CVE-2001-0754

Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via a series of large ICMP ECHO REPLY ping packets, which cause it to enter ROMMON mode and stop forwarding packets...

CVE-2001-0764

Buffer overflow in ntping in scotty 2.1.0 allows local users to execute arbitrary code via a long hostname as a command line argument...

CVE-2001-0787

LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lowering privileges, which could allow a local user to elevate privileges...

CVE-2001-0815

Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitrary code via an HTTP request for a long filename that ends in a .pl extension...

CVE-2001-0830

6tunnel 0.08 and earlier does not properly close sockets that were initiated by a client, which allows remote attackers to cause a denial of service resource exhaustion by repeatedly connecting to and disconnecting from the server...

CVE-2001-0834

htsearch CGI program in htdig ht://Dig 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to 1 cause a denial of service CPU consumption by specifying a large file such as /dev/zero, or 2 read arbitrary files by uploading...

CVE-2001-0864

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit "deny ip any any" rule in an outgoing ACL when the ACL contains exactly 448 entries, which can allow some outgoing packets to bypass access restrictions...

CVE-2001-0876

Buffer overflow in Universal Plug and Play UPnP on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL...

CVE-2001-1011

index2.php in Mambo Site Server 3.0.0 through 3.0.5 allows remote attackers to gain Mambo administrator privileges by setting the PHPSESSID parameter and providing the appropriate administrator information in other parameters...

CVE-2001-1017

rmuser utility in FreeBSD 4.2 and 4.3 creates a copy of the master.passwd file with world-readable permissions while updating the original file, which could allow local users to gain privileges by reading the copied file while rmuser is running, obtain the password hashes, and crack the passwords...

CVE-2001-0545

CVE-2001-0545 affects IIS 4.0 with URL redirection enabled. A malformed request with a length mismatch can cause the server to crash, yielding a remote denial of service. The provided documents do not detail exploitation steps. For remediation, see MS01-044 (Microsoft security bulletin) and relat...

CVE-2001-0543

The CVE-2001-0543 issue affects the NNTP service in Windows NT 4.0 and Windows 2000, where a memory leak can be triggered by processing a large number of malformed posts. This memory growth can lead to denial of service through exhaustion of resources. The provided material does not specify exact...

CVE-2001-0803

Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service dtspcd allows remote attackers to execute arbitrary commands...

CVE-2001-0774

Tripwire 1.3.1, 2.2.1 and 2.3.0 are vulnerable to a local symlink attack that can overwrite arbitrary files in /tmp and may enable privilege escalation. Root cause: temporary files are opened/created without O_EXCL and with predictable names, allowing a non-privileged local attacker to redirect d...

CVE-2001-0407

CVE-2001-0407 affects MySQL prior to 3.23.36. The vulnerability is a directory traversal in which a database name starting with .. can be created by a local user, enabling modification of arbitrary files and privilege escalation. The underlying issue is the handling of dot-dot sequences in databa...

CVE-2001-0589

NetScreen ScreenOS prior to 2.5r6 on the NetScreen-10 and Netscreen-100 can allow a local attacker to bypass the DMZ 'denial' policy via specific traffic patterns...

CVE-2001-0646

Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 allows a remote attacker to perform a denial of service hang by creating a directory name of a specific length...

CVE-2001-0675

Rit Research Labs The Bat! 1.51 for Windows allows a remote attacker to cause a denial of service by sending an email to a user's account containing a carriage return that is not followed by a line feed...

CVE-2001-0874

CVE-2001-0874/2002-0027 describe a vulnerability in Internet Explorer 5.5/6.0 where remote attackers could read files by HTML passing information from a frame in the client’s domain to a frame in the site’s domain (a variant of Frame Domain Verification). Affected products are IE 5.5–6.0; root ca...

CVE-2001-0664

Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing vulnerability."...