3489 matches found
CVE-2001-1254
The CVE-2001-1254 entry describes a vulnerability in the Web Access component for COM2001 Alexis 2.0/2.1 in InternetPBX where username and voice mail passwords are transmitted in the clear via a Java applet that communicates to port 8888 on the server, allowing remote attackers to sniff credentia...
CVE-2001-1329
Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument...
CVE-2001-1269
Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames in the archive that begin with the '/' slash character...
CVE-2001-1243
Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service crash via 1 creating an ASP program that uses Scripting.FileSystemObject to open a file with an MS-DOS device name, or 2 remotely injecting the device name into ASP...
CVE-2001-1315
Critical Path 1 InJoin Directory Server or 2 LiveContent Directory allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via malformed BER encodings, as demonstrated by the PROTOS LDAPv3 test suite...
CVE-2001-1260
Technical details about CVE-2001-1260 (affected products, versions, impact, remediation) are not publicly available in the provided documents. Monitor for updates.
CVE-2001-1244
Technical details such as affected products, versions, and root cause are not publicly provided in the connected documents. Monitor CVE-2001-1244 updates for concrete details.
CVE-2001-1320
Summary: CVE-2001-1320 affects Network Associates PGP KeyServer 7.x LDAP service, where the LDAP handling/BER encoding exposes a stack buffer overflow. The PROTOS LDAPv3 test suite demonstrated denial of service and potential code execution, with exploits and proof-of-concept modules (e.g., Metas...
CVE-2001-1292
CVE-2001-1292 affects Sambar Telnet Proxy/Server. The vulnerability allows remote attackers to cause a denial of service and potentially execute arbitrary code via a long password. This is documented across NVD/CVE records as the affected product and impact. No remediation details are provided in...
Qpopper .qpopper-options Username Handling Overflow
The remote Qpopper server, according to its banner, is running version 4.0.3 or version 4.0.4. These versions are vulnerable to a buffer overflow if they are configured to allow the processing of a user's /.qpopper-options file. A local user can cause a buffer overflow by setting the 'bulldir'...
Серьёзная ошибка в новом госте ЭЦП!
Уважаемый 3APA3A Благодарю за публикацию в Вашей рассылке моего прошлого письма. Вот сообщение об ещё одной ошибке. В новом варианте российского стандарта электронной цифровой подписи ГОСТ 34.19-2001 вступающем в силу с августа этого года существует серьёзная ошибка, позволяющая сформировать к...
DOS for Icq 2001&2002
Icq2001b & Icq2002a Denial Of Service --------------------------------------------------- If you send a malicious "contact" message, you can freeze target icq. Let's look at the contact packet taken from Massimo Melina documentation contacts-msg content is: contacts number 0xFE uin 0xFE nick 0xFE...
CVE-2001-1229
CVE-2001-1229 affects Icecast before 1.3.9 and libshout before 1.0.4. A remote attacker can trigger a buffer/stack overflow to crash the server or execute arbitrary code. OpenVAS entries confirm a remote overflow in Icecast/libshout; recommended remediation is upgrading Icecast to at least 1.3.9 ...
CVE-2001-1230
CVE-2001-1230 affects Icecast before 1.3.10. The OpenVAS/NVD data describe a remote buffer overflow in Icecast that allows a remote attacker to crash the server and potentially execute arbitrary code with the server’s privileges. Several advisories (e.g., Debian DSA-089-1/DSA-089-2) and OpenVAS p...
CVE-2001-1229
Buffer overflows in 1 Icecast before 1.3.9 and 2 libshout before 1.0.4 allow remote attackers to cause a denial of service crash and execute arbitrary code...
CVE-2001-1228
Buffer overflows in gzip 1.3x, 1.2.4, and other versions might allow attackers to execute code via a long file name, possibly remotely if gzip is run on an FTP server...
CVE-2001-1228
CVE-2001-1228 describes buffer overflows in gzip (notably versions from 1.2.4 and 1.3x and other releases) that could allow code execution via a long filename, potentially when gzip is used on an FTP server. Connected documents corroborate the vulnerability and point to advisories (e.g., Debian D...
CVE-2001-1165
Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting the information, e.g., with the Disengage tool...