CVE-2001-0662

CVE-2001-0662 affects the RPC Endpoint Mapper in Windows NT 4.0. A remote attacker can cause a denial of service by sending a malformed request, leading to loss of RPC services. The vulnerability lies in the RPC service’s endpoint mapper; exploitation results in service disruption (no information...

CVE-2001-1054

The CVE-2001-1054 vulnerability affects PHPAdsNew, allowing a remote attacker to include arbitrary PHP files hosted on third‑party servers via an HTTP request that sets the includedir variable. This constitutes a Remote File Inclusion flaw in the PHPAdsNew helperfunction.php context, enabling arb...

CVE-2001-0716

CVE-2001-0716 affects Citrix MetaFrame 1.8 Server with Service Pack 3 and Citrix MetaFrame XP/XP SP1. The vulnerability stems from improper handling of multiple sessions during authentication, allowing a remote attacker to cause a crash/DoS by initiating a large number of incomplete sessions. The...

CVE-2001-0692

The vulnerability CVE-2001-0692 affects WatchGuard Firebox SMTP proxy in models 2500 and 4500 running versions 4.5 and 4.6. A remote attacker can bypass firewall filtering by sending a base64 MIME email attachment whose boundary name ends with two dashes, exploiting how the SMTP proxy processes M...

CVE-2001-0803

CVE-2001-0803 is a buffer overflow in the dtspcd (CDE Subprocess Control Service) client connection routine (libDtSvc.so.1) that allows remote execution of arbitrary commands. Public references show exploits and proof-of-concept tooling (e.g., Solaris dtspcd heap overflow modules in Metasploit) a...

CVE-2001-0666

Outlook Web Access (OWA) in Microsoft Exchange 2000 is affected. An authenticated user can trigger a denial of service (CPU consumption) by sending a malformed OWA request for a deeply nested folder in the user’s mailbox, exploiting a vulnerability in OWA request handling. Affected component: OWA...

CVE-2001-0644

CVE-2001-0644 affects Maxum Rumpus FTP Server versions 1.3.3 and 2.0.3 dev 3, where passwords are stored in plaintext in the Rumpus User Database file located in the prefs folder. The underlying issue is insecure password storage, which could allow an attacker who can access the server filesystem...

CVE-2001-0613

The CVE-2001-0613 entry applies to Omnicron Technologies’ OmniHTTPd Pro HTTP Server, affected in version 2.08 and earlier. The connected OpenVAS/NASL and Nessus entries describe a vulnerability where the remote server is vulnerable to a buffer overflow when handling specially long POST requests, ...

CVE-2001-0752

Cisco CBOS 2.3.8 and earlier: remote denial of service via an ICMP ECHO REQUEST with the IP Record Route option set. Affected component is Cisco CBOS; root cause described as processing ICMP ECHO REQUESTs with Record Route data, leading to inability to service requests (DoS). The available refere...

CVE-2001-0506

CVE-2001-0506 is a buffer overflow in IIS 4.0/5.0 ssinc.dll when processing Server-Side Includes directives, allowing an attacker who can write to the web directory to trigger overflow and execute arbitrary code with the web server’s privileges (LOCAL SYSTEM). Affected products: Microsoft IIS 4.0...

CVE-2001-0954

Lotus Domino 5.0.5 and 5.0.8, and possibly other versions, allows remote attackers to cause a denial of service block access to databases that have not been previously accessed via a URL that includes the . dot directory...

CVE-2001-0851

Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie...

CVE-2001-0444

Cisco CBOS 2.3.0.053 sends output of the "sh nat" aka "show nat" command to the terminal of the next user who attempts to connect to the router via telnet, which could allow that user to obtain sensitive information...

CVE-2001-0615

Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary files via a specially crafted URL which includes variations of a '..' dot dot attack such as '...' or '....'...

CVE-2001-0850

A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit those functions with a buffer overflow...

CVE-2001-0823

The pmpost program in Performance Co-Pilot PCP before 2.2.1-3 allows a local user to gain privileges via a symlink attack on the NOTICES file in the PCP log directory PCPLOGDIR...

CVE-2001-0815

Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitrary code via an HTTP request for a long filename that ends in a .pl extension...

CVE-2001-1010

Directory traversal vulnerability in pagecount CGI script in Sambar Server before 5.0 beta 5 allows remote attackers to overwrite arbitrary files via a .. dot dot attack on the page parameter...

CVE-2001-0627

vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attack...

CVE-2001-0740

3COM OfficeConnect 812 and 840 ADSL Router 4.2, running OCR812 router software 1.1.9 and earlier, allows remote attackers to cause a denial of service via a long string containing a large number of "%s" strings, possibly triggering a format string vulnerability...