CVE-2001-1212

CVE-2001-1212 affects Aktivate 1.03 via catgy.cgi; provides a cross-site scripting flaw in the desc parameter that lets remote attackers inject JavaScript. Base score 5.0 (MEDIUM) per NVD. Public details in CVE entry describe the vulnerable parameter and impact; no explicit remediation or exploit...

CVE-2001-1114

book.cgi in NetCode NC Book 0.2b allows remote attackers to execute arbitrary commands via shell metacharacters in the "current" parameter...

CVE-2001-1205

Public technical details beyond the initial description are not provided in the connected documents. CVE-2001-1205 is described as a directory traversal in lastlines.cgi (Last Lines 2.0); monitor for updates.

CVE-2001-1179

The CVE-2001-1179 issue affects the xman utility. It allows local users to gain privileges by manipulating the MANPATH to point to a man page whose filename contains shell metacharacters, enabling privilege escalation. The connected documents confirm the description but do not provide explicit af...

CVE-2001-1093

CVE-2001-1093 concerns a buffer overflow in the msgchk utility of Digital UNIX 4.0G and earlier. A command-line argument of excessive length can overflow a buffer, enabling a local attacker to execute arbitrary code with the effective user ID of the msgchk process. The vulnerability is described ...

CVE-2001-1192

Citrix Independent Computing Architecture ICA Client for Windows 6.1 allows remote malicious web sites to execute arbitrary code via a .ICA file, which is downloaded and automatically executed by the client...

CVE-2001-1110

CVE-2001-1110 (EFTP 2.0.7.337) is documented as a remote-attack vulnerability where an attacker can obtain NETBIOS credentials by requesting information on a file in a network share, causing the server to send credentials to the share owner’s host and enabling the attacker to sniff the connection...

CVE-2001-1139

The CVE-2001-1139 entry concerns a Directory traversal vulnerability in ASCII NT WinWrapper Professional. The underlying issue allows an attacker to read arbitrary files by injecting a .. in the server request, indicating a path traversal flaw in the software’s handling of input paths. Public det...

CVE-2001-1223

The CVE-2001-1223 entry concerns the web administration server of ELSA Lancom 1100 Office. The vulnerability is that the web admin interface does not require authentication, allowing arbitrary remote attackers to gain administrative privileges by connecting to the server (network exposure). The a...

CVE-2001-1173

CVE-2001-1173 affects MasqMail prior to 0.1.15 and enables local privilege escalation via piped aliases. The vulnerability impacts local confidentiality, integrity, and availability (C:C, I:C, A:C) with a high base severity (7.2) and local attack vector, no authentication. The provided documents ...

CVE-2001-1169

CVE-2001-1169 affects S/Key’s keyinit, where initialization of a one‑time password sequence does not require authentication. The vulnerability allows an attacker who already has user privileges to create new one‑time passwords, potentially enabling access to other services that use S/Key authenti...

CVE-2001-1128

The CVE-2001-1128 vulnerability affects Progress database versions 8.3D and 9.1C. A buffer overflow is triggered by long entries in files specified via the PROMSGS or PROTERMCAP environment variables, allowing local code execution. The available documents confirm the vulnerable component and the ...

CVE-2001-1135

The CVE-2001-1135 issue affects ZyXEL Prestige 642R and 642R-I routers. According to the connected documents, these devices can be reconfigured if the internal user knows the password and there is evidence of default credentials being present (HTTP web interface). The OpenVAS/Nessus entries indic...

CVE-2001-1097

Cisco IOS 12.0–12.2.1 devices (routers and switches) are affected by CVE-2001-1097, allowing a remote attacker to cause a denial of service via a flood of UDP packets. The vulnerability is described in the CVE/NVD entries as a network-accessible DoS condition with a partial impact on availability...

CVE-2001-1129

Format string vulnerabilities in 1 probuild, 2 dbutil, 3 mprosrv, 4 mprshut, 5 proapsv, 6 progres, 7 proutil, 8 rfutil and 9 prolib in Progress database 9.1C allows a local user to execute arbitrary code via format string specifiers in the file used by the PROMSGS environment variable...

CVE-2001-1184

CVE-2001-1184 affects Denicomp Winsock RSHD/NT, versions 2.21.00 and earlier. The issue allows remote attackers to cause denial of service (CPU consumption) by connecting to an invalid port number: in 2.20.00 and earlier, a negative/invalid port triggers a connection attempt to that port and all ...

CVE-2001-1189

IBM WebSphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, enabling local users to retrieve passwords via a JSP script. Affected software: IBM WebSphere Application Server prior to 3.5.3. Root cause: credentials stored in cleartext. Impact: loc...

CVE-2001-1126

Symantec LiveUpdate 1.4 through 1.6, and possibly later versions, allows remote attackers to cause a denial of service flood via DNS spoofing of the update.symantec.com site...

CVE-2001-1194

Zyxel Prestige 681 and 1600 SDSL Routers allow remote attackers to cause a denial of service via malformed packets with 1 an IP length less than actual packet size, or 2 fragmented packets whose size exceeds 64 kilobytes after reassembly...

CVE-2001-1202

CVE-2001-1202 affects DeleGate versions 7.7.0 and 7.7.1. The root cause is that scripting commands are not quoted in a 403 Forbidden error page, enabling remote attackers to trigger cross‑site scripting by using a URL that generates an error. Consequence is arbitrary Javascript execution on other...