3489 matches found
CVE-2001-0823
The CVE-2001-0823 entry documents a local privilege escalation in the Performance Co-Pilot (PCP) package via the pmpost utility, prior to version 2.2.1-3. An attacker can exploit a symlink attack on the NOTICES file in the PCP log directory (PCP_LOG_DIR) to gain root/privilege access. The underly...
CVE-2001-0518
Oracle listener before Oracle 9i allows attackers to cause a denial of service by repeatedly sending the first portion of a fragmented Oracle command without sending the remainder of the command, which causes the listener to hang...
CVE-2001-0779
CVE-2001-0779 describes a remote buffer overflow in the rpc.yppasswdd (yppasswd) service, affecting Solaris 2.6/7/8 (and related implications for AIX per vendor notes). The vulnerability allows a remote attacker to gain root privileges by supplying a long username string, as documented by multipl...
CVE-2001-0463
CVE-2001-0463 concerns a directory traversal in the PerlCal component cal_make.pl that allows remote attackers to read arbitrary files by supplying ".." in the p0 parameter. The vulnerability arises from improper handling of file paths in this CGI, enabling access to files the web server user cou...
CVE-2001-0589
Technical details such as affected products, versions, root cause, or available fixes for CVE-2001-0589 are not provided in the connected documents. The given sources only reiterate the vulnerability at a high level; monitor for updates.
CVE-2001-0850
The CVE-2001-0850 entry concerns a configuration error in the libdb1 package of OpenLinux 3.1. The vulnerability arises from insecure versions of snprintf and vsnprintf used by libdb1, which could allow local or remote users to trigger a buffer overflow. Affected software: OpenLinux 3.1 (libdb1)....
CVE-2001-0502
The CVE-2001-0502 issue affects Windows 2000 LDAP over SSL where a function fails to properly verify permissions when the directory principal is a domain user and the data attribute is the domain password, allowing local users to modify other users’ login passwords. Affected component: LDAP over ...
CVE-2001-0386
AnalogX SimpleServer:WWW 1.08 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory...
CVE-2001-0558
CVE-2001-0558 affects Jana Webserver 2.01 beta 1 and earlier. A remote attacker can cause a denial of service by sending a URL request that includes an MS-DOS device name (e.g., GET /aux HTTP/1.0). Connected sources corroborate the DOS impact via MS-DOS device names; OpenVAS/Nessus references lis...
CVE-2001-0616
Faust Informatics Freestyle Chat server prior to 4.1 SR3 is affected; a remote attacker can trigger a denial of service by sending a URL request that includes a MS-DOS device name (for example, GET /aux HTTP/1.0). The available sources do not provide hardware/versions beyond the affected product/...
CVE-2001-0533
The CVE-2001-0533 issue affects IBM AIX 4.3.x and 5.1 where the libi18n library is vulnerable to a buffer overflow triggered by a crafted LANG environment value. Local users could gain root privileges when running setuid programs (e.g., aixterm). IBM’s advisory describes temporary fixes (libi18n_...
CVE-2001-0559
The CVE-2001-0559 issue affects Vixie cron up to 3.0.1. crontab fails to drop privileges correctly after a failed parsing of a modification operation, potentially enabling a local attacker to gain additional privileges when an editor is invoked to fix the error. Publicly documented references (De...
CVE-2001-0875
Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in a way that could fool users into thinking that the file type is safe to download...
CVE-2001-0586
TrendMicro ScanMail for Exchange 3.5 Evaluation allows a local attacker to recover the administrative credentials for ScanMail via a combination of unprotected registry keys and weakly encrypted passwords...
CVE-2001-0658
CVE-2001-0658 affects Microsoft Internet Security and Acceleration (ISA) Server 2000. The issue is a cross-site scripting (CSS) vulnerability where malicious script delivered in an invalid URL, not properly quoted in an error message, can cause other clients to execute scripts or read cookies. Th...
CVE-2001-0692
The vulnerability CVE-2001-0692 affects WatchGuard Firebox SMTP proxy in models 2500 and 4500 running versions 4.5 and 4.6. A remote attacker can bypass firewall filtering by sending a base64 MIME email attachment whose boundary name ends with two dashes, exploiting how the SMTP proxy processes M...
CVE-2001-0276
The vulnerability CVE-2001-0276 affects BadBlue Personal Edition (1.02.07) where ext.dll can be invoked directly without arguments, causing an error message that reveals the server’s physical path. This is a path disclosure issue in the web server software. The available connected documents confi...
CVE-2001-0690
The Exim mail transfer agent (versions 3.22-10 in Red Hat, 3.12 in Debian, and 3.16 in Conectiva) contains a format string vulnerability in its syntax checking code. When the batched SMTP mode (using the -bS switch) is active and syntax checking is enabled, an attacker can execute arbitrary code ...
CVE-2001-0993
NetBSD 1.3–1.5 is affected in the kernel sendmsg path where a msghdr with a large msg_controllen can trigger a local denial of service (kernel trap or panic). The underlying vulnerability is a kernel instability when processing msghdr data in sendmsg, leading to DoS for local users. Public source...