CVE-2001-1194

Zyxel Prestige 681 and 1600 SDSL Routers allow remote attackers to cause a denial of service via malformed packets with 1 an IP length less than actual packet size, or 2 fragmented packets whose size exceeds 64 kilobytes after reassembly...

CVE-2001-1202

CVE-2001-1202 affects DeleGate versions 7.7.0 and 7.7.1. The root cause is that scripting commands are not quoted in a 403 Forbidden error page, enabling remote attackers to trigger cross‑site scripting by using a URL that generates an error. Consequence is arbitrary Javascript execution on other...

CVE-2001-1194

CVE-2001-1194 affects Zyxel Prestige 681 and 1600 SDSL Routers. Remote attackers can cause a denial of service by sending malformed packets: (1) IP length shorter than the actual packet size, or (2) fragmented packets whose reassembly size exceeds 64 KB. Impact is denial of service/partial availa...

CVE-2001-1140

BadBlue Personal Edition v1.02 beta is affected by CVE-2001-1140, where remote attackers can read source code of executables by adding a null byte (%00) to the request. The vulnerability is exploitable over a network with low attack complexity and no authentication, causing partial confidentialit...

CVE-2001-1086

XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack...

CVE-2001-1204

CVE-2001-1204 describes a directory traversal in Total PC Solutions’ PHP Rocket Add-in for FrontPage 1.0, via the phprocketaddin component, allowing remote attackers to read arbitrary files by supplying a .. in the page parameter. The OpenVAS/Nessus entries corroborate a remote file read vulnerab...

CVE-2001-1197

CVE-2001-1197 affects KDE2 KDEUtils, specifically the klprfax_filter component. The vulnerability enables local users to overwrite arbitrary files by performing a symlink attack against the klprfax.filter temporary file. The root cause is a symlink manipulation in the temporary file handling with...

CVE-2001-1086

The CVE-2001-1086 issue affects XFree86 versions 3.3 and 3.3.3 where XDM cookies created via gettimeofday() with HasXdmXauth are easily guessable, allowing remote attackers to access the X display by brute forcing cookies. Supported by the provided records: partial confidentiality, integrity, and...

CVE-2001-1115

The CVE-2001-1115 issue affects SIX-webboard 2.01 and earlier where generate.cgi does not properly validate the content parameter, allowing a remote attacker to perform directory traversal and read arbitrary files on the server with the web server’s permissions. This is caused by directory traver...

CVE-2001-1217

CVE-2001-1217 describes a directory traversal vulnerability in the PL/SQL Apache module (mod_plsql/mod_plsql) of Oracle 9i Application Server. The issue allows remote attackers to read sensitive files outside the web server’s root by crafting a request with double URL encoded sequences (..). Affe...

CVE-2001-1210

CVE-2001-1210 concerns Cisco UBR900 series DOCSIS routers that ship without SNMP access restrictions, enabling remote read/write of MIB data via arbitrary SNMP community strings. The root cause is lack of SNMP access controls on the management plane; impact is partial confidentiality/integrity of...

CVE-2001-1219

The vulnerability affects Microsoft Internet Explorer 6.0 and earlier , where a malicious page can cause a denial‑of‑service by repeatedly refreshing the window via self.location, potentially crashing the client. The provided documents identify the basic behavior but do not specify vendor patches...

CVE-2001-1124

CVE-2001-1124 affects HP-UXRpcbind on HP-UX 11.00, 11.04 and 11.11. The issue arises from malformed RPC portmap requests, potentially tied to a buffer overflow, and can cause a denial of service (core dump). The information in the connected OpenVAS entry points to an HP-UX update for rpcbind (HPS...

CVE-2001-1091

The CVE-2001-1091 entry concerns NetBSD 1.4.x–1.5.1 where the dump and dump_lfs commands do not drop privileges properly, allowing local users to gain privileges via the RCMD_CMD environment variable. This is the stated root cause and impact. The available documents do not provide remediation det...

CVE-2001-1134

The CVE-2001-1134 entry concerns Xerox DocuPrint N40 Printers. The vulnerability is a remote denial-of-service condition triggered by malformed data, exemplified by data produced by the Code Red worm. Affected component is the printer’s handling of input data over the network, with the impact des...

CVE-2001-1134

Xerox DocuPrint N40 Printers allow remote attackers to cause a denial of service via malformed data, such as that produced by the Code Red worm...

CVE-2001-1221

The CVE-2001-1221 entry affects D‑Link DWL-1000AP Wireless LAN Access Point with firmware 3.2.28 #483. The issue is use of a default SNMP community string 'public', allowing remote attackers to obtain sensitive information. The provided documents do not specify affected versions beyond the listed...

CVE-2001-1140

BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by appending a %00 null byte to the request...

CVE-2001-1179

The CVE-2001-1179 issue affects the xman utility. It allows local users to gain privileges by manipulating the MANPATH to point to a man page whose filename contains shell metacharacters, enabling privilege escalation. The connected documents confirm the description but do not provide explicit af...

CVE-2001-1148

CVE-2001-1148: Multiple buffer overflows in SCO OpenServer 5.0.6a and earlier allow local users to gain privileges via a long TERM environment variable to (atcronsh, auditsh, authsh, backupsh, lpsh, sysadm.menu, or termsh); affected software is SCO OpenServer components used by scoadmin/sysadmsh....