CVE-2001-1157

Baltimore Technologies WEBsweeper 4.0 and 4.02 are described as failing to properly filter Javascript from HTML pages, enabling remote bypass of the filter via (1) an extra leading

CVE-2001-1115

generate.cgi in SIX-webboard 2.01 and before allows remote attackers to read arbitrary files via a dot dot .. in the content parameter...

CVE-2001-1178

Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable...

CVE-2001-1212

Cross-site scripting vulnerability in catgy.cgi for Aktivate 1.03 allows remote attackers to execute arbitrary Javascript via the desc parameter...

CVE-2001-1127

Buffer overflow in Progress database 8.3D and 9.1C could allow a local user to execute arbitrary code via 1 proapsv, 2 mprosrv, 3 mprshut, 4 orarx, 5 sqlcpp, 6 probrkr, 7 sqlschema and 8 sqldump...

CVE-2001-1128

The CVE-2001-1128 vulnerability affects Progress database versions 8.3D and 9.1C. A buffer overflow is triggered by long entries in files specified via the PROMSGS or PROTERMCAP environment variables, allowing local code execution. The available documents confirm the vulnerable component and the ...

CVE-2001-1220

CVE-2001-1220 affects the D-Link DWL-1000AP Wireless LAN Access Point with firmware 3.2.28 #483. The root cause is storing the administrative password in plaintext in the default Management Information Base (MIB), allowing remote attackers to gain administrative privileges. No remediation details...

CVE-2001-1223

The CVE-2001-1223 entry concerns the web administration server of ELSA Lancom 1100 Office. The vulnerability is that the web admin interface does not require authentication, allowing arbitrary remote attackers to gain administrative privileges by connecting to the server (network exposure). The a...

CVE-2001-1114

CVE-2001-1114 affects NetCode NC Book 0.2b, where the CGI script book.cgi vulnerable to remote command execution via shell metacharacters in the parameter. The underlying issue is that user-controlled input can be executed by the shell, enabling an attacker to run arbitrary commands on the serve...

CVE-2001-1143

CVE-2001-1143 affects IBM DB2 7.0. A remote attacker can cause a denial-of-service (crash) by sending a single byte to (1) db2ccs.exe on port 6790 or (2) db2jds.exe on port 6789. This vulnerability is documented across multiple feeds (NVD, CVE List, Nessus/DOS plugin) with CVSSv2 vector AV:N/AC:L...

CVE-2001-1216

Buffer overflow in PL/SQL Apache module in Oracle 9i Application Server allows remote attackers to execute arbitrary code via a long request for a help page...

CVE-2001-1194

Zyxel Prestige 681 and 1600 SDSL Routers allow remote attackers to cause a denial of service via malformed packets with 1 an IP length less than actual packet size, or 2 fragmented packets whose size exceeds 64 kilobytes after reassembly...

CVE-2001-1192

Citrix Independent Computing Architecture ICA Client for Windows 6.1 allows remote malicious web sites to execute arbitrary code via a .ICA file, which is downloaded and automatically executed by the client...

CVE-2001-1136

The libsecurity library in HP-UX 11.04 VVOS allows attackers to cause a denial of service...

CVE-2001-1152

Baltimore Technologies WEBsweeper 4.02, when used to manage URL blacklists, allows remote attackers to bypass blacklist restrictions and connect to unauthorized web servers by modifying the requested URL, including 1 a // double slash, 2 a /SUBDIR/.. where the desired file is in the parentdir, 3 ...

CVE-2001-1190

CVE-2001-1190 concerns Mandrake Linux 8.1 where the default PAM files used by the passwd program do not support MD5 passwords. The root cause stated in connected advisories is the lack of MD5 support in the default PAM configuration, which can yield weaker password security than intended. The evi...

CVE-2001-1087

The CVE-2001-1087 entry applies to NetCache devices where the default config.http.tunnel.allow_ports is +all, enabling remote attackers to connect to arbitrary ports on remote systems behind the device. This could impact confidentiality, integrity, and availability as per NVD metrics. The connect...

CVE-2001-1167

CVE-2001-1167 is a duplicate of CVE-2001-0976. The connected CVE-2001-0976 describes a vulnerability in HP Process Resource Manager (PRM) C.01.08.2 and earlier, used by HP-UX Workload Manager (WLM), that allows local users to gain root privileges via modified libraries or environment variables. T...

CVE-2001-1120

CVE-2001-1120 affects Allaire/Macromedia ColdFusion Server (versions 2.0–4.5.1 SP2). The issue allows remote attackers to read or delete arbitrary files or overwrite ColdFusion server templates via network access. The vulnerability is documented across multiple sources (NVD, CVE list, CERT/CC) wi...

CVE-2001-1207

The CVE-2001-1207 entry describes a buffer overflow in DayDream BBS versions 2.9 through 2.13 that could allow a remote attacker to potentially execute arbitrary code through specific control codes (1) ~#MC, (2) ~#TF, or (3) ~#RA. The underlying issue is a buffer overflow when handling these cont...