CVE-2001-0280

CVE-2001-0280 : The MERCUR SMTP server 3.30 contains a buffer overflow in the handling of the EXPN command that remote attackers can trigger with a long argument to execute arbitrary commands. The vulnerability is documented in CVE/NVD entries and corroborated by Nessus plugin notes, which descri...

CVE-2001-0364

Technical details for CVE-2001-0364 are not publicly available in the provided documents; monitor for updates.

CVE-2001-0865

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the "fragment" keyword in an outgoing ACL, which could allow fragmented packets in violation of the intended access...

CVE-2001-0857

CVE-2001-0857 applies to Imp Webmail prior to version 2.2.7, where status.php3 is vulnerable to a cross-site scripting (XSS) flaw via the message parameter that can enable session hijacking. The connected Nessus plugin notes that IMP

CVE-2001-0541

CVE-2001-0541 is a buffer overflow vulnerability in Microsoft Windows Media Player 7.1 and earlier triggered by a malformed Windows Media Station (.NSC) file, allowing remote command execution. The connected records corroborate the affected software (Windows Media Player 7.x), the attack vector (...

CVE-2001-0567

Digital Creations Zope 2.3.2 and earlier allows a local attacker to gain additional privileges via the changing of ZClass permission mappings for objects and methods in the ZClass...

CVE-2001-0739

The CVE-2001-0739 entry affects Guardian Digital WebTool in EnGarde Secure Linux 1.0.1. Affected component: WebTool; root cause: restarted services can inherit certain environmental variables, enabling local users to gain root privileges. Impact: local privilege escalation. No explicit remediatio...

CVE-2001-0327

The CVE-2001-0327 issue affects iPlanet Web Server Enterprise Edition 4.1 and earlier. It is an information-disclosure vulnerability in which a remote attacker can exploit a crafted URL-encoded Host: header in HTTP requests, causing the server to reveal data from memory in the Location: header. R...

CVE-2001-0585

Gordano NTMail 6.0.3c is affected. A remote attacker can trigger a denial-of-service by sending a long URL request (≥ 255 characters) to port 8000 or 9000. The vulnerability and affected configuration are described in CVE-2001-0585 entries (NVD, CVE List). Exploitation details, affected versions ...

CVE-2001-0690

Format string vulnerability in exim 3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers...

CVE-2001-0682

ZoneAlarm and ZoneAlarm Pro are affected by a local denial-of-service vulnerability wherein running a trojan can initialize a ZoneAlarm mutex object, preventing ZoneAlarm from starting. Affected product: ZoneAlarm / ZoneAlarm Pro (exact versions not specified in available sources).Root cause: ini...

CVE-2001-0852

TUX HTTP server 2.1.0-2 in Red Hat Linux allows remote attackers to cause a denial of service via a long Host: header...

CVE-2001-1075

poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass authentication for relaying by causing a "POP login by user" string that includes the attacker's IP address to be injected into the maillog log file...

CVE-2001-0803

CVE-2001-0803 is a buffer overflow in the dtspcd (CDE Subprocess Control Service) client connection routine (libDtSvc.so.1) that allows remote execution of arbitrary commands. Public references show exploits and proof-of-concept tooling (e.g., Solaris dtspcd heap overflow modules in Metasploit) a...

CVE-2001-0629

HP OpenView Network Node Manager 6.1 includes the HP Event Correlation Service (ecsd) vulnerable to a remote privilege escalation due to a buffer overflow in the -restore_config command line parameter. Affected component: ecsd within OpenView/NNM 6.1. Consequence: remote attacker could gain addit...

CVE-2001-0722

The CVE concerns Internet Explorer versions 5.5 and 6.0, where a vulnerability allows remote attackers to read and modify the user’s cookies via Javascript executed in an about: URL. Affected software is Internet Explorer 5.5/6.0; the root cause and mechanics are described as the ability to acces...

CVE-2001-0574

The CVE-2001-0574 entry describes a directory traversal flaw in MP3Mystic prior to version 1.04b3. A remote attacker can download arbitrary files by using a ‘..’ sequence in the URL. This is reported as affecting MP3Mystic with the vulnerability enabling partial confidentiality impact (cited in C...

CVE-2001-0866

Cisco 12000 Series routers running IOS 12.0 with Engine 2 line cards are affected. The issue is an ACL handling flaw where an outbound ACL may not properly apply if an input ACL is not configured on all interfaces of a multi-port line card, potentially allowing remote attackers to bypass intended...

CVE-2001-0819

A buffer overflow in Linux fetchmail before 5.8.6 allows remote attackers to execute arbitrary code via a large 'To:' field in an email header...

CVE-2001-1067

AOLServer ParseAuth() buffer overflow: AOLServer 3.3.0 and earlier contain a vulnerability in which Decode()/ParseAuth() uses a fixed 256-byte buffer, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted HTTP request with an overly long Authorization head...