3467 matches found
CVE-2001-1292
CVE-2001-1292 affects Sambar Telnet Proxy/Server. The vulnerability allows remote attackers to cause a denial of service and potentially execute arbitrary code via a long password. This is documented across NVD/CVE records as the affected product and impact. No remediation details are provided in...
CVE-2001-1316
The CVE-2001-1316 issue concerns Teamware Office Enterprise Directory’s LDAP server, where buffer overflow in LDAP handling code (triggered by malformed LDAP requests) can cause remote denial-of-service and may allow arbitrary code execution, as demonstrated by the PROTOS LDAPv3 test suite. Docum...
CVE-2001-1232
CVE-2001-1232 affects GroupWise WebAccess 5.5. The issue arises when directory indexing is enabled, allowing a remote attacker to view arbitrary directory contents via an HTTP request using a lowercase “get.” The vulnerability description—as shown in multiple sources (NVD, CVE List, CVE Record)—i...
CVE-2001-1326
Eudora 5.1 allows remote attackers to execute arbitrary code when the "Use Microsoft Viewer" option is enabled and the "allow executables in HTML content" option is disabled, via an HTML email with a form that is activated from an image that the attacker spoofs as a link, which causes the user to...
CVE-2001-1242
Directory traversal vulnerability in Un-CGI 1.9 and earlier allows remote attackers to execute arbitrary code via a .. dot dot in an HTML form...
CVE-2001-1315
The CVE-2001-1315 issue affects Critical Path’s InJoin Directory Server and LiveContent Directory. The vulnerability arises in the LDAP handling code, specifically through malformed BER encodings used in the PROTOS LDAPv3 test suite, which can be exploited remotely to trigger a crash (DoS) and ma...
CVE-2001-1323
Buffer overflow in MIT Kerberos 5 krb5 1.2.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via base-64 encoded data, which is not properly handled when the radixencode function processes file glob output from the ftpglob function...
CVE-2001-1339
Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct brute force password guessing attacks...
CVE-2001-1285
Directory traversal vulnerability in readmail.cgi for Ipswitch IMail 7.04 and earlier allows remote attackers to access the mailboxes of other users via a .. dot dot in the mbx parameter...
CVE-2001-1286
Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessions by obtaining the URL, e.g. via an HTML email that causes the Referrer to be sent to a URL under the attacker's control...
CVE-2001-1329
The CVE-2001-1329 issue is a buffer overflow in rsh for AIX 4.2.0.0 that allows local users to gain root privileges via a long command-line argument. Affected component: rsh on AIX 4.2.0.0. Root-level impact is stated by sources; access is local and requires crafted input. The vulnerability’s exi...
CVE-2001-1233
Netware Enterprise Web Server 5.1 with GroupWise WebAccess 5.5 and NDS enabled is affected. The vulnerability allows remote attackers to enumerate usernames, group names and other system information by accessing ndsobj.nlm, due to exposure of directory information. CVSS v2.0 base score is 5.0 (AV...
CVE-2001-1305
CVE-2001-1305 affects ICQ 2001a Alpha and earlier. A remote attacker can cause an ICQ user’s contact list to automatically include arbitrary UINs by visiting a web page whose Content-Type is set to application/x-icq, which IE processes. The connected documents consistently describe ICQ as vulnera...
CVE-2001-1320
Summary: CVE-2001-1320 affects Network Associates PGP KeyServer 7.x LDAP service, where the LDAP handling/BER encoding exposes a stack buffer overflow. The PROTOS LDAPv3 test suite demonstrated denial of service and potential code execution, with exploits and proof-of-concept modules (e.g., Metas...
CVE-2001-1300
Dynu FTP server
CVE-2001-1268
CVE-2001-1268 is a directory traversal vulnerability in Info-ZIP UnZip 5.42 and earlier that allows overwriting arbitrary files during archive extraction via a .. in the extracted filename. Connected sources confirm the affected product is UnZip up to version 5.42 and earlier, with the basic issu...
CVE-2001-1308
CVE-2001-1308 involves format-string vulnerabilities in the iPlanet Directory Server, version 4.1.4 and earlier, in the LDAP handling code. The flaws allow remote attackers to cause a denial of service (crash) and potentially execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite...
CVE-2001-1331
mandb in the man-db package before 2.3.16-3 allows local users to overwrite arbitrary files via the command line options 1 -u or 2 -c, which do not drop privileges and follow symlinks...
CVE-2001-1315
Critical Path 1 InJoin Directory Server or 2 LiveContent Directory allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via malformed BER encodings, as demonstrated by the PROTOS LDAPv3 test suite...