morpheuslord/cve-llm-training huggingface dataset:
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1273.

assistant: The "mxcsr P4" vulnerability in the Linux kernel before 2.2.17-14, when running on certain Intel CPUs, allows local users to cause a denial of service (system halt).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1274.

assistant: Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and possibly gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1275.

assistant: MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administrator password from the mysql.user table and possibly gain privileges via password cracking.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1276.

assistant: ispell before 3.1.20 allows local users to overwrite files of other users via a symlink attack on a temporary file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1277.

assistant: makewhatis in the man package before 1.5i2 allows an attacker in group man to overwrite arbitrary files via a man page whose name contains shell metacharacters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1278.

assistant: Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1279.

assistant: Buffer overflow in print-rx.c of tcpdump 3.x (probably 3.6x) allows remote attackers to cause a denial of service and possibly execute arbitrary code via AFS RPC packets with invalid lengths that trigger an integer signedness error, a different vulnerability than CVE-2000-1026.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1280.

assistant: POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1281.

assistant: Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifying the olduser parameter in the "Change User Information" web form.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1282.

assistant: Ipswitch IMail 7.04 and earlier records the physical path of attachments in an e-mail message header, which could allow remote attackers to obtain potentially sensitive configuration information.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1283.

assistant: The webmail interface for Ipswitch IMail 7.04 and earlier allows remote authenticated users to cause a denial of service (crash) via a mailbox name that contains a large number of . (dot) or other characters to programs such as (1) readmail.cgi or (2) printmail.cgi, possibly due to a buffer overflow that may allow execution of arbitrary code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1284.

assistant: Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, which allows remote attackers to hijack sessions of other users.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1285.

assistant: Directory traversal vulnerability in readmail.cgi for Ipswitch IMail 7.04 and earlier allows remote attackers to access the mailboxes of other users via a .. (dot dot) in the mbx parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1286.

assistant: Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessions by obtaining the URL, e.g. via an HTML email that causes the Referrer to be sent to a URL under the attacker's control.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1287.

assistant: Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1288.

assistant: Windows 2000 and Windows NT allows local users to cause a denial of service (reboot) by executing a command at the command prompt and pressing the F7 and enter keys several times while the command is executing, possibly related to an exception handling error in csrss.exe.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1289.

assistant: Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection packet that begins with several char-255 characters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1290.

assistant: admin.cgi in Active Classifieds Free Edition 1.0, and possibly commercial versions, allows remote attackers to modify the configuration, gain privileges, and execute arbitrary Perl code via the table_width parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1291.

assistant: The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect username or password, which makes it easier to break into the server via brute force password guessing.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1292.

assistant: Sambar Telnet Proxy/Server allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1293.

assistant: Buffer overflow in web server of 3com HomeConnect Cable Modem External with USB (#3CR29223) allows remote attackers to cause a denial of service (crash) via a long HTTP request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1294.

assistant: Buffer overflow in A-V Tronics Inetserv 3.2.1 and earlier allows remote attackers to cause a denial of service (crash) in the Webmail interface via a long username and password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1295.

assistant: Directory traversal vulnerability in Cerberus FTP Server 1.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the CD command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1296.

assistant: More.groupware PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1297.

assistant: PHP remote file inclusion vulnerability in Actionpoll PHP script before 1.1.2 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1298.

assistant: Webodex PHP script 1.0 and earlier allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1299.

assistant: Zorbat Zorbstats PHP script before 0.9 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1300.

assistant: Directory traversal vulnerability in Dynu FTP server 1.05 and earlier allows remote attackers to read arbitrary files via a .. in the CD (CWD) command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1301.

assistant: rcs2log, as used in Emacs 20.4, xemacs 21.1.10 and other versions before 21.4, and possibly other packages, allows local users to modify files of other users via a symlink attack on a temporary file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1302.

assistant: The change password option in the Windows Security interface for Windows 2000 allows attackers to use the option to attempt to change passwords of other users on other systems or identify valid accounts by monitoring error messages, possibly due to a problem in the NetuserChangePassword function.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1303.

assistant: The default configuration of SecuRemote for Check Point Firewall-1 allows remote attackers to obtain sensitive configuration information for the protected network without authentication.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1304.

assistant: Buffer overflow in SHOUTcast Server 1.8.2 allows remote attackers to cause a denial of service (crash) via several HTTP requests with a long (1) user-agent or (2) host HTTP header.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1305.

assistant: ICQ 2001a Alpha and earlier allows remote attackers to automatically add arbitrary UINs to an ICQ user's contact list via a URL to a web page with a Content-Type of application/x-icq, which is processed by Internet Explorer.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1306.

assistant: iPlanet Directory Server 4.1.4 and earlier (LDAP) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid BER length of length fields, as demonstrated by the PROTOS LDAPv3 test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1307.

assistant: Buffer overflows in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1308.

assistant: Format string vulnerabilities in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1309.

assistant: Buffer overflows in IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1310.

assistant: IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via invalid encodings for the L field of a BER encoding, as demonstrated by the PROTOS LDAPv3 test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1311.

assistant: Buffer overflows in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1312.

assistant: Format string vulnerabilities in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1313.

assistant: Lotus Domino R5 before R5.0.7a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via miscellaneous packets with semi-valid BER encodings, as demonstrated by the PROTOS LDAPv3 test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1314.

assistant: Buffer overflows in Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1315.

assistant: Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed BER encodings, as demonstrated by the PROTOS LDAPv3 test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1316.

assistant: Buffer overflows in Teamware Office Enterprise Directory allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1317.

assistant: Teamware Office Enterprise Directory allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via invalid encodings for certain BER object types, as demonstrated by the PROTOS LDAPv3 test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1318.

assistant: Vulnerabilities in Qualcomm Eudora WorldMail Server may allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1319.

assistant: Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service (hang) via exceptional BER encodings for the LDAP filter type field, as demonstrated by the PROTOS LDAPv3 test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1320.

assistant: Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via exceptional BER encodings (possibly buffer overflows), as demonstrated by the PROTOS LDAPv3 test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1321.

assistant: Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid encodings of BER OBJECT-IDENTIFIER values, as demonstrated by the PROTOS LDAPv3 test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1322.

assistant: xinetd 2.1.8 and earlier runs with a default umask of 0, which could allow local users to read or modify files that are created by an application that runs under xinetd but does not set its own safe umask.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1323.

assistant: Buffer overflow in MIT Kerberos 5 (krb5) 1.2.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via base-64 encoded data, which is not properly handled when the radix_encode function processes file glob output from the ftpglob function.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1324.

assistant: cvmlogin and statfile in Paul Jarc idtools before 2001.06.27 do not properly check the return value of a call to the pathexec_env function, which could cause the setstate utility to setuid to the UID environment variable and allow local users to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1325.

assistant: Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host (WSH).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1326.

assistant: Eudora 5.1 allows remote attackers to execute arbitrary code when the "Use Microsoft Viewer" option is enabled and the "allow executables in HTML content" option is disabled, via an HTML email with a form that is activated from an image that the attacker spoofs as a link, which causes the user to execute the form and access embedded attachments.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1327.

assistant: pmake before 2.1.35 in Turbolinux 6.05 and earlier is installed with setuid root privileges, which could allow local users to gain privileges by exploiting vulnerabilities in pmake or programs that are used by pmake.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1328.

assistant: Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1329.

assistant: Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1330.

assistant: Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1331.

assistant: mandb in the man-db package before 2.3.16-3 allows local users to overwrite arbitrary files via the command line options (1) -u or (2) -c, which do not drop privileges and follow symlinks.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1332.

assistant: Buffer overflows in Linux CUPS before 1.1.6 may allow remote attackers to execute arbitrary code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1333.

assistant: Linux CUPS before 1.1.6 does not securely handle temporary files, possibly due to a symlink vulnerability that could allow local users to overwrite files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1334.

assistant: Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrary files by creating a block and specifying the target file as the source URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1335.

assistant: Directory traversal vulnerability in CesarFTP 0.98b and earlier allows remote authenticated users (such as anonymous) to read arbitrary files via a GET with a filename that contains a ...%5c (modified dot dot).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1336.

assistant: CesarFTP 0.98b and earlier stores usernames and passwords in plaintext in the settings.ini file, which allows attackers to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1337.

assistant: Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to cause a denial of service via a long HTTP request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1338.

assistant: Beck IPC GmbH IPC@CHIP TelnetD server generates different responses when given valid and invalid login names, which allows remote attackers to determine accounts on the system.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1339.

assistant: Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct brute force password guessing attacks.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1340.

assistant: Beck GmbH IPC@Chip TelnetD service supports only one connection and does not disconnect a user who does not complete the login process, which allows remote attackers to lock out the administrator account by connecting to the service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1341.

assistant: The Beck GmbH IPC@Chip embedded web server installs the chipcfg.cgi program by default, which allows remote attackers to obtain sensitive network information via a request to the program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1342.

assistant: Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI that contains a large number of / (slash) or other characters, which causes certain functions to dereference a null pointer.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1343.

assistant: ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacters in the kill parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1344.

assistant: WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is made easier by (1) inserting a null character or (2) .. (dot dot).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1345.

assistant: bctool in Jetico BestCrypt 0.7 and earlier trusts the user-supplied PATH to find and execute an fsck utility program, which allows local users to gain privileges by modifying the PATH to point to a Trojan horse program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1346.

assistant: Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files via a symlink attack on the temporary files (1) asagent.tmp or (2) inetd.tmp.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1347.

assistant: Windows 2000 allows local users to cause a denial of service and possibly gain privileges by setting a hardware breakpoint that is handled using global debug registers, which could cause other processes to terminate due to an exception, and allow hijacking of resources such as named pipes.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1348.

assistant: TWIG 2.6.2 and earlier allows remote attackers to perform unauthorized database operations via a SQL injection attack on the id parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1349.

assistant: Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1350.

assistant: Cross-site scripting vulnerability in namazu.cgi for Namazu 2.0.7 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the lang parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1351.

assistant: Cross-site scripting vulnerability in Namazu 2.0.8 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the index file name that is displayed when displaying hit numbers.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1352.

assistant: Cross-site scripting vulnerability in Namazu 2.0.9 and earlier allows remote attackers to execute arbitrary Javascript as other web users via an error message that is returned when an invalid index file is specified in the idxname parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1353.

assistant: ghostscript before 6.51 allows local users to read and write arbitrary files as the 'lp' user via the file operator, even with -dSAFER enabled.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1354.

assistant: NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1355.

assistant: Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to (1) the -del command or (2) the -lookup command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1356.

assistant: NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, which allows remote attackers to conduct brute force password guessing attacks against the administrator account on port 7021.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1357.

assistant: Multiple vulnerabilities in phpMyChat before 0.14.5 exist in (1) input.php3, (2) handle_inputH.php3, or (3) index.lib.php3 with unknown consequences, possibly related to user spoofing or improperly initialized variables.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1358.

assistant: Vulnerabilities in phpMyChat before 0.14.4 allow local and possibly remote attackers to gain privileges by specifying an alternate library file in the L (localization) parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1359.

assistant: Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1360.

assistant: Vulnerability in Scanner Access Now Easy (SANE) before 1.0.5, related to pnm and saned.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1361.

assistant: Vulnerability in The Web Information Gateway (TWIG) 2.7.1, possibly related to incorrect security rights and/or the generation of mailto links.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1362.

assistant: Vulnerability in the server for nPULSE before 0.53p4.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1363.

assistant: Vulnerability in phpWebSite before 0.7.9 related to running multiple instances in the same domain, which may allow attackers to gain administrative privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1364.

assistant: Vulnerability in autodns.pl for AutoDNS before 0.0.4 related to domain names that are not fully qualified.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1365.

assistant: Vulnerability in IntraGnat before 1.4.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1366.

assistant: netscript before 1.6.3 parses dynamic variables, which could allow remote attackers to alter program behavior or obtain sensitive information.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1367.

assistant: The checkAccess function in PHPSlice 0.1.4, and all other versions between 0.1.1 and 0.1.6, does not properly verify the administrative access level, which could allow remote attackers to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1368.

assistant: Vulnerability in iPlanet Web Server 4 included in Virtualvault Operating System (VVOS) 4.0 running HP-UX 11.04 could allow attackers to corrupt data.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1369.

assistant: Leon J Breedt pam-pgsql before 0.5.2 allows remote attackers to execute arbitrary SQL code and bypass authentication or modify user account records by injecting SQL statements into user or password fields.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1370.

assistant: prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1371.

assistant: The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by default via urn:soap-service-manager and urn:soap-provider-manager.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1372.

assistant: Oracle 9i Application Server 1.0.2 allows remote attackers to obtain the physical path of a file under the server root via a request for a non-existent .JSP file, which leaks the pathname in an error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1373.

assistant: MailSafe in Zone Labs ZoneAlarm 2.6 and earlier and ZoneAlarm Pro 2.6 and 2.4 does not block prohibited file types with long file names, which allows remote attackers to send potentially dangerous attachments.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1374.

assistant: expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Trojan horse library that is accessed by mkpasswd.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1375.

assistant: tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other directories, which could allow local users to execute arbitrary code via a Trojan horse library that is under a user-controlled directory.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1376.

assistant: Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via shared secret data.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1377.

assistant: Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via a Vendor-Length that is less than 2.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1378.

assistant: fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on temporary files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1379.

assistant: The PostgreSQL authentication modules (1) mod_auth_pgsql 0.9.5, and (2) mod_auth_pgsql_sys 0.9.4, allow remote attackers to bypass authentication and execute arbitrary SQL via a SQL injection attack on the user name.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1380.

assistant: OpenSSH before 2.9.9, while using keypairs and multiple keys of different types in the ~/.ssh/authorized_keys2 file, may not properly handle the "from" option associated with a key, which could allow remote attackers to login from unauthorized IP addresses.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1382.

assistant: The "echo simulation" traffic analysis countermeasure in OpenSSH before 2.9.9p2 sends an additional echo packet after the password and carriage return is entered, which could allow remote attackers to determine that the countermeasure is being used.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1383.

assistant: initscript in setserial 2.17-4 and earlier uses predictable temporary file names, which could allow local users to conduct unauthorized operations on files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1384.

assistant: ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1385.

assistant: The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may disable PHP for other virtual hosts, which could cause Apache to serve the source code of PHP scripts.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1386.

assistant: WFTPD 3.00 allows remote attackers to read arbitrary files by uploading a (link) file that ends in a ".lnk." extension, which bypasses WFTPD's check for a ".lnk" extension.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1387.

assistant: iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes iptables to generate different responses than specified by the administrator, possibly leading to an information leak.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1388.

assistant: iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users to generate more or less traffic than intended by the administrator.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1389.

assistant: Multiple vulnerabilities in xinetd 2.3.0 and earlier, and additional variants until 2.3.3, may allow remote attackers to cause a denial of service or execute arbitrary code, primarily via buffer overflows or improper NULL termination.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1390.

assistant: Unknown vulnerability in binfmt_misc in the Linux kernel before 2.2.19, related to user pages.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1391.

assistant: Off-by-one vulnerability in CPIA driver of Linux kernel before 2.2.19 allows users to modify kernel memory.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1392.

assistant: The Linux kernel before 2.2.19 does not have unregister calls for (1) CPUID and (2) MSR drivers, which could cause a DoS (crash) by unloading and reloading the drivers.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1393.

assistant: Unknown vulnerability in classifier code for Linux kernel before 2.2.19 could result in denial of service (hang).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1394.

assistant: Signedness error in (1) getsockopt and (2) setsockopt for Linux kernel before 2.2.19 allows local users to cause a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1395.

assistant: Unknown vulnerability in sockfilter for Linux kernel before 2.2.19 related to "boundary cases," with unknown impact.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1396.

assistant: Unknown vulnerabilities in strnlen_user for Linux kernel before 2.2.19, with unknown impact.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1397.

assistant: The System V (SYS5) shared memory implementation for Linux kernel before 2.2.19 could allow attackers to modify recently freed memory.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1398.

assistant: Masquerading code for Linux kernel before 2.2.19 does not fully check packet lengths in certain cases, which may lead to a vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1399.

assistant: Certain operations in Linux kernel before 2.2.19 on the x86 architecture copy the wrong number of bytes, which might allow attackers to modify memory, aka "User access asm bug on x86."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1400.

assistant: Unknown vulnerabilities in the UDP port allocation for Linux kernel before 2.2.19 could allow local users to cause a denial of service (deadlock).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1401.

assistant: Bugzilla before 2.14 does not properly restrict access to confidential bugs, which could allow Bugzilla users to bypass viewing permissions via modified bug id parameters in (1) process_bug.cgi, (2) show_activity.cgi, (3) showvotes.cgi, (4) showdependencytree.cgi, (5) showdependencygraph.cgi, (6) showattachment.cgi, or (7) describecomponents.cgi.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1402.

assistant: Bugzilla before 2.14 does not properly escape untrusted parameters, which could allow remote attackers to conduct unauthorized activities via cross-site scripting (CSS) and possibly SQL injection attacks on (1) the product or output form variables for reports.cgi, (2) the voteon, bug_id, and user variables for showvotes.cgi, (3) an invalid email address in createaccount.cgi, (4) an invalid ID in showdependencytree.cgi, (5) invalid usernames and other fields in process_bug.cgi, and (6) error messages in buglist.cgi.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1403.

assistant: Bugzilla before 2.14 includes the username and password in URLs, which could allow attackers to gain privileges by reading the information from the web server logs, or by "shoulder-surfing" and observing the web browser's location bar.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1404.

assistant: Bugzilla before 2.14 stores user passwords in plaintext and sends password requests in an email message, which could allow attackers to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1405.

assistant: Bugzilla before 2.14 does not restrict access to sanitycheck.cgi, which allows local users to cause a denial of service (CPU consumption) via a flood of requests to sanitycheck.cgi.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1406.

assistant: process_bug.cgi in Bugzilla before 2.14 does not set the "groupset" bit when a bug is moved between product groups, which will cause the bug to have the old group's restrictions, which might not be as stringent.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1407.

assistant: Bugzilla before 2.14 allows Bugzilla users to bypass group security checks by marking a bug as the duplicate of a restricted bug, which adds the user to the CC list of the restricted bug and allows the user to view the bug.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1408.

assistant: Directory traversal vulnerability in readmsg.php in WebMail 2.0.1 in Cobalt Qube 3 allows remote attackers to read arbitrary files via a .. (dot dot) in the mailbox parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1409.

assistant: dexconf in XFree86 Xserver 4.1.0-2 creates the /dev/dri directory with insecure permissions (666), which allows local users to replace or create files in the root file system.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1410.

assistant: Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createPopup method, which could allow attackers to simulate a victim's display and conduct unauthorized activities or steal sensitive data via social engineering.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1411.

assistant: Format string vulnerability in gm4 (aka m4) on Mac OS X may allow local users to gain privileges if gm4 is called by setuid programs.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1412.

assistant: nidump on MacOS X before 10.3 allows local users to read the encrypted passwords from the password file by specifying passwd as a command line argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1413.

assistant: Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries (such as FTP server), may allow remote attackers to execute arbitrary code via a long filename argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1414.

assistant: The Basic Security Module (BSM) for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote attackers to hide their activities, possibly when certain BSM audit files are not present under the FTP root.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1415.

assistant: vi.recover in OpenBSD before 3.1 allows local users to remove arbitrary zero-byte files such as device nodes.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1416.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in the log messages in certain Alpha versions of AOL Instant Messenger (AIM) 4.4 allow remote attackers to execute arbitrary web script or HTML via an image in the (1) DATA, (2) STYLE, or (3) BINARY tags.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1417.

assistant: AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application hang or crash) via a buddy icon GIF file whose length and width values are larger than the actual image data.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1418.

assistant: AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application crash) via a malformed WAV file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1419.

assistant: AOL Instant Messenger (AIM) 4.7.2480 and earlier allows remote attackers to cause a denial of service (application crash) via an instant message that contains a large amount of "<!--" HTML comments.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1420.

assistant: AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application crash) via a long filename, possibly caused by a buffer overflow.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1421.

assistant: AOL Instant Messenger (AIM) 4.7 and earlier allows remote attackers to cause a denial of service (application crash) via a large number of different fonts followed by an HTML HR tag.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1422.

assistant: WinVNC 3.3.3 and earlier generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1423.

assistant: Advanced Poll before 1.61, when using a flat file database, allows remote attackers to gain privileges by setting the logged_in parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1424.

assistant: Alcatel Speed Touch ADSL modem running firmware KHDSAA.108, KHDSAA.132, KHDSBA.133, and KHDSAA.134 has a blank default password, which allows remote attackers to gain unauthorized access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1425.

assistant: The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain privileges by directly computing the response based on information that is provided by the device during login.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1426.

assistant: Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allows remote attackers to change firmware versions or the device's configurations.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1427.

assistant: Unknown vulnerability in ColdFusion Server 2.0 through 4.5.1 SP2 allows remote attackers to overwrite templates with zero byte files via unknown attack vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1428.

assistant: The (1) FTP and (2) Telnet services in Beck GmbH IPC@Chip are shipped with a default password, which allows remote attackers to gain unauthorized access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1429.

assistant: Buffer overflow in mcedit in Midnight Commander 4.5.1 allows local users to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted text file.