CVE-2001-1090

CVE-2001-1090 affects nss_postgresql 0.6.1 and earlier. The vulnerability allows a remote attacker to execute arbitrary SQL by inserting SQL code into an HTTP request. The provided documents do not specify affected versions beyond 0.6.1, nor patch/remediation details. Exploitation status is not p...

CVE-2001-1179

The CVE-2001-1179 issue affects the xman utility. It allows local users to gain privileges by manipulating the MANPATH to point to a man page whose filename contains shell metacharacters, enabling privilege escalation. The connected documents confirm the description but do not provide explicit af...

CVE-2001-1140

BadBlue Personal Edition v1.02 beta is affected by CVE-2001-1140, where remote attackers can read source code of executables by adding a null byte (%00) to the request. The vulnerability is exploitable over a network with low attack complexity and no authentication, causing partial confidentialit...

CVE-2001-1218

Microsoft Internet Explorer for Unix 5.0SP1 is affected. Local users can cause a denial of service (crash) in the CDE or the X server on Solaris 2.6 by rapidly scrolling Chinese characters or maximizing the window. The CVSS data indicates a Low base score (2.1) with LOCAL access, no confidentiali...

CVE-2001-1091

The 1 dump and 2 dumplfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privileges via the RCMDCMD environment variable...

CVE-2001-1209

The CVE-2001-1209 issue concerns the zml.cgi CGI script, where a directory traversal via the file parameter allows reading arbitrary files on the web server. Reports clearly state the vulnerability exists in zml.cgi and that the exploit would enable access to files the cgi/httpd user can read. Th...

CVE-2001-1196

CVE-2001-1196 concerns Webmin 0.91, where a directory traversal flaw in edit_action.cgi could allow privilege escalation via a .. argument. The vulnerability is documented with a high-severity score (CVSS v2: HIGH, base 10.0) and is referenced by multiple sources. A remediation available in the c...

CVE-2001-1178

CVE-2001-1178 (xman) is a local privilege-escalation vulnerability caused by a buffer overflow triggered by a long MANPATH environment variable. Affected component: xman. Root cause: insufficient bounds checking on MANPATH leading to overflow. Impact: local users may gain privileges; exploitation...

CVE-2001-1086

The CVE-2001-1086 issue affects XFree86 versions 3.3 and 3.3.3 where XDM cookies created via gettimeofday() with HasXdmXauth are easily guessable, allowing remote attackers to access the X display by brute forcing cookies. Supported by the provided records: partial confidentiality, integrity, and...

CVE-2001-1148

CVE-2001-1148: Multiple buffer overflows in SCO OpenServer 5.0.6a and earlier allow local users to gain privileges via a long TERM environment variable to (atcronsh, auditsh, authsh, backupsh, lpsh, sysadm.menu, or termsh); affected software is SCO OpenServer components used by scoadmin/sysadmsh....

CVE-2001-1135

ZyXEL Prestige 642R and 642R-I routers do not filter the routers' Telnet and FTP ports on the external WAN interface from inside access, allowing someone on an internal computer to reconfigure the router, if the password is known...

CVE-2001-1122

Windows NT 4.0 SP 6a allows a local user with write access to winnt/system32 to cause a denial of service crash in lsass.exe by running the NT4ALL exploit program in 'SPECIAL' mode...

CVE-2001-1134

The CVE-2001-1134 entry concerns Xerox DocuPrint N40 Printers. The vulnerability is a remote denial-of-service condition triggered by malformed data, exemplified by data produced by the Code Red worm. Affected component is the printer’s handling of input data over the network, with the impact des...

CVE-2001-1219

The vulnerability affects Microsoft Internet Explorer 6.0 and earlier , where a malicious page can cause a denial‑of‑service by repeatedly refreshing the window via self.location, potentially crashing the client. The provided documents identify the basic behavior but do not specify vendor patches...

CVE-2001-1211

Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same server via the 1 aliasadmin or 2 listadm1 CGI programs, which do not properly verify that an administrator is the...

CVE-2001-1138

Directory traversal vulnerability in r.pl aka r.cgi of Randy Parker Power Up HTML 0.8033beta allows remote attackers to read arbitrary files and possibly execute arbitrary code via a .. dot dot in the FILE parameter...

CVE-2001-1105

The CVE-2001-1105 entry affects RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1 as used in Cisco iCND 2.0. The vulnerability is that the product caches session IDs from failed login attempts, which could allow remote attackers to bypass SSL client authentication and access sensitive data after an initial fail...

CVE-2001-1205

Public technical details beyond the initial description are not provided in the connected documents. CVE-2001-1205 is described as a directory traversal in lastlines.cgi (Last Lines 2.0); monitor for updates.

CVE-2001-1171

The CVE affects Check Point Firewall-1, version 3.0b through 4.0 SP1. The root cause is a symlink-following issue during policy rule compilation that creates a world-writable temporary .cpp file, enabling local users to gain privileges or modify the firewall policy. No exploitation details or in-...

CVE-2001-1170

The CVE concerns AmTote International’s homebet program. The vulnerability arises because homebet.log is stored in the homebet/ virtual directory, enabling remote attackers to access sensitive data and potentially disclose account and PIN numbers. The description does not specify affected version...