Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2001-0368 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:14:07.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in BearShare 2.2.2 and earlier allows a remote attacker to read certain files via a URL containing a series of . characters, a variation of the .. (dot dot) attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/1810 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6481 - http://www.securityfocus.com/archive/1/180644 - http://www.securityfocus.com/bid/2672
CVE ID: CVE-2001-0369 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:14:07.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to obtain root access via a long command line argument (non-existent printer name). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6258 - http://marc.info/?l=bugtraq&m=98511407131984&w=2
CVE ID: CVE-2001-0370 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:14:07.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: fcheck prior to 2.57.59 calls the file signature checking program insecurely, which can allow a local user to run arbitrary commands via a file name that contains shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6256 - http://marc.info/?l=bugtraq&m=98521301510554&w=2
CVE ID: CVE-2001-0371 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:14:07.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the UFS and EXT2FS file systems in FreeBSD 4.2 and earlier, and possibly other operating systems, makes deleted data available to user processes before it is zeroed out, which allows a local user to access otherwise restricted information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6268 - http://www.osvdb.org/5682 - http://archives.neohapsis.com/archives/freebsd/2001-03/0403.html
CVE ID: CVE-2001-0372 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:14:07.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Akopia Interchange 4.5.3 through 4.6.3 installs demo stores with a default group account :backup with no password, which allows a remote attacker to gain administrative access via the demo stores (1) barry, (2) basic, or (3) construct. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2499 - http://archives.neohapsis.com/archives/bugtraq/2001-03/0337.html - http://lists.akopia.com/pipermail/interchange-announce/2001/000009.html - https://exchange.xforce.ibmcloud.com/vulnerabiliti
://lists.akopia.com/pipermail/interchange-announce/2001/000009.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6273
CVE ID: CVE-2001-0373 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:14:07.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the Dr. Watson program in Windows NT and Windows 2000 generates user.dmp crash dump files with world-readable permissions, which could allow a local user to gain access to sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-03/0336.html - http://www.securityfocus.com/bid/2501 - http://www.osvdb.org/5683 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6275
CVE ID: CVE-2001-0374 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:14:07.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP server in Compaq web-enabled management software for (1) Foundation Agents, (2) Survey, (3) Power Manager, (4) Availability Agents, (5) Intelligent Cluster Administrator, and (6) Insight Manager can be used as a generic proxy server, which allows remote attackers to bypass access restrictions via the management port, 2301. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6264 - http://www.compaq.com/products/servers/management/mgtsw-advisory.html - h
nge.xforce.ibmcloud.com/vulnerabilities/6264 - http://www.compaq.com/products/servers/management/mgtsw-advisory.html - http://archives.neohapsis.com/archives/vuln-dev/2001-q1/0779.html
CVE ID: CVE-2001-0375 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T04:21:37.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco PIX Firewall 515 and 520 with 5.1.4 OS running aaa authentication to a TACACS+ server allows remote attackers to cause a denial of service via a large number of authentication requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2551 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6353 - http://marc.info/?l=bugtraq&m=98658271707833&w=2 - http://www.cisco.com/warp/public/707/pixfirewall-authen-flood-pub.shtml
CVE ID: CVE-2001-0376 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:37.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: SonicWALL Tele2 and SOHO firewalls with 6.0.0.0 firmware using IPSEC with IKE pre-shared keys do not allow for the use of full 128 byte IKE pre-shared keys, which is the intended design of the IKE pre-shared key, and only support 48 byte keys. This allows a remote attacker to brute force attack the pre-shared keys with significantly less resources than if the full 128 byte IKE pre-shared keys were used. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-03/0403.
ional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-03/0403.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6304
CVE ID: CVE-2001-0377 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:21:37.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Infradig Inframail prior to 3.98a allows a remote attacker to create a denial of service via a malformed POST request which includes a space followed by a large string. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6297 - http://archives.neohapsis.com/archives/bugtraq/2001-03/0428.html - http://www.osvdb.org/5685
CVE ID: CVE-2001-0378 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:21:37.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensitive information via readline history files. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.8/common/024_readline.patch - http://www.osvdb.org/5680 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6586
CVE ID: CVE-2001-0379 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:21:37.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in the newgrp program included with HP9000 servers running HP-UX 11.11 allows a local attacker to obtain higher access rights. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5681 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6282 - http://archives.neohapsis.com/archives/hp/2001-q1/0101.html - http://www.kb.cert.org/vuls/id/249224
CVE ID: CVE-2001-0380 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:37.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via a default, undocumented community string 'ILMI'. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-03/0364.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5718
CVE ID: CVE-2001-0381 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:37.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenPGP PGP standard allows an attacker to determine the private signature key via a cryptanalytic attack in which the attacker alters the encrypted private key file and captures a single message signed with the signature key. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-03/0252.html - http://archives.neohapsis.com/archives/bugtraq/2001-03/0311.html - http://archives.neohapsis.com/archives/bugtraq/2001-03/0274.html - http://www.osvdb.org/11966 - ftp://
01-03/0311.html - http://archives.neohapsis.com/archives/bugtraq/2001-03/0274.html - http://www.osvdb.org/11966 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-017.0.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/6558 - http://www.redhat.com/support/errata/RHSA-2001-063.html - http://www.securityfocus.com/bid/2673
CVE ID: CVE-2001-0382 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:37.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Computer Associates CCC\Harvest 5.0 for Windows NT/2000 uses weak encryption for passwords, which allows a remote attacker to gain privileges on the application. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/ntbugtraq/2001-q2/0001.html
CVE ID: CVE-2001-0383 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:21:37.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly calling the Change operation, which does not require authentication. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-04/0017.html - http://phpnuke.org/download.php?dcategory=Fixes - http://www.securityfocus.com/bid/2544 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6342
CVE ID: CVE-2001-0384 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:37.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: ppd in Reliant Sinix allows local users to corrupt arbitrary files via a symlink attack in the /tmp/ppd.trace file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2606 - http://www.securityfocus.com/archive/1/176709
CVE ID: CVE-2001-0385 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:37.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/81099 - http://archives.neohapsis.com/archives/bugtraq/2001-04/0281.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6400 - http://freecode.com/projects/embedthis-goahead-webserver/releases/343539 - http://www.securityfocus.com/bid/2607 - http://www.osvdb.org/6664
CVE ID: CVE-2001-0386 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:37.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: AnalogX SimpleServer:WWW 1.08 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/3781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6395 - http://www.securityfocus.com/archive/1/177156 - http://www.securityfocus.com/bid/2608
CVE ID: CVE-2001-0387 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:21:37.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in hfaxd in HylaFAX before 4.1.b2_2 allows local users to gain privileges via the -q command line argument. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6377 - http://archives.neohapsis.com/archives/bugtraq/2001-04/0236.html - http://www.securityfocus.com/bid/2574 - http://www.securityfocus.com/archive/1/175963 - http://www.osvdb.org/5679 - http://archives.neohapsis.com/archives/freebsd/2001-04/0606.html - http://lists.suse.com
3 - http://www.osvdb.org/5679 - http://archives.neohapsis.com/archives/freebsd/2001-04/0606.html - http://lists.suse.com/archives/suse-security-announce/2001-Apr/0005.html - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-041.php3
CVE ID: CVE-2001-0388 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:21:37.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: time server daemon timed allows remote attackers to cause a denial of service via malformed packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2001_007_nkitserv.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6228 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-034.php3 - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:28.timed.asc
CVE ID: CVE-2001-0389 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:37.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro with a NOEXISTINGHTMLBLOCK argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2587 - http://www.securityfocus.com/archive/1/176100
CVE ID: CVE-2001-0390 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:37.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w macro with a long string of %0a characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/176100 - http://www.securityfocus.com/bid/2588
CVE ID: CVE-2001-0391 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:37.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xitami 2.5d4 and earlier allows remote attackers to crash the server via an HTTP request to the /aux directory. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-04/0277.html
CVE ID: CVE-2001-0392 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:37.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Navision Financials Server 2.60 and earlier allows remote attackers to cause a denial of service by sending a null character and a long string to the server port (2407), which causes the server to crash. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=98633100728473&w=2 - http://www.securityfocus.com/bid/2539
CVE ID: CVE-2001-0393 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:37.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: Navision Financials Server 2.0 allows remote attackers to cause a denial of service via a series of connections to the server without providing a username/password combination, which consumes the license limits. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=98637870623514&w=2
CVE ID: CVE-2001-0394 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:21:37.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote manager service in Website Pro 3.0.37 allows remote attackers to cause a denial of service via a series of malformed HTTP requests to the /dyn directory. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-03/0425.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6295 - http://www.osvdb.org/5669
CVE ID: CVE-2001-0395 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:37.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lightwave ConsoleServer 3200 does not disconnect users after unsuccessful login attempts, which could allow remote attackers to conduct brute force password guessing. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-04/0170.html - http://www.securityfocus.com/bid/2578
CVE ID: CVE-2001-0396 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:37.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pre-login mode in the System Administrator interface of Lightwave ConsoleServer 3200 allows remote attackers to obtain sensitive information such as system status, configuration, and users. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-04/0170.html - http://www.securityfocus.com/bid/2578
CVE ID: CVE-2001-0397 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:37.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Silent Runner Collector (SRC) 1.6.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long SMTP HELO command. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-03/0454.html
CVE ID: CVE-2001-0398 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:37.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attachment whose file name contains many spaces, which also causes the BAT! to misrepresent the attachment's type with a different icon. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2530 - http://archives.neohapsis.com/archives/bugtraq/2001-04/0013.html
CVE ID: CVE-2001-0399 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:38.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Caucho Resin 1.3b1 and earlier allows remote attackers to read source code for Javabean files by inserting a .jsp before the WEB-INF specifier in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2533 - http://marc.info/?l=bugtraq&m=98633597813833&w=2
CVE ID: CVE-2001-0400 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:37.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: nph-maillist.pl allows remote attackers to execute arbitrary commands via shell metacharacters ("`") in the email address. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/175506 - http://www.securityfocus.com/bid/2563
CVE ID: CVE-2001-0401 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:37.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6284 - http://www.securityfocus.com/bid/2475 - http://archives.neohapsis.com/archives/bugtraq/2001-03/0394.html
CVE ID: CVE-2001-0402 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:21:38.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers to bypass access restrictions by sending fragmented packets to a restricted port after sending unfragmented packets to an unrestricted port. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/freebsd/2001-04/0338.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6331 - http://marc.info/?l=bugtraq&m=98679734015538&w=2
CVE ID: CVE-2001-0403 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:37.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: /opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6267 - http://archives.neohapsis.com/archives/bugtraq/2001-03/0326.html
CVE ID: CVE-2001-0404 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:37.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in JavaServer Web Dev Kit (JSWDK) 1.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request to the WEB-INF directory. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=98583089425166&w=2
CVE ID: CVE-2001-0405 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:21:37.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: ip_conntrack_ftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command that lists an arbitrary IP address and port number, which is added to the RELATED table and allowed by the firewall. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-084.html - http://archives.neohapsis.com/archives/bugtraq/2001-04/0271.html - http://www.redhat.com/support/errata/RHSA-2001-052.html - http://www.securityf
.com/archives/bugtraq/2001-04/0271.html - http://www.redhat.com/support/errata/RHSA-2001-052.html - http://www.securityfocus.com/bid/2602 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6390 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-071.php3
CVE ID: CVE-2001-0406 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:21:38.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-04/0319.html - http://archives.neohapsis.com/archives/bugtraq/2001-04/0326.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000395 - http://www.caldera.com/support/security/advisories/CSSA-2001-015.0.t
onectiva.com.br/atualizacoes/?id=a&anuncio=000395 - http://www.caldera.com/support/security/advisories/CSSA-2001-015.0.txt - http://archives.neohapsis.com/archives/bugtraq/2001-04/0305.html - http://www.kb.cert.org/vuls/id/670568 - http://www.securityfocus.com/bid/2617 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-040.php3 - http://www.debian.org/security/2001/dsa-048 - http://archives.neohapsis.com/archives/freebsd/2001-04/0608.html