Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2001-1240 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:51:08.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of sudo in Engarde Secure Linux 1.0.1 allows any user in the admin group to run certain commands that could be leveraged to gain full root access. Additional Analyst Notes: - CVE Program Container: References: - http://www.linuxsecurity.com/advisories/other_advisory-1493.html
CVE ID: CVE-2001-1241 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, which allows remote attackers to execute arbitrary commands by directing Un-CGI to a document that begins with "#!" and the desired program name. Additional Analyst Notes: - CVE Program Container: References: - http://www.midwinter.com/~koreth/uncgi-changes.html - http://www.iss.net/security_center/static/6847.php - http://www.securityfocus.com/bid/3057 - http://archives.neohapsis.com/archives/bugtraq/2001-07/0349.html - ht
6847.php - http://www.securityfocus.com/bid/3057 - http://archives.neohapsis.com/archives/bugtraq/2001-07/0349.html - http://www.midwinter.com/~koreth/uncgi.html - http://archives.neohapsis.com/archives/bugtraq/2001-07/0287.html
CVE ID: CVE-2001-1242 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Un-CGI 1.9 and earlier allows remote attackers to execute arbitrary code via a .. (dot dot) in an HTML form. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-07/0349.html - http://www.midwinter.com/~koreth/uncgi-changes.html - http://www.iss.net/security_center/static/6846.php - http://www.securityfocus.com/bid/3056 - http://archives.neohapsis.com/archives/bugtraq/2001-07/0287.html
CVE ID: CVE-2001-1243 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an ASP program that uses Scripting.FileSystemObject to open a file with an MS-DOS device name, or (2) remotely injecting the device name into ASP programs that internally use Scripting.FileSystemObject. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/6800.php - http://www.securityfocus.com/bid/2973 - http://www.secur
erences: - http://www.iss.net/security_center/static/6800.php - http://www.securityfocus.com/bid/2973 - http://www.securityfocus.com/archive/1/194919
CVE ID: CVE-2001-1244 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/195457 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6824 - http://www.secu
p://www.securityfocus.com/archive/1/195457 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6824 - http://www.securityfocus.com/bid/2997
CVE ID: CVE-2001-1245 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:08.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 5.0 for Linux does not properly handle malformed HTTP headers, which allows remote attackers to cause a denial of service, possibly with a header whose value is the same as a MIME header name. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/196980 - http://www.securityfocus.com/bid/3012 - http://www.iss.net/security_center/static/6838.php
CVE ID: CVE-2001-1246 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:51:08.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP 4.0.5 through 4.1.0 in safe mode does not properly cleanse the 5th parameter to the mail() function, which allows local users and possibly remote attackers to execute arbitrary commands via shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-159.html - http://www.redhat.com/support/errata/RHSA-2002-129.html - http://www.iss.net/security_center/static/6787.php - http://www.securityfocus.com/bid/2954 - http://online.securityfocus.com/archive/1/
net/security_center/static/6787.php - http://www.securityfocus.com/bid/2954 - http://online.securityfocus.com/archive/1/194425 - http://www.redhat.com/support/errata/RHSA-2002-102.html - http://www.php.net/do_download.php?download_file=php-4.1.2.tar.gz
CVE ID: CVE-2001-1247 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:51:07.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the web server UID by uploading a PHP script that uses the error_log function to access the files. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/194425 - http://www.osvdb.org/5440 - http://www.php.net/do_download.php?download_file=php-4.1.2.tar.gz - http://www.redhat.com/support/errata/RHSA-2002-035.html
CVE ID: CVE-2001-1248 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: vWebServer 1.2.0 allows remote attackers to view arbitrary ASP scripts via a request for an ASP script that ends with a URL-encoded space character (%20). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2975 - http://www.iss.net/security_center/static/6769.php - http://online.securityfocus.com/archive/1/194418
CVE ID: CVE-2001-1249 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: vWebServer 1.2.0 allows remote attackers to cause a denial of service via a URL that contains MS-DOS device names. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/194418 - http://www.securityfocus.com/bid/2978
CVE ID: CVE-2001-1250 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: vWebServer 1.2.0 allows remote attackers to cause a denial of service (hang) via a small number of long URL requests, possibly due to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/6771.php - http://online.securityfocus.com/archive/1/194418 - http://www.securityfocus.com/bid/2979
CVE ID: CVE-2001-1251 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:51:07.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmallHTTP 1.204 through 3.00 beta 8 allows remote attackers to cause a denial of service via multiple long URL requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/6771.php - http://online.securityfocus.com/archive/1/194418 - http://www.securityfocus.com/bid/2980
CVE ID: CVE-2001-1252 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:51:07.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Network Associates PGP Keyserver 7.0 allows remote attackers to bypass authentication and access the administrative web interface via URLs that directly access cgi-bin instead of keyserver/cgi-bin for the programs (1) console, (2) cs, (3) multi_config and (4) directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/1955 - http://archives.neohapsis.com/archives/bugtraq/2001-09/0230.html - http://www.pgp.com/support/product-advisories/keyserver.asp - http://www.osvdb.org/4193 - http://www.
001-09/0230.html - http://www.pgp.com/support/product-advisories/keyserver.asp - http://www.osvdb.org/4193 - http://www.iss.net/security_center/static/7203.php - http://www.securityfocus.com/bid/3375
CVE ID: CVE-2001-1253 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alexis 2.0 and 2.1 in COM2001 InternetPBX stores voicemail passwords in plain text in the com2001.ini file, which could allow local users to make long distance calls as other users. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/217200 - http://www.iss.net/security_center/static/7205.php
CVE ID: CVE-2001-1254 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Access component for COM2001 Alexis 2.0 and 2.1 in InternetPBX sends username and voice mail passwords in the clear via a Java applet that sends the information to port 8888 of the server, which could allow remote attackers to steal the passwords via sniffing. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3373 - http://online.securityfocus.com/archive/1/217200
CVE ID: CVE-2001-1255 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathorized access the MySQL database. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7206.php - http://online.securityfocus.com/archive/1/217848 - http://www.securityfocus.com/bid/3381
CVE ID: CVE-2001-1256 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:08.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: kmmodreg in HP-UX 11.11, 11.04 and 11.00 allows local users to create arbitrary world-writeable files via a symlink attack on the (1) /tmp/.kmmodreg_lock and (2) /tmp/kmpath.tmp temporary files. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5628 - http://www.securityfocus.com/archive/1/188568 - http://ciac.llnl.gov/ciac/bulletins/l-093.shtml - http://www.securityfocus.com/bid/2821 - http://www.kb.cert.org/vuls/id/127435 -
c.llnl.gov/ciac/bulletins/l-093.shtml - http://www.securityfocus.com/bid/2821 - http://www.kb.cert.org/vuls/id/127435 - http://www.kb.cert.org/vuls/id/TJSL-4Z5Q92 - http://online.securityfocus.com/advisories/3354 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6656
CVE ID: CVE-2001-1257 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in Horde Internet Messaging Program (IMP) before 2.2.6 and 1.2.6 allows remote attackers to execute arbitrary Javascript embedded in an email. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410 - http://www.caldera.com/support/security/advisories/CSSA-2001-027.0.txt - http://www.debian.org/security/2001/dsa-073 - http://www.iss.net/security_center/static/6905.php - http://online.securityfocus.com/archive/1/198495 -
y/2001/dsa-073 - http://www.iss.net/security_center/static/6905.php - http://online.securityfocus.com/archive/1/198495 - http://online.securityfocus.com/archive/1/198495 - http://www.securityfocus.com/bid/3082
CVE ID: CVE-2001-1258 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:08.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/6906.php - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410 - http://www.caldera.com/support/security/advisories/CSSA-2001-027.0.txt - http://www.debian.org/security/2001/dsa-073 - http://online.securit
om/support/security/advisories/CSSA-2001-027.0.txt - http://www.debian.org/security/2001/dsa-073 - http://online.securityfocus.com/archive/1/198495 - http://www.securityfocus.com/bid/3083 - http://online.securityfocus.com/archive/1/198495
CVE ID: CVE-2001-1259 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Avaya Argent Office allows remote attackers to cause a denial of service by sending UDP packets to port 53 with no payload. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/202344 - http://www.iss.net/security_center/static/6953.php
CVE ID: CVE-2001-1260 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Avaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote attackers to gain administrator privileges by sniffing and decrypting the sniffing the passwords during a system reboot. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/202344 - http://www.iss.net/security_center/static/6954.php
CVE ID: CVE-2001-1261 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: Avaya Argent Office 2.1 may allow remote attackers to change hold music by spoofing a legitimate server's response to a TFTP broadcast and providing an alternate HoldMusic file. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/202344 - http://www.iss.net/security_center/static/6956.php
CVE ID: CVE-2001-1262 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Avaya Argent Office 2.1 compares a user-provided SNMP community string with the correct string only up to the length of the user-provided string, which allows remote attackers to bypass authentication with a 0 length community string. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/202344 - http://www.iss.net/security_center/static/6955.php
CVE ID: CVE-2001-1263 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:08.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: telnet95.exe in Pragma InterAccess 4.0 build 5 allows remote attackers to cause a denial of service (crash) via a large number of characters to port 23, possibly due to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2834 - http://online.securityfocus.com/archive/1/189327 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6658
CVE ID: CVE-2001-1264 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in mkacct in HP-UX 11.04 running Virtualvault Operating System (VVOS) 4.0 and 4.5 allows attackers to elevate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/advisories/3459 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6867 - http://www.kb.cert.org/vuls/id/420475 - http://www.securityfocus.com/bid/3072 - http://ciac.llnl.gov/ciac/bulletins/l-119.shtml
CVE ID: CVE-2001-1265 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21 allows remote attackers to conduct unauthorized operations on arbitrary files via a .. (dot dot) attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6864 - http://online.securityfocus.com/archive/1/198297 - http://www.securityfocus.com/bid/3076
CVE ID: CVE-2001-1266 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:51:07.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Doug Neal's HTTPD Daemon (DNHTTPD) before 0.4.1 allows remote attackers to view arbitrary files via a .. (dot dot) attack using the dot hex code '%2E'. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/apps/freshmeat/2001-07/0002.html - http://dnhttpd.sourceforge.net/changelog.html
CVE ID: CVE-2001-1267 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T04:51:08.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose filenames contain a .. (dot dot). Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-47800-1 - http://www.redhat.com/support/errata/RHSA-2002-096.html - http://online.securityfocus.com/archive/1/196445 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000538 - http://www.iss.net/security_ce
com/archive/1/196445 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000538 - http://www.iss.net/security_center/static/10224.php - http://www.redhat.com/support/errata/RHSA-2002-138.html - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:066 - http://online.securityfocus.com/advisories/4514 - ftp://alpha.gnu.org/gnu/tar/tar-1.13.25.tar.gz - http://www.redhat.com/support/errata/RHSA-2003-218.html - http://www.securityfocus.com/bid/3024
CVE ID: CVE-2001-1268 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) in an extracted filename. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-47800-1 - http://online.securityfocus.com/archive/1/196445 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000928.1-1 - http://www.info-zip.org/pub/infozip/UnZip.html
CVE ID: CVE-2001-1269 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames in the archive that begin with the '/' (slash) character. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-47800-1 - http://online.securityfocus.com/archive/1/196445 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000928.1-1 - http://www.info-zip.org/pub/infozip/UnZip.html
CVE ID: CVE-2001-1270 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the console version of PKZip (pkzipc) 4.00 and earlier allows attackers to overwrite arbitrary files during archive extraction with the -rec (recursive) option via a .. (dot dot) attack on the archived files. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/196445 - http://www.security.nnov.ru/advisories/archdt.asp
CVE ID: CVE-2001-1271 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) attack on archived filenames. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/196445 - http://www.security.nnov.ru/advisories/archdt.asp
CVE ID: CVE-2001-1272 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: wmtv 0.6.5 and earlier does not properly drop privileges, which allows local users to execute arbitrary commands via the -e (external command) option. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3658 - http://www.debian.org/security/2001/dsa-092 - http://www.iss.net/security_center/static/7669.php
CVE ID: CVE-2001-1273 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "mxcsr P4" vulnerability in the Linux kernel before 2.2.17-14, when running on certain Intel CPUs, allows local users to cause a denial of service (system halt). Additional Analyst Notes: - CVE Program Container: References: - http://ciac.llnl.gov/ciac/bulletins/l-045.shtml - http://www.redhat.com/support/errata/RHSA-2001-013.html
CVE ID: CVE-2001-1274 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:08.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and possibly gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000375 - http://www.debian.org/security/2001/dsa-013 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-014.php3 - http://www.redhat.com/support/errata/RHSA-2001-003.html - http://marc.info/?l=bugtraq&m=98089552030459&w=2 - http://www.mysql.com/documentation/mysql/bychapter/manual_Ne
3.html - http://marc.info/?l=bugtraq&m=98089552030459&w=2 - http://www.mysql.com/documentation/mysql/bychapter/manual_News.html#News-3.23.3 - http://www.calderasystems.com/support/security/advisories/CSSA-2001-006.0.txt
CVE ID: CVE-2001-1275 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administrator password from the mysql.user table and possibly gain privileges via password cracking. Additional Analyst Notes: - CVE Program Container: References: - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-014.php3 - http://www.redhat.com/support/errata/RHSA-2001-003.html - http://marc.info/?l=bugtraq&m=98089552030459&w=2 - http://www.calderasystems.com/support/security/advisories/CSSA-2001-006.0.txt
CVE ID: CVE-2001-1276 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:51:07.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: ispell before 3.1.20 allows local users to overwrite files of other users via a symlink attack on a temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-074.html - http://marc.info/?l=bugtraq&m=99317439131174&w=2 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-058.php3 - http://download.immunix.org/ImmunixOS/6.2/updates/IMNX-2001-62-004-01