Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2001-0595 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:30:05.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the kcsSUNWIOsolf.so library in Solaris 7 and 8 allows local attackers to execute arbitrary commands via the KCMS_PROFILES environment variable, e.g. as demonstrated using the kcms_configure program. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-04/0203.html - http://www.securityfocus.com/bid/2605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6365
CVE ID: CVE-2001-0596 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:30:05.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000393 - http://www.redhat.com/support/errata/RHSA-2001-046.html - http://marc.info/?l=bugtraq&m=98685237415117&w=2 - http://www.securityfocus.com/bid/2637 - http://www.osvdb.org/5579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6344 - http://download.im
om/bid/2637 - http://www.osvdb.org/5579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6344 - http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-014-01 - http://www.debian.org/security/2001/dsa-051
CVE ID: CVE-2001-0597 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:30:05.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zetetic Secure Tool for Recalling Important Passwords (STRIP) 0.5 and earlier for the PalmOS allows a local attacker to recover passwords via a brute force attack. This attack is made feasible by STRIP's use of SysRandom, which is seeded by TimeGetTicks, and an implementation flaw which vastly reduces the password 'search space'. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2567 - http://archives.neohapsis.com/archives/bugtraq/2001-04/0169.html - https://exchange.xforce.ibmc
rityfocus.com/bid/2567 - http://archives.neohapsis.com/archives/bugtraq/2001-04/0169.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6362
CVE ID: CVE-2001-0598 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:30:05.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Ghost 6.5 and earlier allows a remote attacker to create a denial of service by sending large (> 45Kb) amounts of data to the Ghost Configuration Server on port 1347, which triggers an error that is not properly handled. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2570 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6357 - http://archives.neohapsis.com/archives/bugtraq/2001-04/0175.html
CVE ID: CVE-2001-0599 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:30:05.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sybase Adaptive Server Anywhere Database Engine 6.0.3.2747 and earlier as included with Symantec Ghost 6.5 allows a remote attacker to create a denial of service by sending large (> 45Kb) amounts of data to port 2638. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6356 - http://archives.neohapsis.com/archives/bugtraq/2001-04/0175.html - http://www.securityfocus.com/bid/2572
CVE ID: CVE-2001-0600 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:30:05.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated URL requests with the same HTTP headers, such as (1) Accept, (2) Accept-Charset, (3) Accept-Encoding, (4) Accept-Language, and (5) Content-Type. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6347 - http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html
CVE ID: CVE-2001-0601 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:30:05.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via HTTP requests containing certain combinations of UNICODE characters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6349 - http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html
CVE ID: CVE-2001-0602 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:30:05.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated (>400) URL requests for DOS devices. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6348 - http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html
CVE ID: CVE-2001-0603 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:30:05.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeatedly sending large (> 10Kb) amounts of data to the DIIOP - CORBA service on TCP port 63148. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6350 - http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html
CVE ID: CVE-2001-0604 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:30:05.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via URL requests (>8Kb) containing a large number of '/' characters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6351 - http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html
CVE ID: CVE-2001-0605 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:30:05.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Headlight Software MyGetright prior to 1.0b allows a remote attacker to upload and/or overwrite arbitrary files via a malicious .dld (skins-data) file which contains long strings of random data. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=98321819112158&w=2
CVE ID: CVE-2001-0606 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:30:05.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 (VVOS) with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6110 - http://archives.neohapsis.com/archives/hp/2001-q1/0041.html
CVE ID: CVE-2001-0607 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:30:05.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: asecure as included with HP-UX 10.01 through 11.00 can allow a local attacker to create a denial of service and gain additional privileges via unsafe permissions on the asecure program, a different vulnerability than CVE-2000-0083. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5621 - http://archives.neohapsis.com/archives/hp/2001-q1/0080.html
CVE ID: CVE-2001-0608 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:30:05.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP architected interface facility (AIF) as includes with MPE/iX 5.5 through 6.5 running on a HP3000 allows an attacker to gain additional privileges and gain access to databases via the AIF - AIFCHANGELOGON program. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6951 - http://www.kb.cert.org/vuls/id/895496 - http://archives.neohapsis.com/archives/hp/2001-q1/0087.html
CVE ID: CVE-2001-0609 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:30:06.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2576 - http://archives.neohapsis.com/archives/bugtraq/2001-04/0202.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6364
CVE ID: CVE-2001-0610 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:30:05.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tmp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6428 - http://archives.neohapsis.com/archives/bugtraq/2001-04/0336.html
CVE ID: CVE-2001-0611 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:30:05.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Becky! 2.00.05 and earlier can allow a remote attacker to gain additional privileges via a buffer overflow attack on long messages without newline characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2723 - http://archives.neohapsis.com/archives/bugtraq/2001-05/0089.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6531
CVE ID: CVE-2001-0612 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T04:30:05.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Remote Desktop 3.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number of packets to port 5045. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/6288 - http://www.securityfocus.com/bid/2726 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6547 - http://archives.neohapsis.com/archives/bugtraq/2001-05/0158.html
CVE ID: CVE-2001-0613 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:30:06.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Omnicron Technologies OmniHTTPD Professional 2.08 and earlier allows a remote attacker to create a denial of service via a long POST URL request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2730 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6540 - http://archives.neohapsis.com/archives/bugtraq/2001-05/0131.html
CVE ID: CVE-2001-0614 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:30:05.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Carello E-Commerce 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary commands via a specially constructed URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6532 - http://marc.info/?l=bugtraq&m=98991352402073&w=2
CVE ID: CVE-2001-0615 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:30:06.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary files via a specially crafted URL which includes variations of a '..' (dot dot) attack such as '...' or '....'. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6601 - http://www.osvdb.org/1841 - http://archives.neohapsis.com/archives/bugtraq/2001-05/0241.html - http://www.securityfocus.com/bid/2776
CVE ID: CVE-2001-0616 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:30:06.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name (e.g., GET /aux HTTP/1.0). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6602 - http://www.securityfocus.com/bid/2777 - http://archives.neohapsis.com/archives/bugtraq/2001-05/0241.html
CVE ID: CVE-2001-0617 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:30:06.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Allied Telesyn AT-AR220e cable/DSL router firmware 1.08a RC14 with the portmapper and the 'Virtual Server' enabled can allow a remote attacker to gain access to mapped services even though the single portmappings may be disabled. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-05/0125.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6560
CVE ID: CVE-2001-0618 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:30:05.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Orinoco RG-1000 wireless Residential Gateway uses the last 5 digits of the 'Network Name' or SSID as the default Wired Equivalent Privacy (WEP) encryption key. Since the SSID occurs in the clear during communications, a remote attacker could determine the WEP key and decrypt RG-1000 traffic. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6328 - http://archives.neohapsis.com/archives/bugtraq/2001-04/0020.html
CVE ID: CVE-2001-0619 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:30:05.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Lucent Closed Network protocol can allow remote attackers to join Closed Network networks which they do not have access to. The 'Network Name' or SSID, which is used as a shared secret to join the network, is transmitted in the clear. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-04/0015.html
CVE ID: CVE-2001-0620 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:30:06.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server (NAS) LDAP database and read arbitrary files by obtaining the cleartext administrator username and password from the configuration file, which has insecure permissions. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-04/0320.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6402
CVE ID: CVE-2001-0621 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:30:05.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP server on Cisco Content Service 11000 series switches (CSS) before WebNS 4.01B23s and WebNS 4.10B13s allows an attacker who is an FTP user to read and write arbitrary files via GET or PUT commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/l-085.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/6557 - http://www.securityfocus.com/bid/2745 - http://www.cisco.com/warp/public/707/arrowpoint-ftp-pub.shtml - http://www.osvdb.org/1834
CVE ID: CVE-2001-0622 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:30:06.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web management service on Cisco Content Service series 11000 switches (CSS) before WebNS 4.01B29s or WebNS 4.10B17s allows a remote attacker to gain additional privileges by directly requesting the web management URL instead of navigating through the interface. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6631 - http://www.osvdb.org/1848 - http://www.securityfocus.com/bid/2806 - http://www.cisco.com/warp/public/707/arrowpoint-webmgmt-vuln-pub.shtml
CVE ID: CVE-2001-0623 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:30:05.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: sendfiled, as included with Simple Asynchronous File Transfer (SAFT), on various Linux systems does not properly drop privileges when sending notification emails, which allows local attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2001/dsa-050 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6430 - http://www.debian.org/security/2001/dsa-052
CVE ID: CVE-2001-0624 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:30:06.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: QNX 2.4 allows a local user to read arbitrary files by directly accessing the mount point for the FAT disk partition, e.g. /fs-dos. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6437 - http://archives.neohapsis.com/archives/vuln-dev/2001-q2/0266.html
CVE ID: CVE-2001-0625 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:30:05.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: ftpdownload in Computer Associates InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink attack on /tmp/ftpdownload.log . Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-05/0245.html - http://www.osvdb.org/1843 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6607 - http://www.securityfocus.com/bid/2778
CVE ID: CVE-2001-0626 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:30:06.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL request containing a ":" character. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-03/0236.html - http://www.securityfocus.com/bid/2488 - https://exchange.xforce.ibmcloud.com/vulnerabilities/3839
CVE ID: CVE-2001-0627 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:30:05.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/747736 - http://www.securityfocus.com/bid/2752 - http://archives.neohapsis.com/archives/bugtraq/2001-05/0220.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6588 - ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.17/CSSA-2001-SCO.17.txt
CVE ID: CVE-2001-0628 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:30:06.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2000 does not check AutoRecovery (.asd) files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6614 - http://support.microsoft.com/support/kb/articles/Q274/2/28.asp - http://www.securityfocus.com/bid/2760
CVE ID: CVE-2001-0629 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:30:05.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Event Correlation Service (ecsd) as included with OpenView Network Node Manager 6.1 allows a remote attacker to gain addition privileges via a buffer overflow attack in the '-restore_config' command line parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-05/0226.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6582 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0107-158 - http://www.securityfocus.com/bid/2761
CVE ID: CVE-2001-0630 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:30:05.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in MIMAnet viewsrc.cgi 2.0 allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in the 'loc' variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6583 - http://archives.neohapsis.com/archives/bugtraq/2001-05/0231.html - http://www.securityfocus.com/bid/2762
CVE ID: CVE-2001-0631 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:30:05.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presence of '<@>' in the 'From:' field, which allows remote attackers to send spoofed email with the identity of local users. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-02/0440.html - http://archives.neohapsis.com/archives/bugtraq/2001-02/0376.html - http://www.securityfocus.com/bid/2423 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6
gtraq/2001-02/0376.html - http://www.securityfocus.com/bid/2423 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6192
CVE ID: CVE-2001-0632 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:30:05.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX creates a default admin username and password in the default installation, which can allow a remote attacker to gain additional privileges. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-02/0378.html - http://archives.neohapsis.com/archives/bugtraq/2001-02/0443.html
CVE ID: CVE-2001-0633 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:30:06.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web root via a '..' (dot dot) attack in the sample script 'codebrws.asp'. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-02/0378.html - http://archives.neohapsis.com/archives/bugtraq/2001-02/0443.html
CVE ID: CVE-2001-0634 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:30:05.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and create a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-02/0378.html - http://www.securityfocus.com/bid/2409 - http://archives.neohapsis.com/archives/bugtraq/2001-02/0443.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6176