morpheuslord/cve-llm-training huggingface dataset:
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0120.

assistant: useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0121.

assistant: ImageCast Control Center 4.1.0 allows remote attackers to cause a denial of service (resource exhaustion or system crash) via a long string to port 12002.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0122.

assistant: Kernel leak in AfpaCache module of the Fast Response Cache Accelerator (FRCA) component of IBM HTTP Server 1.3.x and Websphere 3.52 allows remote attackers to cause a denial of service via a series of malformed HTTP requests that generate a "bad request" error.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0123.

assistant: Directory traversal vulnerability in eXtropia bbs_forum.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the file parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0124.

assistant: Buffer overflow in exrecover in Solaris 2.6 and earlier possibly allows local users to gain privileges via a long command line argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0125.

assistant: exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0126.

assistant: Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL server to another source via the xml-stylesheet parameter in the xslt stylesheet.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0127.

assistant: Buffer overflow in Olivier Debon Flash plugin (not the Macromedia plugin) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long DefineSound tag.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0128.

assistant: Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0129.

assistant: Buffer overflow in Tinyproxy HTTP proxy 1.3.3 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long connect request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0130.

assistant: Buffer overflow in HTML parser of the Lotus R5 Domino Server before 5.06, and Domino Client before 5.05, allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed font size specifier.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0131.

assistant: htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0132.

assistant: Interscan VirusWall 3.6.x and earlier follows symbolic links when uninstalling the product, which allows local users to overwrite arbitrary files via a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0133.

assistant: The web administration interface for Interscan VirusWall 3.6.x and earlier does not use encryption, which could allow remote attackers to obtain the administrator password to sniff the administrator password via the setpasswd.cgi program or other HTTP GET requests that contain base64 encoded usernames and passwords.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0134.

assistant: Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to execute arbitrary commands via a long user name.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0135.

assistant: The default installation of Ultraboard 2000 2.11 creates the Skins, Database, and Backups directories with world-writeable permissions, which could allow local users to modify sensitive information or possibly insert and execute CGI programs.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0136.

assistant: Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0137.

assistant: Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a skin file named skin.wmz, then referencing that skin in the codebase parameter to an applet tag, aka the Windows Media Player Skins File Download" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0138.

assistant: privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0139.

assistant: inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0140.

assistant: arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0141.

assistant: mgetty 1.1.22 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0142.

assistant: squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0143.

assistant: vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0144.

assistant: CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0145.

assistant: Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a malformed vCard birthday field.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0146.

assistant: IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service (memory allocation error) by repeatedly sending a series of specially formatted URL's.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0147.

assistant: Buffer overflow in Windows 2000 event viewer snap-in allows attackers to execute arbitrary commands via a malformed field that is improperly handled during the detailed view of event records.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0148.

assistant: The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a variant of the "Frame Domain Verification" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0149.

assistant: Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0150.

assistant: Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web site, which could allow remote attackers to execute arbitrary commands if the IE client is using the Telnet client provided in Services for Unix (SFU) 2.0, which creates session transcripts.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0151.

assistant: IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0152.

assistant: The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a file, which allows local users to recover the passwords and read the compressed folders.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0153.

assistant: Buffer overflow in VB-TSQL debugger object (vbsdicli.exe) in Visual Studio 6.0 Enterprise Edition allows remote attackers to execute arbitrary commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0154.

assistant: HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0155.

assistant: Format string vulnerability in VShell SSH gateway 1.0.1 and earlier allows remote attackers to execute arbitrary commands via a user name that contains format string specifiers.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0156.

assistant: VShell SSH gateway 1.0.1 and earlier has a default port forwarding rule of 0.0.0.0/0.0.0.0, which could allow local users to conduct arbitrary port forwarding to other systems.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0157.

assistant: Debugging utility in the backdoor mode of Palm OS 3.5.2 and earlier allows attackers with physical access to a Palm device to bypass access restrictions and obtain passwords, even if the system lockout mechanism is enabled.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0160.

assistant: Lucent/ORiNOCO WaveLAN cards generate predictable Initialization Vector (IV) values for the Wireless Encryption Protocol (WEP) which allows remote attackers to quickly compile information that will let them decrypt messages.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0161.

assistant: Cisco 340-series Aironet access point using firmware 11.01 does not use 6 of the 24 available IV bits for WEP encryption, which makes it easier for remote attackers to mount brute force attacks.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0162.

assistant: WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0163.

assistant: Cisco AP340 base station produces predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0164.

assistant: Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed recipient field.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0165.

assistant: Buffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long "arg0" (process name) argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0166.

assistant: Macromedia Shockwave Flash plugin version 8 and earlier allows remote attackers to cause a denial of service via malformed tag length specifiers in a SWF file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0167.

assistant: Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0168.

assistant: Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0169.

assistant: When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0170.

assistant: glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0171.

assistant: Buffer overflow in SlimServe HTTPd 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long GET request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0172.

assistant: Buffer overflow in ReiserFS 3.5.28 in SuSE Linux allows local users to cause a denial of service and possibly execute arbitrary commands by via a long directory name.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0173.

assistant: Buffer overflow in qDecoder library 5.08 and earlier, as used in CrazyWWWBoard, CrazySearch, and other CGI programs, allows remote attackers to execute arbitrary commands via a long MIME Content-Type header.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0174.

assistant: Buffer overflow in Trend Micro Virus Buster 2001 8.00 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a large "To" address.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0175.

assistant: The caching module in Netscape Fasttrack Server 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by requesting a large number of non-existent URLs.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0176.

assistant: The setuid doroot program in Voyant Sonata 3.x executes arbitrary command line arguments, which allows local users to gain root privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0177.

assistant: WebMaster ConferenceRoom 1.8.1 allows remote attackers to cause a denial of service via a buddy relationship between the IRC server and a server clone.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0178.

assistant: kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0179.

assistant: Allaire JRun 3.0 allows remote attackers to list contents of the WEB-INF directory, and the web.xml file in the WEB-INF directory, via a malformed URL that contains a "."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0180.

assistant: Lars Ellingsen guestserver.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the "email" parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0181.

assistant: Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute arbitrary commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0182.

assistant: FireWall-1 4.1 with a limited-IP license allows remote attackers to cause a denial of service by sending a large number of spoofed IP packets with various source addresses to the inside interface, which floods the console with warning messages and consumes CPU resources.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0183.

assistant: ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, which makes the packet appear to be part of an established connection.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0184.

assistant: eEye Iris 1.01 beta allows remote attackers to cause a denial of service via a malformed packet, which causes Iris to crash when a user views the packet.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0185.

assistant: Netopia R9100 router version 4.6 allows authenticated users to cause a denial of service by using the router's telnet program to connect to the router's IP address, which causes a crash.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0186.

assistant: Directory traversal vulnerability in Free Java Web Server 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0187.

assistant: Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0188.

assistant: GoodTech FTP server 3.0.1.2.1.0 and earlier allows remote attackers to cause a denial of service via a flood of connections to the server, which causes it to crash.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0189.

assistant: Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a .. (dot dot) attack in an HTTP GET request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0190.

assistant: Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by executing cu with a long program name (arg0).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0191.

assistant: gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a buffer overflow, or brute force authentication by using a short cookie length.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0192.

assistant: Buffer overflows in CTRLServer in XMail allows attackers to execute arbitrary commands via the cfgfileget or domaindel functions.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0193.

assistant: Format string vulnerability in man in some Linux distributions allows local users to gain privileges via a malformed -l parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0194.

assistant: Buffer overflow in httpGets function in CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long input line.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0195.

assistant: sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0196.

assistant: inetd ident server in FreeBSD 4.x and earlier does not properly set group permissions, which allows remote attackers to read the first 16 bytes of files that are accessible by the wheel group.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0197.

assistant: Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitrary commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0198.

assistant: Buffer overflow in QuickTime Player plugin 4.1.2 (Japanese) allows remote attackers to execute arbitrary commands via a long HREF parameter in an EMBED tag.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0199.

assistant: Directory traversal vulnerability in SEDUM HTTP Server 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the HTTP GET request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0200.

assistant: HSWeb 2.0 HTTP server allows remote attackers to obtain the physical path of the server via a request to the /cgi/ directory, which will list the path if directory browsing is enabled.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0201.

assistant: The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arbitrary SQL queries via the deletecontact.php program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0202.

assistant: Picserver web server allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTP GET request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0203.

assistant: Watchguard Firebox II firewall allows users with read-only access to gain read-write access, and administrative privileges, by accessing a file that contains hashed passphrases, and using the hashes during authentication.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0204.

assistant: Watchguard Firebox II allows remote attackers to cause a denial of service by establishing multiple connections and sending malformed PPTP packets.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0205.

assistant: Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the requested pathname, a modified .. (dot dot) attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0206.

assistant: Directory traversal vulnerability in Soft Lite ServerWorx 3.00 allows remote attackers to read arbitrary files by inserting a .. (dot dot) or ... into the requested pathname of an HTTP GET request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0207.

assistant: Buffer overflow in bing allows remote attackers to execute arbitrary commands via a long hostname, which is copied to a small buffer after a reverse DNS lookup using the gethostbyaddr function.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0208.

assistant: MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, which allows local users to gain privileges by modifying files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0209.

assistant: Buffer overflow in Shoutcast Distributed Network Audio Server (DNAS) 1.7.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long description.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0210.

assistant: Directory traversal vulnerability in commerce.cgi CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack in the page parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0211.

assistant: Directory traversal vulnerability in WebSPIRS 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the sp.nextform parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0212.

assistant: Directory traversal vulnerability in HIS Auktion 1.62 allows remote attackers to read arbitrary files via a .. (dot dot) in the menue parameter, and possibly execute commands via shell metacharacters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0213.

assistant: Buffer overflow in pi program in PlanetIntra 2.5 allows remote attackers to execute arbitrary commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0214.

assistant: Way-board CGI program allows remote attackers to read arbitrary files by specifying the filename in the db parameter and terminating the filename with a null byte.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0215.

assistant: ROADS search.pl program allows remote attackers to read arbitrary files by specifying the file name in the form parameter and terminating the filename with a null byte.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0216.

assistant: PALS Library System pals-cgi program allows remote attackers to execute arbitrary commands via shell metacharacters in the documentName parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0217.

assistant: Directory traversal vulnerability in PALS Library System pals-cgi program allows remote attackers to read arbitrary files via a .. (dot dot) in the documentName parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0218.

assistant: Format string vulnerability in mars_nwe 0.99.pl19 allows remote attackers to execute arbitrary commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0219.

assistant: Vulnerability in Support Tools Manager (xstm,cstm,stm) in HP-UX 11.11 and earlier allows local users to cause a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0220.

assistant: Buffer overflow in ja-elvis and ko-helvis ports of elvis allow local users to gain root privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0221.

assistant: Buffer overflow in ja-xklock 2.7.1 and earlier allows local users to gain root privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0222.

assistant: webmin 0.84 and earlier allows local users to overwrite and create arbitrary files via a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0223.

assistant: Buffer overflow in wwwwais allows remote attackers to execute arbitrary commands via a long QUERY_STRING (HTTP GET request).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0224.

assistant: Muscat Empower CGI program allows remote attackers to obtain the absolute pathname of the server via an invalid request in the DB parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0225.

assistant: fortran math component in Infobot 0.44.5.3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0226.

assistant: Directory traversal vulnerability in BiblioWeb web server 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) or ... attack in an HTTP GET request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0227.

assistant: Buffer overflow in BiblioWeb web server 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0228.

assistant: Directory traversal vulnerability in GoAhead web server 2.1 and earlier allows remote attackers to read arbitrary files via a .. attack in an HTTP GET request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0229.

assistant: Chili!Soft ASP for Linux before 3.6 does not properly set group privileges when running in inherited mode, which could allow attackers to gain privileges via malicious scripts.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0230.

assistant: Buffer overflow in dc20ctrl before 0.4_1 in FreeBSD, and possibly other operating systems, allows local users to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0231.

assistant: Directory traversal vulnerability in newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via a .. in the "t" parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0232.

assistant: newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via shell metacharacters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0233.

assistant: Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Description field.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0234.

assistant: NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed user_username parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0235.

assistant: Vulnerability in crontab allows local users to read crontab files of other users by replacing the temporary file that is being edited while crontab is running.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0236.

assistant: Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0237.

assistant: Memory leak in Microsoft 2000 domain controller allows remote attackers to cause a denial of service by repeatedly connecting to the Kerberos service and then disconnecting without sending any data.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0238.

assistant: Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0239.

assistant: Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0240.

assistant: Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format (RTF) document that links to a template with the embedded macro.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0241.

assistant: Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0242.

assistant: Buffer overflows in Microsoft Windows Media Player 7 and earlier allow remote attackers to execute arbitrary commands via (1) a long version tag in an .ASX file, or (2) a long banner tag, a variant of the ".ASX Buffer Overrun" vulnerability as discussed in MS:MS00-090.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0243.

assistant: Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename instead of in the Internet Explorer cache, which causes the HTML in those shortcuts to run in the Local Computer Zone instead of the Internet Zone, which allows remote attackers to read certain files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0244.

assistant: Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0245.

assistant: Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the "Malformed Hit-Highlighting" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0246.

assistant: Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain, aka a variant of the "Frame Domain Verification" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0247.

assistant: Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buffer as used in the glob functions glob2 and glob3.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0248.

assistant: Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0249.

assistant: Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generate long strings.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0250.

assistant: The Web Publishing feature in Netscape Enterprise Server 4.x and earlier allows remote attackers to list arbitrary directories under the web server root via the INDEX command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0251.

assistant: The Web Publishing feature in Netscape Enterprise Server 3.x allows remote attackers to cause a denial of service via the REVLOG command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0252.

assistant: iPlanet (formerly Netscape) Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that contains many "/../" (dot dot) sequences.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0253.

assistant: Directory traversal vulnerability in hsx.cgi program in iWeb Hyperseek 2000 allows remote attackers to read arbitrary files and directories via a .. (dot dot) attack in the show parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0254.

assistant: FaSTream FTP++ Server 2.0 allows remote attackers to obtain the real pathname of the server via the "pwd" command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0255.

assistant: FaSTream FTP++ Server 2.0 allows remote attackers to list arbitrary directories by using the "ls" command and including the drive letter name (e.g. C:) in the requested pathname.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0256.

assistant: FaSTream FTP++ Server 2.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long username.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0257.

assistant: Buffer overflow in Easycom/Safecom Print Server Web service, version 404.590 and earlier, allows remote attackers to execute arbitrary commands via (1) a long URL or (2) a long HTTP header field such as "Host:".
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0258.

assistant: The Easycom/Safecom Print Server (firmware 404.590) PrintGuide server allows remote attackers to cause a denial of service via a large number of connections that send null characters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0259.

assistant: ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generated by another user, which the attacker can use to decrypt that user's private key file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0260.

assistant: Buffer overflow in Lotus Domino Mail Server 5.0.5 and earlier allows a remote attacker to crash the server or execute arbitrary code via a long "RCPT TO" command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0261.

assistant: Microsoft Windows 2000 Encrypted File System does not properly destroy backups of files that are encrypted, which allows a local attacker to recover the text of encrypted files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0262.

assistant: Buffer overflow in Netscape SmartDownload 1.3 allows remote attackers (malicious web pages) to execute arbitrary commands via a long URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0263.

assistant: Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows attackers to read file attributes outside of the web root via the (1) SIZE and (2) MDTM commands when the "show relative paths" option is not enabled.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0264.

assistant: Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0265.

assistant: ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0266.

assistant: Vulnerability in Software Distributor SD-UX in HP-UX 11.0 and earlier allows local users to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0267.

assistant: NM debug in HP MPE/iX 6.5 and earlier does not properly handle breakpoints, which allows local users to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0268.

assistant: The i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER_LDT kernel option is enabled, does not validate a call gate target, which allows local users to gain root privileges by creating a segment call gate in the Local Descriptor Table (LDT) with a target that specifies an arbitrary kernel address.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0269.

assistant: pam_ldap authentication module in Solaris 8 allows remote attackers to bypass authentication via a NULL password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0270.

assistant: Marconi ASX-1000 ASX switches allow remote attackers to cause a denial of service in the telnet and web management interfaces via a malformed packet with the SYN-FIN and More Fragments attributes set.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0271.

assistant: mailnews.cgi 1.3 and earlier allows remote attackers to execute arbitrary commands via a user name that contains shell metacharacters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0272.

assistant: Directory traversal vulnerability in sendtemp.pl in W3.org Anaya Web development server allows remote attackers to read arbitrary files via a .. (dot dot) attack in the templ parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0273.

assistant: pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu Privacy Guard (GnuPG), which causes the message to be sent in cleartext.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0274.

assistant: kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0275.

assistant: Moby Netsuite Web Server 1.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0276.

assistant: ext.dll in BadBlue 1.02.07 Personal Edition web server allows remote attackers to determine the physical path of the server by directly calling ext.dll without any arguments, which produces an error message that contains the path.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0277.

assistant: Buffer overflow in ext.dll in BadBlue 1.02.07 Personal Edition allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0278.

assistant: Vulnerability in linkeditor in HP MPE/iX 6.5 and earlier allows local users to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0279.

assistant: Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0280.

assistant: Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0281.

assistant: Format string vulnerability in DbgPrint function, used in debug messages for some Windows NT drivers (possibly when called through DebugMessage), may allow local users to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0282.

assistant: SEDUM 2.1 HTTP server allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0283.

assistant: Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. (dot dot) characters in various commands, including (1) GET, (2) MKDIR, (3) RMDIR, (4) RENAME, or (5) PUT.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0284.

assistant: Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed Authentication header (AH) IPv4 option.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0285.

assistant: Buffer overflow in A1 HTTP server 1.0a allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0286.

assistant: Directory traversal vulnerability in A1 HTTP server 1.0a allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0287.

assistant: VERITAS Cluster Server (VCS) 1.3.0 on Solaris allows local users to cause a denial of service (system panic) via the -L option to the lltstat command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-0288.

assistant: Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.