CVE-2001-1125

Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com site...

CVE-2001-1094

NetOp School 1.5 allows local users to bypass access restrictions on the administration version by logging into the student version, closing the student version, then starting the administration version...

CVE-2001-1114

book.cgi in NetCode NC Book 0.2b allows remote attackers to execute arbitrary commands via shell metacharacters in the "current" parameter...

CVE-2001-1196

Directory traversal vulnerability in editaction.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' dot dot in the argument...

CVE-2001-1124

rpcbind in HP-UX 11.00, 11.04 and 11.11 allows remote attackers to cause a denial of service core dump via a malformed RPC portmap requests, possibly related to a buffer overflow...

CVE-2001-1094

CVE-2001-1094 affects NetOp School 1.5. Local users can bypass access restrictions on the administration version by first logging into the student version, closing it, and then starting the administration version. The provided sources describe the bypass but do not include exploit code, affected ...

CVE-2001-1135

The CVE-2001-1135 issue affects ZyXEL Prestige 642R and 642R-I routers. According to the connected documents, these devices can be reconfigured if the internal user knows the password and there is evidence of default credentials being present (HTTP web interface). The OpenVAS/Nessus entries indic...

CVE-2001-1204

CVE-2001-1204 describes a directory traversal in Total PC Solutions’ PHP Rocket Add-in for FrontPage 1.0, via the phprocketaddin component, allowing remote attackers to read arbitrary files by supplying a .. in the page parameter. The OpenVAS/Nessus entries corroborate a remote file read vulnerab...

CVE-2001-1173

CVE-2001-1173 affects MasqMail prior to 0.1.15 and enables local privilege escalation via piped aliases. The vulnerability impacts local confidentiality, integrity, and availability (C:C, I:C, A:C) with a high base severity (7.2) and local attack vector, no authentication. The provided documents ...

CVE-2001-1197

CVE-2001-1197 affects KDE2 KDEUtils, specifically the klprfax_filter component. The vulnerability enables local users to overwrite arbitrary files by performing a symlink attack against the klprfax.filter temporary file. The root cause is a symlink manipulation in the temporary file handling with...

CVE-2001-1181

Dynamically Loadable Kernel Module dlkm static kernel symbol table in HP-UX 11.11 is not properly configured, which allows local users to gain privileges...

CVE-2001-1214

manual.php in Marcus S. Xenakis Unix Manual 1.0 allows remote attackers to execute arbitrary code via a URL that contains shell metacharacters...

CVE-2001-1189

IBM WebSphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, enabling local users to retrieve passwords via a JSP script. Affected software: IBM WebSphere Application Server prior to 3.5.3. Root cause: credentials stored in cleartext. Impact: loc...

CVE-2001-1198

CVE-2001-1198 affects HP-UX 10.20 and 11.0. The vulnerability in RLPDaemon lets local users overwrite arbitrary files and gain privileges by specifying the target file in the -L option. The provided documents do not include exploit details, workaround, or confirmed patch information.

CVE-2001-1214

CVE-2001-1214 : The Unix Manual PHP script (manual.php) from Marcus S. Xenakis Unix Manual 1.0 allows remote code execution by supplying a URL with shell metacharacters. The CERT/CC entry confirms that manual.php does not adequately validate input before passing it to the shell, enabling remote c...

CVE-2001-1126

Symantec LiveUpdate 1.4 through 1.6, and possibly later versions, allows remote attackers to cause a denial of service flood via DNS spoofing of the update.symantec.com site...

CVE-2001-1210

CVE-2001-1210 concerns Cisco UBR900 series DOCSIS routers that ship without SNMP access restrictions, enabling remote read/write of MIB data via arbitrary SNMP community strings. The root cause is lack of SNMP access controls on the management plane; impact is partial confidentiality/integrity of...

CVE-2001-1181

CVE-2001-1181 concerns HP-UX 11.11 where the Dynamically Loadable Kernel Module (dlkm) static kernel symbol table is misconfigured, enabling local users to gain privileges. The NVD entry lists a base score of 7.2 (HIGH) with LOCAL access, low attack complexity, and complete impacts to confidentia...

CVE-2001-1134

Xerox DocuPrint N40 Printers allow remote attackers to cause a denial of service via malformed data, such as that produced by the Code Red worm...

CVE-2001-1168

In PhpMyExplorer, Vulnerability CVE-2001-1168 is a directory traversal in index.php (chemin param) exploitable through encoded ../ sequences to read arbitrary files. Affected software: PhpMyExplorer prior to 1.2.1; vulnerable file/parameter: index.php and chemin. Impact: potential remote file dis...