CVE-2001-1048

AWOL-related CVE-2001-1048 affects the AWOL PHP application and allows a remote attacker to include arbitrary files from remote web sites by setting the includedir HTTP parameter. The vulnerability enables remote code execution through local file inclusion-like behavior via a crafted request to i...

CVE-2001-0590

CVE-2001-0590 affects Apache Tomcat Servlet prior to 3.2.2. A malformed URL request that does not end with a protocol (e.g., HTTP/1.0) can cause a remote attacker to read the source code of arbitrary JSP files, constituting information disclosure. The issue is confirmed in multiple sources tying ...

CVE-2001-0525

CVE-2001-0525 affects dsh in dqs 3.2.7 on SuSE Linux 7.0 and earlier (and possibly other OSes). The vulnerability is a buffer overflow triggered by a long first command line argument, allowing local users to gain privileges. The available documents do not specify patches or exact affected product...

CVE-2001-0995

PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs. The vulnerability arises from trusting the ID parameter in requests, enabling privilege escalation to partial confidentiality/integrit...

CVE-2001-0760

Citrix Nfuse 1.51 is affected: a malformed request to launch.asp that omits the session field can disclose the absolute path of the web root to remote attackers, enabling partial disclosure of server information. No remediation or exploitation details are provided in the connected documents.

CVE-2001-0765

CVE-2001-0765 affects BisonFTP V4R1. The vulnerability allows local users to access directories outside their home directory by uploading .bdl files, which can then be linked to other directories. The impact is partial confidentiality, integrity, and availability (per the NVD entry, CVSSv2 base s...

CVE-2001-0677

Eudora 5.0.2 allows a remote attacker to read arbitrary files via an email with the path of the target file in the "Attachment Converted" MIME header, which sends the file when the email is forwarded to the attacker by the user...

CVE-2001-0752

Cisco CBOS 2.3.8 and earlier: remote denial of service via an ICMP ECHO REQUEST with the IP Record Route option set. Affected component is Cisco CBOS; root cause described as processing ICMP ECHO REQUESTs with Record Route data, leading to inability to service requests (DoS). The available refere...

CVE-2001-0543

Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service memory exhaustion via a large number of malformed posts...

CVE-2001-0422

CVE-2001-0422 affects Xsun on Solaris 8 and earlier. A buffer overflow triggered by a long HOME environment variable allows local users to execute arbitrary commands. The provided documents do not include remediation details.

CVE-2001-0540

Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service memory exhaustion via a large number of malformed Remote Desktop Protocol RDP requests to port 3389...

CVE-2001-0710

CVE-2001-0710 affects NetBSD 1.5 and earlier and FreeBSD 4.3 and earlier. A remote attacker can trigger a denial-of-service by sending a large number of IP fragments, which exhausts the system’s mbuf pool. The underlying issue is in the IP fragmentation handling that allows fragmentation flood to...

CVE-2001-0094

CVE-2001-0094 describes a buffer overflow in the kdc_reply_cipher() of the KTH Kerberos IV library (libkrb) used by NetBSD 1.5 and FreeBSD 4.2 and earlier, enabling a local attacker to gain root privileges or cause a crash by crafting an authentication reply. Exploitation may be facilitated when ...

CVE-2001-0828

The CVE-2001-0828 entry concerns Caucho Technology Resin (versions up to and including 1.2.3) vulnerable to cross-site scripting. According to the sources, the issue occurs when a web site embeds Javascript in a hyperlink that ends in .jsp, and the error page does not properly quote the Javascrip...

CVE-2001-0513

The CVE-2001-0513 issue affects Oracle on Windows NT where the listener redirects connections to a new port and spawns a thread for handling it. If a client repeatedly requests redirection but never connects to the new port, the server can be forced to allocate memory for the extra thread, potent...

CVE-2001-0846

The provided documents describe CVE-2001-0846: Lotus Domino 5.x is vulnerable to a remote attacker who can read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file (webadmin.ntf). The exact vulnerable component is not more precisely broken down beyon...

CVE-2001-0565

Buffer overflow in mailx in Solaris 8 and earlier allows a local attacker to gain additional privileges via a long '-F' command line option...

CVE-2001-0364

SSH Communications Security sshd 2.4 for Windows allows remote attackers to create a denial of service via a large number of simultaneous connections...

CVE-2001-1049

Phorecast PHP script before 0.40 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable...

CVE-2001-0560

CVE-2001-0560 describes a local privilege escalation in Vixie cron (3.0.1-56 and earlier) caused by a buffer overflow triggered by a username longer than 20 characters. Affected component: crontab handling in Vixie cron. Impact per sources: partial confidentiality/integrity/availability, local at...