rainbutterfly/cve_corpus huggingface dataset:
CVE-2001-1138 
Directory traversal vulnerability in r.pl (aka r.cgi) of Randy Parker Power Up HTML 0.8033beta allows remote attackers to read arbitrary files and possibly execute arbitrary code via a .. (dot dot) in the FILE parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1139 
Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. (dot dot) in the server request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1140 
BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by appending a %00 (null byte) to the request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1141 
The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state information, which could be used by attackers to predict future pseudo-random numbers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1142 
ArGoSoft FTP Server 1.2.2.2 uses weak encryption for user passwords, which allows an attacker with access to the password file to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1143 
IBM DB2 7.0 allows a remote attacker to cause a denial of service (crash) via a single byte to (1) db2ccs.exe on port 6790, or (2) db2jds.exe on port 6789.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1144 
Directory traversal vulnerability in McAfee ASaP VirusScan agent 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1145 
fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than intended when the directory above the current directory is moved, which could cause scripts to perform dangerous actions on the wrong directories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2001-1146 
AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 creates temporary files with predictable names, which allows local users to modify files via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1147 
The PAM implementation in /bin/login of the util-linux package before 2.11 causes a password entry to be rewritten across multiple PAM calls, which could provide the credentials of one user to a different user, when used in certain PAM modules such as pam_limits.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1148 
Multiple buffer overflows in programs used by scoadmin and sysadmsh in SCO OpenServer 5.0.6a and earlier allow local users to gain privileges via a long TERM environment variable to (1) atcronsh, (2) auditsh, (3) authsh, (4) backupsh, (5) lpsh, (6) sysadm.menu, or (7) termsh.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1149 
Panda Antivirus Platinum before 6.23.00 allows a remore attacker to cause a denial of service (crash) when a user selects an action for a malformed UPX packed executable file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1150 
Vulnerability in cgiWebupdate.exe in Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.5.2 through 3.5.4 allows remote attackers to read arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1151 
Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, which contains a weakly encrypted password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1152 
Baltimore Technologies WEBsweeper 4.02, when used to manage URL blacklists, allows remote attackers to bypass blacklist restrictions and connect to unauthorized web servers by modifying the requested URL, including (1) a // (double slash), (2) a /SUBDIR/.. where the desired file is in the parentdir, (3) a /./, or (4) URL-encoded characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1153 
lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a long command line argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1154 
Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service (hang) using PHP IMAP clients.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1155 
TCP Wrappers (tcp_wrappers) in FreeBSD 4.1.1 through 4.3 with the PARANOID ACL option enabled does not properly check the result of a reverse DNS lookup, which could allow remote attackers to bypass intended access restrictions via DNS spoofing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1156 
TYPSoft FTP 0.95 allows remote attackers to cause a denial of service (CPU consumption) via a "../../*" argument to (1) STOR or (2) RETR.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1157 
Baltimore Technologies WEBsweeper 4.0 and 4.02 does not properly filter Javascript from HTML pages, which could allow remote attackers to bypass the filtering via (1) an extra leading < and one or more characters before the SCRIPT tag, or (2) tags using Unicode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1158 
Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to bypass intended restrictions with forged RDP (internal protocol) headers to UDP port 259 of arbitrary hosts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1159 
load_prefs.php and supporting include files in SquirrelMail 1.0.4 and earlier do not properly initialize certain PHP variables, which allows remote attackers to (1) view sensitive files via the config_php and data_dir options, and (2) execute arbitrary code by using options_order.php to upload a message that could be interpreted as PHP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1160 
udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the category_file field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1161 
Cross-site scripting (CSS) vulnerability in Lotus Domino 5.0.6 allows remote attackers to execute script on other web clients via a URL that ends in Javascript, which generates an error message that does not quote the resulting script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1162 
Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files via a .. in a NETBIOS name, which is used as the name for a .log file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1163 
Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT argument to port 6500.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1164 
Buffer overflow in uucp utilities in UnixWare 7 allows local users to execute arbitrary code via long command line arguments to (1) uucp, (2) uux, (3) bnuconvert, (4) uucico, (5) uuxcmd, or (6) uuxqt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1165 
Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting the information, e.g., with the Disengage tool.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1166 
linprocfs on FreeBSD 4.3 and earlier does not properly restrict access to kernel memory, which allows one process with debugging rights on a privileged process to read restricted memory from that process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1168 
Directory traversal vulnerability in index.php in PhpMyExplorer before 1.2.1 allows remote attackers to read arbitrary files via a ..%2F (modified dot dot) in the chemin parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1169 
keyinit in S/Key does not require authentication to initialize a one-time password sequence, which allows an attacker who has gained privileges to a user account to create new one-time passwords for use in other activities that may use S/Key authentication, such as sudo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1170 
AmTote International homebet program stores the homebet.log file in the homebet/ virtual directory, which allows remote attackers to steal account and PIN numbers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1171 
Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, which could allow local users to gain privileges or modify the firewall policy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1172 
OmniSecure HTTProtect 1.1.1 allows a superuser without omnish privileges to modify a protected file by creating a symbolic link to that file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1173 
Vulnerability in MasqMail before 0.1.15 allows local users to gain privileges via piped aliases.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1174 
Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1175 
vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1176 
Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1177 
ml85p in Samsung ML-85G GDI printer driver before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1178 
Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1179 
xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1180 
FreeBSD 4.3 does not properly clear shared signal handlers when executing a process, which allows local users to gain privileges by calling rfork with a shared signal handler, having the child process execute a setuid program, and sending a signal to the child.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1181 
Dynamically Loadable Kernel Module (dlkm) static kernel symbol table in HP-UX 11.11 is not properly configured, which allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1182 
Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1183 
PPTP implementation in Cisco IOS 12.1 and 12.2 allows remote attackers to cause a denial of service (crash) via a malformed packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1184 
wrshdsp.exe in Denicomp Winsock RSHD/NT 2.21.00 and earlier allows remote attackers to cause a denial of service (CPU consumption) via (1) in 2.20.00 and earlier, an invalid port number such as a negative number, which causes a connection attempt to that port and all ports below 1024, and (2) in 2.21.00, a port number of 1024.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1185 
Some AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow a local user to overwrite memory of the new process and gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1186 
Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than the size of the request, which prevents IIS from timing out the connection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2001-1187 
csvform.pl 0.1 allows remote attackers to execute arbitrary commands via metacharacters in the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1188 
mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote servers by modifying the sendto, email, server, subject, and resulturl hidden form fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1189 
IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1190 
The default PAM files included with passwd in Mandrake Linux 8.1 do not support MD5 passwords, which could result in a lower level of password security than intended.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1191 
WebSeal in IBM Tivoli SecureWay Policy Director 3.8 allows remote attackers to cause a denial of service (crash) via a URL that ends in %2e.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1192 
Citrix Independent Computing Architecture (ICA) Client for Windows 6.1 allows remote malicious web sites to execute arbitrary code via a .ICA file, which is downloaded and automatically executed by the client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1193 
Directory traversal vulnerability in EFTP 2.0.8.346 allows local users to read directories via a ... (modified dot dot) in the CWD command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1194 
Zyxel Prestige 681 and 1600 SDSL Routers allow remote attackers to cause a denial of service via malformed packets with (1) an IP length less than actual packet size, or (2) fragmented packets whose size exceeds 64 kilobytes after reassembly.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1195 
Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, which allows remote attackers to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1196 
Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' (dot dot) in the argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1197 
klprfax_filter in KDE2 KDEUtils allows local users to overwrite arbitrary files via a symlink attack on the klprfax.filter temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1198 
RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by specifying the target file in the -L option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1199 
Cross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g, when debug mode is enabled, allows remote attackers to execute Javascript on other clients via the cart_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1200 
Microsoft Windows XP allows local users to bypass a locked screen and run certain programs that are associated with Hot Keys.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2001-1201 
Buffer overflow in wmcube-gdk for WMCube/GDK 0.98 allows local users to execute arbitrary code via long lines in the object description file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1202 
Cross-site scripting vulnerability in DeleGate 7.7.0 and 7.7.1 does not quote scripting commands within a "403 Forbidden" error page, which allows remote attackers to execute arbitrary Javascript on other clients via a URL that generates an error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1203 
Format string vulnerability in gpm-root in gpm 1.17.8 through 1.17.18 allows local users to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2001-1204 
Directory traversal vulnerability in phprocketaddin in Total PC Solutions PHP Rocket Add-in for FrontPage 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1205 
Directory traversal vulnerability in lastlines.cgi for Last Lines 2.0 allows remote attackers to read arbitrary files via '..' sequences in the $error_log variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1206 
Matrix CGI vault Last Lines 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the $error_log variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1207 
Buffer overflows in DayDream BBS 2.9 through 2.13 allow remote attackers to possibly execute arbitrary code via the control codes (1) ~#MC, (2) ~#TF, or (3) ~#RA.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1208 
Format string vulnerability in DayDream BBS allows remote attackers to execute arbitrary code via format string specifiers in a file containing a ~#RA control code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1209 
Directory traversal vulnerability in zml.cgi allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1210 
Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must ship without SNMP access restrictions, which can allow remote attackers to read and write information to the MIB using arbitrary community strings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1211 
Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same server via the (1) aliasadmin or (2) listadm1 CGI programs, which do not properly verify that an administrator is the administrator for the target domain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1212 
Cross-site scripting vulnerability in catgy.cgi for Aktivate 1.03 allows remote attackers to execute arbitrary Javascript via the desc parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1213 
The default configuration of DataWizard FtpXQ 2.0 and 2.1 includes a default username and password, which allows remote attackers to read and write arbitrary files in the root folder.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1214 
manual.php in Marcus S. Xenakis Unix Manual 1.0 allows remote attackers to execute arbitrary code via a URL that contains shell metacharacters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-15T05:00:00.000Z
CVE-2001-1215 
Format string vulnerability in PFinger 0.7.5 through 0.7.7 allows remote attackers to execute arbitrary code via format string specifiers in a .plan file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z