morpheuslord/cve-llm-training huggingface dataset:
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0959.

assistant: Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 creates a hidden share named ARCSERVE$, which allows remote attackers to obtain sensitive information and overwrite critical files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0960.

assistant: Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 stores the backup agent user name and password in cleartext in the aremote.dmp file in the ARCSERVE$ hidden share, which allows local and remote attackers to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0961.

assistant: Buffer overflow in tab expansion capability of the most program allows local or remote attackers to execute arbitrary code via a malformed file that is viewed with most.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0962.

assistant: IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0963.

assistant: Directory traversal vulnerability in SpoonFTP 1.1 allows local and sometimes remote attackers to access files outside of the FTP root via a ... (modified dot dot) in the CD (CWD) command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0964.

assistant: Buffer overflow in client for Half-Life 1.1.0.8 and earlier allows malicious remote servers to execute arbitrary code via a long console command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0965.

assistant: glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument that contains a large number of * (asterisk) characters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0966.

assistant: Directory traversal vulnerability in Nudester 1.10 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the CD (CWD) command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0967.

assistant: Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() function, which makes it easier for an attacker to conduct brute force password guessing.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0968.

assistant: Knox Arkeia server 4.2, and possibly other versions, installs its root user with a null password by default, which allows local and remote users to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0969.

assistant: ipfw in FreeBSD does not properly handle the use of "me" in its rules when point to point interfaces are used, which causes ipfw to allow connections from arbitrary remote hosts.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0970.

assistant: Cross-site scripting vulnerability in TDForum 1.2 CGI script (tdforum12.cgi) allows remote attackers to execute arbitrary script on other clients via a forum message that contains the script.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0971.

assistant: Directory traversal vulnerability in ACI 4d webserver allows remote attackers to read arbitrary files via a .. (dot dot) or drive letter (e.g., C:) in an HTTP request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0972.

assistant: Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain administrative privileges by calculating the value of the admin cookie (UserID 1), i.e. "0888888."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0973.

assistant: BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and extracting a tar file with a symlink into the data-bag space.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0974.

assistant: Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0975.

assistant: Buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0976.

assistant: Vulnerability in HP Process Resource Manager (PRM) C.01.08.2 and earlier, as used by HP-UX Workload Manager (WLM), allows local users to gain root privileges via modified libraries or environment variables.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0977.

assistant: slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0978.

assistant: login in HP-UX 10.26 does not record failed login attempts in /var/adm/btmp, which could allow attackers to conduct brute force password guessing attacks without being detected or observed using the lastb program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0979.

assistant: Buffer overflow in swverify in HP-UX 11.0, and possibly other programs, allows local users to gain privileges via a long command line argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0980.

assistant: docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0981.

assistant: HP CIFS/9000 Server (SAMBA) A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program without specifying the username of the user making the request, which could cause the server to change the password of a different user.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0982.

assistant: Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via encoded .. (dot dot) sequences containing "%2e" strings.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0983.

assistant: UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt the passwords and gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0984.

assistant: Password Safe 1.7(1) leaves cleartext passwords in memory when a user copies the password to the clipboard and minimizes Password Safe with the "Clear the password when minimized" and "Lock password database on minimize and prompt on restore" options enabled, which could allow an attacker with access to the memory (e.g. an administrator) to read the passwords.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0985.

assistant: shop.pl in Hassan Consulting Shopping Cart 1.23 allows remote attackers to execute arbitrary commands via shell metacharacters in the "page" parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0986.

assistant: SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, file attributes, or portions of source code by directly calling sqlqhit.asp with a CiScope parameter set to (1) webinfo, (2) extended_fileinfo, (3) extended_webinfo, or (4) fileinfo.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0987.

assistant: Cross-site scripting vulnerability in CGIWrap before 3.7 allows remote attackers to execute arbitrary Javascript on other web clients by causing the Javascript to be inserted into error messages that are generated by CGIWrap.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0988.

assistant: Arkeia backup server 4.2.8-2 and earlier creates its database files with world-writable permissions, which could allow local users to overwrite the files or obtain sensitive information.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0989.

assistant: Buffer overflows in Pileup before 1.2 allows local users to gain root privileges via (1) long command line arguments, or (2) a long callsign.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0990.

assistant: Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into the libvpopmail.a library, which allows local users to obtain the MySQL username and password by inspecting the vpopmail programs that use the library.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0991.

assistant: Cross-site scripting vulnerability in Proxomitron Naoko-4 BetaFour and earlier allows remote attackers to execute arbitrary script on other clients via an incorrect URL containing the malicious script, which is printed back in an error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0992.

assistant: shopplus.cgi in ShopPlus shopping cart allows remote attackers to execute arbitrary commands via shell metacharacters in the "file" parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0993.

assistant: sendmsg function in NetBSD 1.3 through 1.5 allows local users to cause a denial of service (kernel trap or panic) via a msghdr structure with a large msg_controllen length.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0994.

assistant: Marconi ForeThought 7.1 allows remote attackers to cause a denial of service by causing both telnet sessions to be locked via unusual input (e.g., from a port scanner), which prevents others from logging into the device.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0995.

assistant: PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0996.

assistant: POP3Lite before 0.2.4 does not properly quote a . (dot) in an email message, which could allow a remote attacker to append arbitrary text to the end of an email message, which could then be interpreted by various mail clients as valid POP server responses or other input that could cause clients to crash or otherwise behave unexpectedly.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0997.

assistant: Textor Webmasters Ltd listrec.pl CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the TEMPLATE parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0998.

assistant: IBM HACMP 4.4 allows remote attackers to cause a denial of service via a completed TCP connection to HACMP ports (e.g., using a port scan) that does not send additional data, which causes a failure in snmpd.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0999.

assistant: Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is text/plain, contrary to the expected behavior that text/plain messages will not run script.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1000.

assistant: rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1002.

assistant: The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is executed by lpd, which could allow remote attackers to gain privileges by printing a DVI file that contains malicious commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1003.

assistant: Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can read the WEBCT.SVR file to decrypt the passwords and gain additional privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1004.

assistant: Cross-site scripting (CSS) vulnerability in gnut Gnutella client before 0.4.27 allows remote attackers to execute arbitrary script on other clients by sharing a file whose name contains the script tags.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1005.

assistant: Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a registry key, which allows attackers who have access to the registry key to decrypt the password and gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1006.

assistant: Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different application.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1007.

assistant: Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a delay when an incorrect key is entered, which allows attackers to more quickly guess the key via a brute force attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1008.

assistant: Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that has been signed by an expired certificate.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1009.

assistant: Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1010.

assistant: Directory traversal vulnerability in pagecount CGI script in Sambar Server before 5.0 beta 5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) attack on the page parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1011.

assistant: index2.php in Mambo Site Server 3.0.0 through 3.0.5 allows remote attackers to gain Mambo administrator privileges by setting the PHPSESSID parameter and providing the appropriate administrator information in other parameters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1012.

assistant: Vulnerability in screen before 3.9.10, related to a multi-attach error, allows local users to gain root privileges when there is a subdirectory under /tmp/screens/.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1013.

assistant: Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1014.

assistant: eshop.pl in WebDiscount(e)shop allows remote attackers to execute arbitrary commands via shell metacharacters in the seite parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1015.

assistant: Buffer overflow in Snes9x 1.37, when installed setuid root, allows local users to gain root privileges via a long command line argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1016.

assistant: PGP Corporate Desktop before 7.1, Personal Security before 7.0.3, Freeware before 7.0.3, and E-Business Server before 7.1 does not properly display when invalid userID's are used to sign a message, which could allow an attacker to make the user believe that the document has been signed by a trusted third party by adding a second, invalid user ID to a key which has already been signed by the third party, aka the "PGPsdk Key Validity Vulnerability."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1017.

assistant: rmuser utility in FreeBSD 4.2 and 4.3 creates a copy of the master.passwd file with world-readable permissions while updating the original file, which could allow local users to gain privileges by reading the copied file while rmuser is running, obtain the password hashes, and crack the passwords.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1018.

assistant: Lotus Domino web server 5.08 allows remote attackers to determine the internal IP address of the server when NAT is enabled via a GET request that contains a long sequence of / (slash) characters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1019.

assistant: Directory traversal vulnerability in view_item CGI program in sglMerchant 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTML_FILE parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1020.

assistant: edit_image.php in Vibechild Directory Manager before 0.91 allows remote attackers to execute arbitrary commands via shell metacharacters in the userfile_name parameter, which is sent unfiltered to the PHP passthru function.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1021.

assistant: Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD, (5) RMD, (6) RNFR, (7) RNTO, (8) SIZE, (9) STAT, (10) XMKD, or (11) XRMD.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1022.

assistant: Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and execute arbitrary commands via format string specifiers in the plot command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1023.

assistant: Xcache 2.1 allows remote attackers to determine the absolute path of web server documents by requesting a URL that is not cached by Xcache, which returns the full pathname in the Content-PageName header.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1024.

assistant: login.gas.bat and other CGI scripts in Entrust getAccess allow remote attackers to execute Java programs, and possibly arbitrary commands, by specifying an alternate -classpath argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1025.

assistant: PHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix" variable when calling any scripts that do not already define the prefix variable (e.g., by including mainfile.php), such as article.php.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1026.

assistant: Trend Micro InterScan AppletTrap 2.0 does not properly filter URLs when they are modified in certain ways such as (1) using a double slash (//) instead of a single slash, (2) URL-encoded characters, (3) requesting the IP address instead of the domain name, or (4) using a leading 0 in an octet of an IP address.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1027.

assistant: Buffer overflow in WindowMaker (aka wmaker) 0.64 and earlier allows remote attackers to execute arbitrary code via a long window title.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1028.

assistant: Buffer overflow in ultimate_source function of man 1.5 and earlier allows local users to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1029.

assistant: libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which allows local users to bypass the capabilities checks and read arbitrary files by specifying alternate copyright or welcome files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1030.

assistant: Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1031.

assistant: Directory traversal vulnerability in Meteor FTP 1.0 allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the ls/LIST command, or (2) a ... in the cd/CWD command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1032.

assistant: admin.php in PHP-Nuke 5.2 and earlier, except 5.0RC1, does not check login credentials for upload operations, which allows remote attackers to copy and upload arbitrary files and read the PHP-Nuke configuration file by directly calling admin.php with an upload parameter and specifying the file to copy.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1033.

assistant: Compaq TruCluster 1.5 allows remote attackers to cause a denial of service via a port scan from a system that does not have a DNS PTR record, which causes the cluster to enter a "split-brain" state.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1034.

assistant: Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code via format specifiers in the -h hostname argument for (1) faxrm or (2) faxalter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1035.

assistant: Binary decoding feature of slrn 0.9 and earlier allows remote attackers to execute commands via shell scripts that are inserted into a news post.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1036.

assistant: GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an out-of-range offset, which causes locate to write to arbitrary process memory.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1037.

assistant: Cisco SN 5420 Storage Router 1.1(3) and earlier allows local users to access a developer's shell without a password and execute certain restricted commands without being logged.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1038.

assistant: Cisco SN 5420 Storage Router 1.1(3) and earlier allows remote attackers to cause a denial of service (reboot) via a series of connections to TCP port 8023.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1039.

assistant: The JetAdmin web interface for HP JetDirect does not set a password for the telnet interface when the admin password is changed, which allows remote attackers to gain access to the printer.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1040.

assistant: HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1041.

assistant: oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory identified by the ORACLE_HOME environment variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1042.

assistant: Transsoft Broker 5.9.5.0 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file that points to the target file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1043.

assistant: ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file that points to the target file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1044.

assistant: Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows remote attackers to obtain sensitive information such as MySQL passwords and usernames from the mysql.class file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1045.

assistant: Directory traversal vulnerability in basilix.php3 in Basilix Webmail 1.0.3beta and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the request_id[DUMMY] parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1046.

assistant: Buffer overflow in qpopper (aka qpop or popper) 4.0 through 4.0.2 allows remote attackers to gain privileges via a long username.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1047.

assistant: Race condition in OpenBSD VFS allows local users to cause a denial of service (kernel panic) by (1) creating a pipe in one thread and causing another thread to set one of the file descriptors to NULL via a close, or (2) calling dup2 on a file descriptor in one process, then setting the descriptor to NULL via a close in another process that is created via rfork.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1048.

assistant: AWOL PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1049.

assistant: Phorecast PHP script before 0.40 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1050.

assistant: CCCSoftware CCC PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1051.

assistant: Dark Hart Portal (darkportal) PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1052.

assistant: Empris PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1053.

assistant: AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting SQL code in the $password argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1054.

assistant: PHPAdsNew PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1055.

assistant: The Microsoft Windows network stack allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed ARP request packets with random source IP and MAC addresses, as demonstrated by ARPNuke.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1056.

assistant: IRC DCC helper in the ip_masq_irc IP masquerading module 2.2 allows remote attackers to bypass intended firewall restrictions by causing the target system to send a "DCC SEND" request to a malicious server which listens on port 6667, which may cause the module to believe that the traffic is a valid request and allow the connection to the port specified in the DCC SEND request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1057.

assistant: The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by connecting to port 16286 and not disconnecting, which prevents users from making license requests.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1058.

assistant: The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to bypass access control (specified by the -restrict argument) and steal a license via a client request that includes the name of a host that is allowed to obtain the license.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1059.

assistant: VMWare creates a temporary file vmware-log.USERNAME with insecure permissions, which allows local users to read or modify license information.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1060.

assistant: phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argument in tbl_copy.php, or (2) the strRenameTableOK argument in tbl_rename.php.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1061.

assistant: Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1062.

assistant: Buffer overflow in mana in OpenServer 5.0.6a and earlier allows local users to execute arbitrary code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1063.

assistant: Buffer overflow in uidadmin in Caldera Open Unix 8.0.0 and UnixWare 7 allows local users to gain root privileges via a long -S (scheme) command line argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1064.

assistant: Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to the router on the (1) HTTP or (2) telnet service, which causes the router to become unresponsive and stop forwarding packets.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1065.

assistant: Web-based configuration utility in Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap binds itself to port 80 even when web-based configuration services are disabled, which could leave the router open to attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1066.

assistant: ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users to overwrite arbitrary files via a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1067.

assistant: Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP request with a long Authorization header.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1068.

assistant: qpopper 4.01 with PAM based authentication on Red Hat systems generates different error messages when an invalid username is provided instead of a valid name, which allows remote attackers to determine valid usernames on the system.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1069.

assistant: libCoolType library as used in Adobe Acrobat (acroread) on Linux creates the AdobeFnt.lst file with world-writable permissions, which allows local users to modify the file and possibly modify acroread's behavior.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1070.

assistant: Sage Software MAS 200 allows remote attackers to cause a denial of service by connecting to port 10000 and entering a series of control characters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1071.

assistant: Cisco IOS 12.2 and earlier running Cisco Discovery Protocol (CDP) allows remote attackers to cause a denial of service (memory consumption) via a flood of CDP neighbor announcements.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1072.

assistant: Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters into the requested path, which causes the regular expression in the RewriteRule to fail.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1073.

assistant: Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that generates a server error message, which includes full pathname or internal IP address information in the variables (1) APPL_PHYSICAL_PATH, (2) PATH_TRANSLATED, and (3) LOCAL_ADDR.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1074.

assistant: Webmin 0.84 and earlier does not properly clear the HTTP_AUTHORIZATION environment variable when the web server is restarted, which makes authentication information available to all CGI programs and allows local users to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1075.

assistant: poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass authentication for relaying by causing a "POP login by user" string that includes the attacker's IP address to be injected into the maillog log file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1076.

assistant: Buffer overflow in whodo in Solaris SunOS 5.5.1 through 5.8 allows local users to execute arbitrary code via a long (1) SOR or (2) CFIME environment variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1077.

assistant: Buffer overflow in tt_printf function of rxvt 2.6.2 allows local users to gain privileges via a long (1) -T or (2) -name argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1078.

assistant: Format string vulnerability in flog function of eXtremail 1.1.9 and earlier allows remote attackers to gain root privileges via format specifiers in the SMTP commands (1) HELO, (2) EHLO, (3) MAIL FROM, or (4) RCPT TO, and the POP3 commands (5) USER and (6) other commands that can be executed after POP3 authentication.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1079.

assistant: create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to delete key files and cause a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1080.

assistant: diagrpt in AIX 4.3.x and 5.1 uses the DIAGDATADIR environment variable to find and execute certain programs, which allows local users to gain privileges by modifying the variable to point to a Trojan horse program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1081.

assistant: Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers to cause a denial of service and possibly execute arbitrary code via format specifiers that are injected into log messages.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1082.

assistant: Directory traversal vulnerability in Livingston/Lucent RADIUS before 2.1.va.1 may allow attackers to read arbitrary files via a .. (dot dot) attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1083.

assistant: Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers to cause a denial of service (crash) via a URL that ends in . (dot), / (forward slash), or \ (backward slash).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1084.

assistant: Cross-site scripting vulnerability in Allaire JRun 3.0 and 2.3.3 allows a malicious webmaster to embed Javascript in a request for a .JSP, .shtml, .jsp10, .jrun, or .thtml file that does not exist, which causes the Javascript to be inserted into an error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1085.

assistant: Lmail 2.7 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1086.

assistant: XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1087.

assistant: The default configuration of the config.http.tunnel.allow_ports option on NetCache devices is set to +all, which allows remote attackers to connect to arbitrary ports on remote systems behind the device.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1088.

assistant: Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when the "Reply-To" address is different than the "From" address, which could allow an untrusted remote attacker to spoof legitimate addresses and intercept email from the client that is intended for another user.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1089.

assistant: libnss-pgsql in nss-pgsql 0.9.0 and earlier allows remote attackers to execute arbitrary SQL queries by inserting SQL code into an HTTP request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1090.

assistant: nss_postgresql 0.6.1 and before allows a remote attacker to execute arbitrary SQL queries by inserting SQL code into an HTTP request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1091.

assistant: The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privileges via the RCMD_CMD environment variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1092.

assistant: msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mh_profile file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1093.

assistant: Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute arbitrary code via a long command line argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1094.

assistant: NetOp School 1.5 allows local users to bypass access restrictions on the administration version by logging into the student version, closing the student version, then starting the administration version.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1095.

assistant: Buffer overflow in uuq in AIX 4 could allow local users to execute arbitrary code via a long -r parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1096.

assistant: Buffer overflows in muxatmd in AIX 4 allows an attacker to cause a core dump and possibly execute code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1097.

assistant: Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a flood of UDP packets.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1098.

assistant: Cisco PIX firewall manager (PFM) 4.3(2)g logs the enable password in plaintext in the pfm.log file, which could allow local users to obtain the password by reading the file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1099.

assistant: The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1100.

assistant: sendmessage.cgi in W3Mail 1.0.2, and possibly other CGI programs, allows remote attackers to execute arbitrary commands via shell metacharacters in any field of the 'Compose Message' page.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1101.

assistant: The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows (1) remote authenticated users to overwrite arbitrary files ending in '.log', or (2) local users to overwrite arbitrary files via a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1102.

assistant: Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1103.

assistant: FTP Voyager ActiveX control before 8.0, when it is marked as safe for scripting (the default) or if allowed by the IObjectSafety interface, allows remote attackers to execute arbitrary commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1104.

assistant: SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1105.

assistant: RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attackers to bypass SSL client authentication and gain access to sensitive data by logging in after an initial failure.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1106.

assistant: The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwords, which could allow local users to break all user passwords by cracking the key or modifying a copy of the sambar program to call the decryption procedure.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1107.

assistant: SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain privileges on the server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1108.

assistant: Directory traversal vulnerability in SnapStream PVS 1.2a allows remote attackers to read arbitrary files via a .. (dot dot) attack in the requested URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1109.

assistant: Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory contents via a .. (dot dot) in the (1) LIST, (2) QUOTE SIZE, and (3) QUOTE MDTM commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1110.

assistant: EFTP 2.0.7.337 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1111.

assistant: EFTP 2.0.7.337 stores user passwords in plaintext in the eftp2users.dat file.