yahoo-inc/cve-impacts huggingface dataset:
CVE-2001-0820: Buffer overflows in GazTek ghttpd 1.4 allows a remote attacker to execute arbitrary code via long arguments that are passed to (1) the Log function in util.c, or (2) serveconnection in protocol.c.
Key phrases: execute arbitrary code, execute arbitrary code via long arguments that are, buffer overflows
CVE-2001-0821: The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via an HTTP GET request for (1) orders.txt or (2) auth_user_file.txt.
Key phrases: read sensitive data via an HTTP GET request, sensitive files
CVE-2001-0822: FPF kernel module 1.0 allows a remote attacker to cause a denial of service via fragmented packets.
Key phrases: cause a denial of service via fragmented packets
CVE-2001-0823: The pmpost program in Performance Co-Pilot (PCP) before 2.2.1-3 allows a local user to gain privileges via a symlink attack on the NOTICES file in the PCP log directory (PCP_LOG_DIR).
Key phrases: gain privileges, gain privileges via a symlink attack on the
CVE-2001-0824: Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into (1) a request for a .JSP file, or (2) a request to the webapp/examples/ directory, which inserts the Javascript into an error page.
Key phrases: execute Javascript by inserting the Javascript into (, cross-site scripting
CVE-2001-0825: Buffer overflow in internal string handling routines of xinetd before 2.1.8.8 allows remote attackers to execute arbitrary commands via a length argument of zero or less, which disables the length check.
Key phrases: execute arbitrary commands, execute arbitrary commands via a length argument of, buffer overflow
CVE-2001-0826: Buffer overflows in CesarFTPD 0.98b allows remote attackers to execute arbitrary commands via long arguments to (1) HELP, (2) USER, (3) PASS, (4) PORT, (5) DELE, (6) REST, (7) RMD, or (8) MKD.
Key phrases: execute arbitrary commands, execute arbitrary commands via long arguments to (, buffer overflows
CVE-2001-0827: Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service (crash) via a large number of "PASV" requests.
Key phrases: denial of service (crash), cause a denial of service (crash)
CVE-2001-0828: A cross-site scripting vulnerability in Caucho Technology Resin before 1.2.4 allows a malicious webmaster to embed Javascript in a hyperlink that ends in a .jsp extension, which causes an error message that does not properly quote the Javascript.
Key phrases: embed Javascript in a hyperlink that ends in, cross-site scripting
CVE-2001-0829: A cross-site scripting vulnerability in Apache Tomcat 3.2.1 allows a malicious webmaster to embed Javascript in a request for a .JSP file, which causes the Javascript to be inserted into an error message.
Key phrases: embed Javascript in a request for a .JSP, cross-site scripting, error message
CVE-2001-0830: 6tunnel 0.08 and earlier does not properly close sockets that were initiated by a client, which allows remote attackers to cause a denial of service (resource exhaustion) by repeatedly connecting to and disconnecting from the server.
Key phrases: denial of service (resource exhaustion), cause a denial of service (resource exhaustion
CVE-2001-0831: Unknown vulnerability in Oracle Label Security in Oracle 8.1.7 and 9.0.1, when audit functionality, SET_LABEL, or SQL*Predicate is being used, allows local users to gain additional access.
Key phrases: gain additional access, unknown
CVE-2001-0832: Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a symlink attack or incorrect file permissions in (1) the ORACLE_HOME/rdbms/log directory or (2) an alternate directory as specified in the ORACLE_HOME environmental variable, aka the "Oracle File Overwrite Security Vulnerability."
Key phrases: overwrite arbitrary files, symlink, oracle file overwrite security
CVE-2001-0833: Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable, aka the "Oracle Trace Collection Security Vulnerability."
Key phrases: execute arbitrary code, execute arbitrary code via a long ORACLE_HOME environment, buffer overflow, oracle trace collection security
CVE-2001-0834: htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1) cause a denial of service (CPU consumption) by specifying a large file such as /dev/zero, or (2) read arbitrary files by uploading an alternate configuration file that specifies the target file.
Key phrases: read arbitrary files, denial of service (CPU consumption), use the -c option to specify an alternate, arbitrary file upload
CVE-2001-0835: Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers to inject arbitrary HTML tags by specifying them in (1) search keywords embedded in HTTP referrer information, or (2) host names that are retrieved via a reverse DNS lookup.
Key phrases: inject arbitrary HTML tags, inject arbitrary HTML tags by specifying them in, cross-site scripting
CVE-2001-0836: Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.
Key phrases: execute arbitrary code, execute arbitrary code via a long HTTP GET, buffer overflow
CVE-2001-0837: DeltaThree Pc-To-Phone 3.0.3 places sensitive data in world-readable locations in the installation directory, which allows local users to read the information in (1) temp.html, (2) the log folder, and (3) the PhoneBook folder.
Key phrases: read the information in (1) temp.html, world-readable locations
CVE-2001-0838: Format string vulnerability in Network Solutions Rwhoisd 1.5.x allows remote attackers to execute arbitrary code via format string specifiers in the -soa command.
Key phrases: execute arbitrary code, execute arbitrary code via format string specifiers in
CVE-2001-0839: ibillpm.pl in iBill password management system generates weak passwords based on a client's MASTER_ACCOUNT, which allows remote attackers to modify account information in the .htpasswd file via brute force password guessing.
Key phrases: modify account information in the .htpasswd file via, weak passwords
CVE-2001-0840: Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute arbitrary code via (1) SNMP and (2) DMI.
Key phrases: execute arbitrary code, execute arbitrary code via (1) SNMP, buffer overflow
CVE-2001-0841: Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.
Key phrases: gain privileges, overwrite files and gain privileges via .. (, directory traversal
CVE-2001-0842: Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.
Key phrases: gain privileges, overwrite files and gain privileges via .. (, directory traversal
CVE-2001-0843: Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service (crash) via a mkdir-only FTP PUT request.
Key phrases: denial of service (crash), cause a denial of service (crash), mkdir-only ftp put request
CVE-2001-0844: Vulnerability in (1) Book of guests and (2) Post it! allows remote attackers to execute arbitrary code via shell metacharacters in the email parameter.
Key phrases: execute arbitrary code, execute arbitrary code via shell metacharacters in the, book of guests
CVE-2001-0845: Vulnerability in DECwindows Motif Server on OpenVMS VAX or Alpha 6.2 through 7.3, and SEVMS VAX or Alpha 6.2, allows local users to gain access to unauthorized resources.
Key phrases: gain access, gain access to unauthorized resources
CVE-2001-0846: Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file (webadmin.ntf).
Key phrases: execute arbitrary code, read files or execute arbitrary code by requesting, replicaid
CVE-2001-0847: Lotus Domino Web Server 5.x allows remote attackers to gain sensitive information by accessing the default navigator $defaultNav via (1) URL encoding the request, or (2) directly requesting the ReplicaID.
Key phrases: gain sensitive information, gain sensitive information by accessing the default navigator, url encoding, replicaid
CVE-2001-0848: join.cfm in e-Zone Media Fuse Talk allows a local user to execute arbitrary SQL code via a semi-colon (;) in a form variable.
Key phrases: execute arbitrary SQL code, execute arbitrary SQL code via a semi-
CVE-2001-0849: viralator CGI script in Viralator 0.9pre1 and earlier allows remote attackers to execute arbitrary code via a URL for a file being downloaded, which is insecurely passed to a call to wget.
Key phrases: execute arbitrary code, execute arbitrary code via a URL for a, insecurely passed
CVE-2001-0850: A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit those functions with a buffer overflow.
Key phrases: exploit those functions with a buffer overflow
CVE-2001-0851: Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie.
Key phrases: bypass firewall rules, bypass firewall rules by brute force guessing the, syncookies
CVE-2001-0852: TUX HTTP server 2.1.0-2 in Red Hat Linux allows remote attackers to cause a denial of service via a long Host: header.
Key phrases: cause a denial of service via a long, long host: header
CVE-2001-0853: Directory traversal vulnerability in Entrust GetAccess allows remote attackers to read arbitrary files via a .. (dot dot) in the locale parameter to (1) helpwin.gas.bat or (2) AboutBox.gas.bat.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal
CVE-2001-0854: PHP-Nuke 5.2 allows remote attackers to copy and delete arbitrary files by calling case.filemanager.php with admin.php as an argument, which sets the $PHP_SELF variable and makes it appear that case.filemanager.php is being called by admin.php instead of the user.
Key phrases: delete arbitrary files, copy and delete arbitrary files by calling case.filemanager.php
CVE-2001-0855: Buffer overflow in db_loader in ClearCase 4.2 and earlier allows local users to gain root privileges via a long TERM environment variable.
Key phrases: gain root privileges, gain root privileges via a long TERM environment, buffer overflow
CVE-2001-0856: Common Cryptographic Architecture (CCA) in IBM 4758 allows an attacker with physical access to the system and Combine_Key_Parts permissions, to steal DES and 3DES keys by using a brute force attack to create a 3DES exporter key.
Key phrases: the system and Combine_Key_Parts permissions, brute force
CVE-2001-0857: Cross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote attackers to gain access to the e-mail of other users by hijacking session cookies via the message parameter.
Key phrases: gain access, gain access to the e-mail of, cross-site scripting
CVE-2001-0858: Buffer overflow in pppattach and other linked PPP utilities in Caldera Open Unix 8.0 and UnixWare 7.1.0 and 7.1.1 allows local users to gain privileges.
Key phrases: gain privileges, buffer overflow
CVE-2001-0859: 2.4.3-12 kernel in Red Hat Linux 7.1 Korean installation program sets the setting default umask for init to 000, which installs files with world-writeable permissions.
Key phrases: world-writeable permissions
CVE-2001-0860: Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through a Network Address Translation (NAT).
Key phrases: spoof their public IP address, spoofing
CVE-2001-0861: Cisco 12000 with IOS 12.0 and line cards based on Engine 2 and earlier allows remote attackers to cause a denial of service (CPU consumption) by flooding the router with traffic that generates a large number of ICMP Unreachable replies.
Key phrases: denial of service (CPU consumption), cause a denial of service (CPU consumption, icmp unreachable replies
CVE-2001-0862: Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet fragments, which allows remote attackers to bypass the ACL.
Key phrases: bypass the ACL, non-initial packet fragments
CVE-2001-0863: Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not handle the "fragment" keyword in a compiled ACL (Turbo ACL) for packets that are sent to the router, which allows remote attackers to cause a denial of service via a flood of fragments.
Key phrases: cause a denial of service via a flood, flood of fragments
CVE-2001-0864: Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit "deny ip any any" rule in an outgoing ACL when the ACL contains exactly 448 entries, which can allow some outgoing packets to bypass access restrictions.
Key phrases: bypass access restrictions
CVE-2001-0865: Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the "fragment" keyword in an outgoing ACL, which could allow fragmented packets in violation of the intended access.
Key phrases: fragmented packets in violation of the intended access
CVE-2001-0866: Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could allow remote attackers to bypass the intended access controls.
Key phrases: bypass the intended access controls
CVE-2001-0867: Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly filter does not properly filter packet fragments even when the "fragment" keyword is used in an ACL, which allows remote attackers to bypass the intended access controls.
Key phrases: bypass the intended access controls, packet fragments
CVE-2001-0868: Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to (1) stronghold-info or (2) stronghold-status.
Key phrases: retrieve system information via an HTTP GET request
CVE-2001-0869: Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyrus SASL library (cyrus-sasl) may allow remote attackers to execute arbitrary commands.
Key phrases: execute arbitrary commands, format string
CVE-2001-0870: HTTP server in Alchemy Eye and Alchemy Network Monitor 1.9x through 2.6.18 is enabled without authentication by default, which allows remote attackers to obtain network monitoring logs with potentially sensitive information by directly requesting the eye.ini file.
Key phrases: obtain network monitoring logs with potentially sensitive information, authentication
CVE-2001-0871: Directory traversal vulnerability in HTTP server for Alchemy Eye and Alchemy Network Monitor allows remote attackers to execute arbitrary commands via an HTTP request containing (1) a .. in versions 2.0 through 2.6.18, or (2) a DOS device name followed by a .. in versions 2.6.19 through 3.0.10.
Key phrases: execute arbitrary commands, execute arbitrary commands via an HTTP request containing, directory traversal
CVE-2001-0872: OpenSSH 3.0.1 and earlier with UseLogin enabled does not properly cleanse critical environment variables such as LD_PRELOAD, which allows local users to gain root privileges.
Key phrases: gain root privileges
CVE-2001-0873: uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileges by calling uux and specifying an alternate configuration file with the --config option.
Key phrases: gain privileges, gain privileges by calling uux and specifying an, dangerous long options
CVE-2001-0874: Internet Explorer 5.5 and 6.0 allow remote attackers to read certain files via HTML that passes information from a frame in the client's domain to a frame in the web site's domain, a variant of the "Frame Domain Verification" vulnerability.
Key phrases: read certain files via HTML that passes information, frame domain verification
CVE-2001-0875: Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in a way that could fool users into thinking that the file type is safe to download.
Key phrases: cause the File Download dialogue box to misrepresent, fool users
CVE-2001-0876: Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL.
Key phrases: execute arbitrary code, execute arbitrary code via a NOTIFY directive with, buffer overflow
CVE-2001-0877: Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service via (1) a spoofed SSDP advertisement that causes the client to connect to a service on another machine that generates a large amount of traffic (e.g., chargen), or (2) via a spoofed SSDP announcement to broadcast or multicast addresses, which could cause all UPnP clients to send traffic to a single target system.
Key phrases: cause a denial of service via (1, spoofed ssdp advertisement, spoofed ssdp announcement, spoofing
CVE-2001-0879: Format string vulnerability in the C runtime functions in SQL Server 7.0 and 2000 allows attackers to cause a denial of service.
Key phrases: cause a denial of service, format string
CVE-2001-0884: Cross-site scripting vulnerability in Mailman email archiver before 2.08 allows attackers to obtain sensitive information or authentication credentials via a malicious link that is accessed by other web users.
Key phrases: obtain sensitive information, obtain sensitive information or authentication credentials via a, cross-site scripting
CVE-2001-0886: Buffer overflow in glob function of glibc allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a glob pattern that ends in a brace "{" character.
Key phrases: execute arbitrary code, denial of service (crash), cause a denial of service (crash), buffer overflow, glob pattern
CVE-2001-0887: xSANE 0.81 and earlier allows local users to modify files of other xSANE users via a symlink attack on temporary files.
Key phrases: modify files of other xSANE users via a, symlink
CVE-2001-0888: Atmel Firmware 1.3 Wireless Access Point (WAP) allows remote attackers to cause a denial of service via a SNMP request with (1) a community string other than "public" or (2) an unknown OID, which causes the WAP to deny subsequent SNMP requests.
Key phrases: cause a denial of service via a SNMP, community string, unknown oid
CVE-2001-0889: Exim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe, which could allow remote attackers to execute arbitrary commands via shell metacharacters.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters
CVE-2001-0890: Certain backend drivers in the SANE library 1.0.3 and earlier, as used in frontend software such as XSane, allows local users to modify files via a symlink attack on temporary files.
Key phrases: modify files via a symlink attack on temporary
CVE-2001-0891: Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to submit a batch job whose name contains formatting characters.
Key phrases: gain root privileges, gain root privileges by using qsub to submit, format string
CVE-2001-0892: Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.
Key phrases: view sensitive files under the document root (
CVE-2001-0893: Acme mini_httpd before 1.16 allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.
Key phrases: view sensitive files under the document root (
CVE-2001-0894: Vulnerability in Postfix SMTP server before 20010228-pl07, when configured to email the postmaster when SMTP errors cause the session to terminate, allows remote attackers to cause a denial of service (memory exhaustion) by generating a large number of SMTP errors, which forces the SMTP session log to grow too large.
Key phrases: denial of service (memory exhaustion), cause a denial of service (memory exhaustion
CVE-2001-0895: Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the router's interface that contains a different MAC address for the router, which eventually causes the router to overwrite the MAC address in its ARP table.
Key phrases: cause a denial of service on the local
CVE-2001-0896: Inetd in OpenServer 5.0.5 allows remote attackers to cause a denial of service (crash) via a port scan, e.g. with nmap -PO.
Key phrases: denial of service (crash), cause a denial of service (crash)
CVE-2001-0897: Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that references an about: URL with an onerror field.
Key phrases: steal user cookies via an [IMG], cross-site scripting
CVE-2001-0898: Opera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and links for other domains via Javascript that uses setTimeout to (1) access data after a new window to the domain has been opened or (2) access data via about:cache.
Key phrases: access sensitive information such as cookies and links
CVE-2001-0899: Network Tools 0.2 for PHP-Nuke allows remote attackers to execute commands on the server via shell metacharacters in the $hostinput variable.
Key phrases: execute commands on the server via shell metacharacters
CVE-2001-0900: Directory traversal vulnerability in modules.php in Gallery before 1.2.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the include parameter.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal
CVE-2001-0901: Hypermail allows remote attackers to execute arbitrary commands on a server supporting SSI via an attachment with a .shtml extension, which is archived on the server and can then be executed by requesting the URL for the attachment.
Key phrases: execute arbitrary commands, execute arbitrary commands on a server supporting SSI
CVE-2001-0902: Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters.
Key phrases: spoof web log entries via an HTTP request, spoofing
CVE-2001-0903: Linear key exchange process in High-bandwidth Digital Content Protection (HDCP) System allows remote attackers to access data as plaintext, avoid device blacklists, clone devices, and create new device keyvectors by computing and using alternate key combinations for authentication.
Key phrases: access data as plaintext, device blacklists, clone devices
CVE-2001-0904: Internet Explorer 5.5 and 6 with the Q312461 (MS01-055) patch modifies the HTTP_USER_AGENT (UserAgent) information that indicates that the patch has been installed, which could allow remote malicious web sites to more easily identify and exploit vulnerable clients.
Key phrases: more easily identify and exploit vulnerable clients
CVE-2001-0905: Race condition in signal handling of procmail 3.20 and earlier, when running setuid, allows local users to cause a denial of service or gain root privileges by sending a signal while a signal handling routine is already running.
Key phrases: gain root privileges, cause a denial of service or gain root, race condition
CVE-2001-0906: teTeX filter before 1.0.7 allows local users to gain privileges via a symlink attack on temporary files that are produced when printing .dvi files using lpr.
Key phrases: gain privileges, gain privileges via a symlink attack on temporary
CVE-2001-0907: Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a series of deeply nested symlinks, which causes the kernel to spend extra time when trying to access the link.
Key phrases: cause a denial of service via a series, deeply nested symlinks, extra time
CVE-2001-0908: CITRIX Metaframe 1.8 logs the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through Network Address Translation (NAT).
Key phrases: spoof their public IP address, spoofing
CVE-2001-0909: Buffer overflow in helpctr.exe program in Microsoft Help Center for Windows XP allows remote attackers to execute arbitrary code via a long hcp: URL.
Key phrases: execute arbitrary code, execute arbitrary code via a long hcp:, buffer overflow
CVE-2001-0910: Legato Networker before 6.1 allows remote attackers to bypass access restrictions and gain privileges on the Networker interface by spoofing the admin server name and IP address and connecting to Networker from an IP address whose hostname can not be determined by a DNS reverse lookup.
Key phrases: bypass access restrictions, gain privileges, bypass access restrictions and gain privileges on the, dns reverse lookup, spoofing
CVE-2001-0911: PHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow remote attackers to gain privileges by stealing or sniffing the cookie and decoding it.
Key phrases: gain privileges, gain privileges by stealing or sniffing the cookie, encoded cookie
CVE-2001-0912: Packaging error for expect 8.3.3 in Mandrake Linux 8.1 causes expect to search for its libraries in the /home/snailtalk directory before other directories, which could allow a local user to gain root privileges.
Key phrases: gain root privileges
CVE-2001-0913: Format string vulnerability in Network Solutions Rwhoisd 1.5.7.2 and earlier, when using syslog, allows remote attackers to corrupt memory and possibly execute arbitrary code via a rwhois request that contains format specifiers.
Key phrases: execute arbitrary code, corrupt memory and possibly execute arbitrary code via, format string
CVE-2001-0914: Linux kernel before 2.4.11pre3 in multiple Linux distributions allows local users to cause a denial of service (crash) by starting the core vmlinux kernel, possibly related to poor error checking during ELF loading.
Key phrases: denial of service (crash), cause a denial of service (crash), poor error checking
CVE-2001-0915: Format string vulnerability in Berkeley parallel make (pmake) 2.1.33 and earlier allows a local user to gain root privileges via format specifiers in the check argument of a shell definition.
Key phrases: gain root privileges, gain root privileges via format specifiers in the, format string
CVE-2001-0916: Buffer overflow in Berkeley parallel make (pmake) 2.1.33 and earlier allows a local user to gain root privileges via a long check argument of a shell definition.
Key phrases: gain root privileges, gain root privileges via a long check argument, buffer overflow
CVE-2001-0917: Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension.
Key phrases: reveal physical path information by requesting a long
CVE-2001-0918: Vulnerabilities in CGI scripts in susehelp in SuSE 7.2 and 7.3 allow remote attackers to execute arbitrary commands by not opening files securely.
Key phrases: execute arbitrary commands, execute arbitrary commands by not opening files securely, cgi scripts
CVE-2001-0919: Internet Explorer 5.50.4134.0100 on Windows ME with "Prompt to allow cookies to be stored on your machine" enabled does not warn a user when a cookie is set using Javascript.
Key phrases: be stored on your machine" enabled does
CVE-2001-0920: Format string vulnerability in auto nice daemon (AND) 1.0.4 and earlier allows a local user to possibly execute arbitrary code via a process name containing a format string.
Key phrases: execute arbitrary code, possibly execute arbitrary code via a process name, format string
CVE-2001-0921: Netscape 4.79 and earlier for MacOS allows an attacker with access to the browser to obtain passwords from form fields by printing the document into which the password has been typed, which is printed in cleartext.
Key phrases: obtain passwords, the browser to obtain passwords from form fields, cleartext
CVE-2001-0922: ndcgi.exe in Netdynamics 4.x through 5.x, and possibly earlier versions, allows remote attackers to steal session IDs and hijack user sessions by reading the SPIDERSESSION and uniqueValue variables from the login field, then using those variables after the next user logs in.
Key phrases: steal session IDs and hijack user sessions by
CVE-2001-0923: RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is queried.
Key phrases: execute arbitrary code, execute arbitrary code via corrupted data in the
CVE-2001-0924: Directory traversal vulnerability in ifx CGI program in Informix Web DataBlade allows remote attackers to read arbitrary files via a .. (dot dot) in the LO parameter.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal
CVE-2001-0925: The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / (slash) characters, which causes the path to be mishandled by (1) mod_negotiation, (2) mod_dir, or (3) mod_autoindex.
Key phrases: list directories instead of the multiview index.html file
CVE-2001-0926: SSIFilter in Allaire JRun 3.1, 3.0 and 2.3.3 allows remote attackers to obtain source code for Java server pages (.jsp) and other files in the web root via an HTTP request for a non-existent SSI page, in which the request's body has an #include statement.
Key phrases: obtain source code for Java server pages (.jsp
CVE-2001-0927: Format string vulnerability in the permitted function of GNOME libgtop_daemon in libgtop 1.0.12 and earlier allows remote attackers to execute arbitrary code via an argument that contains format specifiers that are passed into the (1) syslog_message and (2) syslog_io_message functions.
Key phrases: execute arbitrary code, execute arbitrary code via an argument that contains, format string
CVE-2001-0928: Buffer overflow in the permitted function of GNOME gtop daemon (libgtop_daemon) in libgtop 1.0.13 and earlier may allow remote attackers to execute arbitrary code via long authentication data.
Key phrases: execute arbitrary code, execute arbitrary code via long authentication data, buffer overflow
CVE-2001-0929: Cisco IOS Firewall Feature set, aka Context Based Access Control (CBAC) or Cisco Secure Integrated Software, for IOS 11.2P through 12.2T does not properly check the IP protocol type, which could allow remote attackers to bypass access control lists.
Key phrases: bypass access control, bypass access control lists
CVE-2001-0930: Sendpage.pl allows remote attackers to execute arbitrary commands via a message containing shell metacharacters.
Key phrases: execute arbitrary commands, execute arbitrary commands via a message containing shell, shell metacharacters
CVE-2001-0931: Directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03 allows attackers to list or read arbitrary files and directories via a .. (dot dot) in (1) LS or (2) GET.
Key phrases: read arbitrary files, list or read arbitrary files and directories via, directory traversal
CVE-2001-0932: Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long command.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflow
CVE-2001-0933: Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls (LIST) command that includes the drive letter as an argument, e.g. "ls C:".
Key phrases: list the contents of arbitrary drives via a
CVE-2001-0934: Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical path of the server root via the pwd command, which lists the full pathname.
Key phrases: obtain the physical path of the server root
CVE-2001-0935: Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550.
Key phrases: ftpglob bug
CVE-2001-0936: Buffer overflow in Frox transparent FTP proxy 0.6.6 and earlier, with the local caching method selected, allows remote FTP servers to run arbitrary code via a long response to an MDTM request.
Key phrases: run arbitrary code, run arbitrary code via a long response to, buffer overflow
CVE-2001-0937: PGPMail.pl 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) recipient or (2) pgpuserid parameters.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2001-0938: Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and read arbitrary files, and list arbitrary directories, via a .. (dot dot) in the Filename parameter in (1) UploadScript11.asp or (2) DirectoryListing.asp.
Key phrases: read arbitrary files, upload and read arbitrary files, directory traversal
CVE-2001-0939: Lotus Domino 5.08 and earlier allows remote attackers to cause a denial of service (crash) via a SunRPC NULL command to port 443.
Key phrases: denial of service (crash), cause a denial of service (crash), sunrpc null command
CVE-2001-0940: Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows remote attackers to execute arbitrary code via a long user name.
Key phrases: execute arbitrary code, execute arbitrary code via a long user name, buffer overflow
CVE-2001-0941: Buffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable.
Key phrases: execute arbitrary code, execute arbitrary code via a long ORACLE_HOME environment, buffer overflow
CVE-2001-0942: dbsnmp in Oracle 8.1.6 and 8.1.7 uses the ORACLE_HOME environment variable to find and execute the dbsnmp program, which allows local users to execute arbitrary programs by pointing the ORACLE_HOME to an alternate directory that contains a malicious version of dbsnmp.
Key phrases: execute arbitrary programs, execute arbitrary programs by pointing the ORACLE_HOME to
CVE-2001-0943: dbsnmp in Oracle 8.0.5 and 8.1.5, under certain conditions, trusts the PATH environment variable to find and execute the (1) chown or (2) chgrp commands, which allows local users to execute arbitrary code by modifying the PATH to point to Trojan Horse programs.
Key phrases: execute arbitrary code, execute arbitrary code by modifying the PATH to
CVE-2001-0944: DDE in mIRC allows local users to launch applications under another user's account via a DDE message that executes a command, which may be executed by the other user's process.
Key phrases: launch applications under another user's account via, execute commands
CVE-2001-0945: Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service via an e-mail message that contains a long line.
Key phrases: cause a denial of service via an e, buffer overflow
CVE-2001-0946: apmscript in Apmd in Red Hat 7.2 "Enigma" allows local users to create or change the modification dates of arbitrary files via a symlink attack on the LOW_POWER temporary file, which could be used to cause a denial of service, e.g. by creating /etc/nologin and disabling logins.
Key phrases: create or change the modification dates of arbitrary, symlink, denial of service, arbitrary file
CVE-2001-0947: Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to determine the real pathname of the server by requesting an invalid extension, which produces an error page that includes the path.
Key phrases: determine the real pathname of the server by, invalid extension
CVE-2001-0948: Cross-site scripting (CSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to execute arbitrary code or display false information by including HTML or script in the certificate's description, which is executed when the certificate is viewed.
Key phrases: execute arbitrary code, execute arbitrary code or display false information by, cross-site scripting (css)
CVE-2001-0949: Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 allows remote attackers to execute arbitrary code via long arguments to the parameters (1) Mode, (2) Certificate_File, (3) useExpiredCRLs, (4) listenLength, (5) maxThread, (6) maxConnPerSite, (7) maxMsgLen, (8) exitTime, (9) blockTime, (10) nextUpdatePeriod, (11) buildLocal, (12) maxOCSPValidityPeriod, (13) extension, and (14) a particular combination of parameters associated with private key generation that form a string of a certain length.
Key phrases: execute arbitrary code, execute arbitrary code via long arguments to the, buffer overflows
CVE-2001-0950: ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 uses insufficiently random data to (1) generate session tokens for HSMs using the C rand function, or (2) generate certificates or keys using /dev/urandom instead of another source which blocks when the entropy pool is low, which could make it easier for local or remote attackers to steal tokens or certificates via brute force guessing.
Key phrases: insufficiently random data, brute force guessing
CVE-2001-0951: Windows 2000 allows remote attackers to cause a denial of service (CPU consumption) by flooding Internet Key Exchange (IKE) UDP port 500 with packets that contain a large number of dot characters.
Key phrases: denial of service (CPU consumption), cause a denial of service (CPU consumption, cpu consumption
CVE-2001-0952: THQ Volition Red Faction Game allows remote attackers to cause a denial of service (hang) of a client or server via packets to UDP port 7755.
Key phrases: denial of service (hang), cause a denial of service (hang)
CVE-2001-0953: Kebi WebMail allows remote attackers to access the administrator menu and gain privileges via the /a/ hidden directory, which is installed under the web document root.
Key phrases: gain privileges, access the administrator menu and gain privileges via, a hidden directory
CVE-2001-0954: Lotus Domino 5.0.5 and 5.0.8, and possibly other versions, allows remote attackers to cause a denial of service (block access to databases that have not been previously accessed) via a URL that includes the . (dot) directory.
Key phrases: denial of service (block access to databases that have not been previously accessed), cause a denial of service (block access
CVE-2001-0955: Buffer overflow in fbglyph.c in XFree86 before 4.2.0, related to glyph clipping for large origins, allows attackers to cause a denial of service and possibly gain privileges via a large number of characters, possibly through the web page search form of KDE Konqueror or from an xterm command with a long title.
Key phrases: gain privileges, cause a denial of service and possibly gain, buffer overflow
CVE-2001-0956: speechd 0.54 and earlier, with the Festival or rsynth speech synthesis package, allows attackers to execute arbitrary commands via shell metacharacters.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters
CVE-2001-0958: Buffer overflows in eManager plugin for Trend Micro InterScan VirusWall for NT 3.51 and 3.51J allow remote attackers to execute arbitrary code via long arguments to the CGI programs (1) register.dll, (2) ContentFilter.dll, (3) SFNofitication.dll, (4) register.dll, (5) TOP10.dll, (6) SpamExcp.dll, and (7) spamrule.dll.
Key phrases: execute arbitrary code, execute arbitrary code via long arguments to the, buffer overflows
CVE-2001-0959: Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 creates a hidden share named ARCSERVE$, which allows remote attackers to obtain sensitive information and overwrite critical files.
Key phrases: obtain sensitive information, obtain sensitive information and overwrite critical files, hidden share
CVE-2001-0960: Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 stores the backup agent user name and password in cleartext in the aremote.dmp file in the ARCSERVE$ hidden share, which allows local and remote attackers to gain privileges.
Key phrases: gain privileges, cleartext
CVE-2001-0961: Buffer overflow in tab expansion capability of the most program allows local or remote attackers to execute arbitrary code via a malformed file that is viewed with most.
Key phrases: execute arbitrary code, execute arbitrary code via a malformed file that, buffer overflow
CVE-2001-0962: IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing.
Key phrases: gain privileges, gain privileges of WebSphere users via brute force, predictable session ids
CVE-2001-0963: Directory traversal vulnerability in SpoonFTP 1.1 allows local and sometimes remote attackers to access files outside of the FTP root via a ... (modified dot dot) in the CD (CWD) command.
Key phrases: access files outside of the FTP root via, directory traversal
CVE-2001-0964: Buffer overflow in client for Half-Life 1.1.0.8 and earlier allows malicious remote servers to execute arbitrary code via a long console command.
Key phrases: execute arbitrary code, execute arbitrary code via a long console command, buffer overflow
CVE-2001-0965: glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument that contains a large number of * (asterisk) characters.
Key phrases: denial of service (CPU consumption), cause a denial of service (CPU consumption, cpu consumption
CVE-2001-0966: Directory traversal vulnerability in Nudester 1.10 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the CD (CWD) command.
Key phrases: write arbitrary files, read or write arbitrary files via a .., directory traversal
CVE-2001-0967: Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() function, which makes it easier for an attacker to conduct brute force password guessing.
Key phrases: brute force password guessing
CVE-2001-0968: Knox Arkeia server 4.2, and possibly other versions, installs its root user with a null password by default, which allows local and remote users to gain privileges.
Key phrases: gain privileges, null password
CVE-2001-0969: ipfw in FreeBSD does not properly handle the use of "me" in its rules when point to point interfaces are used, which causes ipfw to allow connections from arbitrary remote hosts.
Key phrases: connections from arbitrary remote hosts
CVE-2001-0970: Cross-site scripting vulnerability in TDForum 1.2 CGI script (tdforum12.cgi) allows remote attackers to execute arbitrary script on other clients via a forum message that contains the script.
Key phrases: execute arbitrary script, execute arbitrary script on other clients via a, cross-site scripting
CVE-2001-0971: Directory traversal vulnerability in ACI 4d webserver allows remote attackers to read arbitrary files via a .. (dot dot) or drive letter (e.g., C:) in an HTTP request.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal
CVE-2001-0972: Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain administrative privileges by calculating the value of the admin cookie (UserID 1), i.e. "0888888."
Key phrases: gain administrative privileges, gain administrative privileges by calculating the value of, guessable cookies
CVE-2001-0973: BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and extracting a tar file with a symlink into the data-bag space.
Key phrases: modify arbitrary files, read or modify arbitrary files by uploading and, symlink, arbitrary file upload
CVE-2001-0974: Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
Key phrases: execute arbitrary code, format string
CVE-2001-0975: Buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
Key phrases: execute arbitrary code, buffer overflow
CVE-2001-0976: Vulnerability in HP Process Resource Manager (PRM) C.01.08.2 and earlier, as used by HP-UX Workload Manager (WLM), allows local users to gain root privileges via modified libraries or environment variables.
Key phrases: gain root privileges, gain root privileges via modified libraries or environment
CVE-2001-0977: slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field.
Key phrases: denial of service (crash), cause a denial of service (crash), invalid basic encoding rules (ber) length field
CVE-2001-0978: login in HP-UX 10.26 does not record failed login attempts in /var/adm/btmp, which could allow attackers to conduct brute force password guessing attacks without being detected or observed using the lastb program.
Key phrases: conduct brute force password guessing attacks without being
CVE-2001-0979: Buffer overflow in swverify in HP-UX 11.0, and possibly other programs, allows local users to gain privileges via a long command line argument.
Key phrases: gain privileges, gain privileges via a long command line argument, buffer overflow
CVE-2001-0980: docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters that are
CVE-2001-0981: HP CIFS/9000 Server (SAMBA) A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program without specifying the username of the user making the request, which could cause the server to change the password of a different user.
CVE-2001-0982: Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via encoded .. (dot dot) sequences containing "%2e" strings.
Key phrases: read arbitrary files or directories, read arbitrary files or directories via encoded .., directory traversal
CVE-2001-0983: UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt the passwords and gain privileges.
Key phrases: gain privileges, decrypt the passwords and gain privileges, weak encryption, decrypt password
CVE-2001-0984: Password Safe 1.7(1) leaves cleartext passwords in memory when a user copies the password to the clipboard and minimizes Password Safe with the "Clear the password when minimized" and "Lock password database on minimize and prompt on restore" options enabled, which could allow an attacker with access to the memory (e.g. an administrator) to read the passwords.
Key phrases: the memory (e.g. an administrator) to, cleartext passwords