3467 matches found
CVE-2001-1169
CVE-2001-1169 affects S/Key’s keyinit, where initialization of a one‑time password sequence does not require authentication. The vulnerability allows an attacker who already has user privileges to create new one‑time passwords, potentially enabling access to other services that use S/Key authenti...
CVE-2001-1129
Format string vulnerabilities in 1 probuild, 2 dbutil, 3 mprosrv, 4 mprshut, 5 proapsv, 6 progres, 7 proutil, 8 rfutil and 9 prolib in Progress database 9.1C allows a local user to execute arbitrary code via format string specifiers in the file used by the PROMSGS environment variable...
CVE-2001-1110
CVE-2001-1110 (EFTP 2.0.7.337) is documented as a remote-attack vulnerability where an attacker can obtain NETBIOS credentials by requesting information on a file in a network share, causing the server to send credentials to the share owner’s host and enabling the attacker to sniff the connection...
CVE-2001-1191
CVE-2001-1191 affects IBM Tivoli SecureWay Policy Director/WebSEAL 3.8 (Proxy Policy Director). The vulnerability allows remote attackers to cause a denial-of-service crash by requesting a URL that ends with %2E. The root cause, as described by OpenVAS/Nessus entries, is how the server processes ...
CVE-2001-1150
CVE-2001-1150 corresponds to a vulnerability in Trend Micro OfficeScan Corporate Edition (Virus Buster) 3.5.2–3.5.4 where the CGI binary cgiWebupdate.exe exposes an information-disclosure/privilege-escalation flaw. The available connected sources describe an information disclosure vulnerability t...
CVE-2001-1211
Ipswitch IMail 7.0.4 and earlier contains a vulnerability in the CGI programs aliasadmin and listadm1 that allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted on the same server. The issue arises because these CGI scri...
CVE-2001-1226
CVE-2001-1226 affects AdCycle 1.17 and earlier. The vulnerability arises because user input is not adequately filtered before being used in MySQL queries, enabling remote attackers to execute arbitrary SQL and potentially read or modify data. The CERT/CC advisory confirms the issue and notes no p...
CVE-2001-1213
The CVE-2001-1213 entry applies to DataWizard FtpXQ 2.0 and 2.1, where a default configuration uses a default username and password, enabling remote attackers to read and write arbitrary files in the root folder. Root cause: default credentials in the product’s default setup. Impact per NVD: conf...
CVE-2001-1151
Affected product : Trend Micro OfficeScan Corporate Edition (Virus Buster Corporate Edition). Vulnerability : Remote disclosure of sensitive configuration data via unauthenticated access to /officescan/hotdownload, specifically reading the configuration file ofcscan.ini which contains a weakly en...
CVE-2001-1154
CVE-2001-1154 affects Cyrus mail servers (versions 2.0.15, 2.0.16, and 1.6.24) running on BSDi 4.2 with IMAP enabled. The issue allows remote attackers to cause a denial-of-service condition (hang) by leveraging PHP IMAP clients. The available documents confirm the affected software stack and the...
CVE-2001-1225
Hughes Technology Mini SQL 2.0.10 through 2.0.12 allows local users to cause a denial of service by creating a very large array in a table, which causes miniSQL to crash when the table is queried...
CVE-2001-1152
Baltimore Technologies WEBsweeper 4.02: A URL blacklist management vulnerability allows remote attackers to bypass restrictions and reach unauthorized web servers by tampering with the requested URL. Exploitation vectors include (1) //, (2) /SUBDIR/.. to access parent directory, (3) /./, or (4) U...
CVE-2001-1212
CVE-2001-1212 affects Aktivate 1.03 via catgy.cgi; provides a cross-site scripting flaw in the desc parameter that lets remote attackers inject JavaScript. Base score 5.0 (MEDIUM) per NVD. Public details in CVE entry describe the vulnerable parameter and impact; no explicit remediation or exploit...
CVE-2001-1165
The CVE-2001-1165 entry concerns Intego FileGuard 4.0, which stores user information and passwords with weak encryption. This weak crypto enables local users to escalate privileges by decrypting stored data, for example using the Disengage tool. The vulnerability is localized (local access requir...
CVE-2001-1142
The CVE-2001-1142 entry concerns ArGoSoft FTP Server 1.2.2.2, which uses weak password encryption. The underlying issue, as described in the connected sources, is that passwords stored in the password file are protected by weak encryption, enabling an attacker with access to that file to gain pri...
CVE-2001-1133
Technical details about CVE-2001-1133 are not publicly provided in the supplied documents. No concrete affected products, versions, root cause, impact, or remediation are present. Monitor for updates in future disclosures.
CVE-2001-1127
CVE-2001-1127 describes a buffer overflow in Progress Database 8.3D and 9.1C that could let a local user execute arbitrary code via the eight entry points: _proapsv, _mprosrv, _mprshut, orarx, sqlcpp, _probrkr, _sqlschema, and _sqldump. The NVD entry assigns a base score 7.2 (HIGH) with LOCAL att...
CVE-2001-1097
Cisco IOS 12.0–12.2.1 devices (routers and switches) are affected by CVE-2001-1097, allowing a remote attacker to cause a denial of service via a flood of UDP packets. The vulnerability is described in the CVE/NVD entries as a network-accessible DoS condition with a partial impact on availability...