CVE-2001-0634

Sun Chili!Soft ASP has weak permissions on various configuration files, enabling a local attacker to gain additional privileges and cause a denial of service. Affected product: Sun Chili!Soft ASP. Root cause: insecure/weak permissions on configuration files. CVSS v2 base score 7.2 (HIGH) with loc...

CVE-2001-0710

NetBSD 1.5 and earlier and FreeBSD 4.3 and earlier allows a remote attacker to cause a denial of service by sending a large number of IP fragments to the machine, exhausting the mbuf pool...

CVE-2001-0487

AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection...

CVE-2001-0365

Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft Viewer' and 'allow executables in HTML content' options are enabled, via an HTML email message containing Javascript, with ActiveX controls and malicious code within IMG tags...

CVE-2001-0018

Windows 2000 domain controller in Windows 2000 Server, Advanced Server, or Datacenter Server allows remote attackers to cause a denial of service via a flood of malformed service requests...

CVE-2001-0530

Spearhead NetGAP 200 and 300 before build 78 are affected by a remote exploit that bypasses file blocking and content inspection via specially encoded URLs containing '%' characters. Impact is partial confidentiality according to CVSS v2. No explicit remediation is provided in the available docum...

CVE-2001-0822

Technical details about CVE-2001-0822 are not publicly provided in the supplied documents. Please monitor for updates from the sources for any new disclosures or technical specifics.

CVE-2001-1038

The CVE-2001-1038 entry affects Cisco SN 5420 Storage Router 1.1(3) and earlier. A remote attacker can trigger a denial-of-service reboot by establishing a series of connections to TCP port 8023. The available references confirm the affected device and the reboot impact, but do not provide exploi...

CVE-2001-0545

CVE-2001-0545 affects IIS 4.0 with URL redirection enabled. A malformed request with a length mismatch can cause the server to crash, yielding a remote denial of service. The provided documents do not detail exploitation steps. For remediation, see MS01-044 (Microsoft security bulletin) and relat...

CVE-2001-0525

CVE-2001-0525 affects dsh in dqs 3.2.7 on SuSE Linux 7.0 and earlier (and possibly other OSes). The vulnerability is a buffer overflow triggered by a long first command line argument, allowing local users to gain privileges. The available documents do not specify patches or exact affected product...

CVE-2001-0699

CVE-2001-0699 describes a buffer overflow in the cb_reset function of the System Service Processor (SSP) package on SunOS 5.8, enabling a local user to execute arbitrary code by supplying a long argument. The provided documents do not include a concrete mitigation, patch version, or explicit expl...

CVE-2001-0796

Technical details (affected products, vulnerable components, root cause, patch info) are not publicly available in the provided Connected documents. Monitor for updates.

CVE-2001-1049

CVE-2001-1049 affects Phorecast PHP script prior to version 0.40. The vulnerability enables a remote attacker to include arbitrary files from remote web sites by issuing an HTTP request that sets the includedir variable. This is a remote file inclusion (RFI) type issue, with the attack surface ti...

CVE-2001-0773

CVE-2001-0773 affects Cayman 3220-H DSL Router 1.0. A vulnerability allows remote DoS via a sequence of TCP connect() requests or SYN packets, potentially exploited from LAN or WAN in conjunction with a bouncing vulnerability, causing the gateway to crash. Root cause relates to how the device han...

CVE-2001-0252

CVE-2001-0252 affects iPlanet (Netscape) Enterprise Server 4.1. A remote attacker can trigger a denial of service by sending a long HTTP GET request containing many "/../" sequences, leading to server instability. The vulnerability is described across multiple sources (NVD/CVE entries and Nessus/...

CVE-2001-0733

The sinclude directive in Embedded Perl ePerl 2.2.14 and earlier allows a remote attacker to execute arbitrary code by modifying the 'sinclude' file to point to another file that contains a include directive that references a file that contains the code...

CVE-2001-0586

Affected software: Trend Micro ScanMail for Exchange 3.5 Evaluation. Vulnerability: local attacker can recover administrative credentials by exploiting unprotected registry keys and weakly encrypted passwords. Root cause: insecure credential storage in registry and weak encryption. Impact: potent...

CVE-2001-0865

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the "fragment" keyword in an outgoing ACL, which could allow fragmented packets in violation of the intended access...

CVE-2001-1017

The CVE-2001-1017 issue affects the rmuser utility in FreeBSD 4.2 and 4.3. During the update of the master.passwd file, a copy is created with world-readable permissions, enabling local users to read the copied file while rmuser runs. This could allow access to password hashes and potential passw...

CVE-2001-0386

The connected sources indicate CVE-2001-0386 affects AnalogX SimpleServer:WWW 1.08, where a remote attacker can trigger a denial-of-service by sending an HTTP request to the /aux directory. The OpenVAS/Nessus entries corroborate a DOS via special requests, but no concrete fix version or mitigatio...