CVE-2001-0690

Format string vulnerability in exim 3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers...

CVE-2001-0664

Summary (CVE-2001-0664 / CVE-2001-0724): Internet Explorer 5.01 and 5.5 are vulnerable to a zone-spoofing flaw where dotless IP addresses in URLs cause the page to be treated as Intranet Zone, bypassing some security restrictions. This can enable execution of scripts/ActiveX that would otherwise ...

CVE-2001-0635

Red Hat Linux 7.1 is affected by CVE-2001-0635 due to insecure permissions on swap files created at install. The swap files could be world-readable, enabling a local attacker to read sensitive data such as passwords and potentially escalate privileges. The connected Red Hat advisory RHSA-2001:058...

CVE-2001-0862

Cisco 12000 Series routers running IOS 12.0 with Engine 2 line cards are affected. The flaw permits non‑initial IP fragments to bypass ACLs, enabling a remote attacker to bypass firewall rules. The issue is tied to how fragment handling is treated in ACLs, leading to incomplete filtering. Affecte...

CVE-2001-0444

CVE-2001-0444 affects Cisco CBOS 2.3.0.053. The vulnerability arises because the router’s output of the show nat (sh nat) command is echoed to the terminal of the next user who connects via Telnet, potentially allowing that user to view sensitive information. The documented impact is partial conf...

CVE-2001-1038

Cisco SN 5420 Storage Router 1.13 and earlier allows remote attackers to cause a denial of service reboot via a series of connections to TCP port 8023...

CVE-2001-0866

Cisco 12000 Series routers running IOS 12.0 with Engine 2 line cards are affected. The issue is an ACL handling flaw where an outbound ACL may not properly apply if an input ACL is not configured on all interfaces of a multi-port line card, potentially allowing remote attackers to bypass intended...

CVE-2001-0954

The provided sources confirm a Denial of Service flaw in IBM Lotus Domino (Lotus Domino 5.0.5/5.0.8 and possibly other versions), triggered by a crafted web request that includes a "/./" path segment in the URL. The vulnerability is advisory-listed as CVE-2001-0954 and is exploited by a remote at...

CVE-2001-0730

CVE-2001-0730 affects Apache 1.3.x by a flaw in the split-logfile support: a crafted HTTP request with a slash in the Host header can cause the server to overwrite any file ending in ".log" on the system. Affected version in public reports centers on Apache 1.3.20 with the ability to write arbitr...

CVE-2001-0801

IRIX 6.5.13f and earlier is affected via lpstat, where a local user can gain root privileges by specifying a Trojan Horse nettype shared library. Root/privilege escalation is the stated impact; the root cause is a manipulated nettype shared library in lpstat. The provided documents do not specify...

CVE-2001-0850

The CVE-2001-0850 entry concerns a configuration error in the libdb1 package of OpenLinux 3.1. The vulnerability arises from insecure versions of snprintf and vsnprintf used by libdb1, which could allow local or remote users to trigger a buffer overflow. Affected software: OpenLinux 3.1 (libdb1)....

CVE-2001-0765

CVE-2001-0765 affects BisonFTP V4R1. The vulnerability allows local users to access directories outside their home directory by uploading .bdl files, which can then be linked to other directories. The impact is partial confidentiality, integrity, and availability (per the NVD entry, CVSSv2 base s...

CVE-2001-0750

CVE-2001-0750 affects Cisco IOS 12.1(2)T and 12.1(3)T. A remote attacker can cause a denial of service (reload) by connecting to TCP ports 3100–3999, 5100–5999, 7100–7999, or 10100–10999. The issue is triggered by a scanner making connections to these ports, leading to a reload of the router (mem...

CVE-2001-1020

Vulnerability CVE-2001-1020 affects Vibechild Directory Manager prior to 0.91, where edit_image.php passes userfile_name unfiltered to PHP passthru, enabling remote command execution via shell metacharacters. OpenVAS entries describe an arbitrary command execution risk; NVD/NVL references list a ...

CVE-2001-0879

CVE-2001-0879 describes a format-string vulnerability in the C runtime functions used by Microsoft SQL Server 7.0 and 2000. The underlying issue is a format string handling flaw in the C runtime, which can allow an attacker to trigger a denial of service. The available connected documents confirm...

CVE-2001-0541

CVE-2001-0541 is a buffer overflow vulnerability in Microsoft Windows Media Player 7.1 and earlier triggered by a malformed Windows Media Station (.NSC) file, allowing remote command execution. The connected records corroborate the affected software (Windows Media Player 7.x), the attack vector (...

CVE-2001-1011

index2.php in Mambo Site Server 3.0.0 through 3.0.5 allows remote attackers to gain Mambo administrator privileges by setting the PHPSESSID parameter and providing the appropriate administrator information in other parameters...

CVE-2001-0834

CVE-2001-0834 affects the htsearch CGI in ht://Dig (htdig)

CVE-2001-0819

CVE-2001-0819 corresponds to a buffer overflow in Linux fetchmail before 5.8.6, exploitable by a remote attacker via a large To: header in an email. The vulnerability is due to an overflow in the header parser, allowing arbitrary code execution. Affected software is fetchmail on Linux, with advis...

CVE-2001-0487

CVE-2001-0487 affects the AIX SNMP server (snmpd) and allows remote attackers to cause a denial of service by sending a RST during the TCP connection. The provided documents do not specify the exact vulnerable component version range, affected product family beyond “AIX SNMP server snmpd,” or any...