CVE-2001-0538

CVE-2001-0538 describes a vulnerability in the Microsoft Outlook View ActiveX control used by Outlook 2002 and earlier. The flaw allows remote attackers to execute arbitrary code by presenting a malicious HTML email or web page that invokes the control, effectively running code with the caller’s ...

CVE-2001-0461

CVE-2001-0461 affects the Free On-Line Dictionary of Computing (FOLDOC) template.cgi. Remote attackers can read files and execute commands by injecting shell metacharacters in the template.cgi argument. This is documented in NVD/CVE records; no remediation/patch details are provided in the connec...

CVE-2001-0407

CVE-2001-0407 affects MySQL prior to 3.23.36. The vulnerability is a directory traversal in which a database name starting with .. can be created by a local user, enabling modification of arbitrary files and privilege escalation. The underlying issue is the handling of dot-dot sequences in databa...

CVE-2001-0685

CVE-2001-0685 concerns FCron prior to 1.1.1 where a local user can corrupt another user’s crontab via a symlink attack on the fcrontab temp file. No additional technical details are provided in the supplied connected documents.

CVE-2001-0680

Technical details specific to CVE-2001-0680 (affected product/version/root cause/patch) are not provided in the connected documents. Monitor for updates from trusted sources for any vendor-specific information or fixed disclosures.

CVE-2001-0595

The CVE-2001-0595 issue affects Sun’s KCMS component on Solaris 7/8, where a buffer overflow in the kcsSUNWIOsolf.so library allows a local user to execute arbitrary commands via the KCMS_PROFILES environment variable (demonstrated by kcms_configure). OpenVAS entries describe the KCMS Profile Ser...

CVE-2001-0565

CVE-2001-0565 affects Solaris mailx (/usr/bin/mailx). A buffer overflow via a long -F option could let a local attacker gain privileges (mail group). Public sources confirm impact is local privilege escalation. Remediation: Solaris update 110957-02 is available (OpenVAS entries). CERT/US-CERT gui...

CVE-2001-0558

CVE-2001-0558 affects Jana Webserver 2.01 beta 1 and earlier. A remote attacker can cause a denial of service by sending a URL request that includes an MS-DOS device name (e.g., GET /aux HTTP/1.0). Connected sources corroborate the DOS impact via MS-DOS device names; OpenVAS/Nessus references lis...

CVE-2001-1075

The CVE-2001-1075 issue affects the poprelayd script in Cobalt RaQ3 servers prior to version 2.0. The root cause is an input/log injection in the POP login by user path that allows an attacker’s IP to be written into the maillog, effectively bypassing authentication for SMTP relaying. This enable...

CVE-2001-1067

AOLServer ParseAuth() buffer overflow: AOLServer 3.3.0 and earlier contain a vulnerability in which Decode()/ParseAuth() uses a fixed 256-byte buffer, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted HTTP request with an overly long Authorization head...

CVE-2001-1010

CVE-2001-1010 affects Sambar Server’s pagecount CGI script (located at /session/pagecount). The vulnerability arises because the page parameter is not validated against directory traversal (".."), enabling a remote attacker to overwrite arbitrary files on the filesystem. The root cause is lack of...

CVE-2001-0852

CVE-2001-0852 affects TUX HTTP server 2.1.0-2 on Red Hat Linux, allowing a remote attacker to cause a denial of service by sending a long Host header. The related Red Hat advisory RHSA-2001:142 notes a remote DoS fix affecting the TUX web server and indicates the fix is part of updated kernel pac...

CVE-2001-0815

CVE-2001-0815 describes a buffer overflow in ActiveState ActivePerl’s PerlIS.dll (ActivePerl 5.6.1.629 and earlier) that allows remote code execution via an overlong HTTP request for a filename ending in .pl. The vulnerability exists in the IIS ISAPI extension (perlIS.dll) and is triggered by ins...

CVE-2001-0764

The CVE-2001-0764 entry describes a buffer overflow in ntping of scotty 2.1.0 that allows local users to execute arbitrary code via a long hostname passed as a command line argument. Concretely, the affected software is scotty 2.1.0 (ntping component); the vulnerability arises from a buffer overf...

CVE-2001-0740

CVE-2001-0740 affects 3COM OfficeConnect 812/840 ADSL Router with OCR812 router software version 1.1.9 and earlier. The vulnerability is a potential format string flaw triggered by a long string containing many "%s" sequences, which can cause a denial of service via remote access. The connected d...

CVE-2001-0722

The CVE concerns Internet Explorer versions 5.5 and 6.0, where a vulnerability allows remote attackers to read and modify the user’s cookies via Javascript executed in an about: URL. Affected software is Internet Explorer 5.5/6.0; the root cause and mechanics are described as the ability to acces...

CVE-2001-0706

CVE-2001-0706 affects Maximum Rumpus FTP Server (2.0.3 and earlier). The issue is a denial-of-service (crash) trigger when an FTP mkdir command specifies a large number of sub-folders. The provided sources identify the vulnerable component and the impact but do not include a documented fix or pat...

CVE-2001-0875

Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in a way that could fool users into thinking that the file type is safe to download...

CVE-2001-0518

The vulnerability CVE-2001-0518 affects the Oracle Net Listener prior to Oracle 9i. A fragmentation-based denial-of-service can occur when an attacker sends the first portion of a fragmented Oracle command without the remainder, causing the listener to hang. The issue is described as a fragmentat...

CVE-2001-0547

CVE-2001-0547 describes a memory leak in the proxy service of Microsoft Internet Security and Acceleration (ISA) Server 2000 that allows local attackers to cause a denial of service through resource exhaustion. The affected product is ISA Server 2000 (proxy service component); the underlying caus...