 and earlier allows a remote attacker to bypass filtering of requests made to SecureIIS by escaping HTML characters within the request, which could allow a remote attacker to use restricted variables and perform directory traversal attacks on vulnerable programs that would otherwise be protected. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-05/0197.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6564 - http://archiv
apsis.com/archives/bugtraq/2001-05/0197.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6564 - http://archives.neohapsis.com/archives/bugtraq/2001-05/0185.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6563
CVE ID: CVE-2001-0524 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:21:38.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: eEye SecureIIS versions 1.0.3 and earlier does not perform length checking on individual HTTP headers, which allows a remote attacker to send arbitrary length strings to IIS, contrary to an advertised feature of SecureIIS versions 1.0.3 and earlier. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-05/0197.html - http://archives.neohapsis.com/archives/bugtraq/2001-05/0185.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6574