CVE-2001-1269

CVE-2001-1269 affects Info-ZIP UnZip 5.42 and earlier. The vulnerability allows an attacker to overwrite arbitrary files during archive extraction by using filenames that begin with the slash character (/) in the ZIP archive. The issue is rooted in how the extractor handles archive filenames, ena...

CVE-2001-1271

Technical details beyond the provided description are not available in the connected documents; CVE-2001-1271 describes a directory traversal in rar 2.02 and earlier via .. in archived filenames, with no further details in the supplied sources.

CVE-2001-1249

CVE-2001-1249 : The vulnerability affects vWebServer 1.2.0 and is caused by accepting a URL containing MS-DOS device names, which can trigger a remote denial of service. The information in the provided documents confirms the impact as a denial of service with a network attack vector, but there ar...

CVE-2001-1254

The CVE-2001-1254 entry describes a vulnerability in the Web Access component for COM2001 Alexis 2.0/2.1 in InternetPBX where username and voice mail passwords are transmitted in the clear via a Java applet that communicates to port 8888 on the server, allowing remote attackers to sniff credentia...

CVE-2001-1282

CVE-2001-1282 affects Ipswitch IMail versions 7.04 and earlier. The flaw causes the physical path of email attachments to be recorded in the message header, enabling remote attackers to obtain potentially sensitive configuration information. The available documents do not specify the exact root c...

CVE-2001-1239

PowerNet IX is identified as the affected product. The CVE-2001-1239 entry describes a remote-denial-of-service condition triggered by a port scan. The available documents do not provide root cause details, affected versions, specific vulnerable components, exploit code, or remediation steps. Exp...

CVE-2001-1283

The webmail interface for Ipswitch IMail 7.04 and earlier allows remote authenticated users to cause a denial of service crash via a mailbox name that contains a large number of . dot or other characters to programs such as 1 readmail.cgi or 2 printmail.cgi, possibly due to a buffer overflow that...

CVE-2001-1310

IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, via invalid encodings for the L field of a BER encoding, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1253

CVE-2001-1253 affects Alexis 2.0/2.1 in COM2001 InternetPBX, where voicemail passwords are stored in plain text in the com2001.ini file. This plaintext storage could allow local users to impersonate other users and place long-distance calls. The available documents do not provide exploitation det...

CVE-2001-1313

Lotus Domino R5 before R5.0.7a allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via miscellaneous packets with semi-valid BER encodings, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1289

CVE-2001-1289 affects Quake 3 Arena 1.29f/g. A remote attacker can cause a denial of service (crash) by sending a malformed connection/login packet that begins with 0xFF characters, crashing the Quake3 Arena daemon. OpenVAS/NASL details indicate the affected service port 27960 and describe the at...

CVE-2001-1320

Summary: CVE-2001-1320 affects Network Associates PGP KeyServer 7.x LDAP service, where the LDAP handling/BER encoding exposes a stack buffer overflow. The PROTOS LDAPv3 test suite demonstrated denial of service and potential code execution, with exploits and proof-of-concept modules (e.g., Metas...

CVE-2001-1326

CVE-2001-1326 affects Eudora 5.1, where remote code execution is possible when the "Use Microsoft Viewer" option is on and the "allow executables in HTML content" option is off. An HTML email containing a form activated from an image spoofed as a link causes the user to execute the form and acces...

CVE-2001-1339

Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect after bad passwords, enabling brute‑force password guessing from the network. The affected component is the IPC@CHIP telnet service; no delay on failed logins is the root cause. Impact is described with high/critical severities in...

CVE-2001-1346

ARCserveIT 6.61 and 6.63 (ARCservIT) are affected by a local vulnerability where an attacker can overwrite arbitrary files via a symlink attack on temporary files (asagent.tmp or inetd.tmp). The underlying issue is insecure handling of temporary files leading to local privilege impact with partia...

CVE-2001-1286

Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessions by obtaining the URL, e.g. via an HTML email that causes the Referrer to be sent to a URL under the attacker's control...

CVE-2001-1317

Teamware Office Enterprise Directory allows remote attackers to cause a denial of service crash and possibly execute arbitrary code, via invalid encodings for certain BER object types, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1287

Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...

CVE-2001-1259

Avaya Argent Office allows remote attackers to cause a denial of service by sending UDP packets to port 53 with no payload...

CVE-2001-1245

Opera 5.0 for Linux is affected by a denial-of-service vulnerability caused by improper handling of malformed HTTP headers. A remote attacker could trigger a crash, potentially by sending a header whose value matches a MIME header name. The root cause is not detailed beyond this description, and ...