morpheuslord/cve-llm-training huggingface dataset:
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1112.

assistant: Buffer overflow in EFTP 2.0.7.337 allows remote attackers to execute arbitrary code by uploading a .lnk file containing a large number of characters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1113.

assistant: Buffer overflow in TrollFTPD 1.26 and earlier allows local users to execute arbitrary code by creating a series of deeply nested directories with long names, then running the ls -R (recursive) command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1114.

assistant: book.cgi in NetCode NC Book 0.2b allows remote attackers to execute arbitrary commands via shell metacharacters in the "current" parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1115.

assistant: generate.cgi in SIX-webboard 2.01 and before allows remote attackers to read arbitrary files via a dot dot (..) in the content parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1116.

assistant: Identix BioLogon 2.03 and earlier does not lock secondary displays on a multi-monitor system running Windows 98 or ME, which allows an attacker with physical access to the system to bypass authentication through a secondary display.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1117.

assistant: LinkSys EtherFast BEFSR41 Cable/DSL routers running firmware before 1.39.3 Beta allows a remote attacker to view administration and user passwords by connecting to the router and viewing the HTML source for (1) index.htm and (2) Password.htm.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1118.

assistant: A module in Roxen 2.0 before 2.0.92, and 2.1 before 2.1.264, does not properly decode UTF-8, Mac and ISO-2202 encoded URLs, which could allow a remote attacker to execute arbitrary commands or view arbitrary files via an encoded URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1119.

assistant: cda in xmcd 3.0.2 and 2.6 in SuSE Linux allows local users to overwrite arbitrary files via a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1120.

assistant: Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusion Server templates.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1122.

assistant: Windows NT 4.0 SP 6a allows a local user with write access to winnt/system32 to cause a denial of service (crash in lsass.exe) by running the NT4ALL exploit program in 'SPECIAL' mode.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1123.

assistant: Vulnerability in Network Node Manager (NNM) 6.2 and earlier in HP OpenView allows a local user to execute arbitrary code, possibly via a buffer overflow in a long hostname or object ID.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1124.

assistant: rpcbind in HP-UX 11.00, 11.04 and 11.11 allows remote attackers to cause a denial of service (core dump) via a malformed RPC portmap requests, possibly related to a buffer overflow.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1125.

assistant: Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com site.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1126.

assistant: Symantec LiveUpdate 1.4 through 1.6, and possibly later versions, allows remote attackers to cause a denial of service (flood) via DNS spoofing of the update.symantec.com site.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1127.

assistant: Buffer overflow in Progress database 8.3D and 9.1C could allow a local user to execute arbitrary code via (1) _proapsv, (2) _mprosrv, (3) _mprshut, (4) orarx, (5) sqlcpp, (6) _probrkr, (7) _sqlschema and (8) _sqldump.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1128.

assistant: Buffer overflow in Progress database 8.3D and 9.1C allows local users to execute arbitrary code via long entries in files that are specified by the (1) PROMSGS or (2) PROTERMCAP environment variables.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1129.

assistant: Format string vulnerabilities in (1) _probuild, (2) _dbutil, (3) _mprosrv, (4) _mprshut, (5) _proapsv, (6) _progres, (7) _proutil, (8) _rfutil and (9) prolib in Progress database 9.1C allows a local user to execute arbitrary code via format string specifiers in the file used by the PROMSGS environment variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1130.

assistant: Sdbsearch.cgi in SuSE Linux 6.0-7.2 could allow remote attackers to execute arbitrary commands by uploading a keylist.txt file that contains filenames with shell metacharacters, then causing the file to be searched using a .. in the HTTP referer (from the HTTP_REFERER variable) to point to the directory that contains the keylist.txt file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1131.

assistant: Directory traversal vulnerability in WhitSoft Development SlimFTPd 2.2 allows an attacker to read arbitrary files and directories via a ... (modified dot dot) in the CD command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1132.

assistant: Mailman 2.0.x before 2.0.6 allows remote attackers to gain access to list administrative pages when there is an empty site or list password, which is not properly handled during the call to the crypt function during authentication.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1133.

assistant: Vulnerability in a system call in BSDI 3.0 and 3.1 allows local users to cause a denial of service (reboot) in the kernel via a particular sequence of instructions.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1134.

assistant: Xerox DocuPrint N40 Printers allow remote attackers to cause a denial of service via malformed data, such as that produced by the Code Red worm.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1135.

assistant: ZyXEL Prestige 642R and 642R-I routers do not filter the routers' Telnet and FTP ports on the external WAN interface from inside access, allowing someone on an internal computer to reconfigure the router, if the password is known.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1136.

assistant: The libsecurity library in HP-UX 11.04 (VVOS) allows attackers to cause a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1137.

assistant: D-Link DI-704 Internet Gateway firmware earlier than V2.56b6 allows remote attackers to cause a denial of service (reboot) via malformed IP datagram fragments.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1138.

assistant: Directory traversal vulnerability in r.pl (aka r.cgi) of Randy Parker Power Up HTML 0.8033beta allows remote attackers to read arbitrary files and possibly execute arbitrary code via a .. (dot dot) in the FILE parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1139.

assistant: Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. (dot dot) in the server request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1140.

assistant: BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by appending a %00 (null byte) to the request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1141.

assistant: The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state information, which could be used by attackers to predict future pseudo-random numbers.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1142.

assistant: ArGoSoft FTP Server 1.2.2.2 uses weak encryption for user passwords, which allows an attacker with access to the password file to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1143.

assistant: IBM DB2 7.0 allows a remote attacker to cause a denial of service (crash) via a single byte to (1) db2ccs.exe on port 6790, or (2) db2jds.exe on port 6789.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1144.

assistant: Directory traversal vulnerability in McAfee ASaP VirusScan agent 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1145.

assistant: fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than intended when the directory above the current directory is moved, which could cause scripts to perform dangerous actions on the wrong directories.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1146.

assistant: AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 creates temporary files with predictable names, which allows local users to modify files via a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1147.

assistant: The PAM implementation in /bin/login of the util-linux package before 2.11 causes a password entry to be rewritten across multiple PAM calls, which could provide the credentials of one user to a different user, when used in certain PAM modules such as pam_limits.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1148.

assistant: Multiple buffer overflows in programs used by scoadmin and sysadmsh in SCO OpenServer 5.0.6a and earlier allow local users to gain privileges via a long TERM environment variable to (1) atcronsh, (2) auditsh, (3) authsh, (4) backupsh, (5) lpsh, (6) sysadm.menu, or (7) termsh.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1149.

assistant: Panda Antivirus Platinum before 6.23.00 allows a remore attacker to cause a denial of service (crash) when a user selects an action for a malformed UPX packed executable file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1150.

assistant: Vulnerability in cgiWebupdate.exe in Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.5.2 through 3.5.4 allows remote attackers to read arbitrary files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1151.

assistant: Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, which contains a weakly encrypted password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1152.

assistant: Baltimore Technologies WEBsweeper 4.02, when used to manage URL blacklists, allows remote attackers to bypass blacklist restrictions and connect to unauthorized web servers by modifying the requested URL, including (1) a // (double slash), (2) a /SUBDIR/.. where the desired file is in the parentdir, (3) a /./, or (4) URL-encoded characters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1153.

assistant: lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a long command line argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1154.

assistant: Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service (hang) using PHP IMAP clients.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1155.

assistant: TCP Wrappers (tcp_wrappers) in FreeBSD 4.1.1 through 4.3 with the PARANOID ACL option enabled does not properly check the result of a reverse DNS lookup, which could allow remote attackers to bypass intended access restrictions via DNS spoofing.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1156.

assistant: TYPSoft FTP 0.95 allows remote attackers to cause a denial of service (CPU consumption) via a "../../*" argument to (1) STOR or (2) RETR.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1157.

assistant: Baltimore Technologies WEBsweeper 4.0 and 4.02 does not properly filter Javascript from HTML pages, which could allow remote attackers to bypass the filtering via (1) an extra leading < and one or more characters before the SCRIPT tag, or (2) tags using Unicode.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1158.

assistant: Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to bypass intended restrictions with forged RDP (internal protocol) headers to UDP port 259 of arbitrary hosts.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1159.

assistant: load_prefs.php and supporting include files in SquirrelMail 1.0.4 and earlier do not properly initialize certain PHP variables, which allows remote attackers to (1) view sensitive files via the config_php and data_dir options, and (2) execute arbitrary code by using options_order.php to upload a message that could be interpreted as PHP.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1160.

assistant: udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the category_file field.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1161.

assistant: Cross-site scripting (CSS) vulnerability in Lotus Domino 5.0.6 allows remote attackers to execute script on other web clients via a URL that ends in Javascript, which generates an error message that does not quote the resulting script.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1162.

assistant: Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files via a .. in a NETBIOS name, which is used as the name for a .log file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1163.

assistant: Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT argument to port 6500.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1164.

assistant: Buffer overflow in uucp utilities in UnixWare 7 allows local users to execute arbitrary code via long command line arguments to (1) uucp, (2) uux, (3) bnuconvert, (4) uucico, (5) uuxcmd, or (6) uuxqt.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1165.

assistant: Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting the information, e.g., with the Disengage tool.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1166.

assistant: linprocfs on FreeBSD 4.3 and earlier does not properly restrict access to kernel memory, which allows one process with debugging rights on a privileged process to read restricted memory from that process.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1168.

assistant: Directory traversal vulnerability in index.php in PhpMyExplorer before 1.2.1 allows remote attackers to read arbitrary files via a ..%2F (modified dot dot) in the chemin parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1169.

assistant: keyinit in S/Key does not require authentication to initialize a one-time password sequence, which allows an attacker who has gained privileges to a user account to create new one-time passwords for use in other activities that may use S/Key authentication, such as sudo.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1170.

assistant: AmTote International homebet program stores the homebet.log file in the homebet/ virtual directory, which allows remote attackers to steal account and PIN numbers.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1171.

assistant: Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, which could allow local users to gain privileges or modify the firewall policy.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1172.

assistant: OmniSecure HTTProtect 1.1.1 allows a superuser without omnish privileges to modify a protected file by creating a symbolic link to that file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1173.

assistant: Vulnerability in MasqMail before 0.1.15 allows local users to gain privileges via piped aliases.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1174.

assistant: Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1175.

assistant: vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1176.

assistant: Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1177.

assistant: ml85p in Samsung ML-85G GDI printer driver before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1178.

assistant: Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1179.

assistant: xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1180.

assistant: FreeBSD 4.3 does not properly clear shared signal handlers when executing a process, which allows local users to gain privileges by calling rfork with a shared signal handler, having the child process execute a setuid program, and sending a signal to the child.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1181.

assistant: Dynamically Loadable Kernel Module (dlkm) static kernel symbol table in HP-UX 11.11 is not properly configured, which allows local users to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1182.

assistant: Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1183.

assistant: PPTP implementation in Cisco IOS 12.1 and 12.2 allows remote attackers to cause a denial of service (crash) via a malformed packet.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1184.

assistant: wrshdsp.exe in Denicomp Winsock RSHD/NT 2.21.00 and earlier allows remote attackers to cause a denial of service (CPU consumption) via (1) in 2.20.00 and earlier, an invalid port number such as a negative number, which causes a connection attempt to that port and all ports below 1024, and (2) in 2.21.00, a port number of 1024.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1185.

assistant: Some AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow a local user to overwrite memory of the new process and gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1186.

assistant: Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than the size of the request, which prevents IIS from timing out the connection.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1187.

assistant: csvform.pl 0.1 allows remote attackers to execute arbitrary commands via metacharacters in the file parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1188.

assistant: mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote servers by modifying the sendto, email, server, subject, and resulturl hidden form fields.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1189.

assistant: IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1190.

assistant: The default PAM files included with passwd in Mandrake Linux 8.1 do not support MD5 passwords, which could result in a lower level of password security than intended.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1191.

assistant: WebSeal in IBM Tivoli SecureWay Policy Director 3.8 allows remote attackers to cause a denial of service (crash) via a URL that ends in %2e.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1192.

assistant: Citrix Independent Computing Architecture (ICA) Client for Windows 6.1 allows remote malicious web sites to execute arbitrary code via a .ICA file, which is downloaded and automatically executed by the client.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1193.

assistant: Directory traversal vulnerability in EFTP 2.0.8.346 allows local users to read directories via a ... (modified dot dot) in the CWD command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1194.

assistant: Zyxel Prestige 681 and 1600 SDSL Routers allow remote attackers to cause a denial of service via malformed packets with (1) an IP length less than actual packet size, or (2) fragmented packets whose size exceeds 64 kilobytes after reassembly.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1195.

assistant: Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, which allows remote attackers to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1196.

assistant: Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' (dot dot) in the argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1197.

assistant: klprfax_filter in KDE2 KDEUtils allows local users to overwrite arbitrary files via a symlink attack on the klprfax.filter temporary file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1198.

assistant: RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by specifying the target file in the -L option.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1199.

assistant: Cross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g, when debug mode is enabled, allows remote attackers to execute Javascript on other clients via the cart_id parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1200.

assistant: Microsoft Windows XP allows local users to bypass a locked screen and run certain programs that are associated with Hot Keys.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1201.

assistant: Buffer overflow in wmcube-gdk for WMCube/GDK 0.98 allows local users to execute arbitrary code via long lines in the object description file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1202.

assistant: Cross-site scripting vulnerability in DeleGate 7.7.0 and 7.7.1 does not quote scripting commands within a "403 Forbidden" error page, which allows remote attackers to execute arbitrary Javascript on other clients via a URL that generates an error.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1203.

assistant: Format string vulnerability in gpm-root in gpm 1.17.8 through 1.17.18 allows local users to gain root privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1204.

assistant: Directory traversal vulnerability in phprocketaddin in Total PC Solutions PHP Rocket Add-in for FrontPage 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1205.

assistant: Directory traversal vulnerability in lastlines.cgi for Last Lines 2.0 allows remote attackers to read arbitrary files via '..' sequences in the $error_log variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1206.

assistant: Matrix CGI vault Last Lines 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the $error_log variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1207.

assistant: Buffer overflows in DayDream BBS 2.9 through 2.13 allow remote attackers to possibly execute arbitrary code via the control codes (1) ~#MC, (2) ~#TF, or (3) ~#RA.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1208.

assistant: Format string vulnerability in DayDream BBS allows remote attackers to execute arbitrary code via format string specifiers in a file containing a ~#RA control code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1209.

assistant: Directory traversal vulnerability in zml.cgi allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1210.

assistant: Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must ship without SNMP access restrictions, which can allow remote attackers to read and write information to the MIB using arbitrary community strings.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1211.

assistant: Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same server via the (1) aliasadmin or (2) listadm1 CGI programs, which do not properly verify that an administrator is the administrator for the target domain.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1212.

assistant: Cross-site scripting vulnerability in catgy.cgi for Aktivate 1.03 allows remote attackers to execute arbitrary Javascript via the desc parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1213.

assistant: The default configuration of DataWizard FtpXQ 2.0 and 2.1 includes a default username and password, which allows remote attackers to read and write arbitrary files in the root folder.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1214.

assistant: manual.php in Marcus S. Xenakis Unix Manual 1.0 allows remote attackers to execute arbitrary code via a URL that contains shell metacharacters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1215.

assistant: Format string vulnerability in PFinger 0.7.5 through 0.7.7 allows remote attackers to execute arbitrary code via format string specifiers in a .plan file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1216.

assistant: Buffer overflow in PL/SQL Apache module in Oracle 9i Application Server allows remote attackers to execute arbitrary code via a long request for a help page.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1217.

assistant: Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive information via a double encoded URL with .. (dot dot) sequences.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1218.

assistant: Microsoft Internet Explorer for Unix 5.0SP1 allows local users to possibly cause a denial of service (crash) in CDE or the X server on Solaris 2.6 by rapidly scrolling Chinese characters or maximizing the window.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1219.

assistant: Microsoft Internet Explorer 6.0 and earlier allows malicious website operators to cause a denial of service (client crash) via JavaScript that continually refreshes the window via self.location.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1220.

assistant: D-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point stores the administrative password in plaintext in the default Management Information Base (MIB), which allows remote attackers to gain administrative privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1221.

assistant: D-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point uses a default SNMP community string of 'public' which allows remote attackers to gain sensitive information.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1222.

assistant: Plesk Server Administrator (PSA) 1.0 allows remote attackers to obtain PHP source code via an HTTP request containing the target's IP address and a valid account name for the domain.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1223.

assistant: The web administration server for ELSA Lancom 1100 Office does not require authentication, which allows arbitrary remote attackers to gain administrative privileges by connecting to the server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1224.

assistant: get_input in adrotate.pm for Les VanBrunt AdRotate Pro 2.0 allows remote attackers to modify the database and possibly execute arbitrary commands via a SQL code injection attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1225.

assistant: Hughes Technology Mini SQL 2.0.10 through 2.0.12 allows local users to cause a denial of service by creating a very large array in a table, which causes miniSQL to crash when the table is queried.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1226.

assistant: AdCycle 1.17 and earlier allow remote attackers to modify SQL queries, which are not properly sanitized before being passed to the MySQL database.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1227.

assistant: Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1228.

assistant: Buffer overflows in gzip 1.3x, 1.2.4, and other versions might allow attackers to execute code via a long file name, possibly remotely if gzip is run on an FTP server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1229.

assistant: Buffer overflows in (1) Icecast before 1.3.9 and (2) libshout before 1.0.4 allow remote attackers to cause a denial of service (crash) and execute arbitrary code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1230.

assistant: Buffer overflows in Icecast before 1.3.10 allow remote attackers to cause a denial of service (crash) and execute arbitrary code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1231.

assistant: GroupWise 5.5 and 6 running in live remote or smart caching mode allows remote attackers to read arbitrary users' mailboxes by extracting usernames and passwords from sniffed network traffic, as addressed by the "Padlock" fix.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1232.

assistant: GroupWise WebAccess 5.5 with directory indexing enabled allows a remote attacker to view arbitrary directory contents via an HTTP request with a lowercase "get".
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1233.

assistant: Netware Enterprise Web Server 5.1 running GroupWise WebAccess 5.5 with Novell Directory Services (NDS) enabled allows remote attackers to enumerate user names, group names and other system information by accessing ndsobj.nlm.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1234.

assistant: Bharat Mediratta Gallery PHP script before 1.2.1 allows remote attackers to execute arbitrary code by including files from remote web sites via an HTTP request that modifies the includedir variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1235.

assistant: pSlash PHP script 0.7 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1236.

assistant: myphpPagetool PHP script 0.4.3-1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1237.

assistant: Phormation PHP script 0.9.1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the phormationdir variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1238.

assistant: Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named (1) winlogon.exe, (2) csrss.exe, (3) smss.exe and (4) services.exe via the Process tab which could allow local users to install Trojan horses that cannot be stopped with the Task Manager.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1239.

assistant: PowerNet IX allows remote attackers to cause a denial of service via a port scan.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1240.

assistant: The default configuration of sudo in Engarde Secure Linux 1.0.1 allows any user in the admin group to run certain commands that could be leveraged to gain full root access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1241.

assistant: Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, which allows remote attackers to execute arbitrary commands by directing Un-CGI to a document that begins with "#!"  and the desired program name.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1242.

assistant: Directory traversal vulnerability in Un-CGI 1.9 and earlier allows remote attackers to execute arbitrary code via a .. (dot dot) in an HTML form.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1243.

assistant: Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an ASP program that uses Scripting.FileSystemObject to open a file with an MS-DOS device name, or (2) remotely injecting the device name into ASP programs that internally use Scripting.FileSystemObject.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1244.

assistant: Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1245.

assistant: Opera 5.0 for Linux does not properly handle malformed HTTP headers, which allows remote attackers to cause a denial of service, possibly with a header whose value is the same as a MIME header name.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1246.

assistant: PHP 4.0.5 through 4.1.0 in safe mode does not properly cleanse the 5th parameter to the mail() function, which allows local users and possibly remote attackers to execute arbitrary commands via shell metacharacters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1247.

assistant: PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the web server UID by uploading a PHP script that uses the error_log function to access the files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1248.

assistant: vWebServer 1.2.0 allows remote attackers to view arbitrary ASP scripts via a request for an ASP script that ends with a URL-encoded space character (%20).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1249.

assistant: vWebServer 1.2.0 allows remote attackers to cause a denial of service via a URL that contains MS-DOS device names.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1250.

assistant: vWebServer 1.2.0 allows remote attackers to cause a denial of service (hang) via a small number of long URL requests, possibly due to a buffer overflow.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1251.

assistant: SmallHTTP 1.204 through 3.00 beta 8 allows remote attackers to cause a denial of service via multiple long URL requests.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1252.

assistant: Network Associates PGP Keyserver 7.0 allows remote attackers to bypass authentication and access the administrative web interface via URLs that directly access cgi-bin instead of keyserver/cgi-bin for the programs (1) console, (2) cs, (3) multi_config and (4) directory.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1253.

assistant: Alexis 2.0 and 2.1 in COM2001 InternetPBX stores voicemail passwords in plain text in the com2001.ini file, which could allow local users to make long distance calls as other users.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1254.

assistant: Web Access component for COM2001 Alexis 2.0 and 2.1 in InternetPBX sends username and voice mail passwords in the clear via a Java applet that sends the information to port 8888 of the server, which could allow remote attackers to steal the passwords via sniffing.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1255.

assistant: WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathorized access the MySQL database.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1256.

assistant: kmmodreg in HP-UX 11.11, 11.04 and 11.00 allows local users to create arbitrary world-writeable files via a symlink attack on the (1) /tmp/.kmmodreg_lock and (2) /tmp/kmpath.tmp temporary files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1257.

assistant: Cross-site scripting vulnerability in Horde Internet Messaging Program (IMP) before 2.2.6 and 1.2.6 allows remote attackers to execute arbitrary Javascript embedded in an email.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1258.

assistant: Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1259.

assistant: Avaya Argent Office allows remote attackers to cause a denial of service by sending UDP packets to port 53 with no payload.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1260.

assistant: Avaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote attackers to gain administrator privileges by sniffing and decrypting the sniffing the passwords during a system reboot.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1261.

assistant: Avaya Argent Office 2.1 may allow remote attackers to change hold music by spoofing a legitimate server's response to a TFTP broadcast and providing an alternate HoldMusic file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1262.

assistant: Avaya Argent Office 2.1 compares a user-provided SNMP community string with the correct string only up to the length of the user-provided string, which allows remote attackers to bypass authentication with a 0 length community string.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1263.

assistant: telnet95.exe in Pragma InterAccess 4.0 build 5 allows remote attackers to cause a denial of service (crash) via a large number of characters to port 23, possibly due to a buffer overflow.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1264.

assistant: Vulnerability in mkacct in HP-UX 11.04 running Virtualvault Operating System (VVOS) 4.0 and 4.5 allows attackers to elevate privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1265.

assistant: Directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21 allows remote attackers to conduct unauthorized operations on arbitrary files via a .. (dot dot) attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1266.

assistant: Directory traversal vulnerability in Doug Neal's HTTPD Daemon (DNHTTPD) before 0.4.1 allows remote attackers to view arbitrary files via a .. (dot dot) attack using the dot hex code '%2E'.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1267.

assistant: Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose filenames contain a .. (dot dot).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1268.

assistant: Directory traversal vulnerability in Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) in an extracted filename.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1269.

assistant: Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames in the archive that begin with the '/' (slash) character.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1270.

assistant: Directory traversal vulnerability in the console version of PKZip (pkzipc) 4.00 and earlier allows attackers to overwrite arbitrary files during archive extraction with the -rec (recursive) option via a .. (dot dot) attack on the archived files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1271.

assistant: Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a ..  (dot dot) attack on archived filenames.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1272.

assistant: wmtv 0.6.5 and earlier does not properly drop privileges, which allows local users to execute arbitrary commands via the -e (external command) option.