3489 matches found
CVE-2001-1178
CVE-2001-1178 (xman) is a local privilege-escalation vulnerability caused by a buffer overflow triggered by a long MANPATH environment variable. Affected component: xman. Root cause: insufficient bounds checking on MANPATH leading to overflow. Impact: local users may gain privileges; exploitation...
CVE-2001-1196
CVE-2001-1196 concerns Webmin 0.91, where a directory traversal flaw in edit_action.cgi could allow privilege escalation via a .. argument. The vulnerability is documented with a high-severity score (CVSS v2: HIGH, base 10.0) and is referenced by multiple sources. A remediation available in the c...
CVE-2001-1204
CVE-2001-1204 describes a directory traversal in Total PC Solutions’ PHP Rocket Add-in for FrontPage 1.0, via the phprocketaddin component, allowing remote attackers to read arbitrary files by supplying a .. in the page parameter. The OpenVAS/Nessus entries corroborate a remote file read vulnerab...
CVE-2001-1205
Public technical details beyond the initial description are not provided in the connected documents. CVE-2001-1205 is described as a directory traversal in lastlines.cgi (Last Lines 2.0); monitor for updates.
CVE-2001-1206
CVE-2001-1206 affects Matrix CGI vault Last Lines 2.0. The vulnerability: remote attackers can execute arbitrary commands via shell metacharacters in the $error_log variable, enabling remote code execution over the network. The provided sources do not specify affected versions beyond Last Lines 2...
CVE-2001-1207
The CVE-2001-1207 entry describes a buffer overflow in DayDream BBS versions 2.9 through 2.13 that could allow a remote attacker to potentially execute arbitrary code through specific control codes (1) ~#MC, (2) ~#TF, or (3) ~#RA. The underlying issue is a buffer overflow when handling these cont...
CVE-2001-1208
CVE-2001-1208 describes a format-string vulnerability in DayDream BBS that allows remote code execution via format specifiers in a file containing a ~#RA control code. The entry lists a base score of 7.5 (HIGH) with network attack vector, low attack complexity, and no authentication required. The...
CVE-2001-1209
The CVE-2001-1209 issue concerns the zml.cgi CGI script, where a directory traversal via the file parameter allows reading arbitrary files on the web server. Reports clearly state the vulnerability exists in zml.cgi and that the exploit would enable access to files the cgi/httpd user can read. Th...
CVE-2001-1213
The CVE-2001-1213 entry applies to DataWizard FtpXQ 2.0 and 2.1, where a default configuration uses a default username and password, enabling remote attackers to read and write arbitrary files in the root folder. Root cause: default credentials in the product’s default setup. Impact per NVD: conf...
CVE-2001-1214
CVE-2001-1214 : The Unix Manual PHP script (manual.php) from Marcus S. Xenakis Unix Manual 1.0 allows remote code execution by supplying a URL with shell metacharacters. The CERT/CC entry confirms that manual.php does not adequately validate input before passing it to the shell, enabling remote c...
CVE-2001-1220
CVE-2001-1220 affects the D-Link DWL-1000AP Wireless LAN Access Point with firmware 3.2.28 #483. The root cause is storing the administrative password in plaintext in the default Management Information Base (MIB), allowing remote attackers to gain administrative privileges. No remediation details...
CVE-2001-1225
The vulnerability CVE-2001-1225 affects Hughes Technology Mini SQL 2.0.10–2.0.12. Local users can trigger a denial of service by constructing a very large array in a table, causing Mini SQL to crash when the table is queried. Exploit details or in‑the‑wild status are not provided in the documents...
CVE-2001-1218
Microsoft Internet Explorer for Unix 5.0SP1 is affected. Local users can cause a denial of service (crash) in the CDE or the X server on Solaris 2.6 by rapidly scrolling Chinese characters or maximizing the window. The CVSS data indicates a Low base score (2.1) with LOCAL access, no confidentiali...
CVE-2001-1138
CVE-2001-1138 affects Randy Parker Power Up HTML 0.8033beta (r.pl/r.cgi). The vulnerability is a directory traversal via the FILE parameter (.. ) that lets remote attackers read arbitrary files and, per some sources, potentially execute code. Connected OpenVAS NASL notes describe the CGI as expos...
CVE-2001-1154
CVE-2001-1154 affects Cyrus mail servers (versions 2.0.15, 2.0.16, and 1.6.24) running on BSDi 4.2 with IMAP enabled. The issue allows remote attackers to cause a denial-of-service condition (hang) by leveraging PHP IMAP clients. The available documents confirm the affected software stack and the...
CVE-2001-1091
The 1 dump and 2 dumplfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privileges via the RCMDCMD environment variable...
CVE-2001-1104
SonicWALL SOHO is affected by CVE-2001-1104 due to predictable TCP Initial Sequence Numbers, enabling remote attackers to spoof/hijack sessions. The vulnerability affects the firewall component handling TCP connections; exploitation could allow session hijacking without user interaction. A remedi...
CVE-2001-1225
Hughes Technology Mini SQL 2.0.10 through 2.0.12 allows local users to cause a denial of service by creating a very large array in a table, which causes miniSQL to crash when the table is queried...
CVE-2001-1138
Directory traversal vulnerability in r.pl aka r.cgi of Randy Parker Power Up HTML 0.8033beta allows remote attackers to read arbitrary files and possibly execute arbitrary code via a .. dot dot in the FILE parameter...