CVE-2001-0773

CVE-2001-0773 affects Cayman 3220-H DSL Router 1.0. A vulnerability allows remote DoS via a sequence of TCP connect() requests or SYN packets, potentially exploited from LAN or WAN in conjunction with a bouncing vulnerability, causing the gateway to crash. Root cause relates to how the device han...

CVE-2001-0564

The CVE concerns the APC Web/SNMP Management Card (firmware before 310). The vulnerability arises because the device allows only a single telnet connection, enabling a remote attacker to cause a denial of service by repeatedly failing logon attempts, temporarily locking the card. A fix is availab...

CVE-2001-0522

The CVE-2001-0522 issue concerns GnuPG (GPG) versions 1.0.5 and earlier, where a format-string vulnerability in the do_get/tty_printf flow exposes the original encrypted-file filename to format-string processing. This can allow code execution with the privileges of the user decrypting the file. T...

CVE-2001-0739

The CVE-2001-0739 entry affects Guardian Digital WebTool in EnGarde Secure Linux 1.0.1. Affected component: WebTool; root cause: restarted services can inherit certain environmental variables, enabling local users to gain root privileges. Impact: local privilege escalation. No explicit remediatio...

CVE-2001-0595

The CVE-2001-0595 issue affects Sun’s KCMS component on Solaris 7/8, where a buffer overflow in the kcsSUNWIOsolf.so library allows a local user to execute arbitrary commands via the KCMS_PROFILES environment variable (demonstrated by kcms_configure). OpenVAS entries describe the KCMS Profile Ser...

CVE-2001-0738

The CVE-2001-0738 issue affects the Linux kernel logging daemon klogd (sysklogd 1.3) across various distributions. A NULL byte in log messages can cause klogd to enter an infinite loop and hang, effectively a denial-of-service. Root cause cited is klogd’s LogLine handling of NULL bytes in input. ...

CVE-2001-0846

The provided documents describe CVE-2001-0846: Lotus Domino 5.x is vulnerable to a remote attacker who can read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file (webadmin.ntf). The exact vulnerable component is not more precisely broken down beyon...

CVE-2001-0819

CVE-2001-0819 corresponds to a buffer overflow in Linux fetchmail before 5.8.6, exploitable by a remote attacker via a large To: header in an email. The vulnerability is due to an overflow in the header parser, allowing arbitrary code execution. Affected software is fetchmail on Linux, with advis...

CVE-2001-0541

CVE-2001-0541 is a buffer overflow vulnerability in Microsoft Windows Media Player 7.1 and earlier triggered by a malformed Windows Media Station (.NSC) file, allowing remote command execution. The connected records corroborate the affected software (Windows Media Player 7.x), the attack vector (...

CVE-2001-0613

The CVE-2001-0613 entry applies to Omnicron Technologies’ OmniHTTPd Pro HTTP Server, affected in version 2.08 and earlier. The connected OpenVAS/NASL and Nessus entries describe a vulnerability where the remote server is vulnerable to a buffer overflow when handling specially long POST requests, ...

CVE-2001-0565

Buffer overflow in mailx in Solaris 8 and earlier allows a local attacker to gain additional privileges via a long '-F' command line option...

CVE-2001-0874

Internet Explorer 5.5 and 6.0 allow remote attackers to read certain files via HTML that passes information from a frame in the client's domain to a frame in the web site's domain, a variant of the "Frame Domain Verification" vulnerability...

CVE-2001-0874

CVE-2001-0874/2002-0027 describe a vulnerability in Internet Explorer 5.5/6.0 where remote attackers could read files by HTML passing information from a frame in the client’s domain to a frame in the site’s domain (a variant of Frame Domain Verification). Affected products are IE 5.5–6.0; root ca...

CVE-2001-0864

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit "deny ip any any" rule in an outgoing ACL when the ACL contains exactly 448 entries, which can allow some outgoing packets to bypass access restrictions...

CVE-2001-1017

rmuser utility in FreeBSD 4.2 and 4.3 creates a copy of the master.passwd file with world-readable permissions while updating the original file, which could allow local users to gain privileges by reading the copied file while rmuser is running, obtain the password hashes, and crack the passwords...

CVE-2001-0506

CVE-2001-0506 is a buffer overflow in IIS 4.0/5.0 ssinc.dll when processing Server-Side Includes directives, allowing an attacker who can write to the web directory to trigger overflow and execute arbitrary code with the web server’s privileges (LOCAL SYSTEM). Affected products: Microsoft IIS 4.0...

CVE-2001-0545

CVE-2001-0545 affects IIS 4.0 with URL redirection enabled. A malformed request with a length mismatch can cause the server to crash, yielding a remote denial of service. The provided documents do not detail exploitation steps. For remediation, see MS01-044 (Microsoft security bulletin) and relat...

CVE-2001-0545

IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service crash via a malformed request that specifies a length that is different than the actual length...

CVE-2001-0500

A buffer overflow vulnerability exists in the ISAPI extension (idq.dll) within Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier versions. A remote attacker can execute arbitrary commands by sending a specially crafted request to Internet Data Administration (.ida) and Intern...

CVE-2001-1037

Cisco SN 5420 Storage Router (versions 1.1(3) and earlier) is affected by CVE-2001-1037, where local users can access a developer’s shell without a password and execute certain restricted commands without being logged. The vulnerability arises in the device’s local shell access mechanism, enablin...