3489 matches found
CVE-2001-0626
CVE-2001-0626 affects O'Reilly Website Professional
CVE-2001-0630
The CVE-2001-0630 entry documents a directory traversal vulnerability in MIMAnet's viewsrc.cgi version 2.0. The flaw allows a remote attacker to read arbitrary files by manipulating the loc parameter via a dot-dot (.. ) payload. No explicit patch or remediation is provided in the supplied documen...
CVE-2001-0644
CVE-2001-0644 affects Maxum Rumpus FTP Server versions 1.3.3 and 2.0.3 dev 3, where passwords are stored in plaintext in the Rumpus User Database file located in the prefs folder. The underlying issue is insecure password storage, which could allow an attacker who can access the server filesystem...
CVE-2001-0648
CVE-2001-0648 describes a directory traversal vulnerability in PHProjekt 2.1 and earlier. A remote attacker can perform a dot-dot (..) attack on the file module to conduct unauthorized activities. The NVD entry lists a base score of 5.0 (Medium) with network access, low attack complexity, no auth...
CVE-2001-0660
CVE-2001-0660 affects Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier. The back-end function that processes the Global Address List (GAL) can be accessed without authentication, allowing remote attackers to identify valid user email addresses stored in the GAL. Connected sourc...
CVE-2001-0662
CVE-2001-0662 affects the RPC Endpoint Mapper in Windows NT 4.0. A remote attacker can cause a denial of service by sending a malformed request, leading to loss of RPC services. The vulnerability lies in the RPC service’s endpoint mapper; exploitation results in service disruption (no information...
CVE-2001-0666
Outlook Web Access (OWA) in Microsoft Exchange 2000 is affected. An authenticated user can trigger a denial of service (CPU consumption) by sending a malformed OWA request for a deeply nested folder in the user’s mailbox, exploiting a vulnerability in OWA request handling. Affected component: OWA...
CVE-2001-0667
CVE-2001-0667 affects Internet Explorer 6 and earlier when used with the Telnet client in Services for Unix (SFU) 2.0. The vulnerability allows remote attackers to spawn Telnet with a log-file option on the command line, enabling writing arbitrary code into an executable file that is later execut...
CVE-2001-0698
NetWin SurgeFTP (SurgeFTP) versions 2.0a and 1.0b are affected by a directory traversal vulnerability in the nlist command, enabling remote attackers to list files and directories outside the FTP root due to insufficient input validation. CERT reports Surge FTP Server 2.0a allows remote users to ...
CVE-2001-0730
CVE-2001-0730 affects Apache 1.3.x by a flaw in the split-logfile support: a crafted HTTP request with a slash in the Host header can cause the server to overwrite any file ending in ".log" on the system. Affected version in public reports centers on Apache 1.3.20 with the ability to write arbitr...
CVE-2001-0738
The CVE-2001-0738 issue affects the Linux kernel logging daemon klogd (sysklogd 1.3) across various distributions. A NULL byte in log messages can cause klogd to enter an infinite loop and hang, effectively a denial-of-service. Root cause cited is klogd’s LogLine handling of NULL bytes in input. ...
CVE-2001-0764
The CVE-2001-0764 entry describes a buffer overflow in ntping of scotty 2.1.0 that allows local users to execute arbitrary code via a long hostname passed as a command line argument. Concretely, the affected software is scotty 2.1.0 (ntping component); the vulnerability arises from a buffer overf...
CVE-2001-0805
The CVE-2001-0805 issue affects Tarantella Enterprise: ttawebtop.cgi in versions 3.00–3.01 is vulnerable to a directory-traversal flaw via a .. in the pg parameter, enabling remote readers to access arbitrary files on the server. The issue is documented across multiple sources (CVE listing, CVE r...
CVE-2001-0954
The provided sources confirm a Denial of Service flaw in IBM Lotus Domino (Lotus Domino 5.0.5/5.0.8 and possibly other versions), triggered by a crafted web request that includes a "/./" path segment in the URL. The vulnerability is advisory-listed as CVE-2001-0954 and is exploited by a remote at...
CVE-2001-0963
SpoonFTP Server (version 1.1) is affected by a directory-traversal vulnerability in the CWD command due to inadequate input validation, allowing local users (and in some cases remote users) to access files outside the FTP root with the user’s privileges. CERT/CC notes the impact as reading direct...
CVE-2001-0965
Affected software: glFTPD 1.23. The issue is a remote denial-of-service via the LIST command when the argument contains a large number of * characters, causing CPU consumption. The connected documents provide the same vulnerability description across multiple sources, but do not include a confirm...
CVE-2001-0998
CVE-2001-0998 affects IBM HACMP 4.4. A completed TCP connection to HACMP ports (e.g., during a port scan) that sends no additional data can cause a failure in snmpd, yielding a denial-of-service condition. The available sources identify the affected product and the remote DoS impact but do not pr...
CVE-2001-1017
The CVE-2001-1017 issue affects the rmuser utility in FreeBSD 4.2 and 4.3. During the update of the master.passwd file, a copy is created with world-readable permissions, enabling local users to read the copied file while rmuser runs. This could allow access to password hashes and potential passw...
CVE-2001-1056
The CVE affects the ip_masq_irc IP masquerading module 2.2. A remote attacker can bypass firewall restrictions by inducing the target to send a DCC SEND to a malicious server listening on port 6667, which may cause the module to treat that traffic as valid and permit the connection to the port sp...
