Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2001-0940 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:06.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows remote attackers to execute arbitrary code via a long user name. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/1951 - http://www.checkpoint.com/techsupport/alerts/buffer_overflow.html - http://marc.info/?l=bugtraq&m=100094268017271&w=2 - http://www.securityfocus.com/bid/3336 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7145 - http://cert.uni-stuttgart.de/archive/b
yfocus.com/bid/3336 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7145 - http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00291.html - http://archives.neohapsis.com/archives/win2ksecadvice/2001-q3/0151.html - http://marc.info/?l=bugtraq&m=100698954308436&w=2
CVE ID: CVE-2001-0941 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3138 - http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf - http://marc.info/?l=bugtraq&m=100716693806967&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7643
CVE ID: CVE-2001-0942 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: dbsnmp in Oracle 8.1.6 and 8.1.7 uses the ORACLE_HOME environment variable to find and execute the dbsnmp program, which allows local users to execute arbitrary programs by pointing the ORACLE_HOME to an alternate directory that contains a malicious version of dbsnmp. Additional Analyst Notes: - CVE Program Container: References: - http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf - http://seclists.org/lists/bugtraq/2001/Dec/0000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7645 - http://www.securityfocu
g/lists/bugtraq/2001/Dec/0000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7645 - http://www.securityfocus.com/bid/3137
CVE ID: CVE-2001-0943 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: dbsnmp in Oracle 8.0.5 and 8.1.5, under certain conditions, trusts the PATH environment variable to find and execute the (1) chown or (2) chgrp commands, which allows local users to execute arbitrary code by modifying the PATH to point to Trojan Horse programs. Additional Analyst Notes: - CVE Program Container: References: - http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf - http://www.securityfocus.com/bid/3129 - http://seclists.org/lists/bugtraq/2001/Dec/0001.html - http://www.securityfocus.com/archive/1/201020
CVE ID: CVE-2001-0944 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: DDE in mIRC allows local users to launch applications under another user's account via a DDE message that executes a command, which may be executed by the other user's process. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100734173831990&w=2
CVE ID: CVE-2001-0945 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service via an e-mail message that contains a long line. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7648.php - http://marc.info/?l=bugtraq&m=100741295502017&w=2 - http://www.securityfocus.com/bid/3611
CVE ID: CVE-2001-0946 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:07.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: apmscript in Apmd in Red Hat 7.2 "Enigma" allows local users to create or change the modification dates of arbitrary files via a symlink attack on the LOW_POWER temporary file, which could be used to cause a denial of service, e.g. by creating /etc/nologin and disabling logins. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/8268 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=56389 - http://marc.info/?l=bugtraq&m=100743394701962&w=2 - http://www.osvd
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=56389 - http://marc.info/?l=bugtraq&m=100743394701962&w=2 - http://www.osvdb.org/5493
CVE ID: CVE-2001-0947 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to determine the real pathname of the server by requesting an invalid extension, which produces an error page that includes the path. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7649 - http://marc.info/?l=bugtraq&m=100749428517090&w=2 - http://www.valicert.com/support/security_advisory_eva.html - http://www.securityfocus.com/bid/3615
CVE ID: CVE-2001-0948 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (CSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to execute arbitrary code or display false information by including HTML or script in the certificate's description, which is executed when the certificate is viewed. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100749428517090&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7650 - http://www.valicert.com/support/security_advisory_eva.h
=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7650 - http://www.valicert.com/support/security_advisory_eva.html - http://www.securityfocus.com/bid/3619
CVE ID: CVE-2001-0949 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 allows remote attackers to execute arbitrary code via long arguments to the parameters (1) Mode, (2) Certificate_File, (3) useExpiredCRLs, (4) listenLength, (5) maxThread, (6) maxConnPerSite, (7) maxMsgLen, (8) exitTime, (9) blockTime, (10) nextUpdatePeriod, (11) buildLocal, (12) maxOCSPValidityPeriod, (13) extension, and (14) a particular combination of parameters associated with private key gene
maxOCSPValidityPeriod, (13) extension, and (14) a particular combination of parameters associated with private key generation that form a string of a certain length. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3634 - http://www.securityfocus.com/bid/3631 - http://www.securityfocus.com/bid/3635 - http://www.securityfocus.com/bid/3628 - http://www.securityfocus.com/bid/3625 - http://www.securityfocus.com/bid/3636 - http://marc.info/?l=bugtraq&m=100749428517090&w=2 - http://www.securityfocus.com/bid/3633 - http://www.securityfocus.com/bid/3630 - http://www.valicert.com/support/security_advisory_eva.html - http://www.securityfocus.com/bid/36
ityfocus.com/bid/3630 - http://www.valicert.com/support/security_advisory_eva.html - http://www.securityfocus.com/bid/3629 - http://www.securityfocus.com/bid/3621 - http://www.securityfocus.com/bid/3622 - http://www.securityfocus.com/bid/3627 - http://www.securityfocus.com/bid/3632 - http://www.securityfocus.com/bid/3624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7652
CVE ID: CVE-2001-0950 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 uses insufficiently random data to (1) generate session tokens for HSMs using the C rand function, or (2) generate certificates or keys using /dev/urandom instead of another source which blocks when the entropy pool is low, which could make it easier for local or remote attackers to steal tokens or certificates via brute force guessing. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vuln
rce guessing. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7651 - http://www.securityfocus.com/bid/3620 - http://marc.info/?l=bugtraq&m=100749428517090&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7653 - http://www.valicert.com/support/security_advisory_eva.html - http://www.securityfocus.com/bid/3618
CVE ID: CVE-2001-0951 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T04:37:06.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows 2000 allows remote attackers to cause a denial of service (CPU consumption) by flooding Internet Key Exchange (IKE) UDP port 500 with packets that contain a large number of dot characters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7667 - http://marc.info/?l=bugtraq&m=100774842520403&w=2 - http://marc.info/?l=bugtraq&m=100813081913496&w=2 - http://www.securityfocus.com/bid/3652
CVE ID: CVE-2001-0952 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: THQ Volition Red Faction Game allows remote attackers to cause a denial of service (hang) of a client or server via packets to UDP port 7755. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100774266027774&w=2 - http://www.securityfocus.com/bid/3651 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7672
CVE ID: CVE-2001-0953 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kebi WebMail allows remote attackers to access the administrator menu and gain privileges via the /a/ hidden directory, which is installed under the web document root. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3655 - http://marc.info/?l=bugtraq&m=100780264902037&w=2:1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7674
CVE ID: CVE-2001-0954 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:07.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lotus Domino 5.0.5 and 5.0.8, and possibly other versions, allows remote attackers to cause a denial of service (block access to databases that have not been previously accessed) via a URL that includes the . (dot) directory. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7684 - http://marc.info/?l=bugtraq&m=100780146532131&w=2L:1 - http://www.securityfocus.com/bid/3656 - http://www.osvdb.org/2000 - http://www-1.ibm.com/support/manager.wss?rs=1&rt=0&org=sim
/www.securityfocus.com/bid/3656 - http://www.osvdb.org/2000 - http://www-1.ibm.com/support/manager.wss?rs=1&rt=0&org=sims&doc=255CC03D83CFF50C85256B1E005E349B
CVE ID: CVE-2001-0955 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in fbglyph.c in XFree86 before 4.2.0, related to glyph clipping for large origins, allows attackers to cause a denial of service and possibly gain privileges via a large number of characters, possibly through the web page search form of KDE Konqueror or from an xterm command with a long title. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3663 - http://www.securityfocus.com/bid/3657 - http://marc.info/?l=bugtraq&m=100776624224549&w=2 - http://www.xfree86.org/4
3 - http://www.securityfocus.com/bid/3657 - http://marc.info/?l=bugtraq&m=100776624224549&w=2 - http://www.xfree86.org/4.2.0/RELNOTES2.html#2 - http://marc.info/?l=bugtraq&m=100784290015880&w=2 - http://www.xfree86.org/security/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/7683 - http://cvsweb.xfree86.org/cvsweb/xc/programs/Xserver/fb/fbglyph.c - https://exchange.xforce.ibmcloud.com/vulnerabilities/7673 - http://marc.info/?l=vuln-dev&m=100118958310463&w=2
CVE ID: CVE-2001-0956 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: speechd 0.54 and earlier, with the Festival or rsynth speech synthesis package, allows attackers to execute arbitrary commands via shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-09/0089.html - http://www.securityfocus.com/bid/3326 - http://www.speechio.org/speechd.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7121
CVE ID: CVE-2001-0958 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in eManager plugin for Trend Micro InterScan VirusWall for NT 3.51 and 3.51J allow remote attackers to execute arbitrary code via long arguments to the CGI programs (1) register.dll, (2) ContentFilter.dll, (3) SFNofitication.dll, (4) register.dll, (5) TOP10.dll, (6) SpamExcp.dll, and (7) spamrule.dll. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7104 - http://archives.neohapsis.com/archives/bugtraq/2001-09/0099.html - http://www.securityf
cloud.com/vulnerabilities/7104 - http://archives.neohapsis.com/archives/bugtraq/2001-09/0099.html - http://www.securityfocus.com/bid/3327 - http://www.trendmicro.co.jp/esolution/solutionDetail.asp?solutionID=3142
CVE ID: CVE-2001-0959 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:37:06.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 creates a hidden share named ARCSERVE$, which allows remote attackers to obtain sensitive information and overwrite critical files. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-09/0137.html - http://www.osvdb.org/5483 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7122 - http://www.securityfocus.com/bid/3342 - http://support.ca.com/Download/patches/asitnt/QO00945.html
CVE ID: CVE-2001-0960 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:37:07.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 stores the backup agent user name and password in cleartext in the aremote.dmp file in the ARCSERVE$ hidden share, which allows local and remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-09/0137.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7122 - http://support.ca.com/Download/patches/asitnt/QO00945.html - http://www.securityfocus.com/bid/334
vulnerabilities/7122 - http://support.ca.com/Download/patches/asitnt/QO00945.html - http://www.securityfocus.com/bid/3343
CVE ID: CVE-2001-0961 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:07.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in tab expansion capability of the most program allows local or remote attackers to execute arbitrary code via a malformed file that is viewed with most. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2001/dsa-076 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7149 - http://www.securityfocus.com/bid/3347
CVE ID: CVE-2001-0962 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:07.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-09/0234.html - http://archives.neohapsis.com/archives/bugtraq/2001-09/0234.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7153 - http://www14.software.ibm.com/webapp/download/postconfig.jsp?id=4000805&pf=Multi-Platf
mcloud.com/vulnerabilities/7153 - http://www14.software.ibm.com/webapp/download/postconfig.jsp?id=4000805&pf=Multi-Platform&v=3.0.2&e=Standard+%26+Advanced+Editions&cat=&s=p - http://www.osvdb.org/5492
CVE ID: CVE-2001-0963 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:07.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in SpoonFTP 1.1 allows local and sometimes remote attackers to access files outside of the FTP root via a ... (modified dot dot) in the CD (CWD) command. Additional Analyst Notes: - CVE Program Container: References: - http://www.pi-soft.com/spoonftp/index.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/7147 - http://www.osvdb.org/1953 - http://www.securityfocus.com/bid/3351 - http://archives.neohapsis.com/archives/bugtraq/2001-09/0171.html
CVE ID: CVE-2001-0964 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in client for Half-Life 1.1.0.8 and earlier allows malicious remote servers to execute arbitrary code via a long console command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7148 - http://archives.neohapsis.com/archives/bugtraq/2001-09/0178.html
CVE ID: CVE-2001-0965 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:07.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument that contains a large number of * (asterisk) characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3201 - http://www.glftpd.org/ - http://www.iss.net/security_center/static/7001.php - http://archives.neohapsis.com/archives/bugtraq/2001-08/0239.html
CVE ID: CVE-2001-0966 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Nudester 1.10 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the CD (CWD) command. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-08/0232.html - http://www.securityfocus.com/bid/3202
CVE ID: CVE-2001-0967 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() function, which makes it easier for an attacker to conduct brute force password guessing. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3204 - http://archives.neohapsis.com/archives/bugtraq/2001-08/0228.html
CVE ID: CVE-2001-0968 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Knox Arkeia server 4.2, and possibly other versions, installs its root user with a null password by default, which allows local and remote users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-08/0228.html - http://www.securityfocus.com/bid/3203
CVE ID: CVE-2001-0969 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:07.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: ipfw in FreeBSD does not properly handle the use of "me" in its rules when point to point interfaces are used, which causes ipfw to allow connections from arbitrary remote hosts. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3206 - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:53.ipfw.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/7002 - http://www.osvdb.org/1937
CVE ID: CVE-2001-0970 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in TDForum 1.2 CGI script (tdforum12.cgi) allows remote attackers to execute arbitrary script on other clients via a forum message that contains the script. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=99832137410609&w=2 - http://www.securityfocus.com/bid/3207 - http://www.kb.cert.org/vuls/id/782243 - http://archives.neohapsis.com/archives/bugtraq/2001-08/0281.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7009
CVE ID: CVE-2001-0971 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ACI 4d webserver allows remote attackers to read arbitrary files via a .. (dot dot) or drive letter (e.g., C:) in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3209 - http://www.securityfocus.com/archive/1/206102 - http://www.iss.net/security_center/static/7010.php
CVE ID: CVE-2001-0972 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain administrative privileges by calculating the value of the admin cookie (UserID 1), i.e. "0888888." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3210 - http://marc.info/?l=bugtraq&m=99834088223352&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7011
CVE ID: CVE-2001-0973 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:07.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and extracting a tar file with a symlink into the data-bag space. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7029.php - http://archives.neohapsis.com/archives/bugtraq/2001-08/0328.html - http://www.kb.cert.org/vuls/id/465971 - http://bscw.gmd.de/Bulletins/BSCW-SB-2001-08.extract.txt - http://www.securityfocus.com/bid/3227