Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2001-0006 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-12-03T15:43:09.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to modify the permissions to "No Access" and disable Winsock network connectivity to cause a denial of service, aka the "Winsock Mutex" vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://marc.info/?l=bugtraq&m=98075221915234&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-003 - https://exchange.xfor
21915234&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-003 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6006
CVE ID: CVE-2001-0007 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:06:54.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of service via a long URL request to the web administration interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2176 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5908 - http://www.osvdb.org/1707 - http://www.securityfocus.com/archive/1/155149
CVE ID: CVE-2001-0008 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:06:54.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5911 - http://www.securityfocus.com/bid/2192 - http://www.cert.org/advisories/CA-2001-01.html
CVE ID: CVE-2001-0009 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:06:55.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a .. attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/1703 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5899 - http://www.securityfocus.com/archive/1/155124 - http://www.securityfocus.com/archive/1/154537 - http://www.securityfocus.com/bid/2173
CVE ID: CVE-2001-0010 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:06:54.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2302 - http://www.redhat.com/support/errata/RHSA-2001-007.html - http://www.debian.org/security/2001/dsa-026 - http://www.nai.com/research/covert/advisories/047.asp - http://www.cert.org/advisories/CA-2001-02.html
CVE ID: CVE-2001-0011 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:06:55.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-007.html - http://www.nai.com/research/covert/advisories/047.asp - http://www.securityfocus.com/bid/2307 - http://www.cert.org/advisories/CA-2001-02.html
CVE ID: CVE-2001-0012 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:06:54.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-007.html - http://www.debian.org/security/2001/dsa-026 - http://www.nai.com/research/covert/advisories/047.asp - http://www.cert.org/advisories/CA-2001-02.html - http://www.securityfocus.com/bid/2321
CVE ID: CVE-2001-0013 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:06:54.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-007.html - http://www.nai.com/research/covert/advisories/047.asp - http://www.securityfocus.com/bid/2309 - http://www.cert.org/advisories/CA-2001-02.html
CVE ID: CVE-2001-0014 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:06:55.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which allows remote attackers to cause a denial of service, aka the "Invalid RDP Data" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-006 - http://www.securityfocus.com/bid/2326
CVE ID: CVE-2001-0015 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:06:54.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Network Dynamic Data Exchange (DDE) in Windows 2000 allows local users to gain SYSTEM privileges via a "WM_COPYDATA" message to an invisible window that is running with the privileges of the WINLOGON process. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6062 - http://www.securityfocus.com/bid/2341 - http://www.atstake.com/research/advisories/2001/a020501-1.txt - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-007
CVE ID: CVE-2001-0016 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:06:54.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: NTLM Security Support Provider (NTLMSSP) service does not properly check the function number in an LPC request, which could allow local users to gain administrator level access. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-008 - http://razor.bindview.com/publish/advisories/adv_NTLMSSP.html - http://www.securityfocus.com/bid/2348 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6076
CVE ID: CVE-2001-0017 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:06:55.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data packet, aka the "Malformed PPTP Packet Stream" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2368 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6103 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-009
CVE ID: CVE-2001-0018 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:06:54.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows 2000 domain controller in Windows 2000 Server, Advanced Server, or Datacenter Server allows remote attackers to cause a denial of service via a flood of malformed service requests. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6136 - http://online.securityfocus.com/archive/82/148411 - http://www.ciac.org/ciac/bulletins/l-049.shtml - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-011
CVE ID: CVE-2001-0019 State: PUBLISHED Published: 2001-02-02T05:00:00 Last Updated: 2024-08-08T04:06:55.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arrowpoint (aka Cisco Content Services, or CSS) allows local users to cause a denial of service via a long argument to the "show script," "clear script," "show archive," "clear archive," "show log," or "clear log" commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/arrowpoint-cli-filesystem-pub.shtml - http://www.atstake.com/research/advisories/2001/a013101-1.txt
CVE ID: CVE-2001-0020 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:06:54.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Arrowpoint (aka Cisco Content Services, or CSS) allows local unprivileged users to read arbitrary files via a .. (dot dot) attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/arrowpoint-cli-filesystem-pub.shtml - http://www.atstake.com/research/advisories/2001/a013101-1.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/6031 - http://www.securityfocus.com/bid/2331 - http://www.osvdb.org/1757
CVE ID: CVE-2001-0021 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:06:54.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternate_template parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.endymion.com/products/mailman/history.htm - http://www.securityfocus.com/bid/2063 - http://archives.neohapsis.com/archives/bugtraq/2000-12/0057.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5649
CVE ID: CVE-2001-0022 State: PUBLISHED Published: 2001-02-02T05:00:00 Last Updated: 2024-08-08T04:06:55.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the guestbook parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2106 - http://archives.neohapsis.com/archives/bugtraq/2000-12/0168.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5743
CVE ID: CVE-2001-0023 State: PUBLISHED Published: 2001-02-02T05:00:00 Last Updated: 2024-08-08T04:06:54.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-12/0137.html - http://www.securityfocus.com/bid/2101 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5736
CVE ID: CVE-2001-0024 State: PUBLISHED Published: 2001-02-02T05:00:00 Last Updated: 2024-08-08T04:06:54.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: simplestmail.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the MyEmail parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2102 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5739 - http://archives.neohapsis.com/archives/bugtraq/2000-12/0136.html
CVE ID: CVE-2001-0025 State: PUBLISHED Published: 2001-02-02T05:00:00 Last Updated: 2024-08-08T04:06:54.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-12/0143.html - http://www.securityfocus.com/bid/2103 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5741
CVE ID: CVE-2001-0026 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:06:54.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: rp-pppoe PPPoE client allows remote attackers to cause a denial of service via the Clamp MSS option and a TCP packet with a zero-length TCP option. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000357 - http://www.linux-mandrake.com/en/security/MDKSA-2000-084.php3 - http://www.redhat.com/support/errata/RHSA-2000-130.html - http://archives.neohapsis.com/archives/bugtraq/2000-12/0134.html - http://www.securityfocus.com/bid/2098 - https://exchange.xforce
hives.neohapsis.com/archives/bugtraq/2000-12/0134.html - http://www.securityfocus.com/bid/2098 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5727
CVE ID: CVE-2001-0027 State: PUBLISHED Published: 2001-02-02T05:00:00 Last Updated: 2024-08-08T04:06:55.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_sqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, which allows authenticated attackers to gain privileges of other users. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-12/0139.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5737
CVE ID: CVE-2001-0028 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:06:55.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute arbitrary commands via a large number of " (quotation) characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2099 - http://archives.neohapsis.com/archives/freebsd/2000-12/0418.html - http://archives.neohapsis.com/archives/bugtraq/2000-12/0127.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5725
CVE ID: CVE-2001-0029 State: PUBLISHED Published: 2001-02-02T05:00:00 Last Updated: 2024-08-08T04:06:55.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in oops WWW proxy server 1.4.6 (and possibly other versions) allows remote attackers to execute arbitrary commands via a long host or domain name that is obtained from a reverse DNS lookup. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2099 - http://zipper.paco.net/~igor/oops/ChangeLog - https://exchange.xforce.ibmcloud.com/vulnerabilities/6122 - http://archives.neohapsis.com/archives/bugtraq/2000-12/0158.html
CVE ID: CVE-2001-0030 State: PUBLISHED Published: 2001-02-02T05:00:00 Last Updated: 2024-08-08T04:06:54.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: FoolProof 3.9 allows local users to bypass program execution restrictions by downloading the restricted executables from another source and renaming them. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5758 - http://www.securityfocus.com/bid/2089
CVE ID: CVE-2001-0031 State: PUBLISHED Published: 2001-02-02T05:00:00 Last Updated: 2024-08-08T04:06:55.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: BroadVision One-To-One Enterprise allows remote attackers to determine the physical path of server files by requesting a .JSP file name that does not exist. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5661 - http://archives.neohapsis.com/archives/bugtraq/2000-12/0074.html
CVE ID: CVE-2001-0032 State: PUBLISHED Published: 2001-02-02T05:00:00 Last Updated: 2024-08-08T04:06:54.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in ssldump possibly allows remote attackers to cause a denial of service and possibly gain root privileges via malicious format string specifiers in a URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5717 - http://www.securityfocus.com/bid/2096 - http://www.securityfocus.com/archive/1/149917
CVE ID: CVE-2001-0033 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:06:55.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR environmental variable, which allows the user to gain additional privileges. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5738 - http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html
CVE ID: CVE-2001-0034 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:06:54.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: KTH Kerberos IV allows local users to specify an alternate proxy using the krb4_proxy variable, which allows the user to generate false proxy responses and possibly gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5733 - http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html - http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html
CVE ID: CVE-2001-0035 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:06:55.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the kdc_reply_cipher function in KTH Kerberos IV allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long authentication request. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5734 - http://archives.neohapsis.com/archives/bugtraq/2001-01/0511.html - http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html
CVE ID: CVE-2001-0036 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:06:55.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-025.html - http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5754 - http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html
CVE ID: CVE-2001-0037 State: PUBLISHED Published: 2001-02-02T05:00:00 Last Updated: 2024-08-08T04:06:55.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in HomeSeer before 1.4.29 allows remote attackers to read arbitrary files via a URL containing .. (dot dot) specifiers. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-12/0082.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5663 - http://www.keware.com/hsbetachanges.htm - http://www.securityfocus.com/bid/2085
CVE ID: CVE-2001-0038 State: PUBLISHED Published: 2001-02-02T05:00:00 Last Updated: 2024-08-08T04:06:55.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive letter (e.g. C:) in the requested URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2084 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5728 - http://archives.neohapsis.com/archives/bugtraq/2000-12/0078.html
CVE ID: CVE-2001-0039 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:06:55.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP AUTH command by sending a base64-encoded user password whose length is between 80 and 136 bytes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2083 - http://archives.neohapsis.com/archives/bugtraq/2000-12/0071.html - http://www.ipswitch.com/Support/IMail/news.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5674
CVE ID: CVE-2001-0040 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:06:54.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: APC UPS daemon, apcupsd, saves its process ID in a world-writable file, which allows local users to kill an arbitrary process by specifying the target process ID in the apcupsd.pid file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2070 - http://www.linux-mandrake.com/en/security/MDKSA-2000-077.php3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5654 - http://archives.neohapsis.com/archives/bugtraq/2000-12/0066.html
CVE ID: CVE-2001-0041 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:06:54.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Cisco Catalyst 4000, 5000, and 6000 series switches allows remote attackers to cause a denial of service via a series of failed telnet authentication attempts. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/catalyst-memleak-pub.shtml - http://www.securityfocus.com/bid/2072 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5656 - http://www.osvdb.org/801
CVE ID: CVE-2001-0042 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T04:06:55.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP 3.x (PHP3) on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. (dot dot) attack containing "%5c" (encoded backslash) sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/149210 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5659 - http://www.securityfocus.com/bid/2060
CVE ID: CVE-2001-0043 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:06:54.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpGroupWare before 0.9.7 allows remote attackers to execute arbitrary PHP commands by specifying a malicious include file in the phpgw_info parameter of the phpgw.inc.php program. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/1682 - http://archives.neohapsis.com/archives/bugtraq/2000-12/0053.html - http://sourceforge.net/project/shownotes.php?release_id=17604 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5650 - http://www.securityfocus.com/bid/2069
CVE ID: CVE-2001-0044 State: PUBLISHED Published: 2001-02-02T05:00:00 Last Updated: 2024-08-08T04:06:55.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Lexmark MarkVision printer driver programs allows local users to gain privileges via long arguments to the cat_network, cat_paraller, and cat_serial commands. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-12/0064.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5651 - http://www.securityfocus.com/bid/2075
CVE ID: CVE-2001-0045 State: PUBLISHED Published: 2001-02-02T05:00:00 Last Updated: 2024-08-08T04:06:55.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default permissions for the RAS Administration key in Windows NT 4.0 allows local users to execute arbitrary commands by changing the value to point to a malicious DLL, aka one of the "Registry Permissions" vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5671 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-095 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A500 - ht