rainbutterfly/cve_corpus huggingface dataset:
CVE-2001-1292 
Sambar Telnet Proxy/Server allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1293 
Buffer overflow in web server of 3com HomeConnect Cable Modem External with USB (#3CR29223) allows remote attackers to cause a denial of service (crash) via a long HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1294 
Buffer overflow in A-V Tronics Inetserv 3.2.1 and earlier allows remote attackers to cause a denial of service (crash) in the Webmail interface via a long username and password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1295 
Directory traversal vulnerability in Cerberus FTP Server 1.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the CD command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1296 
More.groupware PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2001-1297 
PHP remote file inclusion vulnerability in Actionpoll PHP script before 1.1.2 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1298 
Webodex PHP script 1.0 and earlier allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1299 
Zorbat Zorbstats PHP script before 0.9 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1300 
Directory traversal vulnerability in Dynu FTP server 1.05 and earlier allows remote attackers to read arbitrary files via a .. in the CD (CWD) command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1301 
rcs2log, as used in Emacs 20.4, xemacs 21.1.10 and other versions before 21.4, and possibly other packages, allows local users to modify files of other users via a symlink attack on a temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2001-1302 
The change password option in the Windows Security interface for Windows 2000 allows attackers to use the option to attempt to change passwords of other users on other systems or identify valid accounts by monitoring error messages, possibly due to a problem in the NetuserChangePassword function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2001-1303 
The default configuration of SecuRemote for Check Point Firewall-1 allows remote attackers to obtain sensitive configuration information for the protected network without authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2001-1304 
Buffer overflow in SHOUTcast Server 1.8.2 allows remote attackers to cause a denial of service (crash) via several HTTP requests with a long (1) user-agent or (2) host HTTP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1305 
ICQ 2001a Alpha and earlier allows remote attackers to automatically add arbitrary UINs to an ICQ user's contact list via a URL to a web page with a Content-Type of application/x-icq, which is processed by Internet Explorer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1306 
iPlanet Directory Server 4.1.4 and earlier (LDAP) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid BER length of length fields, as demonstrated by the PROTOS LDAPv3 test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1307 
Buffer overflows in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1308 
Format string vulnerabilities in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1309 
Buffer overflows in IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1310 
IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via invalid encodings for the L field of a BER encoding, as demonstrated by the PROTOS LDAPv3 test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1311 
Buffer overflows in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1312 
Format string vulnerabilities in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1313 
Lotus Domino R5 before R5.0.7a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via miscellaneous packets with semi-valid BER encodings, as demonstrated by the PROTOS LDAPv3 test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1314 
Buffer overflows in Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1315 
Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed BER encodings, as demonstrated by the PROTOS LDAPv3 test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1316 
Buffer overflows in Teamware Office Enterprise Directory allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1317 
Teamware Office Enterprise Directory allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via invalid encodings for certain BER object types, as demonstrated by the PROTOS LDAPv3 test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1318 
Vulnerabilities in Qualcomm Eudora WorldMail Server may allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1319 
Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service (hang) via exceptional BER encodings for the LDAP filter type field, as demonstrated by the PROTOS LDAPv3 test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1320 
Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via exceptional BER encodings (possibly buffer overflows), as demonstrated by the PROTOS LDAPv3 test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1321 
Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid encodings of BER OBJECT-IDENTIFIER values, as demonstrated by the PROTOS LDAPv3 test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1322 
xinetd 2.1.8 and earlier runs with a default umask of 0, which could allow local users to read or modify files that are created by an application that runs under xinetd but does not set its own safe umask.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1323 
Buffer overflow in MIT Kerberos 5 (krb5) 1.2.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via base-64 encoded data, which is not properly handled when the radix_encode function processes file glob output from the ftpglob function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1324 
cvmlogin and statfile in Paul Jarc idtools before 2001.06.27 do not properly check the return value of a call to the pathexec_env function, which could cause the setstate utility to setuid to the UID environment variable and allow local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1325 
Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host (WSH).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1326 
Eudora 5.1 allows remote attackers to execute arbitrary code when the "Use Microsoft Viewer" option is enabled and the "allow executables in HTML content" option is disabled, via an HTML email with a form that is activated from an image that the attacker spoofs as a link, which causes the user to execute the form and access embedded attachments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1327 
pmake before 2.1.35 in Turbolinux 6.05 and earlier is installed with setuid root privileges, which could allow local users to gain privileges by exploiting vulnerabilities in pmake or programs that are used by pmake.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2001-1328 
Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2001-1329 
Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1330 
Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1331 
mandb in the man-db package before 2.3.16-3 allows local users to overwrite arbitrary files via the command line options (1) -u or (2) -c, which do not drop privileges and follow symlinks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1332 
Buffer overflows in Linux CUPS before 1.1.6 may allow remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1333 
Linux CUPS before 1.1.6 does not securely handle temporary files, possibly due to a symlink vulnerability that could allow local users to overwrite files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1334 
Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrary files by creating a block and specifying the target file as the source URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2001-1335 
Directory traversal vulnerability in CesarFTP 0.98b and earlier allows remote authenticated users (such as anonymous) to read arbitrary files via a GET with a filename that contains a ...%5c (modified dot dot).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1336 
CesarFTP 0.98b and earlier stores usernames and passwords in plaintext in the settings.ini file, which allows attackers to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1337 
Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to cause a denial of service via a long HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1338 
Beck IPC GmbH IPC@CHIP TelnetD server generates different responses when given valid and invalid login names, which allows remote attackers to determine accounts on the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1339 
Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct brute force password guessing attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1340 
Beck GmbH IPC@Chip TelnetD service supports only one connection and does not disconnect a user who does not complete the login process, which allows remote attackers to lock out the administrator account by connecting to the service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1341 
The Beck GmbH IPC@Chip embedded web server installs the chipcfg.cgi program by default, which allows remote attackers to obtain sensitive network information via a request to the program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1342 
Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI that contains a large number of / (slash) or other characters, which causes certain functions to dereference a null pointer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1343 
ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacters in the kill parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1344 
WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is made easier by (1) inserting a null character or (2) .. (dot dot).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1345 
bctool in Jetico BestCrypt 0.7 and earlier trusts the user-supplied PATH to find and execute an fsck utility program, which allows local users to gain privileges by modifying the PATH to point to a Trojan horse program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1346 
Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files via a symlink attack on the temporary files (1) asagent.tmp or (2) inetd.tmp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1347 
Windows 2000 allows local users to cause a denial of service and possibly gain privileges by setting a hardware breakpoint that is handled using global debug registers, which could cause other processes to terminate due to an exception, and allow hijacking of resources such as named pipes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2001-1348 
TWIG 2.6.2 and earlier allows remote attackers to perform unauthorized database operations via a SQL injection attack on the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-05-03T04:00:00.000Z
CVE-2001-1349 
Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2001-1350 
Cross-site scripting vulnerability in namazu.cgi for Namazu 2.0.7 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the lang parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2001-1351 
Cross-site scripting vulnerability in Namazu 2.0.8 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the index file name that is displayed when displaying hit numbers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2001-1352 
Cross-site scripting vulnerability in Namazu 2.0.9 and earlier allows remote attackers to execute arbitrary Javascript as other web users via an error message that is returned when an invalid index file is specified in the idxname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2001-1353 
ghostscript before 6.51 allows local users to read and write arbitrary files as the 'lp' user via the file operator, even with -dSAFER enabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-05T04:00:00.000Z
CVE-2001-1354 
NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-11T04:00:00.000Z
CVE-2001-1355 
Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to (1) the -del command or (2) the -lookup command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-11T04:00:00.000Z
CVE-2001-1356 
NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, which allows remote attackers to conduct brute force password guessing attacks against the administrator account on port 7021.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-11T04:00:00.000Z
CVE-2001-1357 
Multiple vulnerabilities in phpMyChat before 0.14.5 exist in (1) input.php3, (2) handle_inputH.php3, or (3) index.lib.php3 with unknown consequences, possibly related to user spoofing or improperly initialized variables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-11T04:00:00.000Z
CVE-2001-1358 
Vulnerabilities in phpMyChat before 0.14.4 allow local and possibly remote attackers to gain privileges by specifying an alternate library file in the L (localization) parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-11T04:00:00.000Z
CVE-2001-1359 
Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2001-1360 
Vulnerability in Scanner Access Now Easy (SANE) before 1.0.5, related to pnm and saned.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-11T04:00:00.000Z
CVE-2001-1361 
Vulnerability in The Web Information Gateway (TWIG) 2.7.1, possibly related to incorrect security rights and/or the generation of mailto links.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-11T04:00:00.000Z
CVE-2001-1362 
Vulnerability in the server for nPULSE before 0.53p4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-11T04:00:00.000Z
CVE-2001-1363 
Vulnerability in phpWebSite before 0.7.9 related to running multiple instances in the same domain, which may allow attackers to gain administrative privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-11T04:00:00.000Z
CVE-2001-1364 
Vulnerability in autodns.pl for AutoDNS before 0.0.4 related to domain names that are not fully qualified.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-11T04:00:00.000Z
CVE-2001-1365 
Vulnerability in IntraGnat before 1.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-11T04:00:00.000Z
CVE-2001-1366 
netscript before 1.6.3 parses dynamic variables, which could allow remote attackers to alter program behavior or obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-11T04:00:00.000Z
CVE-2001-1367 
The checkAccess function in PHPSlice 0.1.4, and all other versions between 0.1.1 and 0.1.6, does not properly verify the administrative access level, which could allow remote attackers to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z