CVE-2001-1111

CVE-2001-1111 concerns EFTP 2.0.7.337, where user passwords are stored in plaintext in the file eftp2users.dat. The issue is a plaintext credential exposure, with the NVD vector indicating local access, low complexity, and no authentication required to obtain partial confidentiality, partial inte...

CVE-2001-1136

CVE-2001-1136 affects the libsecurity library in HP-UX 11.04 (VVOS). The vulnerability is described as allowing a denial of service. The connected sources confirm the affected component (libsecurity) and the impact (denial of service) with a low overall severity (CVSS2 base score ~2.1, LOCAL acce...

CVE-2001-1123

The CVE-2001-1123 vulnerability affects HP OpenView Network Node Manager (NNM) versions 6.2 and earlier. It allows a local attacker to potentially execute arbitrary code due to a suspected buffer overflow when processing a long hostname or object ID, enabling local privilege impact on the host ru...

CVE-2001-1225

The vulnerability CVE-2001-1225 affects Hughes Technology Mini SQL 2.0.10–2.0.12. Local users can trigger a denial of service by constructing a very large array in a table, causing Mini SQL to crash when the table is queried. Exploit details or in‑the‑wild status are not provided in the documents...

CVE-2001-1164

CVE-2001-1164 affects UnixWare 7, specifically the uucp utilities (uucp, uux, bnuconvert, uucico, uuxcmd, uuxqt). The issue is a buffer overflow triggered by long command-line arguments, allowing a local attacker to run arbitrary code. CVSS v2 base score is 7.2 (HIGH) with LOCAL attack vector, LO...

CVE-2001-1140

BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by appending a %00 null byte to the request...

CVE-2001-1208

CVE-2001-1208 describes a format-string vulnerability in DayDream BBS that allows remote code execution via format specifiers in a file containing a ~#RA control code. The entry lists a base score of 7.5 (HIGH) with network attack vector, low attack complexity, and no authentication required. The...

CVE-2001-1086

XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack...

CVE-2001-1090

nsspostgresql 0.6.1 and before allows a remote attacker to execute arbitrary SQL queries by inserting SQL code into an HTTP request...

CVE-2001-1156

TYPSoft FTP 0.95 allows remote attackers to cause a denial of service CPU consumption via a "../../" argument to 1 STOR or 2 RETR...

CVE-2001-1097

Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a flood of UDP packets...

CVE-2001-1163

Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT argument to port 6500...

CVE-2001-1159

loadprefs.php and supporting include files in SquirrelMail 1.0.4 and earlier do not properly initialize certain PHP variables, which allows remote attackers to 1 view sensitive files via the configphp and datadir options, and 2 execute arbitrary code by using optionsorder.php to upload a message...

CVE-2001-1129

The CVE-2001-1129 entry covers multiple components of Progress database 9.1C (probuild, dbutil, mprosrv, mprshut, proapsv, progres, proutil, rfutil, and prolib). The vulnerability is a local format-string flaw in the PROMSGS environment file that allows a local user to execute arbitrary code. The...

CVE-2001-1124

CVE-2001-1124 affects HP-UXRpcbind on HP-UX 11.00, 11.04 and 11.11. The issue arises from malformed RPC portmap requests, potentially tied to a buffer overflow, and can cause a denial of service (core dump). The information in the connected OpenVAS entry points to an HP-UX update for rpcbind (HPS...

CVE-2001-1216

CVE-2001-1216 affects Oracle 9i Application Server’s PL/SQL Apache module (mod_plsql). A buffer overflow in the mod_plsql/PLSQL path can be triggered by a long request for a help page, allowing remote attackers to execute arbitrary code or cause a crash. The vulnerability is tied to Oracle 9iAS’s...

CVE-2001-1222

Plesk Server Administrator (PSA) 1.0 is affected by CVE-2001-1222: remote attackers can obtain PHP source code by issuing an HTTP request that includes the target IP address and a valid domain account name. The vulnerability is documented in NVD with a medium impact score (CVSSv2: AV:N/AC:L/Au:N/...

CVE-2001-1091

The CVE-2001-1091 entry concerns NetBSD 1.4.x–1.5.1 where the dump and dump_lfs commands do not drop privileges properly, allowing local users to gain privileges via the RCMD_CMD environment variable. This is the stated root cause and impact. The available documents do not provide remediation det...

CVE-2001-1139

The CVE-2001-1139 entry concerns a Directory traversal vulnerability in ASCII NT WinWrapper Professional. The underlying issue allows an attacker to read arbitrary files by injecting a .. in the server request, indicating a path traversal flaw in the software’s handling of input paths. Public det...

CVE-2001-1217

CVE-2001-1217 describes a directory traversal vulnerability in the PL/SQL Apache module (mod_plsql/mod_plsql) of Oracle 9i Application Server. The issue allows remote attackers to read sensitive files outside the web server’s root by crafting a request with double URL encoded sequences (..). Affe...