CVE-2001-1257

The CVE-2001-1257 entry affects the Horde IMP web-based IMAP client, with vulnerable versions before 2.2.6 and 1.2.6. The underlying issue is a cross-site scripting (XSS) flaw that allows an attacker to embed JavaScript in an email, which could execute in a user’s browser when viewing the message...

CVE-2001-1259

Avaya Argent Office allows remote attackers to cause a denial of service by sending UDP packets to port 53 with no payload...

CVE-2001-1241

Un-CGI 1.9 and earlier fail to verify that a CGI script has execution bits set before executing it, allowing remote attackers to run arbitrary commands by pointing Un-CGI at a document that starts with "#!" and the target program name.

CVE-2001-1287

CVE-2001-1287 describes a buffer overflow in the Web Calendar component of Ipswitch IMail versions up to 7.04 and earlier. The vulnerability allows remote attackers to execute arbitrary code by sending a long HTTP GET request to the affected Web Calendar interface. The provided connected records ...

CVE-2001-1245

Opera 5.0 for Linux is affected by a denial-of-service vulnerability caused by improper handling of malformed HTTP headers. A remote attacker could trigger a crash, potentially by sending a header whose value matches a MIME header name. The root cause is not detailed beyond this description, and ...

CVE-2001-1290

admin.cgi in Active Classifieds Free Edition 1.0, and possibly commercial versions, allows remote attackers to modify the configuration, gain privileges, and execute arbitrary Perl code via the tablewidth parameter...

CVE-2001-1244

Multiple TCP implementations could allow remote attackers to cause a denial of service bandwidth and CPU exhaustion by setting the maximum segment size MSS to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traff...

CVE-2001-1339

Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct brute force password guessing attacks...

CVE-2001-1283

The webmail interface for Ipswitch IMail 7.04 and earlier allows remote authenticated users to cause a denial of service crash via a mailbox name that contains a large number of . dot or other characters to programs such as 1 readmail.cgi or 2 printmail.cgi, possibly due to a buffer overflow that...

CVE-2001-1313

The CVE-2001-1313 entry refers to Lotus Domino R5 before R5.0.7a, where LDAP handling code vulnerabilities allow a remote attacker to crash the server and potentially execute arbitrary code via miscellaneous packets with semi-valid BER encodings, as demonstrated by the PROTOS LDAPv3 test suite. T...

CVE-2001-1294

Buffer overflow in A-V Tronics Inetserv 3.2.1 and earlier allows remote attackers to cause a denial of service crash in the Webmail interface via a long username and password...

CVE-2001-1326

CVE-2001-1326 affects Eudora 5.1, where remote code execution is possible when the "Use Microsoft Viewer" option is on and the "allow executables in HTML content" option is off. An HTML email containing a form activated from an image spoofed as a link causes the user to execute the form and acces...

CVE-2001-1344

CVE-2001-1344 concerns WSSecurity.pl in WebStore, where authentication can be bypassed by supplying a filename that exists, aided by a null character or a .. traversal. Affected is WebStore’s WSSecurity.pl component; the underlying issue is improper handling of user-supplied filenames enabling by...

CVE-2001-1310

IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, via invalid encodings for the L field of a BER encoding, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1270

Directory traversal vulnerability in the console version of PKZip pkzipc 4.00 and earlier allows attackers to overwrite arbitrary files during archive extraction with the -rec recursive option via a .. dot dot attack on the archived files...

CVE-2001-1272

CVE-2001-1272 affects wmtv 0.6.5 and earlier, where a setuid root binary can execute arbitrary commands via the -e option due to improper privilege dropping. Public references document Debian DSA-092-1 and OpenVAS/Nessus checks, indicating a local root flaw in wmtv for Debian GNU/Linux. The vulne...

CVE-2001-1331

mandb in the man-db package before 2.3.16-3 allows local users to overwrite arbitrary files via the command line options 1 -u or 2 -c, which do not drop privileges and follow symlinks...

CVE-2001-1274

The CVE-2001-1274 vulnerability is a buffer overflow in MySQL before 3.23.31. Affected product: MySQL server (pre-3.23.31). Root cause: a buffer overflow that can be triggered remotely, leading to a denial of service and potential privilege escalation. Impact: partial confidentiality/integrity/av...

CVE-2001-1331

CVE-2001-1331 affects the man-db package’s mandb tool. The vulnerability exists in mandb before version 2.3.16-3, where invoking mandb with -u or -c does not drop privileges and does not drop file-system symlinks, enabling local users to overwrite arbitrary files. Impact is local, potentially ena...

CVE-2001-1238

Task Manager in Windows 2000 cannot end certain processes with uppercase names (e.g., winlogon.exe, csrss.exe, smss.exe, services.exe) via the Process tab. This could allow local users to install Trojan horses that cannot be stopped with Task Manager. Documents do not provide a fix or patch; PT-S...