CVE-2001-0545

IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service crash via a malformed request that specifies a length that is different than the actual length...

CVE-2001-0859

2.4.3-12 kernel in Red Hat Linux 7.1 Korean installation program sets the setting default umask for init to 000, which installs files with world-writeable permissions...

CVE-2001-0558

T. Hauck Jana Webserver 2.01 beta 1 and earlier allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name i.e. GET /aux HTTP/1.0...

CVE-2001-0527

DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols | and newlines into the last name in the registration form, which will create an extra entry in the registration database...

CVE-2001-1080

diagrpt in AIX 4.3.x and 5.1 uses the DIAGDATADIR environment variable to find and execute certain programs, which allows local users to gain privileges by modifying the variable to point to a Trojan horse program...

CVE-2001-0718

Vulnerability in 1 Microsoft Excel 2002 and earlier and 2 Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by modifying the data stream in the document...

CVE-2001-0663

Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop Protocol RDP packets...

CVE-2001-0668

Buffer overflow in line printer daemon rlpdaemon in HP-UX 10.01 through 11.11 allows remote attackers to execute arbitrary commands...

CVE-2001-0593

Anaconda Partners Clipper 3.3 and earlier allows a remote attacker to read arbitrary files via a '..' dot dot attack in the template parameter...

CVE-2001-0653

Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the 'category' part of debugger -d command line arguments, which is interpreted as a negative number...

CVE-2001-0629

HP OpenView Network Node Manager 6.1 includes the HP Event Correlation Service (ecsd) vulnerable to a remote privilege escalation due to a buffer overflow in the -restore_config command line parameter. Affected component: ecsd within OpenView/NNM 6.1. Consequence: remote attacker could gain addit...

CVE-2001-0543

The CVE-2001-0543 issue affects the NNTP service in Windows NT 4.0 and Windows 2000, where a memory leak can be triggered by processing a large number of malformed posts. This memory growth can lead to denial of service through exhaustion of resources. The provided material does not specify exact...

CVE-2001-0364

Technical details for CVE-2001-0364 are not publicly available in the provided documents; monitor for updates.

CVE-2001-0863

Cisco 12000 Series routers running IOS 12.0 with Engine 2 line cards are vulnerable in Turbo ACL handling; the compiled ACL may ignore the fragment keyword for packets to the router, enabling remote denial of service via a flood of fragments. Affected component: fragmented traffic in ACLs. Impact...

CVE-2001-0843

CVE-2001-0843 affects the Squid proxy server (versions 2.4 and earlier). The flaw is triggered by a mkdir-only FTP PUT request, causing the daemon to crash and thus a remote denial of service. Connected advisories (Debian DSA-077-1, Mandrake MDKSA-2001:088, OpenVAS entries) corroborate remote DoS...

CVE-2001-0828

The CVE-2001-0828 entry concerns Caucho Technology Resin (versions up to and including 1.2.3) vulnerable to cross-site scripting. According to the sources, the issue occurs when a web site embeds Javascript in a hyperlink that ends in .jsp, and the error page does not properly quote the Javascrip...

CVE-2001-1056

The CVE affects the ip_masq_irc IP masquerading module 2.2. A remote attacker can bypass firewall restrictions by inducing the target to send a DCC SEND to a malicious server listening on port 6667, which may cause the module to treat that traffic as valid and permit the connection to the port sp...

CVE-2001-0720

CVE-2001-0720 affects Internet Explorer 5.1 for Macintosh on Mac OS X. The issue allows remote execution of arbitrary commands by triggering the download of a BinHex or MacBinary file type that is executed if automatic decoding is enabled. The vulnerability arises in how the browser handles certa...

CVE-2001-0717

CVE-2001-0717 is a format-string vulnerability in the ToolTalk RPC server rpc.ttdbserverd that permits remote command execution via syslog formatting. Public advisories (Sun, HP, IBM, SunOS/Solaris, AIX, SGI/IRIX, Xi Graphics, Caldera) describe vulnerable platforms and vendor patches. CORE/SECURE...

CVE-2001-0696

NetWin SurgeFTP 2.0a and 1.0b are affected by CVE-2001-0696: a remote attacker can cause a denial of service (crash) by issuing a CD command to a directory named with an MS-DOS device name (e.g., con). The available sources confirm the vulnerability exists and describe the impact as a crash/DoS, ...