Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2001-1312 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:08.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerabilities in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.notes.net/r5fixlist.nsf/Search%21SearchView&Query=DWUU4W6NC8 - http://www.cert.org/advisories/CA-2001-18.html - http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/ - http://ciac.llnl.gov/ciac/bulletins/l-116.shtml - http://www.kb.cert
oulu.fi/research/ouspg/protos/testing/c06/ldapv3/ - http://ciac.llnl.gov/ciac/bulletins/l-116.shtml - http://www.kb.cert.org/vuls/id/583184 - http://www.securityfocus.com/bid/3042 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6896
CVE ID: CVE-2001-1313 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:08.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lotus Domino R5 before R5.0.7a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via miscellaneous packets with semi-valid BER encodings, as demonstrated by the PROTOS LDAPv3 test suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.notes.net/r5fixlist.nsf/Search%21SearchView&Query=DWUU4W6NC8 - http://www.cert.org/advisories/CA-2001-18.html - http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/ - http://ciac.llnl.gov/ciac/bulletins/l-116.sh
18.html - http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/ - http://ciac.llnl.gov/ciac/bulletins/l-116.shtml - http://www.kb.cert.org/vuls/id/583184
CVE ID: CVE-2001-1314 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/JPLA-4ZKLEM - http://www.cert.org/advisories/CA-2001-18.html - http://archives.neohapsis.com/archives/bugtraq/2001-07/0770.html - http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/ - htt
neohapsis.com/archives/bugtraq/2001-07/0770.html - http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/ - http://ciac.llnl.gov/ciac/bulletins/l-116.shtml - http://www.kb.cert.org/vuls/id/657547 - http://www.securityfocus.com/bid/3124
CVE ID: CVE-2001-1315 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed BER encodings, as demonstrated by the PROTOS LDAPv3 test suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/JPLA-4ZKLEM - http://www.cert.org/advisories/CA-2001-18.html - http://archives.neohapsis.com/archives/bugtraq/2001-07/0770.html - http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv
rchives.neohapsis.com/archives/bugtraq/2001-07/0770.html - http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/ - http://ciac.llnl.gov/ciac/bulletins/l-116.shtml - http://www.kb.cert.org/vuls/id/657547
CVE ID: CVE-2001-1316 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:08.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in Teamware Office Enterprise Directory allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3044 - http://www.cert.org/advisories/CA-2001-18.html - http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/ - http://ciac.llnl.gov/ciac/bulletins/l-116.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/6897
6/ldapv3/ - http://ciac.llnl.gov/ciac/bulletins/l-116.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/6897 - http://www.kb.cert.org/vuls/id/JPLA-4WESNA - http://www.kb.cert.org/vuls/id/688960
CVE ID: CVE-2001-1317 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Teamware Office Enterprise Directory allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via invalid encodings for certain BER object types, as demonstrated by the PROTOS LDAPv3 test suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2001-18.html - http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/ - http://ciac.llnl.gov/ciac/bulletins/l-116.shtml - http://www.kb.cert.org/vuls/id/JPLA-4WESNA - http://www.kb.cert.or
/ - http://ciac.llnl.gov/ciac/bulletins/l-116.shtml - http://www.kb.cert.org/vuls/id/JPLA-4WESNA - http://www.kb.cert.org/vuls/id/688960
CVE ID: CVE-2001-1318 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerabilities in Qualcomm Eudora WorldMail Server may allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3043 - http://www.kb.cert.org/vuls/id/717380 - http://www.cert.org/advisories/CA-2001-18.html - http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/ - http://ciac.llnl.gov/ciac/bulletins/l-116.shtml - http://www.kb.cert.o
lu.fi/research/ouspg/protos/testing/c06/ldapv3/ - http://ciac.llnl.gov/ciac/bulletins/l-116.shtml - http://www.kb.cert.org/vuls/id/JPLA-4WESNA
CVE ID: CVE-2001-1319 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:08.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service (hang) via exceptional BER encodings for the LDAP filter type field, as demonstrated by the PROTOS LDAPv3 test suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2001-18.html - http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/ - http://ciac.llnl.gov/ciac/bulletins/l-116.shtml - http://www.kb.cert.org/vuls/id/CFCN-4YAQC7 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6899
ns/l-116.shtml - http://www.kb.cert.org/vuls/id/CFCN-4YAQC7 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6899 - http://www.kb.cert.org/vuls/id/763400 - http://www.securityfocus.com/bid/3045
CVE ID: CVE-2001-1320 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via exceptional BER encodings (possibly buffer overflows), as demonstrated by the PROTOS LDAPv3 test suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2001-18.html - http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/ - http://ciac.llnl.gov/ciac/bulletins/l-116.shtml - http://www.kb.cert.org/vuls/id/765256 - http://www.kb.cert.o
ldapv3/ - http://ciac.llnl.gov/ciac/bulletins/l-116.shtml - http://www.kb.cert.org/vuls/id/765256 - http://www.kb.cert.org/vuls/id/JPLA-4WESNK - https://exchange.xforce.ibmcloud.com/vulnerabilities/6900 - http://www.securityfocus.com/bid/3046
CVE ID: CVE-2001-1321 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:08.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid encodings of BER OBJECT-IDENTIFIER values, as demonstrated by the PROTOS LDAPv3 test suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2001-18.html - http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/ - http://ciac.llnl.gov/ciac/bulletins/l-116.shtml - http://www.kb.cert.org/vuls/id/869184 - http://www
sting/c06/ldapv3/ - http://ciac.llnl.gov/ciac/bulletins/l-116.shtml - http://www.kb.cert.org/vuls/id/869184 - http://www.kb.cert.org/vuls/id/JPLA-4WESNV
CVE ID: CVE-2001-1322 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:51:07.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: xinetd 2.1.8 and earlier runs with a default umask of 0, which could allow local users to read or modify files that are created by an application that runs under xinetd but does not set its own safe umask. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000404 - http://www.linuxsecurity.com/advisories/other_advisory-1469.html - http://www.debian.org/security/2001/dsa-063 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-055.php3 - http://www.i
www.debian.org/security/2001/dsa-063 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-055.php3 - http://www.iss.net/security_center/static/6657.php - http://www.securityfocus.com/bid/2826 - http://www.redhat.com/support/errata/RHSA-2001-075.html - http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-024-01
CVE ID: CVE-2001-1323 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MIT Kerberos 5 (krb5) 1.2.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via base-64 encoded data, which is not properly handled when the radix_encode function processes file glob output from the ftpglob function. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-060.html - http://marc.info/?l=bugtraq&m=98826223517788&w=2 - http://web.mit.edu/kerberos/www/advisories/ftpbuf.txt - http://downlo
http://marc.info/?l=bugtraq&m=98826223517788&w=2 - http://web.mit.edu/kerberos/www/advisories/ftpbuf.txt - http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-022-01
CVE ID: CVE-2001-1324 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:08.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: cvmlogin and statfile in Paul Jarc idtools before 2001.06.27 do not properly check the return value of a call to the pathexec_env function, which could cause the setstate utility to setuid to the UID environment variable and allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1001839 - http://multivac.cwru.edu/idtools/admin_idtools.tar.bz2 - http://www.securityfocus.com/bid/2934
CVE ID: CVE-2001-1325 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host (WSH). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6448 - http://www.securityfocus.com/bid/2633 - http://www.securityfocus.com/archive/1/3AE02004.57FDF958%40guninski.com
CVE ID: CVE-2001-1326 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:08.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eudora 5.1 allows remote attackers to execute arbitrary code when the "Use Microsoft Viewer" option is enabled and the "allow executables in HTML content" option is disabled, via an HTML email with a form that is activated from an image that the attacker spoofs as a link, which causes the user to execute the form and access embedded attachments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/187128 - http://www.securityfocus.com/bid/2796
CVE ID: CVE-2001-1327 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:51:08.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: pmake before 2.1.35 in Turbolinux 6.05 and earlier is installed with setuid root privileges, which could allow local users to gain privileges by exploiting vulnerabilities in pmake or programs that are used by pmake. Additional Analyst Notes: - CVE Program Container: References: - http://www.turbolinux.com/pipermail/tl-security-announce/2001-May/000313.html - http://www.iss.net/security_center/static/9988.php
CVE ID: CVE-2001-1328 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T04:51:08.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1844 - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/203 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6828 - ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-2001.03 - http://www.ciac.org/ciac/bulletins/l-103.shtml
CVE ID: CVE-2001-1329 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-06/0133.html
CVE ID: CVE-2001-1330 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:08.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-06/0133.html
CVE ID: CVE-2001-1331 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:08.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: mandb in the man-db package before 2.3.16-3 allows local users to overwrite arbitrary files via the command line options (1) -u or (2) -c, which do not drop privileges and follow symlinks. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/advisories/3307 - http://www.debian.org/security/2001/dsa-056 - http://www.securityfocus.com/bid/2720
CVE ID: CVE-2001-1332 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in Linux CUPS before 1.1.6 may allow remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://lists2.suse.com/archive/suse-security-announce/2001-Mar/0000.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000386 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-048.php3 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000384
CVE ID: CVE-2001-1333 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:08.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux CUPS before 1.1.6 does not securely handle temporary files, possibly due to a symlink vulnerability that could allow local users to overwrite files. Additional Analyst Notes: - CVE Program Container: References: - http://lists2.suse.com/archive/suse-security-announce/2001-Mar/0000.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000386 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-048.php3 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000384
CVE ID: CVE-2001-1334 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:51:08.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrary files by creating a block and specifying the target file as the source URL. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-05/0126.html - http://www.iss.net/security_center/static/9990.php - http://www.securityfocus.com/bid/2724 - http://marc.info/?l=phpslash&m=99029398904419&w=2
CVE ID: CVE-2001-1335 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:08.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in CesarFTP 0.98b and earlier allows remote authenticated users (such as anonymous) to read arbitrary files via a GET with a filename that contains a ...%5c (modified dot dot). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2786 - http://www.iss.net/security_center/static/6606.php - http://archives.neohapsis.com/archives/bugtraq/2001-05/0252.html
CVE ID: CVE-2001-1336 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: CesarFTP 0.98b and earlier stores usernames and passwords in plaintext in the settings.ini file, which allows attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-05/0252.html - http://www.securityfocus.com/bid/2785 - http://www.iss.net/security_center/static/6608.php
CVE ID: CVE-2001-1337 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to cause a denial of service via a long HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2774 - http://www.securityfocus.com/archive/1/186418 - http://www.iss.net/security_center/static/6594.php
CVE ID: CVE-2001-1338 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:08.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Beck IPC GmbH IPC@CHIP TelnetD server generates different responses when given valid and invalid login names, which allows remote attackers to determine accounts on the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2773 - http://www.kb.cert.org/vuls/id/198979 - http://www.iss.net/security_center/static/6595.php - http://www.securityfocus.com/archive/1/186418 - http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00010.html
CVE ID: CVE-2001-1339 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:08.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct brute force password guessing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/198979 - http://www.securityfocus.com/archive/1/186418 - http://www.securityfocus.com/bid/2771 - http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00010.html - http://www.iss.net/security_center/static/6605.php
CVE ID: CVE-2001-1340 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:08.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Beck GmbH IPC@Chip TelnetD service supports only one connection and does not disconnect a user who does not complete the login process, which allows remote attackers to lock out the administrator account by connecting to the service. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/6596.php - http://www.securityfocus.com/bid/2772 - http://www.securityfocus.com/archive/1/186418 - http://www.kb.cert.org/vuls/id/756019 - http://cert.uni-stuttgart.de/archive/bugtraq/2001/06
ocus.com/archive/1/186418 - http://www.kb.cert.org/vuls/id/756019 - http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00010.html
CVE ID: CVE-2001-1341 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:08.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Beck GmbH IPC@Chip embedded web server installs the chipcfg.cgi program by default, which allows remote attackers to obtain sensitive network information via a request to the program. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/6600.php - http://www.securityfocus.com/bid/2767 - http://www.securityfocus.com/archive/1/186418 - http://www.kb.cert.org/vuls/id/574739 - http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00010.html
CVE ID: CVE-2001-1342 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:51:07.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI that contains a large number of / (slash) or other characters, which causes certain functions to dereference a null pointer. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/6527.php - http://www.securityfocus.com/bid/2740 - http://www.apacheweek.com/issues/01-05-25 - http://online.securityfocus.com/archive/1/176144 - http://marc.info
d/2740 - http://www.apacheweek.com/issues/01-05-25 - http://online.securityfocus.com/archive/1/176144 - http://marc.info/?l=bugtraq&m=99054258728748&w=2 - http://bugs.apache.org/index.cgi/full/7522 - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3
tps://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2001-1343 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:08.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacters in the kill parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-06/0142.html - http://www.securityfocus.com/bid/2861 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6685