Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2001-1159 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: load_prefs.php and supporting include files in SquirrelMail 1.0.4 and earlier do not properly initialize certain PHP variables, which allows remote attackers to (1) view sensitive files via the config_php and data_dir options, and (2) execute arbitrary code by using options_order.php to upload a message that could be interpreted as PHP. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-07/0029.html - http://www.securityfocus.com/bid/2968 - http://www.iss.net/se
rchives.neohapsis.com/archives/bugtraq/2001-07/0029.html - http://www.securityfocus.com/bid/2968 - http://www.iss.net/security_center/static/6775.php - http://www.squirrelmail.org/changelog.php
CVE ID: CVE-2001-1160 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:07.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the category_file field. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6706 - http://www.securityfocus.com/bid/2884 - http://www.securityfocus.com/archive/1/191829
CVE ID: CVE-2001-1161 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:07.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (CSS) vulnerability in Lotus Domino 5.0.6 allows remote attackers to execute script on other web clients via a URL that ends in Javascript, which generates an error message that does not quote the resulting script. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/6789.php - http://www.securityfocus.com/bid/2962 - http://www.securityfocus.com/archive/1/194609 - http://www.kb.cert.org/vuls/id/642239 - http://www.osvdb.org/1887 - http://www.securityfoc
yfocus.com/archive/1/194609 - http://www.kb.cert.org/vuls/id/642239 - http://www.osvdb.org/1887 - http://www.securityfocus.com/archive/1/194465
CVE ID: CVE-2001-1162 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:08.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files via a .. in a NETBIOS name, which is used as the name for a .log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-062.php3 - http://www.securityfocus.com/advisories/3423 - http://www.debian.org/security/2001/dsa-065 - http://www.securityfocus.com/bid/2928 - http://us1.samba.org/samba/whatsnew
ttp://www.debian.org/security/2001/dsa-065 - http://www.securityfocus.com/bid/2928 - http://us1.samba.org/samba/whatsnew/macroexploit.html - http://www.calderasystems.com/support/security/advisories/CSSA-2001-024.0.txt - http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-027-01 - http://www.redhat.com/support/errata/RHSA-2001-086.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6731 - http://www.securityfocus.com/archive/1/193027 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000405 - http://ciac.llnl.gov/ciac/bulletins/l-105.shtml - ftp://patches.sgi.com/support/free/security/advisories/20011002-01-P
CVE ID: CVE-2001-1163 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT argument to port 6500. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2885
CVE ID: CVE-2001-1164 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in uucp utilities in UnixWare 7 allows local users to execute arbitrary code via long command line arguments to (1) uucp, (2) uux, (3) bnuconvert, (4) uucico, (5) uuxcmd, or (6) uuxqt. Additional Analyst Notes: - CVE Program Container: References: - ftp://stage.caldera.com/pub/security/unixware/CSSA-2001-SCO.4/CSSA-2001-SCO.4.txt
CVE ID: CVE-2001-1165 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting the information, e.g., with the Disengage tool. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3213 - http://www.securemac.com/fileguard.php#disengage - http://www.iss.net/security_center/static/7018.php
CVE ID: CVE-2001-1166 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:08.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: linprocfs on FreeBSD 4.3 and earlier does not properly restrict access to kernel memory, which allows one process with debugging rights on a privileged process to read restricted memory from that process. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:55.procfs.asc - http://www.osvdb.org/1938 - http://www.securityfocus.com/bid/3217 - http://www.iss.net/security_center/static/7017.php
CVE ID: CVE-2001-1167 State: REJECTED Published: 2002-03-15T05:00:00 Last Updated: 2002-03-22T10:00:00 Description: No description available.
CVE ID: CVE-2001-1168 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:08.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in PhpMyExplorer before 1.2.1 allows remote attackers to read arbitrary files via a ..%2F (modified dot dot) in the chemin parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-08/0408.html - http://archives.neohapsis.com/archives/bugtraq/2001-08/0418.html
CVE ID: CVE-2001-1169 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:08.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: keyinit in S/Key does not require authentication to initialize a one-time password sequence, which allows an attacker who has gained privileges to a user account to create new one-time passwords for use in other activities that may use S/Key authentication, such as sudo. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-08/0441.html
CVE ID: CVE-2001-1170 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: AmTote International homebet program stores the homebet.log file in the homebet/ virtual directory, which allows remote attackers to steal account and PIN numbers. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7186 - http://archives.neohapsis.com/archives/bugtraq/2001-09/0235.html - http://www.securityfocus.com/bid/3370
CVE ID: CVE-2001-1171 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:08.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, which could allow local users to gain privileges or modify the firewall policy. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-09/0046.html
CVE ID: CVE-2001-1172 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:08.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: OmniSecure HTTProtect 1.1.1 allows a superuser without omnish privileges to modify a protected file by creating a symbolic link to that file. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-07/0357.html - http://www.omnisecure.com/security-alert.html - http://www.osvdb.org/5452 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6880
CVE ID: CVE-2001-1173 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:08.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in MasqMail before 0.1.15 allows local users to gain privileges via piped aliases. Additional Analyst Notes: - CVE Program Container: References: - ftp://innominate.org/oku/masqmail/ChangeLog-stable
CVE ID: CVE-2001-1174 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:08.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5451 - http://www.redhat.com/support/errata/RHSA-2001-091.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6852 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-067.php
CVE ID: CVE-2001-1175 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:08.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6851 - http://www.securityfocus.com/bid/3036 - http://www.redhat.com/support/errata/RHSA-2001-132.html - http://www.redhat.com/support/errata/RHSA-2001-095.html
CVE ID: CVE-2001-1176 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:08.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3021 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6849 - http://www.osvdb.org/1901 - http://www.checkpoint.com/techsupport/alerts/format_strings.html - http://archives.neohapsis.com/archives/bugtraq/2001-07/0209.html
CVE ID: CVE-2001-1177 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:08.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: ml85p in Samsung ML-85G GDI printer driver before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6845 - http://archives.neohapsis.com/archives/bugtraq/2001-07/0284.html
CVE ID: CVE-2001-1178 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:08.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-07/0234.html - http://www.securityfocus.com/bid/3030 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6853
CVE ID: CVE-2001-1179 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:08.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/197498
CVE ID: CVE-2001-1180 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:08.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeBSD 4.3 does not properly clear shared signal handlers when executing a process, which allows local users to gain privileges by calling rfork with a shared signal handler, having the child process execute a setuid program, and sending a signal to the child. Additional Analyst Notes: - CVE Program Container: References: - http://ciac.llnl.gov/ciac/bulletins/l-111.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/6829 - http://www.osvdb.org/1897 - http://archives.neohapsis.com/archives/bugtraq/2001-07/0179.html -
m/vulnerabilities/6829 - http://www.osvdb.org/1897 - http://archives.neohapsis.com/archives/bugtraq/2001-07/0179.html - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:42.signal.v1.1.asc - http://www.kb.cert.org/vuls/id/943633 - http://www.securityfocus.com/bid/3007
CVE ID: CVE-2001-1181 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:08.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dynamically Loadable Kernel Module (dlkm) static kernel symbol table in HP-UX 11.11 is not properly configured, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5479 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6861 - http://ciac.llnl.gov/ciac/bulletins/l-115.shtml - http://archives.neohapsis.com/archives/hp/2001-q3/0013.html
CVE ID: CVE-2001-1182 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:08.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5657 - http://archives.neohapsis.com/archives/hp/2001-q3/0014.html
CVE ID: CVE-2001-1183 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:08.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: PPTP implementation in Cisco IOS 12.1 and 12.2 allows remote attackers to cause a denial of service (crash) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/802 - http://www.kb.cert.org/vuls/id/656315 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6835 - http://www.cisco.com/warp/public/707/PPTP-vulnerability-pub.html - http://www.securityfocus.com/bid/3022
CVE ID: CVE-2001-1184 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:08.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: wrshdsp.exe in Denicomp Winsock RSHD/NT 2.21.00 and earlier allows remote attackers to cause a denial of service (CPU consumption) via (1) in 2.20.00 and earlier, an invalid port number such as a negative number, which causes a connection attempt to that port and all ports below 1024, and (2) in 2.21.00, a port number of 1024. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/244580 - http://www.securityfocus.com/bid/3659 - http://online.securityfocus.com/archive/1/245405 -
yfocus.com/archive/1/244580 - http://www.securityfocus.com/bid/3659 - http://online.securityfocus.com/archive/1/245405 - http://www.iss.net/security_center/static/7694.php - http://www.denicomp.com/rshdnt.htm
CVE ID: CVE-2001-1185 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:08.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Some AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow a local user to overwrite memory of the new process and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7693.php - http://www.securityfocus.com/archive/1/244583 - http://www.securityfocus.com/bid/3661 - http://www.osvdb.org/2001
CVE ID: CVE-2001-1186 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T04:44:08.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than the size of the request, which prevents IIS from timing out the connection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/244892 - http://online.securityfocus.com/archive/1/245100 - http://online.securityfocus.com/archive/1/244931 - http://www.securityfocus.com/bid/3667 - http://www.iss.net/security_center/static/7691.php
CVE ID: CVE-2001-1187 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:08.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: csvform.pl 0.1 allows remote attackers to execute arbitrary commands via metacharacters in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7692.php - http://www.securityfocus.com/bid/3668 - http://online.securityfocus.com/archive/1/244908
CVE ID: CVE-2001-1188 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:08.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote servers by modifying the sendto, email, server, subject, and resulturl hidden form fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/244909 - http://www.securityfocus.com/bid/3669
CVE ID: CVE-2001-1189 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:08.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3682 - http://www.iss.net/security_center/static/7698.php - http://www.securityfocus.com/archive/1/245324
CVE ID: CVE-2001-1190 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:08.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default PAM files included with passwd in Mandrake Linux 8.1 do not support MD5 passwords, which could result in a lower level of password security than intended. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7706.php - http://www.securityfocus.com/bid/3683 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-091.php3
CVE ID: CVE-2001-1191 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:08.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebSeal in IBM Tivoli SecureWay Policy Director 3.8 allows remote attackers to cause a denial of service (crash) via a URL that ends in %2e. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/245283 - http://www.securityfocus.com/bid/3685
CVE ID: CVE-2001-1192 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:08.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix Independent Computing Architecture (ICA) Client for Windows 6.1 allows remote malicious web sites to execute arbitrary code via a .ICA file, which is downloaded and automatically executed by the client. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/245342 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7697 - http://www.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3688
CVE ID: CVE-2001-1193 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:08.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in EFTP 2.0.8.346 allows local users to read directories via a ... (modified dot dot) in the CWD command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3691 - http://www.osvdb.org/2003 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7699 - http://www.kb.cert.org/vuls/id/413875 - http://www.eftp.org/releasehistory.html - http://www.securityfocus.com/archive/1/245393
CVE ID: CVE-2001-1194 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:08.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel Prestige 681 and 1600 SDSL Routers allow remote attackers to cause a denial of service via malformed packets with (1) an IP length less than actual packet size, or (2) fragmented packets whose size exceeds 64 kilobytes after reassembly. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-12/0190.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7704 - http://archives.neohapsis.com/archives/bugtraq/2001-12/0140.html - http://www.securityfocus.com/b
vulnerabilities/7704 - http://archives.neohapsis.com/archives/bugtraq/2001-12/0140.html - http://www.securityfocus.com/bid/3695
CVE ID: CVE-2001-1195 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:08.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, which allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/245871 - http://www.iss.net/security_center/static/7701.php - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10067329.htm - http://www.securityfocus.com/bid/3697
CVE ID: CVE-2001-1196 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:08.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' (dot dot) in the argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7711.php - http://www.securityfocus.com/archive/1/245980 - http://www.securityfocus.com/bid/3698 - http://marc.info/?l=webmin-l&m=100865390306103&w=2
CVE ID: CVE-2001-1197 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:08.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: klprfax_filter in KDE2 KDEUtils allows local users to overwrite arbitrary files via a symlink attack on the klprfax.filter temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7700 - http://www.securityfocus.com/archive/1/245500 - http://www.securityfocus.com/bid/3694 - http://marc.info/?l=bugtraq&m=100837486611350&w=2
CVE ID: CVE-2001-1198 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:08.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by specifying the target file in the -L option. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7729.php - http://www.securityfocus.com/archive/1/245690 - http://www.securityfocus.com/bid/3701 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5763