CVE-2001-0804

CVE-2001-0804 affects Interactive Story prior to version 1.4, via a directory traversal in story.pl. The vulnerability allows remote attackers to read arbitrary server files by manipulating the next parameter (e.g., ..\ or ../../.. paths). Exploitation details from the Nessus plugin show requests...

CVE-2001-0760

Citrix Nfuse 1.51 is affected: a malformed request to launch.asp that omits the session field can disclose the absolute path of the web root to remote attackers, enabling partial disclosure of server information. No remediation or exploitation details are provided in the connected documents.

CVE-2001-0701

The CVE-2001-0701 issue affects the SunVTS package (Sun Microsystems) and its ptexec binary. ptexec in SUNWvts is vulnerable to a buffer overflow when an overly long -o argument (roughly 400+ characters) is supplied, allowing a local user to execute arbitrary code with root privileges. SunVTS ver...

CVE-2001-0663

The CVE-2001-0663 entry concerns Terminal Server in Windows NT and Windows 2000. Affected component: Terminal Server; vulnerability exploited by a sequence of invalid Remote Desktop Protocol (RDP) packets to cause a denial of service. Root cause: handling of invalid/malformed RDP packets leads to...

CVE-2001-0653

CVE-2001-0653 affects Sendmail 8.10.0–8.11.5 and 8.12.0 beta. The root cause is an input-validation/overflow in the debugger (-d) category handling: a large numeric value can be interpreted as a signed negative index, bypassing bounds checks and allowing local writes to process memory. Consequenc...

CVE-2001-0652

CVE-2001-0652 is a heap buffer overflow in the Solaris xlock utility (SunOS/Solaris 2.6–8) that allows a local user to gain root privileges by supplying an overly long environment value in XFILESEARCHPATH or XUSERFILESEARCHPATH. The underlying issue is a lack of length checks when copying the env...

CVE-2001-0626

CVE-2001-0626 affects O'Reilly Website Professional

CVE-2001-0682

ZoneAlarm and ZoneAlarm Pro are affected by a local denial-of-service vulnerability wherein running a trojan can initialize a ZoneAlarm mutex object, preventing ZoneAlarm from starting. Affected product: ZoneAlarm / ZoneAlarm Pro (exact versions not specified in available sources).Root cause: ini...

CVE-2001-0631

Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presence of '' in the 'From:' field, which allows remote attackers to send spoofed email with the identity of local users...

CVE-2001-0567

Digital Creations Zope 2.3.2 and earlier allows a local attacker to gain additional privileges via the changing of ZClass permission mappings for objects and methods in the ZClass...

CVE-2001-0621

The FTP server on Cisco Content Service 11000 series switches CSS before WebNS 4.01B23s and WebNS 4.10B13s allows an attacker who is an FTP user to read and write arbitrary files via GET or PUT commands...

CVE-2001-0866

Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could allow remote attackers to bypass the intended access controls...

CVE-2001-0722

Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript in an about: URL, aka the "First Cookie Handling Vulnerability."...

CVE-2001-0517

Oracle listener in Oracle 8i on Solaris allows remote attackers to cause a denial of service via a malformed connection packet with a maximum transport data size that is set to 0...

CVE-2001-0699

Buffer overflow in cbreset in the System Service Processor SSP package of SunOS 5.8 allows a local user to execute arbitrary code via a long argument...

CVE-2001-0773

Cayman 3220-H DSL Router 1.0 allows remote attacker to cause a denial of service crash via a series of SYN or TCP connect requests...

CVE-2001-0664

Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing vulnerability."...

CVE-2001-0680

Directory traversal vulnerability in ftpd in QPC QVT/Net 4.0 and AVT/Term 5.0 allows a remote attacker to traverse directories on the web server via a "dot dot" attack in a LIST ls command...

CVE-2001-0591

Directory traversal vulnerability in Oracle JSP 1.0.x through 1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 can allow a remote attacker to read or execute arbitrary .jsp files via a '..' dot dot attack...

CVE-2001-0541

Buffer overflow in Microsoft Windows Media Player 7.1 and earlier allows remote attackers to execute arbitrary commands via a malformed Windows Media Station .NSC file...