Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2001-0868 State: PUBLISHED Published: 2001-11-28T05:00:00 Last Updated: 2024-08-08T04:37:06.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to (1) stronghold-info or (2) stronghold-status. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3577 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7582 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51950 - http://marc.info/?l=bugtraq&m=100654958131854&w=2
CVE ID: CVE-2001-0869 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:06.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyrus SASL library (cyrus-sasl) may allow remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-150.html - http://www.caldera.com/support/security/advisories/CSSA-2001-040.0.txt - http://www.redhat.com/support/errata/RHSA-2001-151.html - http://www.securityfocus.com/bid/3498 - http://lwn.net/alerts/SuSE/SuSE-SA%3A2001%3A042.php
/errata/RHSA-2001-151.html - http://www.securityfocus.com/bid/3498 - http://lwn.net/alerts/SuSE/SuSE-SA%3A2001%3A042.php3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7443 - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:15.cyrus-sasl.asc - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000444 - http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:018
CVE ID: CVE-2001-0870 State: PUBLISHED Published: 2001-11-30T05:00:00 Last Updated: 2024-08-08T04:37:07.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTTP server in Alchemy Eye and Alchemy Network Monitor 1.9x through 2.6.18 is enabled without authentication by default, which allows remote attackers to obtain network monitoring logs with potentially sensitive information by directly requesting the eye.ini file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7630 - http://marc.info/?l=bugtraq&m=100715758109838&w=2 - http://www.securityfocus.com/bid/3598
CVE ID: CVE-2001-0871 State: PUBLISHED Published: 2001-11-30T05:00:00 Last Updated: 2024-08-08T04:37:07.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in HTTP server for Alchemy Eye and Alchemy Network Monitor allows remote attackers to execute arbitrary commands via an HTTP request containing (1) a .. in versions 2.0 through 2.6.18, or (2) a DOS device name followed by a .. in versions 2.6.19 through 3.0.10. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100714173510535&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7625 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7626 -
https://exchange.xforce.ibmcloud.com/vulnerabilities/7625 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7626 - http://www.securityfocus.com/bid/3599 - http://www.kb.cert.org/vuls/id/220715
CVE ID: CVE-2001-0872 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:06.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSH 3.0.1 and earlier with UseLogin enabled does not properly cleanse critical environment variables such as LD_PRELOAD, which allows local users to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:092 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0112-005 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7647 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-042.1.txt - http://www.osvdb.org/
loud.com/vulnerabilities/7647 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-042.1.txt - http://www.osvdb.org/688 - http://www.debian.org/security/2001/dsa-091 - http://marc.info/?l=bugtraq&m=100749779131514&w=2 - http://www.kb.cert.org/vuls/id/157447 - http://www.redhat.com/support/errata/RHSA-2001-161.html - http://marc.info/?l=openssh-unix-dev&m=100747128105913&w=2 - http://www.securityfocus.com/bid/3614 - http://lists.suse.com/archives/suse-security-announce/2001-Dec/0001.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000446 - http://www.ciac.org/ciac/bulletins/m-026.shtml
CVE ID: CVE-2001-0873 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:37:06.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileges by calling uux and specifying an alternate configuration file with the --config option. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/212892 - http://www.calderasystems.com/support/security/advisories/CSSA-2001-033.0.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/7099 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000425 - ht
xchange.xforce.ibmcloud.com/vulnerabilities/7099 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000425 - http://www.securityfocus.com/bid/3312 - http://www.novell.com/linux/security/advisories/2001_038_uucp_txt.html - http://rhn.redhat.com/errata/RHSA-2001-165.html - http://marc.info/?l=bugtraq&m=100715446131820 - http://www.debian.org/security/2001/dsa-079
CVE ID: CVE-2001-0874 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:06.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.5 and 6.0 allow remote attackers to read certain files via HTML that passes information from a frame in the client's domain to a frame in the web site's domain, a variant of the "Frame Domain Verification" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/m-027.shtml - http://www.securityfocus.com/bid/3693 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7702 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01
xforce.ibmcloud.com/vulnerabilities/7702 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-058
CVE ID: CVE-2001-0875 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:06.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in a way that could fool users into thinking that the file type is safe to download. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/245594 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7636 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1014 - http://www.securityfocus.com/bid/
/oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1014 - http://www.securityfocus.com/bid/3597 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-058
CVE ID: CVE-2001-0876 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:06.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/m-030.shtml - http://marc.info/?l=ntbugtraq&m=100887271006313&w=2 - http://marc.info/?l=bugtraq&m=100887440810532&w=2 - http://www.cert.org/advisories/CA-2001-37.html - http://www.kb.cert.org/vuls/id/951555 - https://exchange.xforce.ibmcloud.com/vulne
cert.org/advisories/CA-2001-37.html - http://www.kb.cert.org/vuls/id/951555 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7721 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-059 - http://www.securityfocus.com/bid/3723
CVE ID: CVE-2001-0877 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:06.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service via (1) a spoofed SSDP advertisement that causes the client to connect to a service on another machine that generates a large amount of traffic (e.g., chargen), or (2) via a spoofed SSDP announcement to broadcast or multicast addresses, which could cause all UPnP clients to send traffic to a single target system. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/41105
gle target system. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/411059 - http://www.ciac.org/ciac/bulletins/m-030.shtml - http://www.securityfocus.com/archive/1/249238 - http://marc.info/?l=ntbugtraq&m=100887271006313&w=2 - http://marc.info/?l=bugtraq&m=100887440810532&w=2 - http://www.cert.org/advisories/CA-2001-37.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7722 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-059 - http://www.securityfocus.com/bid/3724
CVE ID: CVE-2001-0879 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:06.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the C runtime functions in SQL Server 7.0 and 2000 allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100891252317406&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-060 - http://www.atstake.com/research/advisories/2001/a122001-1.txt - http://www.securityfocus.com/bid/3732 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A253 - https
yfocus.com/bid/3732 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7725
CVE ID: CVE-2001-0884 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:07.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in Mailman email archiver before 2.08 allows attackers to obtain sensitive information or authentication credentials via a malicious link that is accessed by other web users. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-169.html - http://www.securityfocus.com/archive/1/242839 - http://www.redhat.com/support/errata/RHSA-2001-168.html - http://www.redhat.com/support/errata/RHSA-2001-170.html - https://exchange.xforce.ibmcloud.co
rrata/RHSA-2001-168.html - http://www.redhat.com/support/errata/RHSA-2001-170.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7617 - http://www.securityfocus.com/bid/3602 - http://www.securityfocus.com/advisories/3721
CVE ID: CVE-2001-0886 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:06.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in glob function of glibc allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a glob pattern that ends in a brace "{" character. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2002/dsa-103 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-095.php3 - http://www.redhat.com/support/errata/RHSA-2001-160.html - http://www.linuxsecurity.com/advisories/other_advisory-1752.html - http://sources.redhat.com/ml/bug-glibc/2
1-160.html - http://www.linuxsecurity.com/advisories/other_advisory-1752.html - http://sources.redhat.com/ml/bug-glibc/2001-11/msg00109.html - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0112-008 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000447 - http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-037-01 - http://www.securityfocus.com/archive/1/245956 - http://www.ciac.org/ciac/bulletins/m-029.shtml - http://www.securityfocus.com/bid/3707 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7705
CVE ID: CVE-2001-0887 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:07.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: xSANE 0.81 and earlier allows local users to modify files of other xSANE users via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2001-171.html - http://www.redhat.com/support/errata/RHSA-2001-172.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7714 - http://www.securityfocus.com/advisories/3734 - http://www.securityfocus.com/bid/3700
CVE ID: CVE-2001-0888 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:06.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: Atmel Firmware 1.3 Wireless Access Point (WAP) allows remote attackers to cause a denial of service via a SNMP request with (1) a community string other than "public" or (2) an unknown OID, which causes the WAP to deny subsequent SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3734 - http://marc.info/?l=bugtraq&m=100895903202798&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7734
CVE ID: CVE-2001-0889 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:06.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe, which could allow remote attackers to execute arbitrary commands via shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3728 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7738 - http://www.debian.org/security/2002/dsa-097 - http://marc.info/?l=bugtraq&m=100877978506387&w=2 - http://www.kb.cert.org/vuls/id/283723
an.org/security/2002/dsa-097 - http://marc.info/?l=bugtraq&m=100877978506387&w=2 - http://www.kb.cert.org/vuls/id/283723 - http://www.redhat.com/support/errata/RHSA-2001-176.html
CVE ID: CVE-2001-0890 State: PUBLISHED Published: 2002-07-23T04:00:00 Last Updated: 2024-08-08T04:37:06.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain backend drivers in the SANE library 1.0.3 and earlier, as used in frontend software such as XSane, allows local users to modify files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7714.php - http://rhn.redhat.com/errata/RHSA-2001-171.html - http://www.securityfocus.com/bid/3987
CVE ID: CVE-2001-0891 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:37:06.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to submit a batch job whose name contains formatting characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/3275 - http://marc.info/?l=bugtraq&m=100695627423924&w=2 - http://www.securityfocus.com/bid/3590 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7618 - ftp://patches.sgi.com/support/free/security/advisories/20020101-0
://exchange.xforce.ibmcloud.com/vulnerabilities/7618 - ftp://patches.sgi.com/support/free/security/advisories/20020101-01-I
CVE ID: CVE-2001-0892 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100568999726036&w=2 - http://www.acme.com/software/thttpd/
CVE ID: CVE-2001-0893 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acme mini_httpd before 1.16 allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7541.php - http://marc.info/?l=bugtraq&m=100568999726036&w=2 - http://www.acme.com/software/mini_httpd/
CVE ID: CVE-2001-0894 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:07.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in Postfix SMTP server before 20010228-pl07, when configured to email the postmaster when SMTP errors cause the session to terminate, allows remote attackers to cause a denial of service (memory exhaustion) by generating a large number of SMTP errors, which forces the SMTP session log to grow too large. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2001/dsa-093 - http://www.securityfocus.com/bid/3544 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=0004
ty/2001/dsa-093 - http://www.securityfocus.com/bid/3544 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000439 - http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:089 - http://www.redhat.com/support/errata/RHSA-2001-156.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7568 - http://marc.info/?l=bugtraq&m=100584160110303&w=2
CVE ID: CVE-2001-0895 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:06.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the router's interface that contains a different MAC address for the router, which eventually causes the router to overwrite the MAC address in its ARP table. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/399355 - http://www.cisco.com/warp/public/707/IOS-arp-overwrite-vuln-pub.shtml - http://www.osvdb.org/807 - http://www.securityfocus.
://www.cisco.com/warp/public/707/IOS-arp-overwrite-vuln-pub.shtml - http://www.osvdb.org/807 - http://www.securityfocus.com/bid/3547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7547
CVE ID: CVE-2001-0896 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:07.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inetd in OpenServer 5.0.5 allows remote attackers to cause a denial of service (crash) via a port scan, e.g. with nmap -PO. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7571 - http://marc.info/?l=bugtraq&m=101284101228656&w=2 - http://marc.info/?l=bugtraq&m=101303877215098&w=2 - ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.33/CSSA-2001-SCO.33.txt
CVE ID: CVE-2001-0897 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that references an about: URL with an onerror field. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100586033530341&w=2 - http://marc.info/?l=bugtraq&m=100586541317940&w=2
CVE ID: CVE-2001-0898 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and links for other domains via Javascript that uses setTimeout to (1) access data after a new window to the domain has been opened or (2) access data via about:cache. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3553 - http://www.iss.net/security_center/static/7567.php - http://marc.info/?l=bugtraq&m=100588139312696&w=2 - http://marc.info/?l=bugtraq&m=100586079932284&w=2
CVE ID: CVE-2001-0899 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:07.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Network Tools 0.2 for PHP-Nuke allows remote attackers to execute commands on the server via shell metacharacters in the $hostinput variable. Additional Analyst Notes: - CVE Program Container: References: - http://phpnukerz.org/modules.php?name=Downloads&d_op=viewsdownload&sid=32 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7578 - http://marc.info/?l=bugtraq&m=100593523104176&w=2
CVE ID: CVE-2001-0900 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:06.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in modules.php in Gallery before 1.2.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the include parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100619599000590&w=2 - http://www.securityfocus.com/bid/3554 - http://www.osvdb.org/677 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7580 - http://www.menalto.com/projects/gallery/article.php?sid=33&mode=&order=
CVE ID: CVE-2001-0901 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:07.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hypermail allows remote attackers to execute arbitrary commands on a server supporting SSI via an attachment with a .shtml extension, which is archived on the server and can then be executed by requesting the URL for the attachment. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100626603407639&w=2 - http://www.hypermail.org/dist/hypermail-2.1.4.tar.gz - https://exchange.xforce.ibmcloud.com/vulnerabilities/7576
CVE ID: CVE-2001-0902 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T04:37:07.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6795 - http://marc.info/?l=bugtraq&m=100626531103946&w=2 - http://marc.info/?l=ntbugtraq&m=100627497122247&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7613
CVE ID: CVE-2001-0903 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linear key exchange process in High-bandwidth Digital Content Protection (HDCP) System allows remote attackers to access data as plaintext, avoid device blacklists, clone devices, and create new device keyvectors by computing and using alternate key combinations for authentication. Additional Analyst Notes: - CVE Program Container: References: - http://nunce.org/hdcp/hdcp111901.htm - http://www.iss.net/security_center/static/7612.php - http://www.securityfocus.com/bid/3558 - http://marc.info/?l=bugtraq&m=100626641009560&w=2