yahoo-inc/cve-impacts huggingface dataset:
CVE-2001-0455: Cisco Aironet 340 Series wireless bridge before 8.55 does not properly disable access to the web interface, which allows remote attackers to modify its configuration.
Key phrases: modify its configuration
CVE-2001-0456: postinst installation script for Proftpd in Debian 2.2 does not properly change the "run as uid/gid root" configuration when the user enables anonymous access, which causes the server to run at a higher privilege than intended.
Key phrases: anonymous access, higher privilege than intended
CVE-2001-0457: man2html before 1.5-22 allows remote attackers to cause a denial of service (memory exhaustion).
Key phrases: denial of service (memory exhaustion), cause a denial of service (memory exhaustion
CVE-2001-0458: Multiple buffer overflows in ePerl before 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands.
Key phrases: execute arbitrary commands, buffer overflows
CVE-2001-0459: Buffer overflows in ascdc Afterstep while running setuid allows local users to gain root privileges via a long (1) -d option, (2) -m option, or (3) -f option.
Key phrases: gain root privileges, gain root privileges via a long (1, buffer overflows
CVE-2001-0460: Websweeper 4.0 does not limit the length of certain HTTP headers, which allows remote attackers to cause a denial of service (memory exhaustion) via an extremely large HTTP Referrer: header.
Key phrases: denial of service (memory exhaustion), cause a denial of service (memory exhaustion
CVE-2001-0461: template.cgi in Free On-Line Dictionary of Computing (FOLDOC) allows remote attackers to read files and execute commands via shell metacharacters in the argument to template.cgi.
Key phrases: read files and execute commands via shell metacharacters
CVE-2001-0462: Directory traversal vulnerability in Perl web server 0.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal
CVE-2001-0463: Directory traversal vulnerability in cal_make.pl in PerlCal allows remote attackers to read arbitrary files via a .. (dot dot) in the p0 parameter.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal
CVE-2001-0464: Buffer overflow in websync.exe in Cyberscheduler allows remote attackers to execute arbitrary commands via a long tzs (timezone) parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long tzs (, buffer overflow
CVE-2001-0465: TurboTax saves passwords in a temporary file when a user imports investment tax information from a financial institution, which could allow local users to obtain sensitive information.
Key phrases: obtain sensitive information, temporary file
CVE-2001-0466: Directory traversal vulnerability in ustorekeeper 1.61 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal
CVE-2001-0467: Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a \\\\... (modified dot dot) in an HTTP URL request.
Key phrases: read arbitrary files, read arbitrary files via a \\\\... (, directory traversal
CVE-2001-0468: Buffer overflow in FTPFS allows local users to gain root privileges via a long user name.
Key phrases: gain root privileges, gain root privileges via a long user name, buffer overflow
CVE-2001-0469: rwho daemon rwhod in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service via malformed packets with a short length.
Key phrases: cause a denial of service via malformed packets
CVE-2001-0470: Buffer overflow in SNMP proxy agent snmpd in Solaris 8 may allow local users to gain root privileges by calling snmpd with a long program name.
Key phrases: gain root privileges, gain root privileges by calling snmpd with a, buffer overflow
CVE-2001-0471: SSH daemon version 1 (aka SSHD-1 or SSH-1) 1.2.30 and earlier does not log repeated login attempts, which could allow remote attackers to compromise accounts without detection via a brute force attack.
Key phrases: compromise accounts without detection via a brute force, repeated login attempts
CVE-2001-0472: Hursley Software Laboratories Consumer Transaction Framework (HSLCTF) HTTP object allows remote attackers to cause a denial of service (crash) via an extremely long HTTP request.
Key phrases: denial of service (crash), cause a denial of service (crash), http object
CVE-2001-0473: Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands.
Key phrases: execute arbitrary commands, format string
CVE-2001-0474: Utah-glx in Mesa before 3.3-14 on Mandrake Linux 7.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/glxmemory file.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack on
CVE-2001-0475: index.php in Jelsoft vBulletin does not properly initialize a PHP variable that is used to store template information, which allows remote attackers to execute arbitrary PHP code via special characters in the templatecache parameter.
Key phrases: execute arbitrary PHP code, execute arbitrary PHP code via special characters in
CVE-2001-0476: Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via (1) a long HTTP query string, or (2) a long tmpl parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via (1) a, buffer overflows
CVE-2001-0477: Vulnerability in WebCalendar 0.9.26 allows remote command execution.
Key phrases: remote command execution, vulnerability in webcalendar
CVE-2001-0478: Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script.
Key phrases: execute arbitrary code, execute arbitrary code via a .. (dot, directory traversal
CVE-2001-0479: Directory traversal vulnerability in phpPgAdmin 2.2.1 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script.
Key phrases: execute arbitrary code, execute arbitrary code via a .. (dot, directory traversal
CVE-2001-0480: Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the (1) GET or (2) CD commands.
Key phrases: read arbitrary files, read arbitrary files via a ... (modified, directory traversal
CVE-2001-0481: Vulnerability in rpmdrake in Mandrake Linux 8.0 related to insecure temporary file handling.
Key phrases: insecure temporary file handling
CVE-2001-0482: Configuration error in Argus PitBull LX allows root users to bypass specified access control restrictions and cause a denial of service or execute arbitrary commands by modifying kernel variables such as MaxFiles, MaxInodes, and ModProbePath in /proc/sys via calls to sysctl.
Key phrases: execute arbitrary commands, bypass specified access control, bypass specified access control restrictions and cause a, configuration error, denial of service
CVE-2001-0483: Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access internal web resources when the http.noproxy Rule is not set.
Key phrases: use the firewall as a proxy to access, configuration error
CVE-2001-0484: Tektronix PhaserLink 850 does not require authentication for access to configuration pages such as _ncl_subjects.shtml and _ncl_items.shtml, which allows remote attackers to modify configuration information and cause a denial of service by accessing the pages.
Key phrases: modify configuration information and cause a denial of, denial of service
CVE-2001-0485: Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute arbitrary commands via the -n option.
Key phrases: execute arbitrary commands, execute arbitrary commands via the -n option, unknown
CVE-2001-0486: Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port 353.
Key phrases: denial of service, tcp syn flood
CVE-2001-0487: AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection.
Key phrases: cause a denial of service via a RST, rst
CVE-2001-0488: pcltotiff in HP-UX 10.x has unnecessary set group id permissions, which allows local users to cause a denial of service.
Key phrases: cause a denial of service, group id permissions
CVE-2001-0489: Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands.
Key phrases: execute arbitrary commands, format string
CVE-2001-0490: Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file.
Key phrases: execute arbitrary code, execute arbitrary code via a long string in, buffer overflow
CVE-2001-0491: Directory traversal vulnerability in RaidenFTPD Server 2.1 before build 952 allows attackers to access files outside the ftp root via dot dot attacks, such as (1) .... in CWD, (2) .. in NLST, or (3) ... in NLST.
Key phrases: access files outside the ftp root via dot, directory traversal, dot dot, dot dot attack
CVE-2001-0492: Netcruiser Web server version 0.1.2.8 and earlier allows remote attackers to determine the physical path of the server via a URL containing (1) con, (2) com2, or (3) com3.
Key phrases: determine the physical path of the server via
CVE-2001-0493: Small HTTP server 2.03 allows remote attackers to cause a denial of service via a URL that contains an MS-DOS device name such as aux.
Key phrases: cause a denial of service via a URL, ms-dos device name
CVE-2001-0494: Buffer overflow in IPSwitch IMail SMTP server 6.06 and possibly prior versions allows remote attackers to execute arbitrary code via a long From: header.
Key phrases: execute arbitrary code, execute arbitrary code via a long From:, buffer overflow
CVE-2001-0495: Directory traversal in DataWizard WebXQ server 1.204 allows remote attackers to view files outside of the web root via a .. (dot dot) attack.
Key phrases: view files outside of the web root via, directory traversal, dot dot attack
CVE-2001-0496: kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local users to gain privileges.
Key phrases: gain privileges, world readable temporary files
CVE-2001-0497: dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key file used for DNS Transactional Signatures (TSIG), which allows attackers to obtain the keys and perform dynamic DNS updates.
Key phrases: obtain the keys and perform dynamic DNS updates, insecure permissions, dynamic dns updates
CVE-2001-0498: Transparent Network Substrate (TNS) over Net8 (SQLNet) in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a denial of service via a malformed SQLNet connection request with a large offset in the header extension.
Key phrases: cause a denial of service via a malformed, malformed sqlnet connection request
CVE-2001-0499: Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands (1) STATUS, (2) PING, (3) SERVICES, (4) TRC_FILE, (5) SAVE_CONFIG, or (6) RELOAD.
Key phrases: gain privileges, gain privileges via a long argument to the, buffer overflow
CVE-2001-0500: Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long argument to, buffer overflow
CVE-2001-0501: Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manner that escapes detection by the security scanner.
Key phrases: automatically execute macros without warning the user by, escapes detection
CVE-2001-0502: Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the directory principal is a domain user and the data attribute is the domain password, which allows local users to modify the login password of other users.
Key phrases: modify the login password of other users
CVE-2001-0503: Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service via a malformed string to the NetMeeting service port, aka a variant of the "NetMeeting Desktop Sharing" vulnerability.
Key phrases: cause a denial of service via a malformed, remote desktop sharing, netmeeting desktop sharing
CVE-2001-0504: Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to gain privileges and conduct activities such as mail relaying.
Key phrases: gain privileges, use incorrect credentials to gain privileges and conduct
CVE-2001-0505: Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed requests to (1) the Telnet service, or (2) the NFS service.
Key phrases: denial of service (memory exhaustion), cause a denial of service (memory exhaustion, memory leaks
CVE-2001-0506: Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for a long filename, which triggers the overflow when the directory name is added, aka the "SSI privilege elevation" vulnerability.
Key phrases: gain system privileges, gain system privileges via a Server-Side, buffer overflow, ssi privilege elevation
CVE-2001-0507: IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the "System file listing privilege elevation" vulnerability.
Key phrases: gain privileges, gain privileges via a Trojan horse file, system file listing privilege elevation
CVE-2001-0508: Vulnerability in IIS 5.0 allows remote attackers to cause a denial of service (restart) via a long, invalid WebDAV request.
Key phrases: denial of service (restart), cause a denial of service (restart)
CVE-2001-0509: Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote attackers to cause a denial of service via malformed inputs.
Key phrases: cause a denial of service via malformed inputs, rpc servers
CVE-2001-0513: Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to process the request, which allows remote attackers to cause a denial of service by repeatedly connecting to the Oracle listener but not connecting to the redirected port.
Key phrases: cause a denial of service by repeatedly connecting
CVE-2001-0514: SNMP service in Atmel 802.11b VNET-B Access Point 1.3 and earlier, as used in Netgear ME102 and Linksys WAP11, accepts arbitrary community strings with requested MIB modifications, which allows remote attackers to obtain sensitive information such as WEP keys, cause a denial of service, or gain access to the network.
Key phrases: accepts arbitrary community strings, obtain sensitive information, gain access, obtain sensitive information such as WEP keys, mib modifications, denial of service, access to the network
CVE-2001-0515: Oracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a malformed connection packet with a large offset_to_data value.
Key phrases: cause a denial of service via a malformed, malformed connection packet, large offset_to_data value
CVE-2001-0516: Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed connection packet that contains an incorrect requester_version value that does not match an expected offset to the data.
Key phrases: cause a denial of service via a malformed, malformed connection packet, incorrect requester_version value
CVE-2001-0517: Oracle listener in Oracle 8i on Solaris allows remote attackers to cause a denial of service via a malformed connection packet with a maximum transport data size that is set to 0.
Key phrases: cause a denial of service via a malformed, malformed connection packet, maximum transport data size
CVE-2001-0518: Oracle listener before Oracle 9i allows attackers to cause a denial of service by repeatedly sending the first portion of a fragmented Oracle command without sending the remainder of the command, which causes the listener to hang.
Key phrases: cause a denial of service by repeatedly sending, hang
CVE-2001-0519: Aladdin eSafe Gateway versions 2.x allows a remote attacker to circumvent HTML SCRIPT filtering via a special arrangement of HTML tags which includes SCRIPT tags embedded within other SCRIPT tags.
Key phrases: circumvent HTML SCRIPT filtering via a special arrangement
CVE-2001-0520: Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent filtering of SCRIPT tags by embedding the scripts within certain HTML tags including (1) onload in the BODY tag, (2) href in the A tag, (3) the BUTTON tag, (4) the INPUT tag, or (5) any other tag in which scripts can be defined.
Key phrases: circumvent filtering of SCRIPT tags by embedding the, script tags
CVE-2001-0521: Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent HTML SCRIPT filtering via the UNICODE encoding of SCRIPT tags within the HTML document.
Key phrases: circumvent HTML SCRIPT filtering via the UNICODE encoding
CVE-2001-0522: Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the original filename that is stored in an encrypted file.
Key phrases: gain privileges, gain privileges via format strings in the original
CVE-2001-0523: eEye SecureIIS versions 1.0.3 and earlier allows a remote attacker to bypass filtering of requests made to SecureIIS by escaping HTML characters within the request, which could allow a remote attacker to use restricted variables and perform directory traversal attacks on vulnerable programs that would otherwise be protected.
Key phrases: bypass filtering, bypass filtering of requests made to SecureIIS by, use restricted variables and perform directory traversal attacks, vulnerable programs
CVE-2001-0524: eEye SecureIIS versions 1.0.3 and earlier does not perform length checking on individual HTTP headers, which allows a remote attacker to send arbitrary length strings to IIS, contrary to an advertised feature of SecureIIS versions 1.0.3 and earlier.
Key phrases: send arbitrary length strings, send arbitrary length strings to IIS
CVE-2001-0525: Buffer overflow in dsh in dqs 3.2.7 in SuSE Linux 7.0 and earlier, and possibly other operating systems, allows local users to gain privileges via a long first command line argument.
Key phrases: gain privileges, gain privileges via a long first command line, buffer overflow
CVE-2001-0526: Buffer overflow in the Xview library as used by mailtool in Solaris 8 and earlier allows a local attacker to gain privileges via the OPENWINHOME environment variable.
Key phrases: gain privileges, gain privileges via the OPENWINHOME environment variable, buffer overflow
CVE-2001-0527: DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (|) and newlines into the last name in the registration form, which will create an extra entry in the registration database.
Key phrases: gain additional privileges, gain additional privileges by inserting pipe symbols (, extra entry
CVE-2001-0528: Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x includes a debug version of FNDPUB11I.DLL, which logs the APPS schema password in cleartext in a debug file, which allows local users to obtain the password and gain privileges.
Key phrases: obtain the password, gain privileges, obtain the password and gain privileges, cleartext
CVE-2001-0529: OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' via a symlink attack.
Key phrases: delete any file named 'cookies' via, x forwarding, symlink
CVE-2001-0530: Spearhead NetGAP 200 and 300 before build 78 allow a remote attacker to bypass file blocking and content inspection via specially encoded URLs which include '%' characters.
Key phrases: bypass file blocking and content inspection via specially encoded URLs, specially encoded urls
CVE-2001-0533: Buffer overflow in libi18n library in IBM AIX 5.1 and 4.3.x allows local users to gain root privileges via a long LANG environmental variable.
Key phrases: gain root privileges, gain root privileges via a long LANG environmental, buffer overflow
CVE-2001-0534: Multiple buffer overflows in RADIUS daemon radiusd in (1) Merit 3.6b and (2) Lucent 2.1-2 RADIUS allow remote attackers to cause a denial of service or execute arbitrary commands.
Key phrases: execute arbitrary commands, cause a denial of service or execute arbitrary, buffer overflows
CVE-2001-0535: Example applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent access from outside the local host's domain, which allows remote attackers to conduct upload, read, or execute files by spoofing the "HTTP Host" (CGI.Host) variable in (1) the "Web Publish" example script, and (2) the "Email" example script.
Key phrases: conduct upload, spoofing
CVE-2001-0537: HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.
Key phrases: execute arbitrary commands, bypass authentication, bypass authentication and execute arbitrary commands
CVE-2001-0538: Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.
Key phrases: execute arbitrary commands, execute arbitrary commands via a malicious HTML e
CVE-2001-0540: Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed Remote Desktop Protocol (RDP) requests to port 3389.
Key phrases: denial of service (memory exhaustion), cause a denial of service (memory exhaustion, memory leak
CVE-2001-0541: Buffer overflow in Microsoft Windows Media Player 7.1 and earlier allows remote attackers to execute arbitrary commands via a malformed Windows Media Station (.NSC) file.
Key phrases: execute arbitrary commands, execute arbitrary commands via a malformed Windows Media, buffer overflow
CVE-2001-0542: Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf.  NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879.
Key phrases: execute arbitrary code, SQL Server to execute arbitrary code through the, buffer overflows, c runtime format string
CVE-2001-0543: Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed posts.
Key phrases: denial of service (memory exhaustion), cause a denial of service (memory exhaustion, memory leak
CVE-2001-0544: IIS 5.0 allows local users to cause a denial of service (hang) via by installing content that produces a certain invalid MIME Content-Type header, which corrupts the File Type table.
Key phrases: denial of service (hang), cause a denial of service (hang), invalid mime content-type header, corrupts
CVE-2001-0545: IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service (crash) via a malformed request that specifies a length that is different than the actual length.
Key phrases: denial of service (crash), cause a denial of service (crash), malformed request
CVE-2001-0546: Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (resource exhaustion) via a large amount of malformed H.323 data.
Key phrases: denial of service (resource exhaustion), cause a denial of service (resource exhaustion, memory leak
CVE-2001-0547: Memory leak in the proxy service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows local attackers to cause a denial of service (resource exhaustion).
Key phrases: denial of service (resource exhaustion), cause a denial of service (resource exhaustion, memory leak
CVE-2001-0548: Buffer overflow in dtmail in Solaris 2.6 and 7 allows local users to gain privileges via the MAIL environment variable.
Key phrases: gain privileges, gain privileges via the MAIL environment variable, buffer overflow
CVE-2001-0549: Symantec LiveUpdate 1.5 stores proxy passwords in cleartext in a registry key, which could allow local users to obtain the passwords.
Key phrases: obtain the passwords, cleartext
CVE-2001-0550: wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).
Key phrases: execute arbitrary commands, execute arbitrary commands via a "~{
CVE-2001-0551: Buffer overflow in CDE Print Viewer (dtprintinfo) allows local users to execute arbitrary code by copying text from the clipboard into the Help window.
Key phrases: execute arbitrary code, execute arbitrary code by copying text from the, buffer overflow
CVE-2001-0552: ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in a
CVE-2001-0553: SSH Secure Shell 3.0.0 on Unix systems does not properly perform password authentication to the sshd2 daemon, which allows local users to gain access to accounts with short password fields, such as locked accounts that use "NP" in the password field.
Key phrases: gain access, gain access to accounts with short password fields
CVE-2001-0554: Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.
Key phrases: execute arbitrary commands, execute arbitrary commands via a set of options, buffer overflow
CVE-2001-0555: ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a ..  (dot dot) attack through (1) the SITEWare Editor's Desktop or (2) the template parameter in SWEditServlet.
Key phrases: read world-readable files via a .., .. (dot dot), template parameter, dot dot attack
CVE-2001-0556: The Nirvana Editor (NEdit) 5.1.1 and earlier allows a local attacker to overwrite other users' files via a symlink attack on (1) backup files or (2) temporary files used when nedit prints a file or portions of a file.
Key phrases: overwrite other users' files via a symlink
CVE-2001-0557: T. Hauck Jana Webserver 1.46 and earlier allows a remote attacker to view arbitrary files via a '..' (dot dot) attack which is URL encoded (%2e%2e).
Key phrases: view arbitrary files, view arbitrary files via a '..', dot dot attack
CVE-2001-0558: T. Hauck Jana Webserver 2.01 beta 1 and earlier allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name (i.e. GET /aux HTTP/1.0).
Key phrases: create a denial of service via a URL
CVE-2001-0559: crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error.
Key phrases: gain additional privileges, gain additional privileges when an editor is called
CVE-2001-0560: Buffer overflow in Vixie cron 3.0.1-56 and earlier could allow a local attacker to gain additional privileges via a long username (> 20 characters).
Key phrases: gain additional privileges, gain additional privileges via a long username (, buffer overflow
CVE-2001-0561: Directory traversal vulnerability in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in (1) a1disp2.cgi, (2) a1disp3.cgi, or (3) a1disp4.cgi.
Key phrases: read arbitrary files, read arbitrary files via a '..', directory traversal, .. (dot dot), dot dot attack
CVE-2001-0562: a1disp.cgi program in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to execute commands via a specially crafted URL which includes shell metacharacters.
Key phrases: execute commands via a specially crafted URL which, shell metacharacters
CVE-2001-0563: ElectroSystems Engineering Inc. ElectroComm 2.0 and earlier allows a remote attacker to create a denial of service via large (> 160000 character) strings sent to port 23.
Key phrases: create a denial of service via large (
CVE-2001-0564: APC Web/SNMP Management Card prior to Firmware 310 only supports one telnet connection, which allows a remote attacker to create a denial of service via repeated failed logon attempts which temporarily locks the card.
Key phrases: create a denial of service via repeated failed, telnet connection, temporarily locks
CVE-2001-0565: Buffer overflow in mailx in Solaris 8 and earlier allows a local attacker to gain additional privileges via a long '-F' command line option.
Key phrases: gain additional privileges, gain additional privileges via a long '-F, buffer overflow
CVE-2001-0566: Cisco Catalyst 2900XL switch allows a remote attacker to create a denial of service via an empty UDP packet sent to port 161 (SNMP) when SNMP  is disabled.
Key phrases: create a denial of service via an empty, empty udp packet
CVE-2001-0567: Digital Creations Zope 2.3.2 and earlier allows a local attacker to gain additional privileges via the changing of ZClass permission mappings for objects and methods in the ZClass.
Key phrases: gain additional privileges, gain additional privileges via the changing of ZClass
CVE-2001-0568: Digital Creations Zope 2.3.1 b1 and earlier allows a local attacker (Zope user) with through-the-web scripting capabilities to alter ZClasses class attributes.
Key phrases: alter ZClasses class attributes, through-the-web scripting capabilities
CVE-2001-0569: Digital Creations Zope 2.3.1 b1 and earlier contains a problem in the method return values related to the classes (1) ObjectManager, (2) PropertyManager, and (3) PropertySheet.
CVE-2001-0570: minicom 1.83.1 and earlier allows a local attacker to gain additional privileges via numerous format string attacks.
Key phrases: gain additional privileges, gain additional privileges via numerous format string attacks
CVE-2001-0571: Directory traversal vulnerability in the web server for (1) Elron Internet Manager (IM) Message Inspector and (2) Anti-Virus before 3.0.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the requested URL.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal
CVE-2001-0572: The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the following information via sniffing: (1) password lengths or ranges of lengths, which simplifies brute force password guessing, (2) whether RSA or DSA authentication is being used, (3) the number of authorized_keys in RSA authentication, or (4) the lengths of shell commands.
Key phrases: obtain the following information, obtain the following information via sniffing: (, weaknesses, brute force password guessing
CVE-2001-0573: lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named (1) grep or (2) lslv in a certain directory that is under the user's control, which cause lsfs to access the programs in that directory.
Key phrases: gain additional privileges, gain additional privileges by creating Trojan horse programs
CVE-2001-0574: Directory traversal vulnerability in MP3Mystic prior to 1.04b3 allows a remote attacker to download arbitrary files via a '..' (dot dot) in the URL.
Key phrases: download arbitrary files, download arbitrary files via a '..', directory traversal
CVE-2001-0575: Buffer overflow in lpshut in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a long first argument to lpshut.
Key phrases: gain additional privileges, gain additional privileges via a long first argument, buffer overflow
CVE-2001-0576: lpusers as included with SCO OpenServer 5.0 through 5.0.6 allows a  local attacker to gain additional privileges via a buffer overflow attack in the '-u' command line parameter.
Key phrases: gain additional privileges, gain additional privileges via a buffer overflow attack
CVE-2001-0577: recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first command line argument.
Key phrases: gain additional privileges, gain additional privileges via a buffer overflow attack
CVE-2001-0578: Buffer overflow in lpforms in SCO OpenServer 5.0-5.0.6 can allow a local attacker to gain additional privileges via a long first argument to the lpforms command.
Key phrases: gain additional privileges, gain additional privileges via a long first argument, buffer overflow
CVE-2001-0579: lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first argument to the command.
Key phrases: gain additional privileges, gain additional privileges via a buffer overflow attack
CVE-2001-0580: Hughes Technologies Virtual DNS (VDNS) Server 1.0 allows a remote attacker to create a denial of service by connecting to port 6070, sending some data, and closing the connection.
Key phrases: create a denial of service by connecting to
CVE-2001-0581: Spytech Spynet Chat Server 6.5 allows a remote attacker to create a denial of service (crash) via a large number of connections to port 6387.
Key phrases: denial of service (crash), create a denial of service (crash)
CVE-2001-0582: Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' (dot dot) attack, or variations, in (1) GET, (2) CD, (3) NLST, (4) SIZE, (5) RETR.
Key phrases: access arbitrary files, access arbitrary files via a '..', .. (dot dot), dot dot attack
CVE-2001-0583: Alt-N Technologies MDaemon 3.5.4 allows a remote attacker to create a denial of service via the URL request of a MS-DOS device (such as GET /aux) to (1) the Worldclient service at port 3000, or (2) the Webconfig service at port 3001.
Key phrases: create a denial of service via the URL
CVE-2001-0584: IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service (hang) via long (1) SELECT or (2) EXAMINE commands.
Key phrases: denial of service (hang), cause a denial of service (hang)
CVE-2001-0585: Gordano NTMail 6.0.3c allows a remote attacker to create a denial of service via a long (>= 255 characters) URL request to port 8000 or port 9000.
Key phrases: create a denial of service via a long
CVE-2001-0586: TrendMicro ScanMail for Exchange 3.5 Evaluation allows a local attacker to recover the administrative credentials for ScanMail via a combination of unprotected registry keys and weakly encrypted passwords.
Key phrases: recover the administrative credentials for ScanMail via a, unprotected registry keys, weakly encrypted passwords
CVE-2001-0587: deliver program in MMDF 2.43.3b in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command.
Key phrases: gain additional privileges, gain additional privileges via a buffer overflow in
CVE-2001-0588: sendmail 8.9.3, as included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6, can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command.
Key phrases: gain additional privileges, gain additional privileges via a buffer overflow in
CVE-2001-0589: NetScreen ScreenOS prior to 2.5r6 on the NetScreen-10 and Netscreen-100 can allow a local attacker to bypass the DMZ 'denial' policy via specific traffic patterns.
Key phrases: bypass the DMZ 'denial' policy, bypass the DMZ 'denial' policy via
CVE-2001-0590: Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request which does not end with an HTTP protocol specification (i.e. HTTP/1.0).
Key phrases: read the source code to arbitrary 'jsp, malformed url request
CVE-2001-0591: Directory traversal vulnerability in Oracle JSP 1.0.x through 1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 can allow a remote attacker to read or execute arbitrary .jsp files via a '..' (dot dot) attack.
Key phrases: read or execute arbitrary .jsp files via a, directory traversal, dot dot attack
CVE-2001-0592: Watchguard Firebox II prior to 4.6 allows a remote attacker to create a denial of service in the kernel via a large stream (>10,000) of malformed ICMP or TCP packets.
Key phrases: create a denial of service in the kernel
CVE-2001-0593: Anaconda Partners Clipper 3.3 and earlier allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in the template parameter.
Key phrases: read arbitrary files, read arbitrary files via a '..', .. (dot dot), template parameter, dot dot attack
CVE-2001-0594: kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overflow in a command line argument.
Key phrases: gain additional privileges, gain additional privileges via a buffer overflow in
CVE-2001-0595: Buffer overflow in the kcsSUNWIOsolf.so library in Solaris 7 and 8 allows local attackers to execute arbitrary commands via the KCMS_PROFILES environment variable, e.g. as demonstrated using the kcms_configure program.
Key phrases: execute arbitrary commands, execute arbitrary commands via the KCMS_PROFILES environment variable, buffer overflow
CVE-2001-0596: Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript.
Key phrases: execute arbitrary Javascript, execute arbitrary Javascript via a GIF image whose, arbitrary javascript
CVE-2001-0597: Zetetic Secure Tool for Recalling Important Passwords (STRIP) 0.5 and earlier for the PalmOS allows a local attacker to recover passwords via a brute force attack.  This attack is made feasible by STRIP's use of SysRandom, which is seeded by TimeGetTicks, and an implementation flaw which vastly reduces the password 'search space'.
Key phrases: recover passwords via a brute force attack, implementation flaw
CVE-2001-0598: Symantec Ghost 6.5 and earlier allows a remote attacker to create a denial of service by sending large (> 45Kb) amounts of data to the Ghost Configuration Server on port 1347, which triggers an error that is not properly handled.
Key phrases: create a denial of service by sending large
CVE-2001-0599: Sybase Adaptive Server Anywhere Database Engine 6.0.3.2747 and earlier as included with Symantec Ghost 6.5 allows a remote attacker to create a denial of service by sending large (> 45Kb) amounts of data to port 2638.
Key phrases: create a denial of service by sending large
CVE-2001-0600: Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated URL requests with the same HTTP headers, such as (1) Accept, (2) Accept-Charset, (3) Accept-Encoding, (4) Accept-Language, and (5) Content-Type.
Key phrases: create a denial of service via repeated URL
CVE-2001-0601: Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via HTTP requests containing certain combinations of UNICODE characters.
Key phrases: create a denial of service via HTTP requests
CVE-2001-0602: Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated (>400) URL requests for DOS devices.
Key phrases: create a denial of service via repeated (, dos devices
CVE-2001-0603: Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeatedly sending large (> 10Kb) amounts of data to the DIIOP - CORBA service on TCP port 63148.
Key phrases: create a denial of service via repeatedly sending
CVE-2001-0604: Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via URL requests (>8Kb) containing a large number of '/' characters.
Key phrases: create a denial of service via URL requests
CVE-2001-0605: Headlight Software MyGetright prior to 1.0b allows a remote attacker to upload and/or overwrite arbitrary files via a malicious .dld (skins-data) file which contains long strings of random data.
Key phrases: overwrite arbitrary files, upload and/or overwrite arbitrary files via a malicious
CVE-2001-0606: Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 (VVOS) with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service.
Key phrases: create a denial of service via the HTTPS
CVE-2001-0607: asecure as included with HP-UX 10.01 through 11.00 can allow a local attacker to create a denial of service and gain additional privileges via unsafe permissions on the asecure program, a different vulnerability than CVE-2000-0083.
Key phrases: gain additional privileges, create a denial of service and gain additional, unsafe permissions
CVE-2001-0608: HP architected interface facility (AIF) as includes with MPE/iX 5.5 through 6.5 running on a HP3000 allows an attacker to gain additional privileges and gain access to databases via the AIF - AIFCHANGELOGON program.
Key phrases: gain additional privileges, gain access, gain additional privileges and gain access to databases, aif - aifchangelogon program
CVE-2001-0609: Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function.
Key phrases: gain additional privileges, gain additional privileges via a malformed ident reply, format string
CVE-2001-0610: kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tmp.
Key phrases: gain additional privileges, gain additional privileges via a symlink attack in
CVE-2001-0611: Becky! 2.00.05 and earlier can allow a remote attacker to gain additional privileges via a buffer overflow attack on long messages without newline characters.
Key phrases: gain additional privileges, gain additional privileges via a buffer overflow attack
CVE-2001-0612: McAfee Remote Desktop 3.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number of packets to port 5045.
Key phrases: denial of service (crash), cause a denial of service (crash)
CVE-2001-0613: Omnicron Technologies OmniHTTPD Professional 2.08 and earlier allows a remote attacker to create a denial of service via a long POST URL request.
Key phrases: create a denial of service via a long, long post url request
CVE-2001-0614: Carello E-Commerce 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary commands via a specially constructed URL.
Key phrases: execute arbitrary commands, gain additional privileges, gain additional privileges and execute arbitrary commands via, specially constructed url
CVE-2001-0615: Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary files via a specially crafted URL which includes variations of a '..' (dot dot) attack such as '...' or '....'.
Key phrases: read arbitrary files, read arbitrary files via a specially crafted URL, directory traversal, dot dot attack
CVE-2001-0616: Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name (e.g., GET /aux HTTP/1.0).
Key phrases: create a denial of service via a URL
CVE-2001-0617: Allied Telesyn AT-AR220e cable/DSL router firmware 1.08a RC14 with the portmapper and the 'Virtual Server' enabled can allow a remote attacker to gain access to mapped services even though the single portmappings may be disabled.
Key phrases: gain access, gain access to mapped services even though the, single portmappings
CVE-2001-0618: Orinoco RG-1000 wireless Residential Gateway uses the last 5 digits of the 'Network Name' or SSID as the default Wired Equivalent Privacy (WEP) encryption key.  Since the SSID occurs in the clear during communications, a remote attacker could determine the WEP key and decrypt RG-1000 traffic.
CVE-2001-0619: The Lucent Closed Network protocol can allow remote attackers to join Closed Network networks which they do not have access to.  The 'Network Name' or SSID, which is used as a shared secret to join the network, is transmitted in the clear.
Key phrases: join Closed Network networks which they do not, clear
CVE-2001-0620: iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server (NAS) LDAP database and read arbitrary files by obtaining the cleartext administrator username and password from the configuration file, which has insecure permissions.
Key phrases: read arbitrary files, gain access, gain access to the Netscape Admin Server (, insecure permissions
CVE-2001-0621: The FTP server on Cisco Content Service 11000 series switches (CSS) before WebNS 4.01B23s and WebNS 4.10B13s allows an attacker who is an FTP user to read and write arbitrary files via GET or PUT commands.
Key phrases: write arbitrary files, read and write arbitrary files via GET or
CVE-2001-0622: The web management service on Cisco Content Service series 11000 switches (CSS) before WebNS 4.01B29s or WebNS 4.10B17s allows a remote attacker to gain additional privileges by directly requesting the web management URL instead of navigating through the interface.
Key phrases: gain additional privileges, gain additional privileges by directly requesting the web
CVE-2001-0623: sendfiled, as included with Simple Asynchronous File Transfer (SAFT), on various Linux systems does not properly drop privileges when sending notification emails, which allows local attackers to gain privileges.
Key phrases: gain privileges
CVE-2001-0624: QNX 2.4 allows a local user to read arbitrary files by directly accessing the mount point for the FAT disk partition, e.g. /fs-dos.
Key phrases: read arbitrary files, read arbitrary files by directly accessing the mount
CVE-2001-0625: ftpdownload in Computer Associates InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink attack on /tmp/ftpdownload.log .
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack on
CVE-2001-0626: O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL request containing a ":" character.
Key phrases: determine the physical path to the root directory
CVE-2001-0627: vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attack.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack
CVE-2001-0628: Microsoft Word 2000 does not check AutoRecovery (.asd) files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user.
Key phrases: execute arbitrary macros, execute arbitrary macros with the user ID of