yahoo-inc/cve-impacts huggingface dataset:
CVE-2001-0100: bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2001-0101: Vulnerability in fetchmail 5.5.0-2 and earlier in the AUTHENTICATE GSSAPI command.
CVE-2001-0102: "Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effectively removes the Owner password and allows the Normal user to log in as the Owner account without a password.
Key phrases: gain Owner privileges, gain Owner privileges by removing the Users &, log in as the Owner account without a, users & groups data file
CVE-2001-0103: CoffeeCup Direct and Free FTP clients uses weak encryption to store passwords in the FTPServers.ini file, which could allow attackers to easily decrypt the passwords.
Key phrases: easily decrypt the passwords, weak encryption, decrypt password
CVE-2001-0104: MDaemon Pro 3.5.1 and earlier allows local users to bypass the "lock server" security setting by pressing the Cancel button at the password prompt, then pressing the enter key.
Key phrases: bypass the "lock server" security setting
CVE-2001-0105: Vulnerability in top in HP-UX 11.04 and earlier allows local users to overwrite files owned by the "sys" group.
Key phrases: overwrite files owned by the "sys", vulnerability in top
CVE-2001-0106: Vulnerability in inetd server in HP-UX 11.04 and earlier allows attackers to cause a denial of service when the "swait" state is used by a server.
Key phrases: cause a denial of service when the "
CVE-2001-0107: Veritas Backup agent on Linux allows remote attackers to cause a denial of service by establishing a connection without sending any data, which causes the process to hang.
Key phrases: cause a denial of service by establishing a, process to hang
CVE-2001-0108: PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unrestricted page that causes PHP to use those access controls on the next page that is requested.
Key phrases: bypass, bypass .htaccess access restrictions via a malformed HTTP, malformed http request, unrestricted page, next page
CVE-2001-0109: rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rctmp temporary file.
Key phrases: overwrite arbitrary files, create or overwrite arbitrary files via a symlink, rctab
CVE-2001-0110: Buffer overflow in jaZip Zip/Jaz drive manager allows local users to gain root privileges via a long DISPLAY environmental variable.
Key phrases: gain root privileges, gain root privileges via a long DISPLAY environmental, buffer overflow
CVE-2001-0111: Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile command line argument.
Key phrases: execute arbitrary commands, execute arbitrary commands via the -rcfile command line, format string
CVE-2001-0112: Multiple buffer overflows in splitvt before 1.6.5 allow local users to execute arbitrary commands.
Key phrases: execute arbitrary commands, buffer overflows
CVE-2001-0113: statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used as part of a generated Perl script.
Key phrases: execute arbitrary commands, execute arbitrary commands via the mostbrowsers parameter
CVE-2001-0114: statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to overwrite arbitrary files via the cgidir parameter.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via the cgidir parameter
CVE-2001-0115: Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long -f parameter, buffer overflow
CVE-2001-0116: gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack
CVE-2001-0117: sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack.
Key phrases: overwrite files via a symlink attack
CVE-2001-0118: rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack
CVE-2001-0119: getty_ps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack
CVE-2001-0120: useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack
CVE-2001-0121: ImageCast Control Center 4.1.0 allows remote attackers to cause a denial of service (resource exhaustion or system crash) via a long string to port 12002.
Key phrases: denial of service (resource exhaustion or system crash), cause a denial of service (resource exhaustion, long string
CVE-2001-0122: Kernel leak in AfpaCache module of the Fast Response Cache Accelerator (FRCA) component of IBM HTTP Server 1.3.x and Websphere 3.52 allows remote attackers to cause a denial of service via a series of malformed HTTP requests that generate a "bad request" error.
Key phrases: cause a denial of service via a series, kernel leak, malformed http requests
CVE-2001-0123: Directory traversal vulnerability in eXtropia bbs_forum.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the file parameter.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal, dot dot attack
CVE-2001-0124: Buffer overflow in exrecover in Solaris 2.6 and earlier possibly allows local users to gain privileges via a long command line argument.
Key phrases: gain privileges, gain privileges via a long command line argument, buffer overflow
CVE-2001-0125: exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack on
CVE-2001-0126: Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL server to another source via the xml-stylesheet parameter in the xslt stylesheet.
Key phrases: execute arbitrary Java code, execute arbitrary Java code by redirecting the XSQL
CVE-2001-0127: Buffer overflow in Olivier Debon Flash plugin (not the Macromedia plugin) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long DefineSound tag.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflow
CVE-2001-0128: Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges.
Key phrases: bypass specified access restrictions, gain privileges, bypass specified access restrictions and gain privileges
CVE-2001-0129: Buffer overflow in Tinyproxy HTTP proxy 1.3.3 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long connect request.
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute, buffer overflow, long connect request
CVE-2001-0130: Buffer overflow in HTML parser of the Lotus R5 Domino Server before 5.06, and Domino Client before 5.05, allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed font size specifier.
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute, buffer overflow
CVE-2001-0131: htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack, htpasswd, htdigest
CVE-2001-0132: Interscan VirusWall 3.6.x and earlier follows symbolic links when uninstalling the product, which allows local users to overwrite arbitrary files via a symlink attack.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack, symbolic links
CVE-2001-0133: The web administration interface for Interscan VirusWall 3.6.x and earlier does not use encryption, which could allow remote attackers to obtain the administrator password to sniff the administrator password via the setpasswd.cgi program or other HTTP GET requests that contain base64 encoded usernames and passwords.
Key phrases: obtain the administrator password, obtain the administrator password to sniff the administrator
CVE-2001-0134: Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to execute arbitrary commands via a long user name.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long user name, buffer overflow
CVE-2001-0135: The default installation of Ultraboard 2000 2.11 creates the Skins, Database, and Backups directories with world-writeable permissions, which could allow local users to modify sensitive information or possibly insert and execute CGI programs.
Key phrases: modify sensitive information or possibly insert and execute, world-writeable permissions
CVE-2001-0136: Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed.
Key phrases: cause a denial of service via a series, memory leak
CVE-2001-0137: Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a skin file named skin.wmz, then referencing that skin in the codebase parameter to an applet tag, aka the Windows Media Player Skins File Download" vulnerability.
Key phrases: execute malicious Java applets in Internet Explorer clients, windows media player skins file download
CVE-2001-0138: privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack, privatepw program
CVE-2001-0139: inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack in
CVE-2001-0140: arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack in
CVE-2001-0141: mgetty 1.1.22 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack in
CVE-2001-0142: squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack in
CVE-2001-0143: vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack
CVE-2001-0144: CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow.
Key phrases: execute arbitrary commands, execute arbitrary commands on an SSH server or, integer overflow
CVE-2001-0145: Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a malformed vCard birthday field.
Key phrases: execute arbitrary commands, execute arbitrary commands via a malformed vCard birthday, buffer overflow
CVE-2001-0146: IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service (memory allocation error) by repeatedly sending a series of specially formatted URL's.
Key phrases: denial of service (memory allocation error), cause a denial of service (memory allocation
CVE-2001-0147: Buffer overflow in Windows 2000 event viewer snap-in allows attackers to execute arbitrary commands via a malformed field that is improperly handled during the detailed view of event records.
Key phrases: execute arbitrary commands, execute arbitrary commands via a malformed field that, buffer overflow
CVE-2001-0148: The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a variant of the "Frame Domain Verification" vulnerability.
Key phrases: execute commands in Internet Explorer via javascript URLs, frame domain verification
CVE-2001-0149: Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object.
Key phrases: read arbitrary files, read arbitrary files via the GetObject Javascript function, windows scripting host
CVE-2001-0150: Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web site, which could allow remote attackers to execute arbitrary commands if the IE client is using the Telnet client provided in Services for Unix (SFU) 2.0, which creates session transcripts.
Key phrases: execute arbitrary commands, execute arbitrary commands if the IE client is
CVE-2001-0151: IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests.
Key phrases: cause a denial of service via a series, malformed webdav requests
CVE-2001-0152: The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a file, which allows local users to recover the passwords and read the compressed folders.
Key phrases: recover the passwords and read the compressed folders, local users
CVE-2001-0153: Buffer overflow in VB-TSQL debugger object (vbsdicli.exe) in Visual Studio 6.0 Enterprise Edition allows remote attackers to execute arbitrary commands.
Key phrases: execute arbitrary commands, buffer overflow
CVE-2001-0154: HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly.
Key phrases: execute attachments by setting an unusual MIME type
CVE-2001-0155: Format string vulnerability in VShell SSH gateway 1.0.1 and earlier allows remote attackers to execute arbitrary commands via a user name that contains format string specifiers.
Key phrases: execute arbitrary commands, execute arbitrary commands via a user name that, format string
CVE-2001-0156: VShell SSH gateway 1.0.1 and earlier has a default port forwarding rule of 0.0.0.0/0.0.0.0, which could allow local users to conduct arbitrary port forwarding to other systems.
Key phrases: conduct arbitrary port forwarding, conduct arbitrary port forwarding to other systems, default port forwarding rule
CVE-2001-0157: Debugging utility in the backdoor mode of Palm OS 3.5.2 and earlier allows attackers with physical access to a Palm device to bypass access restrictions and obtain passwords, even if the system lockout mechanism is enabled.
Key phrases: bypass access restrictions, obtain passwords, a Palm device to bypass access restrictions and, backdoor mode
CVE-2001-0160: Lucent/ORiNOCO WaveLAN cards generate predictable Initialization Vector (IV) values for the Wireless Encryption Protocol (WEP) which allows remote attackers to quickly compile information that will let them decrypt messages.
Key phrases: quickly compile information that will let them decrypt, decrypt message
CVE-2001-0161: Cisco 340-series Aironet access point using firmware 11.01 does not use 6 of the 24 available IV bits for WEP encryption, which makes it easier for remote attackers to mount brute force attacks.
Key phrases: iv bits, brute force
CVE-2001-0162: WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
Key phrases: spoof or hijack TCP connections, tcp initial sequence numbers (isns), spoofing
CVE-2001-0163: Cisco AP340 base station produces predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
Key phrases: spoof or hijack TCP connections, tcp initial sequence numbers (isns), spoofing
CVE-2001-0164: Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed recipient field.
Key phrases: execute arbitrary commands, cause a denial of service or execute arbitrary, buffer overflow, malformed recipient field
CVE-2001-0165: Buffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long "arg0" (process name) argument.
Key phrases: gain privileges, gain privileges via a long "arg0", buffer overflow
CVE-2001-0166: Macromedia Shockwave Flash plugin version 8 and earlier allows remote attackers to cause a denial of service via malformed tag length specifiers in a SWF file.
Key phrases: cause a denial of service via malformed tag, malformed tag length specifiers
CVE-2001-0167: Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long rfbConnFailed packet, buffer overflow
CVE-2001-0168: Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long HTTP GET, buffer overflow
CVE-2001-0169: When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib.
Key phrases: overwrite arbitrary files, overwrite arbitrary files by loading a library from
CVE-2001-0170: glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files.
Key phrases: read arbitrary files
CVE-2001-0171: Buffer overflow in SlimServe HTTPd 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long GET request.
Key phrases: execute arbitrary commands, cause a denial of service, buffer overflow
CVE-2001-0172: Buffer overflow in ReiserFS 3.5.28 in SuSE Linux allows local users to cause a denial of service and possibly execute arbitrary commands by via a long directory name.
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute, buffer overflow
CVE-2001-0173: Buffer overflow in qDecoder library 5.08 and earlier, as used in CrazyWWWBoard, CrazySearch, and other CGI programs, allows remote attackers to execute arbitrary commands via a long MIME Content-Type header.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long MIME Content, buffer overflow
CVE-2001-0174: Buffer overflow in Trend Micro Virus Buster 2001 8.00 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a large "To" address.
Key phrases: execute arbitrary commands, cause a denial of service, buffer overflow
CVE-2001-0175: The caching module in Netscape Fasttrack Server 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by requesting a large number of non-existent URLs.
Key phrases: denial of service (resource exhaustion), cause a denial of service (resource exhaustion
CVE-2001-0176: The setuid doroot program in Voyant Sonata 3.x executes arbitrary command line arguments, which allows local users to gain root privileges.
Key phrases: executes arbitrary command line arguments, gain root privileges, execute arbitrary, arbitrary commands
CVE-2001-0177: WebMaster ConferenceRoom 1.8.1 allows remote attackers to cause a denial of service via a buddy relationship between the IRC server and a server clone.
Key phrases: cause a denial of service via a buddy, buddy relationship
CVE-2001-0178: kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and gain privileges.
Key phrases: gain privileges, steal passwords and gain privileges
CVE-2001-0179: Allaire JRun 3.0 allows remote attackers to list contents of the WEB-INF directory, and the web.xml file in the WEB-INF directory, via a malformed URL that contains a "."
Key phrases: list contents of the WEB-INF directory, malformed url
CVE-2001-0180: Lars Ellingsen guestserver.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the "email" parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2001-0181: Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute arbitrary commands.
Key phrases: execute arbitrary commands, format string
CVE-2001-0182: FireWall-1 4.1 with a limited-IP license allows remote attackers to cause a denial of service by sending a large number of spoofed IP packets with various source addresses to the inside interface, which floods the console with warning messages and consumes CPU resources.
Key phrases: cause a denial of service by sending a, consumes cpu resources
CVE-2001-0183: ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, which makes the packet appear to be part of an established connection.
Key phrases: bypass access restrictions, bypass access restrictions by setting the ECE flag, ece flag
CVE-2001-0184: eEye Iris 1.01 beta allows remote attackers to cause a denial of service via a malformed packet, which causes Iris to crash when a user views the packet.
Key phrases: cause a denial of service via a malformed, malformed packet, crash
CVE-2001-0185: Netopia R9100 router version 4.6 allows authenticated users to cause a denial of service by using the router's telnet program to connect to the router's IP address, which causes a crash.
Key phrases: cause a denial of service by using the, crash
CVE-2001-0186: Directory traversal vulnerability in Free Java Web Server 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal, .. (dot dot), dot dot attack
CVE-2001-0187: Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.
Key phrases: execute arbitrary commands, execute arbitrary commands via a malformed argument that, format string
CVE-2001-0188: GoodTech FTP server 3.0.1.2.1.0 and earlier allows remote attackers to cause a denial of service via a flood of connections to the server, which causes it to crash.
Key phrases: cause a denial of service via a flood, crash
CVE-2001-0189: Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a .. (dot dot) attack in an HTTP GET request.
Key phrases: read arbitrary commands, read arbitrary commands via a .. (dot, directory traversal, dot dot attack
CVE-2001-0190: Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by executing cu with a long program name (arg0).
Key phrases: gain privileges, gain privileges by executing cu with a long, buffer overflow
CVE-2001-0191: gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a buffer overflow, or brute force authentication by using a short cookie length.
Key phrases: execute arbitrary commands, execute arbitrary commands via a buffer overflow, brute force authentication
CVE-2001-0192: Buffer overflows in CTRLServer in XMail allows attackers to execute arbitrary commands via the cfgfileget or domaindel functions.
Key phrases: execute arbitrary commands, execute arbitrary commands via the cfgfileget or domaindel, buffer overflows
CVE-2001-0193: Format string vulnerability in man in some Linux distributions allows local users to gain privileges via a malformed -l parameter.
Key phrases: gain privileges, gain privileges via a malformed -l parameter, format string
CVE-2001-0194: Buffer overflow in httpGets function in CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long input line.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long input line, buffer overflow
CVE-2001-0195: sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking.
Key phrases: gain privileges, gain privileges via password cracking, world-readable
CVE-2001-0196: inetd ident server in FreeBSD 4.x and earlier does not properly set group permissions, which allows remote attackers to read the first 16 bytes of files that are accessible by the wheel group.
Key phrases: read the first 16 bytes of files that
CVE-2001-0197: Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitrary commands.
Key phrases: execute arbitrary commands, format string
CVE-2001-0198: Buffer overflow in QuickTime Player plugin 4.1.2 (Japanese) allows remote attackers to execute arbitrary commands via a long HREF parameter in an EMBED tag.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long HREF parameter, buffer overflow
CVE-2001-0199: Directory traversal vulnerability in SEDUM HTTP Server 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the HTTP GET request.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal, dot dot attack
CVE-2001-0200: HSWeb 2.0 HTTP server allows remote attackers to obtain the physical path of the server via a request to the /cgi/ directory, which will list the path if directory browsing is enabled.
Key phrases: obtain the physical path of the server via, directory browsing, directory list
CVE-2001-0201: The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arbitrary SQL queries via the deletecontact.php program.
Key phrases: execute arbitrary SQL, execute arbitrary SQL queries via the deletecontact.php program
CVE-2001-0202: Picserver web server allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTP GET request.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, dot dot attack
CVE-2001-0203: Watchguard Firebox II firewall allows users with read-only access to gain read-write access, and administrative privileges, by accessing a file that contains hashed passphrases, and using the hashes during authentication.
Key phrases: gain read-write access
CVE-2001-0204: Watchguard Firebox II allows remote attackers to cause a denial of service by establishing multiple connections and sending malformed PPTP packets.
Key phrases: cause a denial of service by establishing multiple, malformed pptp packets
CVE-2001-0205: Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the requested pathname, a modified .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files by inserting "...", directory traversal, modified .. (dot dot), dot dot attack
CVE-2001-0206: Directory traversal vulnerability in Soft Lite ServerWorx 3.00 allows remote attackers to read arbitrary files by inserting a .. (dot dot) or ... into the requested pathname of an HTTP GET request.
Key phrases: read arbitrary files, read arbitrary files by inserting a .. (, directory traversal
CVE-2001-0207: Buffer overflow in bing allows remote attackers to execute arbitrary commands via a long hostname, which is copied to a small buffer after a reverse DNS lookup using the gethostbyaddr function.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long hostname, buffer overflow
CVE-2001-0208: MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, which allows local users to gain privileges by modifying files.
Key phrases: gain privileges, gain privileges by modifying files, insecure permissions
CVE-2001-0209: Buffer overflow in Shoutcast Distributed Network Audio Server (DNAS) 1.7.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long description.
Key phrases: execute arbitrary commands, cause a denial of service, buffer overflow
CVE-2001-0210: Directory traversal vulnerability in commerce.cgi CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack in the page parameter.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal, .. (dot dot), dot dot attack
CVE-2001-0211: Directory traversal vulnerability in WebSPIRS 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the sp.nextform parameter.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal, dot dot attack
CVE-2001-0212: Directory traversal vulnerability in HIS Auktion 1.62 allows remote attackers to read arbitrary files via a .. (dot dot) in the menue parameter, and possibly execute commands via shell metacharacters.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal, execute commands, shell metacharacters
CVE-2001-0213: Buffer overflow in pi program in PlanetIntra 2.5 allows remote attackers to execute arbitrary commands.
Key phrases: execute arbitrary commands, buffer overflow
CVE-2001-0214: Way-board CGI program allows remote attackers to read arbitrary files by specifying the filename in the db parameter and terminating the filename with a null byte.
Key phrases: read arbitrary files, read arbitrary files by specifying the filename in
CVE-2001-0215: ROADS search.pl program allows remote attackers to read arbitrary files by specifying the file name in the form parameter and terminating the filename with a null byte.
Key phrases: read arbitrary files, read arbitrary files by specifying the file name
CVE-2001-0216: PALS Library System pals-cgi program allows remote attackers to execute arbitrary commands via shell metacharacters in the documentName parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2001-0217: Directory traversal vulnerability in PALS Library System pals-cgi program allows remote attackers to read arbitrary files via a .. (dot dot) in the documentName parameter.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal
CVE-2001-0218: Format string vulnerability in mars_nwe 0.99.pl19 allows remote attackers to execute arbitrary commands.
Key phrases: execute arbitrary commands, format string
CVE-2001-0219: Vulnerability in Support Tools Manager (xstm,cstm,stm) in HP-UX 11.11 and earlier allows local users to cause a denial of service.
Key phrases: cause a denial of service
CVE-2001-0220: Buffer overflow in ja-elvis and ko-helvis ports of elvis allow local users to gain root privileges.
Key phrases: gain root privileges, buffer overflow
CVE-2001-0221: Buffer overflow in ja-xklock 2.7.1 and earlier allows local users to gain root privileges.
Key phrases: gain root privileges, buffer overflow
CVE-2001-0222: webmin 0.84 and earlier allows local users to overwrite and create arbitrary files via a symlink attack.
Key phrases: create arbitrary files, overwrite and create arbitrary files via a symlink
CVE-2001-0223: Buffer overflow in wwwwais allows remote attackers to execute arbitrary commands via a long QUERY_STRING (HTTP GET request).
Key phrases: execute arbitrary commands, execute arbitrary commands via a long QUERY_STRING (, buffer overflow
CVE-2001-0224: Muscat Empower CGI program allows remote attackers to obtain the absolute pathname of the server via an invalid request in the DB parameter.
Key phrases: obtain the absolute pathname of the server via, invalid request
CVE-2001-0225: fortran math component in Infobot 0.44.5.3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters
CVE-2001-0226: Directory traversal vulnerability in BiblioWeb web server 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) or ... attack in an HTTP GET request.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal
CVE-2001-0227: Buffer overflow in BiblioWeb web server 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request.
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute, buffer overflow
CVE-2001-0228: Directory traversal vulnerability in GoAhead web server 2.1 and earlier allows remote attackers to read arbitrary files via a .. attack in an HTTP GET request.
Key phrases: read arbitrary files, read arbitrary files via a .. attack in, directory traversal
CVE-2001-0229: Chili!Soft ASP for Linux before 3.6 does not properly set group privileges when running in inherited mode, which could allow attackers to gain privileges via malicious scripts.
Key phrases: gain privileges, gain privileges via malicious scripts, group privileges
CVE-2001-0230: Buffer overflow in dc20ctrl before 0.4_1 in FreeBSD, and possibly other operating systems, allows local users to gain privileges.
Key phrases: gain privileges, buffer overflow
CVE-2001-0231: Directory traversal vulnerability in newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via a .. in the "t" parameter.
Key phrases: read arbitrary files, read arbitrary files via a .. in the, directory traversal
CVE-2001-0232: newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via shell metacharacters.
Key phrases: read arbitrary files, read arbitrary files via shell metacharacters
CVE-2001-0233: Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Description field.
Key phrases: execute arbitrary commands, cause a denial of service, buffer overflow
CVE-2001-0234: NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed user_username parameter.
Key phrases: execute arbitrary SQL queries, gain privileges, execute arbitrary SQL queries and gain privileges via, malformed user_username parameter
CVE-2001-0235: Vulnerability in crontab allows local users to read crontab files of other users by replacing the temporary file that is being edited while crontab is running.
Key phrases: read crontab files of other users by replacing, vulnerability in crontab
CVE-2001-0236: Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long "indication, buffer overflow
CVE-2001-0237: Memory leak in Microsoft 2000 domain controller allows remote attackers to cause a denial of service by repeatedly connecting to the Kerberos service and then disconnecting without sending any data.
Key phrases: cause a denial of service by repeatedly connecting, memory leak
CVE-2001-0238: Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests.
Key phrases: bypass Security Zone restrictions, bypass Security Zone restrictions via WebDAV requests, webdav requests
CVE-2001-0239: Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type.
Key phrases: cause a denial of service via a long, web proxy, specific type
CVE-2001-0240: Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format (RTF) document that links to a template with the embedded macro.
Key phrases: automatically execute macros without warning the user via, embedded macro
CVE-2001-0241: Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0.
Key phrases: gain root privileges, gain root privileges via a long print request, buffer overflow
CVE-2001-0242: Buffer overflows in Microsoft Windows Media Player 7 and earlier allow remote attackers to execute arbitrary commands via (1) a long version tag in an .ASX file, or (2) a long banner tag, a variant of the ".ASX Buffer Overrun" vulnerability as discussed in MS:MS00-090.
Key phrases: execute arbitrary commands, execute arbitrary commands via (1) a, buffer overflows
CVE-2001-0243: Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename instead of in the Internet Explorer cache, which causes the HTML in those shortcuts to run in the Local Computer Zone instead of the Internet Zone, which allows remote attackers to read certain files.
Key phrases: read certain files, internet shortcuts
CVE-2001-0244: Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long search parameter, buffer overflow
CVE-2001-0245: Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the "Malformed Hit-Highlighting" vulnerability.
Key phrases: read server-side include files via a, malformed search request, malformed hit-highlighting
CVE-2001-0246: Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain, aka a variant of the "Frame Domain Verification" vulnerability.
Key phrases: read certain files on the client by sending, frame domain verification
CVE-2001-0247: Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buffer as used in the glob functions glob2 and glob3.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long pattern string, buffer overflows
CVE-2001-0248: Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings.
Key phrases: execute arbitrary commands, execute arbitrary commands by creating a long pathname, buffer overflow
CVE-2001-0249: Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generate long strings.
Key phrases: execute arbitrary commands, execute arbitrary commands by creating a long pathname, heap overflow
CVE-2001-0250: The Web Publishing feature in Netscape Enterprise Server 4.x and earlier allows remote attackers to list arbitrary directories under the web server root via the INDEX command.
Key phrases: list arbitrary directories, list arbitrary directories under the web server root
CVE-2001-0251: The Web Publishing feature in Netscape Enterprise Server 3.x allows remote attackers to cause a denial of service via the REVLOG command.
Key phrases: cause a denial of service via the REVLOG, revlog command
CVE-2001-0252: iPlanet (formerly Netscape) Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that contains many "/../" (dot dot) sequences.
Key phrases: cause a denial of service via a long
CVE-2001-0253: Directory traversal vulnerability in hsx.cgi program in iWeb Hyperseek 2000 allows remote attackers to read arbitrary files and directories via a .. (dot dot) attack in the show parameter.
Key phrases: read arbitrary files, read arbitrary files and directories via a .., directory traversal, .. (dot dot), dot dot attack
CVE-2001-0254: FaSTream FTP++ Server 2.0 allows remote attackers to obtain the real pathname of the server via the "pwd" command.
Key phrases: obtain the real pathname of the server via
CVE-2001-0255: FaSTream FTP++ Server 2.0 allows remote attackers to list arbitrary directories by using the "ls" command and including the drive letter name (e.g. C:) in the requested pathname.
Key phrases: list arbitrary directories, list arbitrary directories by using the "ls
CVE-2001-0256: FaSTream FTP++ Server 2.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long username.
Key phrases: execute arbitrary commands, cause a denial of service, long username
CVE-2001-0257: Buffer overflow in Easycom/Safecom Print Server Web service, version 404.590 and earlier, allows remote attackers to execute arbitrary commands via (1) a long URL or (2) a long HTTP header field such as "Host:".
Key phrases: execute arbitrary commands, execute arbitrary commands via (1) a, buffer overflow
CVE-2001-0258: The Easycom/Safecom Print Server (firmware 404.590) PrintGuide server allows remote attackers to cause a denial of service via a large number of connections that send null characters.
Key phrases: cause a denial of service via a large
CVE-2001-0259: ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generated by another user, which the attacker can use to decrypt that user's private key file.
Key phrases: recover a SUN-DES-1 magic phrase generated
CVE-2001-0260: Buffer overflow in Lotus Domino Mail Server 5.0.5 and earlier allows a remote attacker to crash the server or execute arbitrary code via a long "RCPT TO" command.
Key phrases: execute arbitrary code, crash the server or execute arbitrary code via, buffer overflow
CVE-2001-0261: Microsoft Windows 2000 Encrypted File System does not properly destroy backups of files that are encrypted, which allows a local attacker to recover the text of encrypted files.
Key phrases: recover the text of encrypted files
CVE-2001-0262: Buffer overflow in Netscape SmartDownload 1.3 allows remote attackers (malicious web pages) to execute arbitrary commands via a long URL.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long URL, buffer overflow
CVE-2001-0263: Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows attackers to read file attributes outside of the web root via the (1) SIZE and (2) MDTM commands when the "show relative paths" option is not enabled.
Key phrases: read file attributes outside of the web root
CVE-2001-0264: Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection.
Key phrases: obtain NETBIOS credentials, obtain NETBIOS credentials by requesting information on a, sniff the connection
CVE-2001-0265: ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored file.
Key phrases: create files in arbitrary locations via a malformed, malformed ascii armored file
CVE-2001-0266: Vulnerability in Software Distributor SD-UX in HP-UX 11.0 and earlier allows local users to gain privileges.
Key phrases: gain privileges
CVE-2001-0267: NM debug in HP MPE/iX 6.5 and earlier does not properly handle breakpoints, which allows local users to gain privileges.
Key phrases: gain privileges, breakpoints
CVE-2001-0268: The i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER_LDT kernel option is enabled, does not validate a call gate target, which allows local users to gain root privileges by creating a segment call gate in the Local Descriptor Table (LDT) with a target that specifies an arbitrary kernel address.
Key phrases: gain root privileges, gain root privileges by creating a segment call, segment call gate, arbitrary kernel address
CVE-2001-0269: pam_ldap authentication module in Solaris 8 allows remote attackers to bypass authentication via a NULL password.
Key phrases: bypass authentication, bypass authentication via a NULL password, null password
CVE-2001-0270: Marconi ASX-1000 ASX switches allow remote attackers to cause a denial of service in the telnet and web management interfaces via a malformed packet with the SYN-FIN and More Fragments attributes set.
Key phrases: cause a denial of service in the telnet, malformed packet, more fragments
CVE-2001-0271: mailnews.cgi 1.3 and earlier allows remote attackers to execute arbitrary commands via a user name that contains shell metacharacters.
Key phrases: execute arbitrary commands, execute arbitrary commands via a user name that, shell metacharacters
CVE-2001-0272: Directory traversal vulnerability in sendtemp.pl in W3.org Anaya Web development server allows remote attackers to read arbitrary files via a .. (dot dot) attack in the templ parameter.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal, .. (dot dot), dot dot attack
CVE-2001-0273: pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu Privacy Guard (GnuPG), which causes the message to be sent in cleartext.
Key phrases: cleartext
CVE-2001-0274: kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in a
CVE-2001-0275: Moby Netsuite Web Server 1.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request.
Key phrases: execute arbitrary commands, cause a denial of service, long http request
CVE-2001-0276: ext.dll in BadBlue 1.02.07 Personal Edition web server allows remote attackers to determine the physical path of the server by directly calling ext.dll without any arguments, which produces an error message that contains the path.
Key phrases: determine the physical path of the server by
CVE-2001-0277: Buffer overflow in ext.dll in BadBlue 1.02.07 Personal Edition allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request.
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute, buffer overflow
CVE-2001-0278: Vulnerability in linkeditor in HP MPE/iX 6.5 and earlier allows local users to gain privileges.
Key phrases: gain privileges
CVE-2001-0279: Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges.
Key phrases: gain root privileges, buffer overflow