yahoo-inc/cve-impacts huggingface dataset:
CVE-2001-0985: shop.pl in Hassan Consulting Shopping Cart 1.23 allows remote attackers to execute arbitrary commands via shell metacharacters in the "page" parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2001-0986: SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, file attributes, or portions of source code by directly calling sqlqhit.asp with a CiScope parameter set to (1) webinfo, (2) extended_fileinfo, (3) extended_webinfo, or (4) fileinfo.
Key phrases: obtain sensitive information, obtain sensitive information such as the physical path
CVE-2001-0987: Cross-site scripting vulnerability in CGIWrap before 3.7 allows remote attackers to execute arbitrary Javascript on other web clients by causing the Javascript to be inserted into error messages that are generated by CGIWrap.
Key phrases: execute arbitrary Javascript, execute arbitrary Javascript on other web clients by, cross-site scripting, error messages, arbitrary javascript
CVE-2001-0988: Arkeia backup server 4.2.8-2 and earlier creates its database files with world-writable permissions, which could allow local users to overwrite the files or obtain sensitive information.
Key phrases: obtain sensitive information, overwrite the files or obtain sensitive information, world-writable permissions
CVE-2001-0989: Buffer overflows in Pileup before 1.2 allows local users to gain root privileges via (1) long command line arguments, or (2) a long callsign.
Key phrases: gain root privileges, gain root privileges via (1) long, buffer overflows
CVE-2001-0990: Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into the libvpopmail.a library, which allows local users to obtain the MySQL username and password by inspecting the vpopmail programs that use the library.
Key phrases: obtain the MySQL username and password, obtain the MySQL username and password by inspecting, cleartext
CVE-2001-0991: Cross-site scripting vulnerability in Proxomitron Naoko-4 BetaFour and earlier allows remote attackers to execute arbitrary script on other clients via an incorrect URL containing the malicious script, which is printed back in an error message.
Key phrases: execute arbitrary script, execute arbitrary script on other clients via an, cross-site scripting
CVE-2001-0992: shopplus.cgi in ShopPlus shopping cart allows remote attackers to execute arbitrary commands via shell metacharacters in the "file" parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2001-0993: sendmsg function in NetBSD 1.3 through 1.5 allows local users to cause a denial of service (kernel trap or panic) via a msghdr structure with a large msg_controllen length.
Key phrases: denial of service (kernel trap or panic), cause a denial of service (kernel trap
CVE-2001-0994: Marconi ForeThought 7.1 allows remote attackers to cause a denial of service by causing both telnet sessions to be locked via unusual input (e.g., from a port scanner), which prevents others from logging into the device.
Key phrases: cause a denial of service by causing both, telnet sessions, unusual input
CVE-2001-0995: PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs.
Key phrases: perform actions as other PHProjekt users by modifying
CVE-2001-0996: POP3Lite before 0.2.4 does not properly quote a . (dot) in an email message, which could allow a remote attacker to append arbitrary text to the end of an email message, which could then be interpreted by various mail clients as valid POP server responses or other input that could cause clients to crash or otherwise behave unexpectedly.
Key phrases: append arbitrary text, append arbitrary text to the end of an, crash, behave unexpectedly
CVE-2001-0997: Textor Webmasters Ltd listrec.pl CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the TEMPLATE parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the, template parameter
CVE-2001-0998: IBM HACMP 4.4 allows remote attackers to cause a denial of service via a completed TCP connection to HACMP ports (e.g., using a port scan) that does not send additional data, which causes a failure in snmpd.
Key phrases: cause a denial of service via a completed, port scan, failure
CVE-2001-0999: Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is text/plain, contrary to the expected behavior that text/plain messages will not run script.
Key phrases: execute arbitrary script, execute arbitrary script by embedding SCRIPT tags in
CVE-2001-1000: rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file.
Key phrases: read arbitrary files, read arbitrary files via a symlink attack on
CVE-2001-1002: The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is executed by lpd, which could allow remote attackers to gain privileges by printing a DVI file that contains malicious commands.
Key phrases: gain privileges, gain privileges by printing a DVI file that
CVE-2001-1003: Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can read the WEBCT.SVR file to decrypt the passwords and gain additional privileges.
Key phrases: gain additional privileges, decrypt the passwords and gain additional privileges, weak encryption, decrypt password
CVE-2001-1004: Cross-site scripting (CSS) vulnerability in gnut Gnutella client before 0.4.27 allows remote attackers to execute arbitrary script on other clients by sharing a file whose name contains the script tags.
Key phrases: execute arbitrary script, execute arbitrary script on other clients by sharing, cross-site scripting (css)
CVE-2001-1005: Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a registry key, which allows attackers who have access to the registry key to decrypt the password and gain privileges.
Key phrases: gain privileges, the registry key to decrypt the password and, weak encryption, decrypt password
CVE-2001-1006: Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different application.
Key phrases: read the files using a different application
CVE-2001-1007: Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a delay when an incorrect key is entered, which allows attackers to more quickly guess the key via a brute force attack.
Key phrases: more quickly guess the key via a brute, incorrect key, brute force
CVE-2001-1008: Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that has been signed by an expired certificate.
Key phrases: conduct unauthorized activities via an applet that has, signed applets
CVE-2001-1009: Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request.
Key phrases: overwrite arbitrary memory, gain privileges, overwrite arbitrary memory and possibly gain privileges via, negative index number
CVE-2001-1010: Directory traversal vulnerability in pagecount CGI script in Sambar Server before 5.0 beta 5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) attack on the page parameter.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a .. (dot, directory traversal, .. (dot dot), dot dot attack
CVE-2001-1011: index2.php in Mambo Site Server 3.0.0 through 3.0.5 allows remote attackers to gain Mambo administrator privileges by setting the PHPSESSID parameter and providing the appropriate administrator information in other parameters.
Key phrases: gain Mambo administrator privileges, gain Mambo administrator privileges by setting the PHPSESSID
CVE-2001-1012: Vulnerability in screen before 3.9.10, related to a multi-attach error, allows local users to gain root privileges when there is a subdirectory under /tmp/screens/.
Key phrases: gain root privileges, gain root privileges when there is a subdirectory, vulnerability in screen before, multi-attach error
CVE-2001-1013: Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server.
Key phrases: determine valid usernames on the server
CVE-2001-1014: eshop.pl in WebDiscount(e)shop allows remote attackers to execute arbitrary commands via shell metacharacters in the seite parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2001-1015: Buffer overflow in Snes9x 1.37, when installed setuid root, allows local users to gain root privileges via a long command line argument.
Key phrases: gain root privileges, gain root privileges via a long command line, buffer overflow
CVE-2001-1016: PGP Corporate Desktop before 7.1, Personal Security before 7.0.3, Freeware before 7.0.3, and E-Business Server before 7.1 does not properly display when invalid userID's are used to sign a message, which could allow an attacker to make the user believe that the document has been signed by a trusted third party by adding a second, invalid user ID to a key which has already been signed by the third party, aka the "PGPsdk Key Validity Vulnerability."
Key phrases: make the user believe that the document has, pgpsdk key validity
CVE-2001-1017: rmuser utility in FreeBSD 4.2 and 4.3 creates a copy of the master.passwd file with world-readable permissions while updating the original file, which could allow local users to gain privileges by reading the copied file while rmuser is running, obtain the password hashes, and crack the passwords.
Key phrases: obtain the password, gain privileges, gain privileges by reading the copied file while, world-readable permissions
CVE-2001-1018: Lotus Domino web server 5.08 allows remote attackers to determine the internal IP address of the server when NAT is enabled via a GET request that contains a long sequence of / (slash) characters.
Key phrases: determine the internal IP address of the server
CVE-2001-1019: Directory traversal vulnerability in view_item CGI program in sglMerchant 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTML_FILE parameter.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal
CVE-2001-1020: edit_image.php in Vibechild Directory Manager before 0.91 allows remote attackers to execute arbitrary commands via shell metacharacters in the userfile_name parameter, which is sent unfiltered to the PHP passthru function.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2001-1021: Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD, (5) RMD, (6) RNFR, (7) RNTO, (8) SIZE, (9) STAT, (10) XMKD, or (11) XRMD.
Key phrases: execute arbitrary code, execute arbitrary code via long arguments to (, buffer overflows
CVE-2001-1022: Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and execute arbitrary commands via format string specifiers in the plot command.
Key phrases: execute arbitrary commands, bypass the -S option and execute arbitrary commands, format string
CVE-2001-1023: Xcache 2.1 allows remote attackers to determine the absolute path of web server documents by requesting a URL that is not cached by Xcache, which returns the full pathname in the Content-PageName header.
Key phrases: determine the absolute path of web server documents
CVE-2001-1024: login.gas.bat and other CGI scripts in Entrust getAccess allow remote attackers to execute Java programs, and possibly arbitrary commands, by specifying an alternate -classpath argument.
Key phrases: execute Java programs, arbitrary commands
CVE-2001-1025: PHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix" variable when calling any scripts that do not already define the prefix variable (e.g., by including mainfile.php), such as article.php.
Key phrases: perform arbitrary SQL operations, perform arbitrary SQL operations by modifying the ", arbitrary sql operations
CVE-2001-1026: Trend Micro InterScan AppletTrap 2.0 does not properly filter URLs when they are modified in certain ways such as (1) using a double slash (//) instead of a single slash, (2) URL-encoded characters, (3) requesting the IP address instead of the domain name, or (4) using a leading 0 in an octet of an IP address.
CVE-2001-1027: Buffer overflow in WindowMaker (aka wmaker) 0.64 and earlier allows remote attackers to execute arbitrary code via a long window title.
Key phrases: execute arbitrary code, execute arbitrary code via a long window title, buffer overflow
CVE-2001-1028: Buffer overflow in ultimate_source function of man 1.5 and earlier allows local users to gain privileges.
Key phrases: gain privileges, buffer overflow
CVE-2001-1029: libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which allows local users to bypass the capabilities checks and read arbitrary files by specifying alternate copyright or welcome files.
Key phrases: read arbitrary files, bypass the capabilities checks, bypass the capabilities checks and read arbitrary files
CVE-2001-1030: Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.
Key phrases: bypass the ACLs and conduct unauthorized activities such
CVE-2001-1031: Directory traversal vulnerability in Meteor FTP 1.0 allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the ls/LIST command, or (2) a ... in the cd/CWD command.
Key phrases: read arbitrary files, read arbitrary files via (1) a, directory traversal
CVE-2001-1032: admin.php in PHP-Nuke 5.2 and earlier, except 5.0RC1, does not check login credentials for upload operations, which allows remote attackers to copy and upload arbitrary files and read the PHP-Nuke configuration file by directly calling admin.php with an upload parameter and specifying the file to copy.
Key phrases: upload arbitrary files, copy and upload arbitrary files and read the, arbitrary file read
CVE-2001-1033: Compaq TruCluster 1.5 allows remote attackers to cause a denial of service via a port scan from a system that does not have a DNS PTR record, which causes the cluster to enter a "split-brain" state.
Key phrases: cause a denial of service via a port, port scan, dns ptr record
CVE-2001-1034: Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code via format specifiers in the -h hostname argument for (1) faxrm or (2) faxalter.
Key phrases: execute arbitrary code, execute arbitrary code via format specifiers in the, format string
CVE-2001-1035: Binary decoding feature of slrn 0.9 and earlier allows remote attackers to execute commands via shell scripts that are inserted into a news post.
Key phrases: execute commands via shell scripts that are inserted, binary decoding feature
CVE-2001-1036: GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an out-of-range offset, which causes locate to write to arbitrary process memory.
Key phrases: gain privileges, gain privileges via an old formatted filename database, out-of-range offset, arbitrary process memory
CVE-2001-1037: Cisco SN 5420 Storage Router 1.1(3) and earlier allows local users to access a developer's shell without a password and execute certain restricted commands without being logged.
Key phrases: access a developer's shell without a password
CVE-2001-1038: Cisco SN 5420 Storage Router 1.1(3) and earlier allows remote attackers to cause a denial of service (reboot) via a series of connections to TCP port 8023.
Key phrases: denial of service (reboot), cause a denial of service (reboot)
CVE-2001-1039: The JetAdmin web interface for HP JetDirect does not set a password for the telnet interface when the admin password is changed, which allows remote attackers to gain access to the printer.
Key phrases: gain access, gain access to the printer
CVE-2001-1040: HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password.
Key phrases: access the device without the password
CVE-2001-1041: oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory identified by the ORACLE_HOME environment variable.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack on
CVE-2001-1042: Transsoft Broker 5.9.5.0 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file that points to the target file.
Key phrases: read arbitrary files, read arbitrary files and directories by uploading a
CVE-2001-1043: ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file that points to the target file.
Key phrases: read arbitrary files, read arbitrary files and directories by uploading a
CVE-2001-1044: Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows remote attackers to obtain sensitive information such as MySQL passwords and usernames from the mysql.class file.
Key phrases: obtain sensitive information, obtain sensitive information such as MySQL passwords and
CVE-2001-1045: Directory traversal vulnerability in basilix.php3 in Basilix Webmail 1.0.3beta and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the request_id[DUMMY] parameter.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal
CVE-2001-1046: Buffer overflow in qpopper (aka qpop or popper) 4.0 through 4.0.2 allows remote attackers to gain privileges via a long username.
Key phrases: gain privileges, gain privileges via a long username, buffer overflow
CVE-2001-1047: Race condition in OpenBSD VFS allows local users to cause a denial of service (kernel panic) by (1) creating a pipe in one thread and causing another thread to set one of the file descriptors to NULL via a close, or (2) calling dup2 on a file descriptor in one process, then setting the descriptor to NULL via a close in another process that is created via rfork.
Key phrases: denial of service (kernel panic), cause a denial of service (kernel panic, race condition
CVE-2001-1048: AWOL PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
Key phrases: include arbitrary files, include arbitrary files from remote web sites via, awol php script
CVE-2001-1049: Phorecast PHP script before 0.40 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
Key phrases: include arbitrary files, include arbitrary files from remote web sites via, phorecast php script, includedir variable
CVE-2001-1050: CCCSoftware CCC PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
Key phrases: include arbitrary files, include arbitrary files from remote web sites via, includedir variable
CVE-2001-1051: Dark Hart Portal (darkportal) PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
Key phrases: include arbitrary files, include arbitrary files from remote web sites via, includedir variable
CVE-2001-1052: Empris PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
Key phrases: include arbitrary files, include arbitrary files from remote web sites via, empris php script, includedir variable
CVE-2001-1053: AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting SQL code in the $password argument.
Key phrases: bypass authentication, gain privileges, bypass authentication and gain privileges by injecting SQL
CVE-2001-1054: PHPAdsNew PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
Key phrases: include arbitrary files, include arbitrary files from remote web sites via, includedir variable
CVE-2001-1055: The Microsoft Windows network stack allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed ARP request packets with random source IP and MAC addresses, as demonstrated by ARPNuke.
Key phrases: denial of service (CPU consumption), cause a denial of service (CPU consumption, cpu consumption
CVE-2001-1056: IRC DCC helper in the ip_masq_irc IP masquerading module 2.2 allows remote attackers to bypass intended firewall restrictions by causing the target system to send a "DCC SEND" request to a malicious server which listens on port 6667, which may cause the module to believe that the traffic is a valid request and allow the connection to the port specified in the DCC SEND request.
Key phrases: bypass intended firewall restrictions, bypass intended firewall restrictions by causing the target, the port specified in the DCC SEND request
CVE-2001-1057: The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by connecting to port 16286 and not disconnecting, which prevents users from making license requests.
Key phrases: denial of service (resource exhaustion), cause a denial of service (resource exhaustion
CVE-2001-1058: The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to bypass access control (specified by the -restrict argument) and steal a license via a client request that includes the name of a host that is allowed to obtain the license.
Key phrases: bypass access control, obtain the license., bypass access control (specified by the -restrict
CVE-2001-1059: VMWare creates a temporary file vmware-log.USERNAME with insecure permissions, which allows local users to read or modify license information.
Key phrases: read or modify license information, insecure permissions
CVE-2001-1060: phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argument in tbl_copy.php, or (2) the strRenameTableOK argument in tbl_rename.php.
Key phrases: execute arbitrary commands, execute arbitrary commands by inserting them into (
CVE-2001-1061: Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error.
CVE-2001-1062: Buffer overflow in mana in OpenServer 5.0.6a and earlier allows local users to execute arbitrary code.
Key phrases: execute arbitrary code, buffer overflow
CVE-2001-1063: Buffer overflow in uidadmin in Caldera Open Unix 8.0.0 and UnixWare 7 allows local users to gain root privileges via a long -S (scheme) command line argument.
Key phrases: gain root privileges, gain root privileges via a long -S (, buffer overflow
CVE-2001-1064: Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to the router on the (1) HTTP or (2) telnet service, which causes the router to become unresponsive and stop forwarding packets.
Key phrases: cause a denial of service via multiple connections, unresponsive
CVE-2001-1065: Web-based configuration utility in Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap binds itself to port 80 even when web-based configuration services are disabled, which could leave the router open to attack.
CVE-2001-1066: ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users to overwrite arbitrary files via a symlink attack.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack
CVE-2001-1067: Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP request with a long Authorization header.
Key phrases: execute arbitrary code, cause a denial of service, buffer overflow
CVE-2001-1068: qpopper 4.01 with PAM based authentication on Red Hat systems generates different error messages when an invalid username is provided instead of a valid name, which allows remote attackers to determine valid usernames on the system.
Key phrases: determine valid usernames on the system, invalid username
CVE-2001-1069: libCoolType library as used in Adobe Acrobat (acroread) on Linux creates the AdobeFnt.lst file with world-writable permissions, which allows local users to modify the file and possibly modify acroread's behavior.
Key phrases: modify the file and possibly modify acroread's, world-writable permissions
CVE-2001-1070: Sage Software MAS 200 allows remote attackers to cause a denial of service by connecting to port 10000 and entering a series of control characters.
Key phrases: cause a denial of service by connecting to
CVE-2001-1071: Cisco IOS 12.2 and earlier running Cisco Discovery Protocol (CDP) allows remote attackers to cause a denial of service (memory consumption) via a flood of CDP neighbor announcements.
Key phrases: denial of service (memory consumption), cause a denial of service (memory consumption
CVE-2001-1072: Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters into the requested path, which causes the regular expression in the RewriteRule to fail.
Key phrases: bypass RewriteRules, bypass RewriteRules by inserting extra / (slash, fail
CVE-2001-1073: Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that generates a server error message, which includes full pathname or internal IP address information in the variables (1) APPL_PHYSICAL_PATH, (2) PATH_TRANSLATED, and (3) LOCAL_ADDR.
Key phrases: obtain sensitive information, obtain sensitive information via a malformed request that
CVE-2001-1074: Webmin 0.84 and earlier does not properly clear the HTTP_AUTHORIZATION environment variable when the web server is restarted, which makes authentication information available to all CGI programs and allows local users to gain privileges.
Key phrases: gain privileges
CVE-2001-1075: poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass authentication for relaying by causing a "POP login by user" string that includes the attacker's IP address to be injected into the maillog log file.
Key phrases: bypass authentication, bypass authentication for relaying by causing a "
CVE-2001-1076: Buffer overflow in whodo in Solaris SunOS 5.5.1 through 5.8 allows local users to execute arbitrary code via a long (1) SOR or (2) CFIME environment variable.
Key phrases: execute arbitrary code, execute arbitrary code via a long (1, buffer overflow
CVE-2001-1077: Buffer overflow in tt_printf function of rxvt 2.6.2 allows local users to gain privileges via a long (1) -T or (2) -name argument.
Key phrases: gain privileges, gain privileges via a long (1), buffer overflow
CVE-2001-1078: Format string vulnerability in flog function of eXtremail 1.1.9 and earlier allows remote attackers to gain root privileges via format specifiers in the SMTP commands (1) HELO, (2) EHLO, (3) MAIL FROM, or (4) RCPT TO, and the POP3 commands (5) USER and (6) other commands that can be executed after POP3 authentication.
Key phrases: gain root privileges, gain root privileges via format specifiers in the, format string
CVE-2001-1079: create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to delete key files and cause a denial of service.
Key phrases: delete key files and cause a denial of, world-writable permissions, denial of service
CVE-2001-1080: diagrpt in AIX 4.3.x and 5.1 uses the DIAGDATADIR environment variable to find and execute certain programs, which allows local users to gain privileges by modifying the variable to point to a Trojan horse program.
Key phrases: gain privileges, gain privileges by modifying the variable to point
CVE-2001-1081: Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers to cause a denial of service and possibly execute arbitrary code via format specifiers that are injected into log messages.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, format string
CVE-2001-1082: Directory traversal vulnerability in Livingston/Lucent RADIUS before 2.1.va.1 may allow attackers to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal, dot dot attack
CVE-2001-1083: Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers to cause a denial of service (crash) via a URL that ends in . (dot), / (forward slash), or \\\\ (backward slash).
Key phrases: denial of service (crash), cause a denial of service (crash)
CVE-2001-1084: Cross-site scripting vulnerability in Allaire JRun 3.0 and 2.3.3 allows a malicious webmaster to embed Javascript in a request for a .JSP, .shtml, .jsp10, .jrun, or .thtml file that does not exist, which causes the Javascript to be inserted into an error message.
Key phrases: embed Javascript in a request for a .JSP, cross-site scripting, error message
CVE-2001-1085: Lmail 2.7 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack on
CVE-2001-1086: XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack.
Key phrases: gain unauthorized access, gain unauthorized access to the X display via, guessable cookies, brute force
CVE-2001-1087: The default configuration of the config.http.tunnel.allow_ports option on NetCache devices is set to +all, which allows remote attackers to connect to arbitrary ports on remote systems behind the device.
Key phrases: connect to arbitrary ports on remote systems behind
CVE-2001-1088: Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when the "Reply-To" address is different than the "From" address, which could allow an untrusted remote attacker to spoof legitimate addresses and intercept email from the client that is intended for another user.
Key phrases: spoof legitimate addresses and intercept email from the, spoofing
CVE-2001-1089: libnss-pgsql in nss-pgsql 0.9.0 and earlier allows remote attackers to execute arbitrary SQL queries by inserting SQL code into an HTTP request.
Key phrases: execute arbitrary SQL queries, execute arbitrary SQL queries by inserting SQL code
CVE-2001-1090: nss_postgresql 0.6.1 and before allows a remote attacker to execute arbitrary SQL queries by inserting SQL code into an HTTP request.
Key phrases: execute arbitrary SQL queries, execute arbitrary SQL queries by inserting SQL code
CVE-2001-1091: The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privileges via the RCMD_CMD environment variable.
Key phrases: gain privileges, gain privileges via the RCMD_CMD environment variable
CVE-2001-1092: msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mh_profile file.
Key phrases: read the first line of arbitrary files via, msgchk, symlink
CVE-2001-1093: Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute arbitrary code via a long command line argument.
Key phrases: execute arbitrary code, execute arbitrary code via a long command line, buffer overflow
CVE-2001-1094: NetOp School 1.5 allows local users to bypass access restrictions on the administration version by logging into the student version, closing the student version, then starting the administration version.
Key phrases: bypass access restrictions, bypass access restrictions on the administration version by
CVE-2001-1095: Buffer overflow in uuq in AIX 4 could allow local users to execute arbitrary code via a long -r parameter.
Key phrases: execute arbitrary code, execute arbitrary code via a long -r parameter, buffer overflow
CVE-2001-1096: Buffer overflows in muxatmd in AIX 4 allows an attacker to cause a core dump and possibly execute code.
Key phrases: cause a core dump and possibly execute code, buffer overflows
CVE-2001-1097: Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a flood of UDP packets.
Key phrases: cause a denial of service via a flood
CVE-2001-1098: Cisco PIX firewall manager (PFM) 4.3(2)g logs the enable password in plaintext in the pfm.log file, which could allow local users to obtain the password by reading the file.
Key phrases: obtain the password, obtain the password by reading the file
CVE-2001-1099: The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice.
Key phrases: identify the recipient's INBOX file path by
CVE-2001-1100: sendmessage.cgi in W3Mail 1.0.2, and possibly other CGI programs, allows remote attackers to execute arbitrary commands via shell metacharacters in any field of the 'Compose Message' page.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in any
CVE-2001-1101: The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows (1) remote authenticated users to overwrite arbitrary files ending in '.log', or (2) local users to overwrite arbitrary files via a symlink attack.
Key phrases: overwrite arbitrary files, overwrite arbitrary files ending in '.log', symlink
CVE-2001-1102: Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack on, world-writable
CVE-2001-1103: FTP Voyager ActiveX control before 8.0, when it is marked as safe for scripting (the default) or if allowed by the IObjectSafety interface, allows remote attackers to execute arbitrary commands.
Key phrases: execute arbitrary commands
CVE-2001-1104: SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions.
Key phrases: spoof or hijack sessions, tcp sequence numbers, spoofing
CVE-2001-1105: RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attackers to bypass SSL client authentication and gain access to sensitive data by logging in after an initial failure.
Key phrases: bypass SSL client authentication, gain access, bypass SSL client authentication and gain access to, sensitive data, initial failure
CVE-2001-1106: The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwords, which could allow local users to break all user passwords by cracking the key or modifying a copy of the sambar program to call the decryption procedure.
Key phrases: break all user passwords by cracking the key
CVE-2001-1107: SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain privileges on the server.
Key phrases: gain privileges, gain privileges on the server, plaintext
CVE-2001-1108: Directory traversal vulnerability in SnapStream PVS 1.2a allows remote attackers to read arbitrary files via a .. (dot dot) attack in the requested URL.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal, dot dot attack
CVE-2001-1109: Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory contents via a .. (dot dot) in the (1) LIST, (2) QUOTE SIZE, and (3) QUOTE MDTM commands.
Key phrases: reveal directory contents via a .. (dot, directory traversal
CVE-2001-1110: EFTP 2.0.7.337 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection.
Key phrases: obtain NETBIOS credentials, obtain NETBIOS credentials by requesting information on a, sniff the connection
CVE-2001-1111: EFTP 2.0.7.337 stores user passwords in plaintext in the eftp2users.dat file.
Key phrases: plaintext
CVE-2001-1112: Buffer overflow in EFTP 2.0.7.337 allows remote attackers to execute arbitrary code by uploading a .lnk file containing a large number of characters.
Key phrases: execute arbitrary code, execute arbitrary code by uploading a .lnk file, buffer overflow
CVE-2001-1113: Buffer overflow in TrollFTPD 1.26 and earlier allows local users to execute arbitrary code by creating a series of deeply nested directories with long names, then running the ls -R (recursive) command.
Key phrases: execute arbitrary code, execute arbitrary code by creating a series of, buffer overflow
CVE-2001-1114: book.cgi in NetCode NC Book 0.2b allows remote attackers to execute arbitrary commands via shell metacharacters in the "current" parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2001-1115: generate.cgi in SIX-webboard 2.01 and before allows remote attackers to read arbitrary files via a dot dot (..) in the content parameter.
Key phrases: read arbitrary files, read arbitrary files via a dot dot (
CVE-2001-1116: Identix BioLogon 2.03 and earlier does not lock secondary displays on a multi-monitor system running Windows 98 or ME, which allows an attacker with physical access to the system to bypass authentication through a secondary display.
Key phrases: bypass authentication, the system to bypass authentication through a secondary
CVE-2001-1117: LinkSys EtherFast BEFSR41 Cable/DSL routers running firmware before 1.39.3 Beta allows a remote attacker to view administration and user passwords by connecting to the router and viewing the HTML source for (1) index.htm and (2) Password.htm.
Key phrases: view administration and user passwords by connecting to
CVE-2001-1118: A module in Roxen 2.0 before 2.0.92, and 2.1 before 2.1.264, does not properly decode UTF-8, Mac and ISO-2202 encoded URLs, which could allow a remote attacker to execute arbitrary commands or view arbitrary files via an encoded URL.
Key phrases: execute arbitrary commands, execute arbitrary commands or view arbitrary files via
CVE-2001-1119: cda in xmcd 3.0.2 and 2.6 in SuSE Linux allows local users to overwrite arbitrary files via a symlink attack.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack, cda
CVE-2001-1120: Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusion Server templates.
Key phrases: delete arbitrary files, (1) read or delete arbitrary files
CVE-2001-1122: Windows NT 4.0 SP 6a allows a local user with write access to winnt/system32 to cause a denial of service (crash in lsass.exe) by running the NT4ALL exploit program in 'SPECIAL' mode.
Key phrases: denial of service (crash in lsass.exe), winnt/system32 to cause a denial of, write access
CVE-2001-1123: Vulnerability in Network Node Manager (NNM) 6.2 and earlier in HP OpenView allows a local user to execute arbitrary code, possibly via a buffer overflow in a long hostname or object ID.
Key phrases: execute arbitrary code, buffer overflow
CVE-2001-1124: rpcbind in HP-UX 11.00, 11.04 and 11.11 allows remote attackers to cause a denial of service (core dump) via a malformed RPC portmap requests, possibly related to a buffer overflow.
Key phrases: denial of service (core dump), cause a denial of service (core dump, buffer overflow
CVE-2001-1125: Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com site.
Key phrases: execute arbitrary code, execute arbitrary code via DNS spoofing of the, dns spoofing, integrity
CVE-2001-1126: Symantec LiveUpdate 1.4 through 1.6, and possibly later versions, allows remote attackers to cause a denial of service (flood) via DNS spoofing of the update.symantec.com site.
Key phrases: denial of service (flood), cause a denial of service (flood), dns spoofing
CVE-2001-1127: Buffer overflow in Progress database 8.3D and 9.1C could allow a local user to execute arbitrary code via (1) _proapsv, (2) _mprosrv, (3) _mprshut, (4) orarx, (5) sqlcpp, (6) _probrkr, (7) _sqlschema and (8) _sqldump.
Key phrases: execute arbitrary code, execute arbitrary code via (1) _, buffer overflow
CVE-2001-1128: Buffer overflow in Progress database 8.3D and 9.1C allows local users to execute arbitrary code via long entries in files that are specified by the (1) PROMSGS or (2) PROTERMCAP environment variables.
Key phrases: execute arbitrary code, execute arbitrary code via long entries in files, buffer overflow
CVE-2001-1129: Format string vulnerabilities in (1) _probuild, (2) _dbutil, (3) _mprosrv, (4) _mprshut, (5) _proapsv, (6) _progres, (7) _proutil, (8) _rfutil and (9) prolib in Progress database 9.1C allows a local user to execute arbitrary code via format string specifiers in the file used by the PROMSGS environment variable.
Key phrases: execute arbitrary code, execute arbitrary code via format string specifiers in
CVE-2001-1130: Sdbsearch.cgi in SuSE Linux 6.0-7.2 could allow remote attackers to execute arbitrary commands by uploading a keylist.txt file that contains filenames with shell metacharacters, then causing the file to be searched using a .. in the HTTP referer (from the HTTP_REFERER variable) to point to the directory that contains the keylist.txt file.
Key phrases: execute arbitrary commands, execute arbitrary commands by uploading a keylist.txt file, shell metacharacters
CVE-2001-1131: Directory traversal vulnerability in WhitSoft Development SlimFTPd 2.2 allows an attacker to read arbitrary files and directories via a ... (modified dot dot) in the CD command.
Key phrases: read arbitrary files, read arbitrary files and directories via a ..., directory traversal
CVE-2001-1132: Mailman 2.0.x before 2.0.6 allows remote attackers to gain access to list administrative pages when there is an empty site or list password, which is not properly handled during the call to the crypt function during authentication.
Key phrases: gain access, gain access to list administrative pages when there, empty site, list password
CVE-2001-1133: Vulnerability in a system call in BSDI 3.0 and 3.1 allows local users to cause a denial of service (reboot) in the kernel via a particular sequence of instructions.
Key phrases: denial of service (reboot), cause a denial of service (reboot)
CVE-2001-1134: Xerox DocuPrint N40 Printers allow remote attackers to cause a denial of service via malformed data, such as that produced by the Code Red worm.
Key phrases: cause a denial of service via malformed data
CVE-2001-1135: ZyXEL Prestige 642R and 642R-I routers do not filter the routers' Telnet and FTP ports on the external WAN interface from inside access, allowing someone on an internal computer to reconfigure the router, if the password is known.
Key phrases: reconfigure the router, inside access
CVE-2001-1136: The libsecurity library in HP-UX 11.04 (VVOS) allows attackers to cause a denial of service.
Key phrases: cause a denial of service
CVE-2001-1137: D-Link DI-704 Internet Gateway firmware earlier than V2.56b6 allows remote attackers to cause a denial of service (reboot) via malformed IP datagram fragments.
Key phrases: denial of service (reboot), cause a denial of service (reboot), malformed ip datagram fragments
CVE-2001-1138: Directory traversal vulnerability in r.pl (aka r.cgi) of Randy Parker Power Up HTML 0.8033beta allows remote attackers to read arbitrary files and possibly execute arbitrary code via a .. (dot dot) in the FILE parameter.
Key phrases: read arbitrary files, read arbitrary files and possibly execute arbitrary code, directory traversal
CVE-2001-1139: Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. (dot dot) in the server request.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal
CVE-2001-1140: BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by appending a %00 (null byte) to the request.
Key phrases: read source code for executable programs by appending
CVE-2001-1141: The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state information, which could be used by attackers to predict future pseudo-random numbers.
Key phrases: use the output of small PRNG requests to, internal state information
CVE-2001-1142: ArGoSoft FTP Server 1.2.2.2 uses weak encryption for user passwords, which allows an attacker with access to the password file to gain privileges.
Key phrases: gain privileges, the password file to gain privileges, weak encryption
CVE-2001-1143: IBM DB2 7.0 allows a remote attacker to cause a denial of service (crash) via a single byte to (1) db2ccs.exe on port 6790, or (2) db2jds.exe on port 6789.
Key phrases: denial of service (crash), cause a denial of service (crash), single byte
CVE-2001-1144: Directory traversal vulnerability in McAfee ASaP VirusScan agent 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal
CVE-2001-1145: fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than intended when the directory above the current directory is moved, which could cause scripts to perform dangerous actions on the wrong directories.
Key phrases: dangerous actions
CVE-2001-1146: AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 creates temporary files with predictable names, which allows local users to modify files via a symlink attack.
Key phrases: modify files via a symlink attack, predictable names