CVE-2001-0973

CVE-2001-0973 concerns BSCW groupware (versions 3.3–4.0.2 beta). The vulnerability arises when extracting tar archives into the user’s data-bag space: symbolic links within the tar are followed, allowing a remote attacker to read arbitrary files readable by the web server and potentially overwrit...

CVE-2001-0547

CVE-2001-0547 describes a memory leak in the proxy service of Microsoft Internet Security and Acceleration (ISA) Server 2000 that allows local attackers to cause a denial of service through resource exhaustion. The affected product is ISA Server 2000 (proxy service component); the underlying caus...

CVE-2001-1038

The CVE-2001-1038 entry affects Cisco SN 5420 Storage Router 1.1(3) and earlier. A remote attacker can trigger a denial-of-service reboot by establishing a series of connections to TCP port 8023. The available references confirm the affected device and the reboot impact, but do not provide exploi...

CVE-2001-0969

CVE-2001-0969 affects FreeBSD’s ipfw firewall. The vulnerability arises from improper handling of the string "me" in rules when point-to-point interfaces are used, allowing connections from arbitrary remote hosts. The issue impacts the firewall decision logic, potentially bypassing intended restr...

CVE-2001-0879

CVE-2001-0879 describes a format-string vulnerability in the C runtime functions used by Microsoft SQL Server 7.0 and 2000. The underlying issue is a format string handling flaw in the C runtime, which can allow an attacker to trigger a denial of service. The available connected documents confirm...

CVE-2001-0998

IBM HACMP 4.4 allows remote attackers to cause a denial of service via a completed TCP connection to HACMP ports e.g., using a port scan that does not send additional data, which causes a failure in snmpd...

CVE-2001-0615

Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary files via a specially crafted URL which includes variations of a '..' dot dot attack such as '...' or '....'...

CVE-2001-0204

Watchguard Firebox II allows remote attackers to cause a denial of service by establishing multiple connections and sending malformed PPTP packets...

CVE-2001-0773

CVE-2001-0773 affects Cayman 3220-H DSL Router 1.0. A vulnerability allows remote DoS via a sequence of TCP connect() requests or SYN packets, potentially exploited from LAN or WAN in conjunction with a bouncing vulnerability, causing the gateway to crash. Root cause relates to how the device han...

CVE-2001-0564

The CVE concerns the APC Web/SNMP Management Card (firmware before 310). The vulnerability arises because the device allows only a single telnet connection, enabling a remote attacker to cause a denial of service by repeatedly failing logon attempts, temporarily locking the card. A fix is availab...

CVE-2001-0522

The CVE-2001-0522 issue concerns GnuPG (GPG) versions 1.0.5 and earlier, where a format-string vulnerability in the do_get/tty_printf flow exposes the original encrypted-file filename to format-string processing. This can allow code execution with the privileges of the user decrypting the file. T...

CVE-2001-0739

The CVE-2001-0739 entry affects Guardian Digital WebTool in EnGarde Secure Linux 1.0.1. Affected component: WebTool; root cause: restarted services can inherit certain environmental variables, enabling local users to gain root privileges. Impact: local privilege escalation. No explicit remediatio...

CVE-2001-0595

The CVE-2001-0595 issue affects Sun’s KCMS component on Solaris 7/8, where a buffer overflow in the kcsSUNWIOsolf.so library allows a local user to execute arbitrary commands via the KCMS_PROFILES environment variable (demonstrated by kcms_configure). OpenVAS entries describe the KCMS Profile Ser...

CVE-2001-0738

The CVE-2001-0738 issue affects the Linux kernel logging daemon klogd (sysklogd 1.3) across various distributions. A NULL byte in log messages can cause klogd to enter an infinite loop and hang, effectively a denial-of-service. Root cause cited is klogd’s LogLine handling of NULL bytes in input. ...

CVE-2001-0846

The provided documents describe CVE-2001-0846: Lotus Domino 5.x is vulnerable to a remote attacker who can read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file (webadmin.ntf). The exact vulnerable component is not more precisely broken down beyon...

CVE-2001-0541

Buffer overflow in Microsoft Windows Media Player 7.1 and earlier allows remote attackers to execute arbitrary commands via a malformed Windows Media Station .NSC file...

CVE-2001-0819

CVE-2001-0819 corresponds to a buffer overflow in Linux fetchmail before 5.8.6, exploitable by a remote attacker via a large To: header in an email. The vulnerability is due to an overflow in the header parser, allowing arbitrary code execution. Affected software is fetchmail on Linux, with advis...

CVE-2001-0541

CVE-2001-0541 is a buffer overflow vulnerability in Microsoft Windows Media Player 7.1 and earlier triggered by a malformed Windows Media Station (.NSC) file, allowing remote command execution. The connected records corroborate the affected software (Windows Media Player 7.x), the attack vector (...

CVE-2001-0549

The CVE describes Symantec LiveUpdate 1.5 storing proxy passwords in cleartext in the registry (HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\LiveUpdate\Preferences\Proxy), allowing local users to read credentials. CERT/CC details confirm local read access to the registry key and recommend upgrading to Li...

CVE-2001-0716

CVE-2001-0716 affects Citrix MetaFrame 1.8 Server with Service Pack 3 and Citrix MetaFrame XP/XP SP1. The vulnerability stems from improper handling of multiple sessions during authentication, allowing a remote attacker to cause a crash/DoS by initiating a large number of incomplete sessions. The...