CVE-2001-1212

Cross-site scripting vulnerability in catgy.cgi for Aktivate 1.03 allows remote attackers to execute arbitrary Javascript via the desc parameter...

CVE-2001-1214

manual.php in Marcus S. Xenakis Unix Manual 1.0 allows remote attackers to execute arbitrary code via a URL that contains shell metacharacters...

CVE-2001-1187

This entry describes CVE-2001-1187 affecting csvform.pl 0.1, where remote attackers can execute arbitrary commands through metacharacters in the file parameter. The vulnerability is linked to unsanitized handling of the file parameter, enabling arbitrary command execution over the network. The NV...

CVE-2001-1188

The CVE-2001-1188 entry concerns mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier. The vulnerability arises because remote attackers can modify hidden form fields (sendto, email, server, subject, resulturl) to cause the program to send SPAM via remote servers. Affected component is the mail...

CVE-2001-1226

CVE-2001-1226 affects AdCycle 1.17 and earlier. The vulnerability arises because user input is not adequately filtered before being used in MySQL queries, enabling remote attackers to execute arbitrary SQL and potentially read or modify data. The CERT/CC advisory confirms the issue and notes no p...

CVE-2001-1137

The CVE-2001-1137 entry relates to D-Link DI-704 Internet Gateway firmware versions earlier than V2.56b6. It describes a denial-of-service condition where remote attackers can cause a reboot by sending malformed IP datagram fragments. The impact is a partial availability loss for the device. No r...

CVE-2001-1163

Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT argument to port 6500...

CVE-2001-0018

The CVE-2001-0018 entry affects Windows 2000 domain controllers (Windows 2000 Server, Advanced Server, or Datacenter Server). It describes a denial-of-service vulnerability caused by remote attackers sending a flood of malformed service requests to the DC, leading to partial availability impact. ...

CVE-2001-0122

CVE-2001-0122 describes a kernel leak in IBM’s FRCA (AfpaCache) module used by IBM HTTP Server 1.3.x and WebSphere 3.52. The vulnerability allows remote attackers to cause a denial of service by issuing a sequence of malformed HTTP requests that generate a "+bad request" error. Affected products ...

CVE-2001-0252

CVE-2001-0252 affects iPlanet (Netscape) Enterprise Server 4.1. A remote attacker can trigger a denial of service by sending a long HTTP GET request containing many "/../" sequences, leading to server instability. The vulnerability is described across multiple sources (NVD/CVE entries and Nessus/...

CVE-2001-0321

CVE-2001-0321 corresponds to a traversal/Arbitrary File Read in the PHP-Nuke CGI opendir.php. The affected component is the opendir.php script used by PHP-Nuke; the root cause is a filename parameter in the requesturl argument that allows remote attackers to read arbitrary files on the server. Th...

CVE-2001-0394

The CVE-2001-0394 entry concerns Website Pro 3.0.37 where the Remote manager service is vulnerable to a denial-of-service via a sequence of malformed HTTP requests to the /dyn directory. The NVD entry lists a CVSS2 base score of 5.0 (Medium) with network attack vector, low attack complexity, no a...

CVE-2001-0444

CVE-2001-0444 affects Cisco CBOS 2.3.0.053. The vulnerability arises because the router’s output of the show nat (sh nat) command is echoed to the terminal of the next user who connects via Telnet, potentially allowing that user to view sensitive information. The documented impact is partial conf...

CVE-2001-0461

CVE-2001-0461 affects the Free On-Line Dictionary of Computing (FOLDOC) template.cgi. Remote attackers can read files and execute commands by injecting shell metacharacters in the template.cgi argument. This is documented in NVD/CVE records; no remediation/patch details are provided in the connec...

CVE-2001-0500

A buffer overflow vulnerability exists in the ISAPI extension (idq.dll) within Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier versions. A remote attacker can execute arbitrary commands by sending a specially crafted request to Internet Data Administration (.ida) and Intern...

CVE-2001-0538

CVE-2001-0538 describes a vulnerability in the Microsoft Outlook View ActiveX control used by Outlook 2002 and earlier. The flaw allows remote attackers to execute arbitrary code by presenting a malicious HTML email or web page that invokes the control, effectively running code with the caller’s ...

CVE-2001-0540

CVE-2001-0540: Memory leak in Windows NT/2000 Terminal Server processing of malformed RDP requests to port 3389 leads to memory exhaustion and DoS. Affected: Windows NT/2000 Terminal Services. Root cause: memory handling during RDP request processing. Remediation: Microsoft Security Bulletin MS01...

CVE-2001-0563

CVE-2001-0563 affects ElectroSystems Engineering Inc. ElectroComm 2.0 and earlier. The flaw allows a remote attacker to induce a denial of service by sending large strings (greater than 160,000 characters) to port 23. The available sources (NVD, CVE listings) corroborate the DoS impact but do not...

CVE-2001-0611

Becky!

CVE-2001-0615

The CVE-2001-0615 entry describes a directory traversal in Faust Informatics Freestyle Chat server prior to 4.1 SR3. The flaw allows a remote attacker to read arbitrary files by sending a specially crafted URL that abuses variations of the dot-dot sequence (for example, ... or ....). The availabl...