CVE-2001-0549

The CVE describes Symantec LiveUpdate 1.5 storing proxy passwords in cleartext in the registry (HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\LiveUpdate\Preferences\Proxy), allowing local users to read credentials. CERT/CC details confirm local read access to the registry key and recommend upgrading to Li...

CVE-2001-0716

CVE-2001-0716 affects Citrix MetaFrame 1.8 Server with Service Pack 3 and Citrix MetaFrame XP/XP SP1. The vulnerability stems from improper handling of multiple sessions during authentication, allowing a remote attacker to cause a crash/DoS by initiating a large number of incomplete sessions. The...

CVE-2001-0573

lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named 1 grep or 2 lslv in a certain directory that is under the user's control, which cause lsfs to access the programs in that directory...

CVE-2001-0558

T. Hauck Jana Webserver 2.01 beta 1 and earlier allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name i.e. GET /aux HTTP/1.0...

CVE-2001-0784

Directory traversal vulnerability in Icecast 1.3.10 and earlier allows remote attackers to read arbitrary files via a modified .. dot dot attack using encoded URL characters...

CVE-2001-0773

Cayman 3220-H DSL Router 1.0 allows remote attacker to cause a denial of service crash via a series of SYN or TCP connect requests...

CVE-2001-0987

Cross-site scripting vulnerability in CGIWrap before 3.7 allows remote attackers to execute arbitrary Javascript on other web clients by causing the Javascript to be inserted into error messages that are generated by CGIWrap...

CVE-2001-0327

iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or cause a denial of service, via a URL-encoded Host: header in the HTTP request, which reveals memory in the Location: header that is returned by the server...

CVE-2001-0276

ext.dll in BadBlue 1.02.07 Personal Edition web server allows remote attackers to determine the physical path of the server by directly calling ext.dll without any arguments, which produces an error message that contains the path...

CVE-2001-0857

Cross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote attackers to gain access to the e-mail of other users by hijacking session cookies via the message parameter...

CVE-2001-0668

Buffer overflow in line printer daemon rlpdaemon in HP-UX 10.01 through 11.11 allows remote attackers to execute arbitrary commands...

CVE-2001-1056

IRC DCC helper in the ipmasqirc IP masquerading module 2.2 allows remote attackers to bypass intended firewall restrictions by causing the target system to send a "DCC SEND" request to a malicious server which listens on port 6667, which may cause the module to believe that the traffic is a valid...

CVE-2001-0805

Directory traversal vulnerability in ttawebtop.cgi in Tarantella Enterprise 3.00 and 3.01 allows remote attackers to read arbitrary files via a .. dot dot in the pg parameter...

CVE-2001-0828

A cross-site scripting vulnerability in Caucho Technology Resin before 1.2.4 allows a malicious webmaster to embed Javascript in a hyperlink that ends in a .jsp extension, which causes an error message that does not properly quote the Javascript...

CVE-2001-0616

Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name e.g., GET /aux HTTP/1.0...

CVE-2001-0861

The CVE-2001-0861 issue affects Cisco 12000 Series routers running IOS 12.0 with Engine 2 (and earlier) line cards, where a remote attacker can cause a denial of service by flooding the device with traffic that generates a large number of ICMP Unreachable replies, degrading throughput due to CPU ...

CVE-2001-1020

Vulnerability CVE-2001-1020 affects Vibechild Directory Manager prior to 0.91, where edit_image.php passes userfile_name unfiltered to PHP passthru, enabling remote command execution via shell metacharacters. OpenVAS entries describe an arbitrary command execution risk; NVD/NVL references list a ...

CVE-2001-0973

BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and extracting a tar file with a symlink into the data-bag space...

CVE-2001-0834

CVE-2001-0834 affects the htsearch CGI in ht://Dig (htdig)

CVE-2001-1054

The CVE-2001-1054 vulnerability affects PHPAdsNew, allowing a remote attacker to include arbitrary PHP files hosted on third‑party servers via an HTTP request that sets the includedir variable. This constitutes a Remote File Inclusion flaw in the PHPAdsNew helperfunction.php context, enabling arb...