Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2001-0974 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6903 - http://www.securityfocus.com/bid/3048 - http://www.cert.org/advisories/CA-2001-18.html - http://www.kb.cert.org/vuls/id/869184 - http://www.ciac.org/ciac/bulletins/l-116.shtml
CVE ID: CVE-2001-0975 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2001-18.html - http://otn.oracle.com/deploy/security/pdf/oid_cert_bof.pdf - http://www.kb.cert.org/vuls/id/869184 - http://www.securityfocus.com/bid/3047 - http://www.ciac.org/ciac/bulletins/l-116.shtml - https://exchange.xforce.ibmcloud.com
//www.securityfocus.com/bid/3047 - http://www.ciac.org/ciac/bulletins/l-116.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/6902
CVE ID: CVE-2001-0976 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in HP Process Resource Manager (PRM) C.01.08.2 and earlier, as used by HP-UX Workload Manager (WLM), allows local users to gain root privileges via modified libraries or environment variables. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/hp/2001-q3/0048.html
CVE ID: CVE-2001-0977 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:07.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2001-18.html - http://www.osvdb.org/1905 - http://www.redhat.com/support/errata/RHSA-2001-098.html - http://www.debian.org/security/2001/dsa-068 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-069.php3 - http://www.kb.cert.org/vuls/id/935800 - h
dsa-068 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-069.php3 - http://www.kb.cert.org/vuls/id/935800 - http://www.securityfocus.com/bid/3049 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000417 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6904
CVE ID: CVE-2001-0978 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:37:06.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: login in HP-UX 10.26 does not record failed login attempts in /var/adm/btmp, which could allow attackers to conduct brute force password guessing attacks without being detected or observed using the lastb program. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8632.php - http://archives.neohapsis.com/archives/hp/2001-q3/0052.html - http://www.securityfocus.com/bid/3289
CVE ID: CVE-2001-0979 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in swverify in HP-UX 11.0, and possibly other programs, allows local users to gain privileges via a long command line argument. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7078 - http://www.securityfocus.com/archive/1/211687 - http://www.securityfocus.com/bid/3279
CVE ID: CVE-2001-0980 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:07.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6854 - http://www.calderasystems.com/support/security/advisories/CSSA-2001-026.0.txt - http://www.securityfocus.com/bid/3052
CVE ID: CVE-2001-0981 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:07.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP CIFS/9000 Server (SAMBA) A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program without specifying the username of the user making the request, which could cause the server to change the password of a different user. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7051 - http://archives.neohapsis.com/archives/hp/2001-q3/0048.html
CVE ID: CVE-2001-0982 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:07.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via encoded .. (dot dot) sequences containing "%2e" strings. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-07/0497.html - http://www-1.ibm.com/support/search.wss?rs=0&q=IY18152&apar=only - ftp://ftp.tivoli.com/support/patches/patches_3.7.1/3.7.1-POL-0003/3.7.1-POL-0003.README - http://www.securityfocus.com
- ftp://ftp.tivoli.com/support/patches/patches_3.7.1/3.7.1-POL-0003/3.7.1-POL-0003.README - http://www.securityfocus.com/bid/3080 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6884 - http://www.osvdb.org/1908
CVE ID: CVE-2001-0983 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt the passwords and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.eve-software.com/security/ueditpw.html - http://marc.info/?l=bugtraq&m=99861651923668&w=2
CVE ID: CVE-2001-0984 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Password Safe 1.7(1) leaves cleartext passwords in memory when a user copies the password to the clipboard and minimizes Password Safe with the "Clear the password when minimized" and "Lock password database on minimize and prompt on restore" options enabled, which could allow an attacker with access to the memory (e.g. an administrator) to read the passwords. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7123 - http://www.securityfocus.com/bid/3337 - http
: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7123 - http://www.securityfocus.com/bid/3337 - http://www.securityfocus.com/archive/1/213931
CVE ID: CVE-2001-0985 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: shop.pl in Hassan Consulting Shopping Cart 1.23 allows remote attackers to execute arbitrary commands via shell metacharacters in the "page" parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3308 - http://www.securityfocus.com/archive/1/212827 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7106 - http://www.irata.com/shopver.html
CVE ID: CVE-2001-0986 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, file attributes, or portions of source code by directly calling sqlqhit.asp with a CiScope parameter set to (1) webinfo, (2) extended_fileinfo, (3) extended_webinfo, or (4) fileinfo. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3339 - http://www.securityfocus.com/archive/1/214217 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7125
CVE ID: CVE-2001-0987 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:07.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in CGIWrap before 3.7 allows remote attackers to execute arbitrary Javascript on other web clients by causing the Javascript to be inserted into error messages that are generated by CGIWrap. Additional Analyst Notes: - CVE Program Container: References: - http://cgiwrap.sourceforge.net/changes.html - http://archives.neohapsis.com/archives/bugtraq/2001-07/0499.html - http://www.osvdb.org/1909 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6886 - http://www.securityfocus.com/bid/3084
CVE ID: CVE-2001-0988 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arkeia backup server 4.2.8-2 and earlier creates its database files with world-writable permissions, which could allow local users to overwrite the files or obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6885 - http://archives.neohapsis.com/archives/bugtraq/2001-07/0521.html
CVE ID: CVE-2001-0989 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in Pileup before 1.2 allows local users to gain root privileges via (1) long command line arguments, or (2) a long callsign. Additional Analyst Notes: - CVE Program Container: References: - http://www.babbage.demon.co.uk/linux/pileup-1.2/pileup-1.2.tar.gz - http://archives.neohapsis.com/archives/bugtraq/2001-07/0512.html - http://www.securityfocus.com/bid/3086
CVE ID: CVE-2001-0990 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into the libvpopmail.a library, which allows local users to obtain the MySQL username and password by inspecting the vpopmail programs that use the library. Additional Analyst Notes: - CVE Program Container: References: - http://www.inter7.com/vpopmail/ChangeLog - https://exchange.xforce.ibmcloud.com/vulnerabilities/7076 - http://www.securityfocus.com/archive/1/212036 - http://www.securityfocus.com/bid/3284
CVE ID: CVE-2001-0991 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in Proxomitron Naoko-4 BetaFour and earlier allows remote attackers to execute arbitrary script on other clients via an incorrect URL containing the malicious script, which is printed back in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/198954 - http://www.securityfocus.com/bid/3087 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6887
CVE ID: CVE-2001-0992 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: shopplus.cgi in ShopPlus shopping cart allows remote attackers to execute arbitrary commands via shell metacharacters in the "file" parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-09/0012.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7077
CVE ID: CVE-2001-0993 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:07.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: sendmsg function in NetBSD 1.3 through 1.5 allows local users to cause a denial of service (kernel trap or panic) via a msghdr structure with a large msg_controllen length. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/netbsd/2001-q3/0102.html - http://www.securityfocus.com/bid/3088 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6908 - http://www.osvdb.org/1910
CVE ID: CVE-2001-0994 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Marconi ForeThought 7.1 allows remote attackers to cause a denial of service by causing both telnet sessions to be locked via unusual input (e.g., from a port scanner), which prevents others from logging into the device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3286 - http://www.securityfocus.com/archive/1/211956 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7082
CVE ID: CVE-2001-0995 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:07.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs. Additional Analyst Notes: - CVE Program Container: References: - http://www.phprojekt.com/ChangeLog - https://exchange.xforce.ibmcloud.com/vulnerabilities/7035 - http://www.securityfocus.com/bid/3239 - http://www.securityfocus.com/archive/1/210349
CVE ID: CVE-2001-0996 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: POP3Lite before 0.2.4 does not properly quote a . (dot) in an email message, which could allow a remote attacker to append arbitrary text to the end of an email message, which could then be interpreted by various mail clients as valid POP server responses or other input that could cause clients to crash or otherwise behave unexpectedly. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7075 - http://www.securityfocus.com/bid/3278 - http://archives.neohapsis.co
exchange.xforce.ibmcloud.com/vulnerabilities/7075 - http://www.securityfocus.com/bid/3278 - http://archives.neohapsis.com/archives/bugtraq/2001-08/0436.html
CVE ID: CVE-2001-0997 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Textor Webmasters Ltd listrec.pl CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the TEMPLATE parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7117 - http://archives.neohapsis.com/archives/bugtraq/2001-09/0096.html
CVE ID: CVE-2001-0998 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:07.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM HACMP 4.4 allows remote attackers to cause a denial of service via a completed TCP connection to HACMP ports (e.g., using a port scan) that does not send additional data, which causes a failure in snmpd. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/search.wss?rs=0&q=IY17630&apar=only - http://www.securityfocus.com/archive/1/217910 - http://www.securityfocus.com/archive/1/216105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7165 - http://www-1.ibm.com/support/search.
.com/archive/1/216105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7165 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY20943&apar=only - http://www.securityfocus.com/bid/3358
CVE ID: CVE-2001-0999 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is text/plain, contrary to the expected behavior that text/plain messages will not run script. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/214453 - http://www.securityfocus.com/bid/3334 - http://www.securityfocus.com/archive/1/213754 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7118
CVE ID: CVE-2001-1000 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7096 - http://www.securityfocus.com/bid/3302 - http://archives.neohapsis.com/archives/bugtraq/2001-09/0036.html
CVE ID: CVE-2001-1002 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:06.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is executed by lpd, which could allow remote attackers to gain privileges by printing a DVI file that contains malicious commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3241 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16509 - http://marc.info/?l=bugtraq&m=99892644616749&w=2 - http://www.redhat.com/support/errata/RHSA-2001-1
nerabilities/16509 - http://marc.info/?l=bugtraq&m=99892644616749&w=2 - http://www.redhat.com/support/errata/RHSA-2001-102.html
CVE ID: CVE-2001-1003 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can read the WEBCT.SVR file to decrypt the passwords and gain additional privileges. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=99859557930285&w=2
CVE ID: CVE-2001-1004 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (CSS) vulnerability in gnut Gnutella client before 0.4.27 allows remote attackers to execute arbitrary script on other clients by sharing a file whose name contains the script tags. Additional Analyst Notes: - CVE Program Container: References: - http://www.gnutelliums.com/linux_unix/gnut/ChangeLog.txt - http://archives.neohapsis.com/archives/bugtraq/2001-08/0415.html
CVE ID: CVE-2001-1005 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a registry key, which allows attackers who have access to the registry key to decrypt the password and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3231 - http://www.securityfocus.com/archive/1/210067
CVE ID: CVE-2001-1006 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/210067 - http://www.securityfocus.com/bid/3232
CVE ID: CVE-2001-1007 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a delay when an incorrect key is entered, which allows attackers to more quickly guess the key via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/210067
CVE ID: CVE-2001-1008 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:37:07.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that has been signed by an expired certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3245 - http://www.iss.net/security_center/static/7048.php - http://archives.neohapsis.com/archives/bugtraq/2001-08/0359.html
CVE ID: CVE-2001-1009 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2001_026_fetchmail_txt.html - http://www.debian.org/security/2001/dsa-071 - http://www.redhat.com/support/errata/RHSA-2001-103.html - http://www.securityfocus.com/bid/3166 - http://a
001/dsa-071 - http://www.redhat.com/support/errata/RHSA-2001-103.html - http://www.securityfocus.com/bid/3166 - http://archives.neohapsis.com/archives/bugtraq/2001-08/0118.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000419 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-072.php3 - http://www.linuxsecurity.com/advisories/other_advisory-1555.html - http://www.securityfocus.com/bid/3164 - http://www.iss.net/security_center/static/6965.php
CVE ID: CVE-2001-1010 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:07.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in pagecount CGI script in Sambar Server before 5.0 beta 5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) attack on the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.sambar.com/security.htm - http://www.securityfocus.com/bid/3092 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6916 - http://archives.neohapsis.com/archives/bugtraq/2001-07/0565.html
CVE ID: CVE-2001-1011 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:07.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: index2.php in Mambo Site Server 3.0.0 through 3.0.5 allows remote attackers to gain Mambo administrator privileges by setting the PHPSESSID parameter and providing the appropriate administrator information in other parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6910 - http://prdownloads.sourceforge.net/mambo/mambov3.0.6.tar.gz - http://archives.neohapsis.com/archives/bugtraq/2001-07/0569.html - http://www.osvdb.org/1911 - http://www.securityfocu