3467 matches found
CVE-2001-0449
WinZip 8.0 is affected by a buffer overflow triggered by a long file name processed via the /zipandemail command line option. This allows an attacker to execute arbitrary commands. The available records (NVD, CVE List) consistently describe this issue as a buffer overflow in WinZip 8.0 with arbit...
CVE-2001-1035
The CVE-2001-1035 issue affects slrn up to version 0.9 and earlier, where the binary decoding feature would execute shell scripts embedded in news posts. Exploitation could allow remote attackers to run commands on the affected host. Public references in Debian’s DSA-078-1 (slrn) describe this as...
CVE-2001-0686
CVE-2001-0686 describes a buffer overflow in the mail utility included with SunOS 5.8 on x86, allowing a local user to gain privileges via a long HOME environment variable. Affected component: mail in SunOS 5.8 (x86). Root cause: buffer overflow triggered by oversized HOME value. Impact: local pr...
CVE-2001-0677
Eudora 5.0.2 is affected. A remote attacker can read arbitrary files by crafting an email whose Attachment Converted MIME header contains the path to a target file; when the user forwards the message, the file is sent to the attacker. Root cause involves improper handling of the Attachment Conver...
CVE-2001-0980
CVE-2001-0980 affects the product as described: docview prior to 1.0-15. The vulnerability arises when converting a man page to a web page, where shell metacharacters are processed, allowing remote attackers to execute arbitrary commands. The connected sources confirm the description; no explicit...
CVE-2001-1048
AWOL-related CVE-2001-1048 affects the AWOL PHP application and allows a remote attacker to include arbitrary files from remote web sites by setting the includedir HTTP parameter. The vulnerability enables remote code execution through local file inclusion-like behavior via a crafted request to i...
CVE-2001-0659
Buffer overflow in IrDA driver providing infrared data exchange on Windows 2000 allows attackers who are physically close to the machine to cause a denial of service reboot via a malformed IrDA packet...
CVE-2001-0493
The CVE describes a denial-of-service in Small HTTP Server 2.03 when handling HTTP requests that contain MS-DOS device names (for example AUX) in the URL. The underlying cause is improper handling of device-name paths, allowing a remote attacker to crash or freeze the server (Windows 98 reference...
CVE-2001-0001
cookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to other user accounts by extracting the authentication information from a cookie...
CVE-2001-0386
AnalogX SimpleServer:WWW 1.08 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory...
CVE-2001-0504
The CVE-2001-0504 entry affects the SMTP service in Microsoft Windows 2000. A flaw in the authentication handling could allow an intruder to bypass credentials, enabling the attacker to send mail and, in effect, relay through the vulnerable server. The underlying issue is a weakness in how the SM...
CVE-2001-0371
CVE-2001-0371 describes a race condition in the UFS and EXT2FS file systems affecting FreeBSD 4.2 and earlier (and possibly other operating systems). The vulnerability allows a local user to access data that has already been deleted but not yet zeroed out, leading to exposure of otherwise restric...
CVE-2001-0589
Technical details such as affected products, versions, root cause, or available fixes for CVE-2001-0589 are not provided in the connected documents. The given sources only reiterate the vulnerability at a high level; monitor for updates.
CVE-2001-0204
Technical details about CVE-2001-0204 are not publicly available in the provided documents. Monitor for updates.
CVE-2001-0549
The CVE describes Symantec LiveUpdate 1.5 storing proxy passwords in cleartext in the registry (HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\LiveUpdate\Preferences\Proxy), allowing local users to read credentials. CERT/CC details confirm local read access to the registry key and recommend upgrading to Li...
CVE-2001-0774
Tripwire 1.3.1, 2.2.1 and 2.3.0 are vulnerable to a local symlink attack that can overwrite arbitrary files in /tmp and may enable privilege escalation. Root cause: temporary files are opened/created without O_EXCL and with predictable names, allowing a non-privileged local attacker to redirect d...
CVE-2001-0616
Faust Informatics Freestyle Chat server prior to 4.1 SR3 is affected; a remote attacker can trigger a denial of service by sending a URL request that includes a MS-DOS device name (for example, GET /aux HTTP/1.0). The available sources do not provide hardware/versions beyond the affected product/...
CVE-2001-0816
Technical details for CVE-2001-0816 are not provided in the connected documents. No confirmed affected products or fixes are available here. Monitor for updates.