CVE-2001-0631

CVE-2001-0631 affects Centrinity First Class Internet Services 5.50. The vulnerability arises from the presence of the string '' in the email From header, which bypasses default spam filters and allows remote attackers to send spoofed messages that appear to originate from local users. The provid...

CVE-2001-0564

The CVE concerns the APC Web/SNMP Management Card (firmware before 310). The vulnerability arises because the device allows only a single telnet connection, enabling a remote attacker to cause a denial of service by repeatedly failing logon attempts, temporarily locking the card. A fix is availab...

CVE-2001-0723

Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript, aka the "Second Cookie Handling Vulnerability."...

CVE-2001-0969

CVE-2001-0969 affects FreeBSD’s ipfw firewall. The vulnerability arises from improper handling of the string "me" in rules when point-to-point interfaces are used, allowing connections from arbitrary remote hosts. The issue impacts the firewall decision logic, potentially bypassing intended restr...

CVE-2001-0538

CVE-2001-0538 describes a vulnerability in the Microsoft Outlook View ActiveX control used by Outlook 2002 and earlier. The flaw allows remote attackers to execute arbitrary code by presenting a malicious HTML email or web page that invokes the control, effectively running code with the caller’s ...

CVE-2001-0805

Directory traversal vulnerability in ttawebtop.cgi in Tarantella Enterprise 3.00 and 3.01 allows remote attackers to read arbitrary files via a .. dot dot in the pg parameter...

CVE-2001-0463

Directory traversal vulnerability in calmake.pl in PerlCal allows remote attackers to read arbitrary files via a .. dot dot in the p0 parameter...

CVE-2001-0574

Directory traversal vulnerability in MP3Mystic prior to 1.04b3 allows a remote attacker to download arbitrary files via a '..' dot dot in the URL...

CVE-2001-0563

ElectroSystems Engineering Inc. ElectroComm 2.0 and earlier allows a remote attacker to create a denial of service via large 160000 character strings sent to port 23...

CVE-2001-0857

Cross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote attackers to gain access to the e-mail of other users by hijacking session cookies via the message parameter...

CVE-2001-0573

lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named 1 grep or 2 lslv in a certain directory that is under the user's control, which cause lsfs to access the programs in that directory...

CVE-2001-0537

HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL...

CVE-2001-0546

Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service resource exhaustion via a large amount of malformed H.323 data...

CVE-2001-0514

SNMP service in Atmel 802.11b VNET-B Access Point 1.3 and earlier, as used in Netgear ME102 and Linksys WAP11, accepts arbitrary community strings with requested MIB modifications, which allows remote attackers to obtain sensitive information such as WEP keys, cause a denial of service, or gain...

CVE-2001-1049

Phorecast PHP script before 0.40 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable...

CVE-2001-0634

Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and create a denial of service...

CVE-2001-0513

The CVE-2001-0513 issue affects Oracle on Windows NT where the listener redirects connections to a new port and spawns a thread for handling it. If a client repeatedly requests redirection but never connects to the new port, the server can be forced to allocate memory for the extra thread, potent...

CVE-2001-0995

PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs. The vulnerability arises from trusting the ID parameter in requests, enabling privilege escalation to partial confidentiality/integrit...

CVE-2001-0366

The CVE-2001-0366 issue affects saposcol in SAP R/3 Web Application Server Demo prior to 1.5, where the process trusts the PATH environment variable to locate and execute the expand program. This design allows local users to escalate to root by altering PATH to point to a Trojan horse expand prog...

CVE-2001-0502

The CVE-2001-0502 issue affects Windows 2000 LDAP over SSL where a function fails to properly verify permissions when the directory principal is a domain user and the data attribute is the domain password, allowing local users to modify other users’ login passwords. Affected component: LDAP over ...