CVE-2001-0658

CVE-2001-0658 affects Microsoft Internet Security and Acceleration (ISA) Server 2000. The issue is a cross-site scripting (CSS) vulnerability where malicious script delivered in an invalid URL, not properly quoted in an error message, can cause other clients to execute scripts or read cookies. Th...

CVE-2001-0697

NetWin SurgeFTP prior to 1.1h allows a remote attacker to cause a denial of service crash via an 'ls ..' command...

CVE-2001-0973

CVE-2001-0973 concerns BSCW groupware (versions 3.3–4.0.2 beta). The vulnerability arises when extracting tar archives into the user’s data-bag space: symbolic links within the tar are followed, allowing a remote attacker to read arbitrary files readable by the web server and potentially overwrit...

CVE-2001-0963

SpoonFTP Server (version 1.1) is affected by a directory-traversal vulnerability in the CWD command due to inadequate input validation, allowing local users (and in some cases remote users) to access files outside the FTP root with the user’s privileges. CERT/CC notes the impact as reading direct...

CVE-2001-0528

The CVE-2001-0528 entry affects Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x, where a debug version of FNDPUB11I.DLL logs the APPS schema password in cleartext to a debug file. This enables local users to obtain the password and gain privileges. The availa...

CVE-2001-0648

CVE-2001-0648 describes a directory traversal vulnerability in PHProjekt 2.1 and earlier. A remote attacker can perform a dot-dot (..) attack on the file module to conduct unauthorized activities. The NVD entry lists a base score of 5.0 (Medium) with network access, low attack complexity, no auth...

CVE-2001-0416

CVE-2001-0416 affects sgml-tools (sgmltools) prior to version 1.0.9-15. The root cause is insecure handling of temporary files: sgml-tools creates temporary files directly (or in insecure permissions) which can allow other local users to read files being processed. Impact is partial confidentiali...

CVE-2001-0867

Cisco 12000 Series routers running IOS 12.0 with Engine 2 line cards are affected by CVE-2001-0867. The vulnerability is that packet fragment filtering is not applied by ACLs when the fragment keyword is used, allowing remote attackers to bypass intended access controls (network-based, no authent...

CVE-2001-0503

Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled is affected by CVE-2001-0503, where a remote attacker can cause a denial of service by sending a malformed string to the NetMeeting service port (a variant of the NetMeeting Desktop Sharing vulnerability). The available sources confirm...

CVE-2001-0501

CVE-2001-0501 affects Microsoft Word (Word 2002 and earlier). The vulnerability arises from failure to reliably detect macros embedded in malformed Word documents, allowing a document author to execute arbitrary commands as the user who opens the document even if macro security is set to higher l...

CVE-2001-0738

The CVE-2001-0738 issue affects the Linux kernel logging daemon klogd (sysklogd 1.3) across various distributions. A NULL byte in log messages can cause klogd to enter an infinite loop and hang, effectively a denial-of-service. Root cause cited is klogd’s LogLine handling of NULL bytes in input. ...

CVE-2001-0864

Cisco 12000 Series routers with IOS 12.0 and Engine 2 line cards have an ACL boundary bug: when an outgoing ACL contains exactly 448 entries, the implicit/deny rule may be bypassed for some outbound packets. Affected component: outgoing ACL processing on Engine 2-based line cards; impact: potenti...

CVE-2001-0676

CVE-2001-0676 affects Rit Research Labs The Bat!

CVE-2001-0394

The CVE-2001-0394 entry concerns Website Pro 3.0.37 where the Remote manager service is vulnerable to a denial-of-service via a sequence of malformed HTTP requests to the /dyn directory. The NVD entry lists a CVSS2 base score of 5.0 (Medium) with network attack vector, low attack complexity, no a...

CVE-2001-0874

CVE-2001-0874/2002-0027 describe a vulnerability in Internet Explorer 5.5/6.0 where remote attackers could read files by HTML passing information from a frame in the client’s domain to a frame in the site’s domain (a variant of Frame Domain Verification). Affected products are IE 5.5–6.0; root ca...

CVE-2001-0628

Microsoft Word 2000 does not check AutoRecovery .asd files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user...

CVE-2001-0204

Watchguard Firebox II allows remote attackers to cause a denial of service by establishing multiple connections and sending malformed PPTP packets...

CVE-2001-0969

CVE-2001-0969 affects FreeBSD’s ipfw firewall. The vulnerability arises from improper handling of the string "me" in rules when point-to-point interfaces are used, allowing connections from arbitrary remote hosts. The issue impacts the firewall decision logic, potentially bypassing intended restr...

CVE-2001-0563

CVE-2001-0563 affects ElectroSystems Engineering Inc. ElectroComm 2.0 and earlier. The flaw allows a remote attacker to induce a denial of service by sending large strings (greater than 160,000 characters) to port 23. The available sources (NVD, CVE listings) corroborate the DoS impact but do not...

CVE-2001-0559

The CVE-2001-0559 issue affects Vixie cron up to 3.0.1. crontab fails to drop privileges correctly after a failed parsing of a modification operation, potentially enabling a local attacker to gain additional privileges when an editor is invoked to fix the error. Publicly documented references (De...