Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2001-0525 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in dsh in dqs 3.2.7 in SuSE Linux 7.0 and earlier, and possibly other operating systems, allows local users to gain privileges via a long first command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-05/0193.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6577 - http://archives.neohapsis.com/archives/bugtraq/2001-05/0195.html - http://www.securityfocus.com/bid/2749
CVE ID: CVE-2001-0526 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Xview library as used by mailtool in Solaris 8 and earlier allows a local attacker to gain privileges via the OPENWINHOME environment variable. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6626 - http://archives.neohapsis.com/archives/bugtraq/2001-05/0258.html
CVE ID: CVE-2001-0527 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (|) and newlines into the last name in the registration form, which will create an extra entry in the registration database. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/480 - http://archives.neohapsis.com/archives/bugtraq/2001-05/0122.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6538 - http://www.dcscripts.com/dcforum/dcfNews/167.html - http://www.s
s://exchange.xforce.ibmcloud.com/vulnerabilities/6538 - http://www.dcscripts.com/dcforum/dcfNews/167.html - http://www.securityfocus.com/bid/2728
CVE ID: CVE-2001-0528 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x includes a debug version of FNDPUB11I.DLL, which logs the APPS schema password in cleartext in a debug file, which allows local users to obtain the password and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-05/0223.html - http://archives.neohapsis.com/archives/bugtraq/2001-05/0044.html - http://www.securityfocus.com/bid/2694 - https://exchange.xforce.ibmcl
neohapsis.com/archives/bugtraq/2001-05/0044.html - http://www.securityfocus.com/bid/2694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6501
CVE ID: CVE-2001-0529 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-034-01 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6676 - http://www.openbsd.org/errata29.html - http://archives.neohapsis.com/archives/bugtraq/2001-05/0322.html - http://archives.neohapsis.com/archives/bugtraq/2001-06/0007.html - http://online.securit
ves/bugtraq/2001-05/0322.html - http://archives.neohapsis.com/archives/bugtraq/2001-06/0007.html - http://online.securityfocus.com/archive/1/188737 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-010.txt.asc - http://www.calderasystems.com/support/security/advisories/CSSA-2001-023.0.txt - http://www.kb.cert.org/vuls/id/655259 - http://www.securityfocus.com/bid/2825 - http://www.osvdb.org/1853 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000431
CVE ID: CVE-2001-0530 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Spearhead NetGAP 200 and 300 before build 78 allow a remote attacker to bypass file blocking and content inspection via specially encoded URLs which include '%' characters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6625 - http://archives.neohapsis.com/archives/bugtraq/2001-05/0256.html - http://archives.neohapsis.com/archives/bugtraq/2001-06/0047.html - http://www.securityfocus.com/bid/2798
CVE ID: CVE-2001-0533 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in libi18n library in IBM AIX 5.1 and 4.3.x allows local users to gain root privileges via a long LANG environmental variable. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/services/continuity/recover1.nsf/advisories/85256A3400529A8685256A8D00804A37/%24file/oar271.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/6863 - http://www.osvdb.org/5585 - http://www.ciac.org/ciac/bulletins/l-123.shtml
CVE ID: CVE-2001-0534 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:21:38.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in RADIUS daemon radiusd in (1) Merit 3.6b and (2) Lucent 2.1-2 RADIUS allow remote attackers to cause a denial of service or execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2989 - http://www.kb.cert.org/vuls/id/898931 - http://xforce.iss.net/alerts/alerts.php
CVE ID: CVE-2001-0535 State: PUBLISHED Published: 2001-10-12T04:00:00 Last Updated: 2024-08-08T04:21:38.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Example applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent access from outside the local host's domain, which allows remote attackers to conduct upload, read, or execute files by spoofing the "HTTP Host" (CGI.Host) variable in (1) the "Web Publish" example script, and (2) the "Email" example script. Additional Analyst Notes: - CVE Program Container: References: - http://www.allaire.com/Handlers/index.cfm?ID=21700 - http://xforce.iss.net/alerts/advise92.php
CVE ID: CVE-2001-0537 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2001-14.html - http://www.securityfocus.com/archive/1/4.3.2.7.2.20010629095801.0c3e6a70%40brussels.cisco.com - http://www.cisco.com/warp/public/707/IOS-httplevel-pub.html - http://www.securityfocus.com/archive/1/20010703011650.60515.q
p://www.cisco.com/warp/public/707/IOS-httplevel-pub.html - http://www.securityfocus.com/archive/1/20010703011650.60515.qmail%40web14910.mail.yahoo.com - http://www.securityfocus.com/archive/1/1601227034.20010702112207%40olympos.org - http://www.osvdb.org/578 - http://www.securityfocus.com/archive/1/Pine.LNX.3.96.1010702134611.22995B-100000%40Lib-Vai.lib.asu.edu - http://www.ciac.org/ciac/bulletins/l-106.shtml - http://www.securityfocus.com/bid/2936 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6749
CVE ID: CVE-2001-0538 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=99496431214078&w=2 - http://www.securityfocus.com/bid/3025 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-038 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6831 - http://www.ciac.org/ciac/bulletins/l-113.shtml - htt
1-038 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6831 - http://www.ciac.org/ciac/bulletins/l-113.shtml - http://www.kb.cert.org/vuls/id/131569 - http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0107&L=ntbugtraq&F=P&S=&P=862
CVE ID: CVE-2001-0540 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed Remote Desktop Protocol (RDP) requests to port 3389. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6912 - http://www.securityfocus.com/bid/3099 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-040
CVE ID: CVE-2001-0541 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Windows Media Player 7.1 and earlier allows remote attackers to execute arbitrary commands via a malformed Windows Media Station (.NSC) file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6907 - http://www.securityfocus.com/archive/1/187001 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-042 - http://www.securityfocus.com/bid/3105
CVE ID: CVE-2001-0542 State: PUBLISHED Published: 2002-02-18T05:00:00 Last Updated: 2024-08-08T04:21:38.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7724 - http://marc.info/?l=bugtraq&m=100891252317406&w=2 - http://www.securityfocus.com/bid/3733 - http://www.kb.cer
ies/7724 - http://marc.info/?l=bugtraq&m=100891252317406&w=2 - http://www.securityfocus.com/bid/3733 - http://www.kb.cert.org/vuls/id/700575 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-060 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A83 - http://www.atstake.com/research/advisories/2001/a122001-1.txt
CVE ID: CVE-2001-0543 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed posts. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6977 - http://www.securityfocus.com/bid/3183 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-043 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A334
CVE ID: CVE-2001-0544 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: IIS 5.0 allows local users to cause a denial of service (hang) via by installing content that produces a certain invalid MIME Content-Type header, which corrupts the File Type table. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6983 - http://www.ciac.org/ciac/bulletins/l-132.shtml - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-044
CVE ID: CVE-2001-0545 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service (crash) via a malformed request that specifies a length that is different than the actual length. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6981 - http://www.osvdb.org/5736 - http://www.ciac.org/ciac/bulletins/l-132.shtml - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-044
CVE ID: CVE-2001-0546 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (resource exhaustion) via a large amount of malformed H.323 data. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-045 - http://www.securityfocus.com/bid/3196 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6989
CVE ID: CVE-2001-0547 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the proxy service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows local attackers to cause a denial of service (resource exhaustion). Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-045 - http://www.securityfocus.com/bid/3197 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6990
CVE ID: CVE-2001-0548 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T04:21:38.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in dtmail in Solaris 2.6 and 7 allows local users to gain privileges via the MAIL environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3081 - http://marc.info/?l=bugtraq&m=99598918914068&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6879
CVE ID: CVE-2001-0549 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec LiveUpdate 1.5 stores proxy passwords in cleartext in a registry key, which could allow local users to obtain the passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/814187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7013 - http://www.sarc.com/avcenter/security/Content/2001_07_20.html
CVE ID: CVE-2001-0550 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:21:38.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob). Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2001_043_wuftpd_txt.html - http://marc.info/?l=bugtraq&m=100700363414799&w=2 - http://www.cert.org/advisories/CA-2001-33.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7611 - http://www.linux-mandrake.com/en/security/2001/MDKSA-200
l - https://exchange.xforce.ibmcloud.com/vulnerabilities/7611 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-090.php3 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000442 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0107-162 - http://www.securityfocus.com/archive/82/180823 - http://www.caldera.com/support/security/advisories/CSSA-2001-041.0.txt - http://www.debian.org/security/2001/dsa-087 - http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-036-01 - http://www.redhat.com/support/errata/RHSA-2001-157.html - http://www.kb.cert.org/vuls/id/886083 - http://www.securityfocus.com/bid/3581
CVE ID: CVE-2001-0551 State: PUBLISHED Published: 2002-02-18T05:00:00 Last Updated: 2024-08-08T04:21:38.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in CDE Print Viewer (dtprintinfo) allows local users to execute arbitrary code by copying text from the clipboard into the Help window. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5958 - http://www.kb.cert.org/vuls/id/860296 - http://archives.neohapsis.com/archives/hp/2001-q2/0044.html
CVE ID: CVE-2001-0552 State: PUBLISHED Published: 2001-08-29T04:00:00 Last Updated: 2024-08-08T04:21:38.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2845 - http://marc.info/?l=bugtraq&m=99201278704545&w=2 - http://www.cert.org/advisories/CA-2001-24.html - http://www.kb.cert.org/vuls/id/952171
CVE ID: CVE-2001-0553 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:21:38.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSH Secure Shell 3.0.0 on Unix systems does not properly perform password authentication to the sshd2 daemon, which allows local users to gain access to accounts with short password fields, such as locked accounts that use "NP" in the password field. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-07/0486.html - http://www.ssh.com/products/ssh/exploit.cfm - https://exchange.xforce.ibmcloud.com/vulnerabilities/6868 - http://www.kb.cert.org/vuls/id/737451 - htt
sh/exploit.cfm - https://exchange.xforce.ibmcloud.com/vulnerabilities/6868 - http://www.kb.cert.org/vuls/id/737451 - http://www.osvdb.org/586 - http://www.ciac.org/ciac/bulletins/l-121.shtml - http://www.securityfocus.com/bid/3078
CVE ID: CVE-2001-0554 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000413 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-068.php3 - http://www.ciac.org/ciac/bulletins/l-131.shtml - http://ftp.support.compaq.com/patches/.new
y/2001/MDKSA-2001-068.php3 - http://www.ciac.org/ciac/bulletins/l-131.shtml - http://ftp.support.compaq.com/patches/.new/html/SSRT0745U.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/6875 - http://www.osvdb.org/809 - http://online.securityfocus.com/advisories/3476 - http://online.securityfocus.com/archive/1/199496 - http://online.securityfocus.com/archive/1/203000 - http://www.securityfocus.com/bid/3064 - http://www.redhat.com/support/errata/RHSA-2001-100.html - http://www.novell.com/linux/security/advisories/2001_029_nkitb_txt.html - ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.10/CSSA-2001-SCO.10.txt - http://www.redhat.com/support/errata/RHSA-2001-099.html -
ub/security/openserver/CSSA-2001-SCO.10/CSSA-2001-SCO.10.txt - http://www.redhat.com/support/errata/RHSA-2001-099.html - http://www.cisco.com/warp/public/707/catos-telrcv-vuln-pub.shtml - http://archives.neohapsis.com/archives/hp/2001-q4/0014.html - http://www.debian.org/security/2001/dsa-075 - http://www.securityfocus.com/archive/1/197804 - http://www.cert.org/advisories/CA-2001-21.html - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:49.telnetd.asc - http://www.calderasystems.com/support/security/advisories/CSSA-2001-030.0.txt - http://www.debian.org/security/2001/dsa-070 - http://online.securityfocus.com/archive/1/199541 - ftp://patches.sgi.com/support/free/security/advis
rity/2001/dsa-070 - http://online.securityfocus.com/archive/1/199541 - ftp://patches.sgi.com/support/free/security/advisories/20010801-01-P - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-012.txt.asc
CVE ID: CVE-2001-0555 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:21:38.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. (dot dot) attack through (1) the SITEWare Editor's Desktop or (2) the template parameter in SWEditServlet. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/795707 - http://www01.screamingmedia.com/en/security/sms1001.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/6689 - http://www.osvdb.org/13887 - http://archives.neohapsis.com/archives/bugtraq/2001-06/0166.h
ud.com/vulnerabilities/6689 - http://www.osvdb.org/13887 - http://archives.neohapsis.com/archives/bugtraq/2001-06/0166.html - http://archives.neohapsis.com/archives/bugtraq/2001-06/0165.html - http://www.securityfocus.com/bid/2869
CVE ID: CVE-2001-0556 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:21:38.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Nirvana Editor (NEdit) 5.1.1 and earlier allows a local attacker to overwrite other users' files via a symlink attack on (1) backup files or (2) temporary files used when nedit prints a file or portions of a file. Additional Analyst Notes: - CVE Program Container: References: - http://www.nedit.org/archives/develop/2001-Feb/0391.html - http://www.securityfocus.com/archive/1/180237 - http://www.redhat.com/support/errata/RHSA-2001-061.html - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-042.php3 - http://www.secu
support/errata/RHSA-2001-061.html - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-042.php3 - http://www.securityfocus.com/bid/2667 - http://www.debian.org/security/2001/dsa-053 - http://www.novell.com/linux/security/advisories/2001_014_nedit.html
CVE ID: CVE-2001-0557 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:21:38.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: T. Hauck Jana Webserver 1.46 and earlier allows a remote attacker to view arbitrary files via a '..' (dot dot) attack which is URL encoded (%2e%2e). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2703 - http://archives.neohapsis.com/archives/bugtraq/2001-05/0086.html - http://www.kb.cert.org/vuls/id/132099 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6513
CVE ID: CVE-2001-0558 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:38.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: T. Hauck Jana Webserver 2.01 beta 1 and earlier allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name (i.e. GET /aux HTTP/1.0). Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-05/0086.html - http://www.securityfocus.com/bid/2704 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6521 - http://www.osvdb.org/1817