CVE-2001-0547

Memory leak in the proxy service in Microsoft Internet Security and Acceleration ISA Server 2000 allows local attackers to cause a denial of service resource exhaustion...

CVE-2001-0740

3COM OfficeConnect 812 and 840 ADSL Router 4.2, running OCR812 router software 1.1.9 and earlier, allows remote attackers to cause a denial of service via a long string containing a large number of "%s" strings, possibly triggering a format string vulnerability...

CVE-2001-0574

Directory traversal vulnerability in MP3Mystic prior to 1.04b3 allows a remote attacker to download arbitrary files via a '..' dot dot in the URL...

CVE-2001-0954

Lotus Domino 5.0.5 and 5.0.8, and possibly other versions, allows remote attackers to cause a denial of service block access to databases that have not been previously accessed via a URL that includes the . dot directory...

CVE-2001-0627

vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attack...

CVE-2001-0696

NetWin SurgeFTP 2.0a and 1.0b are affected by CVE-2001-0696: a remote attacker can cause a denial of service (crash) by issuing a CD command to a directory named with an MS-DOS device name (e.g., con). The available sources confirm the vulnerability exists and describe the impact as a crash/DoS, ...

CVE-2001-0567

The CVE concerns Zope 2.3.2 and earlier, where a local attacker can gain additional privileges by altering ZClass permission mappings for objects and methods within a ZClass. Public sources in connected documents corroborate that the vulnerability is tied to Zope’s ZClass permission mappings and ...

CVE-2001-0122

Kernel leak in AfpaCache module of the Fast Response Cache Accelerator FRCA component of IBM HTTP Server 1.3.x and Websphere 3.52 allows remote attackers to cause a denial of service via a series of malformed HTTP requests that generate a "bad request" error...

CVE-2001-0628

Summary : CVE-2001-0628 affects Microsoft Word 2000. The issue: Word 2000 does not check AutoRecovery (.asd) files for macros, allowing a local attacker to execute arbitrary macros with the Word user’s ID. What’s affected : Word 2000; vulnerability details describe macro execution via unverified ...

CVE-2001-0815

CVE-2001-0815 describes a buffer overflow in ActiveState ActivePerl’s PerlIS.dll (ActivePerl 5.6.1.629 and earlier) that allows remote code execution via an overlong HTTP request for a filename ending in .pl. The vulnerability exists in the IIS ISAPI extension (perlIS.dll) and is triggered by ins...

CVE-2001-0497

dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key file used for DNS Transactional Signatures TSIG, which allows attackers to obtain the keys and perform dynamic DNS updates...

CVE-2001-0156

CVE-2001-0156 affects VShell SSH gateway 1.0.1 and earlier. The default port forwarding rule 0.0.0.0/0.0.0.0 could allow local users to forward arbitrary ports to other systems. The provided documents do not specify a remediation or affected versions beyond 1.0.1 and earlier, and no exploit detai...

CVE-2001-0094

Buffer overflow in kdcreplycipher of libkrb Kerberos 4 authentication library in NetBSD 1.5 and FreeBSD 4.2 and earlier, as used in Kerberised applications such as telnetd and login, allows local users to gain root privileges...

CVE-2001-0823

The CVE-2001-0823 entry documents a local privilege escalation in the Performance Co-Pilot (PCP) package via the pmpost utility, prior to version 2.2.1-3. An attacker can exploit a symlink attack on the NOTICES file in the PCP log directory (PCP_LOG_DIR) to gain root/privilege access. The underly...

CVE-2001-0518

Oracle listener before Oracle 9i allows attackers to cause a denial of service by repeatedly sending the first portion of a fragmented Oracle command without sending the remainder of the command, which causes the listener to hang...

CVE-2001-0830

6tunnel 0.08 and earlier is affected. The root cause is that sockets initiated by a client are not properly closed, enabling remote attackers to cause a denial of service via resource exhaustion by repeatedly connecting and disconnecting from the server. Affected software: 6tunnel versions 0.08 a...

CVE-2001-0779

CVE-2001-0779 describes a remote buffer overflow in the rpc.yppasswdd (yppasswd) service, affecting Solaris 2.6/7/8 (and related implications for AIX per vendor notes). The vulnerability allows a remote attacker to gain root privileges by supplying a long username string, as documented by multipl...

CVE-2001-0463

CVE-2001-0463 concerns a directory traversal in the PerlCal component cal_make.pl that allows remote attackers to read arbitrary files by supplying ".." in the p0 parameter. The vulnerability arises from improper handling of file paths in this CGI, enabling access to files the web server user cou...

CVE-2001-0589

Technical details such as affected products, versions, root cause, or available fixes for CVE-2001-0589 are not provided in the connected documents. The given sources only reiterate the vulnerability at a high level; monitor for updates.

CVE-2001-0850

The CVE-2001-0850 entry concerns a configuration error in the libdb1 package of OpenLinux 3.1. The vulnerability arises from insecure versions of snprintf and vsnprintf used by libdb1, which could allow local or remote users to trigger a buffer overflow. Affected software: OpenLinux 3.1 (libdb1)....