Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2001-1380 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:51:08.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSH before 2.9.9, while using keypairs and multiple keys of different types in the ~/.ssh/authorized_keys2 file, may not properly handle the "from" option associated with a key, which could allow remote attackers to login from unauthorized IP addresses. Additional Analyst Notes: - CVE Program Container: References: - http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-034-01 - http://www.securityfocus.com/bid/3369 - http://rhn.redhat.com/errata/RHSA-2001-114.html - http://marc.info/?l=bugtraq&m=100154541809940&w
tyfocus.com/bid/3369 - http://rhn.redhat.com/errata/RHSA-2001-114.html - http://marc.info/?l=bugtraq&m=100154541809940&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000431 - http://www.kb.cert.org/vuls/id/905795 - http://www.ciac.org/ciac/bulletins/m-010.shtml - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-081.php - http://www.osvdb.org/642 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7179
CVE ID: CVE-2001-1382 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:51:08.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "echo simulation" traffic analysis countermeasure in OpenSSH before 2.9.9p2 sends an additional echo packet after the password and carriage return is entered, which could allow remote attackers to determine that the countermeasure is being used. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/Owl/CHANGES-stable.shtml - http://www.osvdb.org/5408
CVE ID: CVE-2001-1383 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:51:08.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: initscript in setserial 2.17-4 and earlier uses predictable temporary file names, which could allow local users to conduct unauthorized operations on files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3367 - http://www.iss.net/security_center/static/7177.php - http://rhn.redhat.com/errata/RHSA-2001-110.html
CVE ID: CVE-2001-1384 State: PUBLISHED Published: 2002-07-31T04:00:00 Last Updated: 2024-08-08T04:51:08.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-130.html - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-036.0.txt - http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-035-01 - http://www.linuxsecurity.com/advisories/other_advisory-16
wnload.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-035-01 - http://www.linuxsecurity.com/advisories/other_advisory-1650.html - http://online.securityfocus.com/advisories/3713 - http://marc.info/?l=bugtraq&m=100343090106914&w=2 - http://www.redhat.com/support/errata/RHSA-2001-129.html - http://marc.info/?l=bugtraq&m=100350685431610&w=2 - http://www.iss.net/security_center/static/7311.php - http://www.novell.com/linux/security/advisories/2001_036_kernel_txt.html - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-082.php3 - http://www.securityfocus.com/bid/3447 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-079.php3
CVE ID: CVE-2001-1385 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:51:08.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may disable PHP for other virtual hosts, which could cause Apache to serve the source code of PHP scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2001/dsa-020 - http://www.securityfocus.com/bid/2205 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-013.php3 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000373 - http://www.iss.net/sec
ity/2001/MDKSA-2001-013.php3 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000373 - http://www.iss.net/security_center/static/5939.php - http://marc.info/?l=bugtraq&m=97957961212852 - http://www.redhat.com/support/errata/RHSA-2000-136.html
CVE ID: CVE-2001-1386 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T04:51:08.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: WFTPD 3.00 allows remote attackers to read arbitrary files by uploading a (link) file that ends in a ".lnk." extension, which bypasses WFTPD's check for a ".lnk" extension. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6760 - http://www.securityfocus.com/bid/2957 - http://www.securityfocus.com/archive/1/194442
CVE ID: CVE-2001-1387 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T04:51:08.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes iptables to generate different responses than specified by the administrator, possibly leading to an information leak. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=50500 - http://rhn.redhat.com/errata/RHSA-2001-144.html
CVE ID: CVE-2001-1388 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T04:51:08.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users to generate more or less traffic than intended by the administrator. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=53325 - http://rhn.redhat.com/errata/RHSA-2001-144.html
CVE ID: CVE-2001-1389 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T04:51:08.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in xinetd 2.3.0 and earlier, and additional variants until 2.3.3, may allow remote attackers to cause a denial of service or execute arbitrary code, primarily via buffer overflows or improper NULL termination. Additional Analyst Notes: - CVE Program Container: References: - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-076.php3 - http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-033-01 - http://marc.info/?l=bugtraq&m=99913751525583&w=2 - http://rhn.redhat.com/errata/RHSA-2001-1
pdates/IMNX-2001-70-033-01 - http://marc.info/?l=bugtraq&m=99913751525583&w=2 - http://rhn.redhat.com/errata/RHSA-2001-109.html - http://www.securityfocus.com/bid/3257
CVE ID: CVE-2001-1390 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T04:51:08.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in binfmt_misc in the Linux kernel before 2.2.19, related to user pages. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-047.html - http://marc.info/?l=bugtraq&m=98637996127004&w=2 - http://www.linux.org.uk/VERSION/relnotes.2219.html - http://marc.info/?l=bugtraq&m=99013830726309&w=2 - https://www.debian.org/security/2001/dsa-047 - http://marc.info/?l=bugtraq&m=98759029811377&w=2 - http://marc.info/?l=bugtraq&m=98684172109474&w=2 - http://mar
a-047 - http://marc.info/?l=bugtraq&m=98759029811377&w=2 - http://marc.info/?l=bugtraq&m=98684172109474&w=2 - http://marc.info/?l=bugtraq&m=98575345009963&w=2 - http://marc.info/?l=bugtraq&m=98775114228203&w=2 - http://marc.info/?l=bugtraq&m=98653252326445&w=2
CVE ID: CVE-2001-1391 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T04:51:08.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one vulnerability in CPIA driver of Linux kernel before 2.2.19 allows users to modify kernel memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-047.html - http://marc.info/?l=bugtraq&m=98637996127004&w=2 - http://www.linux.org.uk/VERSION/relnotes.2219.html - https://www.debian.org/security/2001/dsa-047 - http://marc.info/?l=bugtraq&m=98759029811377&w=2 - http://marc.info/?l=bugtraq&m=98684172109474&w=2 - http://marc.info/?l=bugtraq&m=98575345009963&w=2
98759029811377&w=2 - http://marc.info/?l=bugtraq&m=98684172109474&w=2 - http://marc.info/?l=bugtraq&m=98575345009963&w=2 - http://marc.info/?l=bugtraq&m=98775114228203&w=2 - http://marc.info/?l=bugtraq&m=98653252326445&w=2 - http://marc.info/?l=bugtraq&m=99013830726309&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11162
CVE ID: CVE-2001-1392 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T04:51:08.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel before 2.2.19 does not have unregister calls for (1) CPUID and (2) MSR drivers, which could cause a DoS (crash) by unloading and reloading the drivers. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-047.html - http://marc.info/?l=bugtraq&m=98637996127004&w=2 - http://www.linux.org.uk/VERSION/relnotes.2219.html - https://www.debian.org/security/2001/dsa-047 - http://marc.info/?l=bugtraq&m=98759029811377&w=2 - http://marc.info/?l=bugtraq&m=98684172
an.org/security/2001/dsa-047 - http://marc.info/?l=bugtraq&m=98759029811377&w=2 - http://marc.info/?l=bugtraq&m=98684172109474&w=2 - http://marc.info/?l=bugtraq&m=98575345009963&w=2 - http://marc.info/?l=bugtraq&m=98775114228203&w=2 - http://marc.info/?l=bugtraq&m=98653252326445&w=2 - http://marc.info/?l=bugtraq&m=99013830726309&w=2
CVE ID: CVE-2001-1393 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T04:51:08.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in classifier code for Linux kernel before 2.2.19 could result in denial of service (hang). Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-047.html - http://marc.info/?l=bugtraq&m=98637996127004&w=2 - http://www.linux.org.uk/VERSION/relnotes.2219.html - https://www.debian.org/security/2001/dsa-047 - http://marc.info/?l=bugtraq&m=98759029811377&w=2 - http://marc.info/?l=bugtraq&m=98684172109474&w=2 - http://marc.info/?l=bugtraq&m=985753450099
raq&m=98759029811377&w=2 - http://marc.info/?l=bugtraq&m=98684172109474&w=2 - http://marc.info/?l=bugtraq&m=98575345009963&w=2 - http://marc.info/?l=bugtraq&m=98775114228203&w=2 - http://marc.info/?l=bugtraq&m=98653252326445&w=2 - http://marc.info/?l=bugtraq&m=99013830726309&w=2
CVE ID: CVE-2001-1394 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T04:51:08.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Signedness error in (1) getsockopt and (2) setsockopt for Linux kernel before 2.2.19 allows local users to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-047.html - http://marc.info/?l=bugtraq&m=98637996127004&w=2 - http://www.linux.org.uk/VERSION/relnotes.2219.html - https://www.debian.org/security/2001/dsa-047 - http://marc.info/?l=bugtraq&m=98759029811377&w=2 - http://marc.info/?l=bugtraq&m=98684172109474&w=2 - http://marc.info/?l=bu
://marc.info/?l=bugtraq&m=98759029811377&w=2 - http://marc.info/?l=bugtraq&m=98684172109474&w=2 - http://marc.info/?l=bugtraq&m=98575345009963&w=2 - http://marc.info/?l=bugtraq&m=98775114228203&w=2 - http://marc.info/?l=bugtraq&m=98653252326445&w=2 - http://marc.info/?l=bugtraq&m=99013830726309&w=2
CVE ID: CVE-2001-1395 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T04:51:08.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in sockfilter for Linux kernel before 2.2.19 related to "boundary cases," with unknown impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-047.html - http://marc.info/?l=bugtraq&m=98637996127004&w=2 - http://www.linux.org.uk/VERSION/relnotes.2219.html - https://www.debian.org/security/2001/dsa-047 - http://marc.info/?l=bugtraq&m=98759029811377&w=2 - http://marc.info/?l=bugtraq&m=98684172109474&w=2 - http://marc.info/?l=bugtraq&m=985753450
ugtraq&m=98759029811377&w=2 - http://marc.info/?l=bugtraq&m=98684172109474&w=2 - http://marc.info/?l=bugtraq&m=98575345009963&w=2 - http://marc.info/?l=bugtraq&m=98775114228203&w=2 - http://marc.info/?l=bugtraq&m=98653252326445&w=2 - http://marc.info/?l=bugtraq&m=99013830726309&w=2
CVE ID: CVE-2001-1396 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T04:51:08.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerabilities in strnlen_user for Linux kernel before 2.2.19, with unknown impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-047.html - http://marc.info/?l=bugtraq&m=98637996127004&w=2 - http://www.linux.org.uk/VERSION/relnotes.2219.html - https://www.debian.org/security/2001/dsa-047 - http://marc.info/?l=bugtraq&m=98759029811377&w=2 - http://marc.info/?l=bugtraq&m=98684172109474&w=2 - http://marc.info/?l=bugtraq&m=98575345009963&w=2 - http://marc.
w=2 - http://marc.info/?l=bugtraq&m=98684172109474&w=2 - http://marc.info/?l=bugtraq&m=98575345009963&w=2 - http://marc.info/?l=bugtraq&m=98775114228203&w=2 - http://marc.info/?l=bugtraq&m=98653252326445&w=2 - http://marc.info/?l=bugtraq&m=99013830726309&w=2
CVE ID: CVE-2001-1397 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T04:51:08.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: The System V (SYS5) shared memory implementation for Linux kernel before 2.2.19 could allow attackers to modify recently freed memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-047.html - http://marc.info/?l=bugtraq&m=98637996127004&w=2 - http://www.linux.org.uk/VERSION/relnotes.2219.html - https://www.debian.org/security/2001/dsa-047 - http://marc.info/?l=bugtraq&m=98759029811377&w=2 - http://marc.info/?l=bugtraq&m=98684172109474&w=2 - http://marc.info/?l=b
p://marc.info/?l=bugtraq&m=98759029811377&w=2 - http://marc.info/?l=bugtraq&m=98684172109474&w=2 - http://marc.info/?l=bugtraq&m=98575345009963&w=2 - http://marc.info/?l=bugtraq&m=98775114228203&w=2 - http://marc.info/?l=bugtraq&m=98653252326445&w=2 - http://marc.info/?l=bugtraq&m=99013830726309&w=2
CVE ID: CVE-2001-1398 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T04:51:08.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Masquerading code for Linux kernel before 2.2.19 does not fully check packet lengths in certain cases, which may lead to a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-047.html - http://marc.info/?l=bugtraq&m=98637996127004&w=2 - http://www.linux.org.uk/VERSION/relnotes.2219.html - https://www.debian.org/security/2001/dsa-047 - http://marc.info/?l=bugtraq&m=98759029811377&w=2 - http://marc.info/?l=bugtraq&m=98684172109474&w=2 - http://marc.info/?
http://marc.info/?l=bugtraq&m=98759029811377&w=2 - http://marc.info/?l=bugtraq&m=98684172109474&w=2 - http://marc.info/?l=bugtraq&m=98575345009963&w=2 - http://marc.info/?l=bugtraq&m=98775114228203&w=2 - http://marc.info/?l=bugtraq&m=98653252326445&w=2 - http://marc.info/?l=bugtraq&m=99013830726309&w=2
CVE ID: CVE-2001-1399 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T04:51:08.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain operations in Linux kernel before 2.2.19 on the x86 architecture copy the wrong number of bytes, which might allow attackers to modify memory, aka "User access asm bug on x86." Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-047.html - http://marc.info/?l=bugtraq&m=98637996127004&w=2 - http://www.linux.org.uk/VERSION/relnotes.2219.html - https://www.debian.org/security/2001/dsa-047 - http://marc.info/?l=bugtraq&m=98759029811377&w=2 - http://marc.info/?l=bu
https://www.debian.org/security/2001/dsa-047 - http://marc.info/?l=bugtraq&m=98759029811377&w=2 - http://marc.info/?l=bugtraq&m=98684172109474&w=2 - http://marc.info/?l=bugtraq&m=98575345009963&w=2 - http://marc.info/?l=bugtraq&m=98775114228203&w=2 - http://marc.info/?l=bugtraq&m=98653252326445&w=2 - http://marc.info/?l=bugtraq&m=99013830726309&w=2
CVE ID: CVE-2001-1400 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T04:51:08.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerabilities in the UDP port allocation for Linux kernel before 2.2.19 could allow local users to cause a denial of service (deadlock). Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-047.html - http://marc.info/?l=bugtraq&m=98637996127004&w=2 - http://www.linux.org.uk/VERSION/relnotes.2219.html - https://www.debian.org/security/2001/dsa-047 - http://marc.info/?l=bugtraq&m=98759029811377&w=2 - http://marc.info/?l=bugtraq&m=98684172109474&w=2 - http://ma
sa-047 - http://marc.info/?l=bugtraq&m=98759029811377&w=2 - http://marc.info/?l=bugtraq&m=98684172109474&w=2 - http://marc.info/?l=bugtraq&m=98575345009963&w=2 - http://marc.info/?l=bugtraq&m=98775114228203&w=2 - http://marc.info/?l=bugtraq&m=98653252326445&w=2 - http://marc.info/?l=bugtraq&m=99013830726309&w=2
CVE ID: CVE-2001-1401 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T04:51:08.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla before 2.14 does not properly restrict access to confidential bugs, which could allow Bugzilla users to bypass viewing permissions via modified bug id parameters in (1) process_bug.cgi, (2) show_activity.cgi, (3) showvotes.cgi, (4) showdependencytree.cgi, (5) showdependencygraph.cgi, (6) showattachment.cgi, or (7) describecomponents.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.mozilla.org/show_bug.cgi?id=39531 - http://bugzilla.mozilla.org/show_bug.cgi?id=82781 - http://marc.in
- http://bugzilla.mozilla.org/show_bug.cgi?id=39531 - http://bugzilla.mozilla.org/show_bug.cgi?id=82781 - http://marc.info/?l=bugtraq&m=99912899900567 - http://www.redhat.com/support/errata/RHSA-2001-107.html - http://bugzilla.mozilla.org/show_bug.cgi?id=70189 - http://bugzilla.mozilla.org/show_bug.cgi?id=39533 - http://bugzilla.mozilla.org/show_bug.cgi?id=39526 - http://bugzilla.mozilla.org/show_bug.cgi?id=39527 - http://bugzilla.mozilla.org/show_bug.cgi?id=39524
CVE ID: CVE-2001-1402 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T04:51:08.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla before 2.14 does not properly escape untrusted parameters, which could allow remote attackers to conduct unauthorized activities via cross-site scripting (CSS) and possibly SQL injection attacks on (1) the product or output form variables for reports.cgi, (2) the voteon, bug_id, and user variables for showvotes.cgi, (3) an invalid email address in createaccount.cgi, (4) an invalid ID in showdependencytree.cgi, (5) invalid usernames and other fields in process_bug.cgi, and (6) error messages in buglist.cgi. Additional
ytree.cgi, (5) invalid usernames and other fields in process_bug.cgi, and (6) error messages in buglist.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.mozilla.org/show_bug.cgi?id=95235 - http://bugzilla.mozilla.org/show_bug.cgi?id=39536 - http://bugzilla.mozilla.org/show_bug.cgi?id=87701 - http://bugzilla.mozilla.org/show_bug.cgi?id=38859 - http://marc.info/?l=bugtraq&m=99912899900567 - http://www.redhat.com/support/errata/RHSA-2001-107.html - http://bugzilla.mozilla.org/show_bug.cgi?id=38854 - http://bugzilla.mozilla.org/show_bug.cgi?id=38855
CVE ID: CVE-2001-1403 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T04:51:08.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla before 2.14 includes the username and password in URLs, which could allow attackers to gain privileges by reading the information from the web server logs, or by "shoulder-surfing" and observing the web browser's location bar. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.mozilla.org/show_bug.cgi?id=15980 - http://marc.info/?l=bugtraq&m=99912899900567 - http://www.redhat.com/support/errata/RHSA-2001-107.html
CVE ID: CVE-2001-1404 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T04:51:08.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla before 2.14 stores user passwords in plaintext and sends password requests in an email message, which could allow attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=99912899900567 - http://www.redhat.com/support/errata/RHSA-2001-107.html - http://bugzilla.mozilla.org/show_bug.cgi?id=74032
CVE ID: CVE-2001-1405 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T04:51:08.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla before 2.14 does not restrict access to sanitycheck.cgi, which allows local users to cause a denial of service (CPU consumption) via a flood of requests to sanitycheck.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.mozilla.org/show_bug.cgi?id=54556 - http://marc.info/?l=bugtraq&m=99912899900567 - http://www.redhat.com/support/errata/RHSA-2001-107.html
CVE ID: CVE-2001-1406 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:51:08.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: process_bug.cgi in Bugzilla before 2.14 does not set the "groupset" bit when a bug is moved between product groups, which will cause the bug to have the old group's restrictions, which might not be as stringent. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=99912899900567 - http://www.redhat.com/support/errata/RHSA-2001-107.html - http://bugzilla.mozilla.org/show_bug.cgi?id=66235 - http://www.iss.net/security_center/static/10478.php
CVE ID: CVE-2001-1407 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:51:08.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla before 2.14 allows Bugzilla users to bypass group security checks by marking a bug as the duplicate of a restricted bug, which adds the user to the CC list of the restricted bug and allows the user to view the bug. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=99912899900567 - http://www.redhat.com/support/errata/RHSA-2001-107.html - http://bugzilla.mozilla.org/show_bug.cgi?id=96085 - http://www.iss.net/security_center/static/10479.php
CVE ID: CVE-2001-1408 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T04:51:08.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in readmsg.php in WebMail 2.0.1 in Cobalt Qube 3 allows remote attackers to read arbitrary files via a .. (dot dot) in the mailbox parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-07/0092.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6805 - http://archives.neohapsis.com/archives/bugtraq/2001-08/0245.html