CVE-2001-0787

CVE-2001-0787 affects LPRng in Red Hat Linux 7.0 and 7.1, where dropping privileges does not remove supplemental group memberships. The underlying issue is that LPRng fails to drop these group memberships when lowering privileges, so the process and its children may retain the starting process’s ...

CVE-2001-0779

CVE-2001-0779 describes a remote buffer overflow in the rpc.yppasswdd (yppasswd) service, affecting Solaris 2.6/7/8 (and related implications for AIX per vendor notes). The vulnerability allows a remote attacker to gain root privileges by supplying a long username string, as documented by multipl...

CVE-2001-0700

CVE-2001-0700 affects w3m up to version 0.2.1, where a buffer overflow in MIME header parsing may allow a remote attacker to execute arbitrary code via a long base64-encoded MIME header. Debian advisories DSA-064-1 and DSA-081-1 address this by updating w3m and w3m-ssl; OpenVAS/NASL entries descr...

CVE-2001-0690

CVE-2001-0690 describes a format-string vulnerability in Exim in batched SMTP mode that can let an unauthenticated remote attacker execute arbitrary code via format strings in SMTP headers. The entry specifies affected Exim versions: 3.22-10 (Red Hat), 3.12 (Debian), and 3.16 (Conectiva). Attack ...

CVE-2001-0675

The Bat! (RIT Research Labs) for Windows (The Bat! v1.51) is affected by a vulnerability where a remote attacker can trigger a denial of service by delivering an email containing a carriage return CR not followed by a LF. This incorrect RFC822 parsing can cause premature end-of-message handling, ...

CVE-2001-0646

The CVE concerns Maxum Rumpus FTP Server versions 1.3.3 and 2.0.3 dev 3. A remote attacker can cause a denial-of-service (hang) by supplying a directory name of a specific length. The available documents do not specify the underlying root cause, affected components beyond the FTP server, or concr...

CVE-2001-0596

Netscape Communicator prior to 4.77 is affected by CVE-2001-0596: a GIF image whose comment contains Javascript allows remote code execution. The underlying issue is improper handling/escaping of GIF comments, enabling arbitrary Javascript execution via the about: protocol or image viewing contex...

CVE-2001-0574

The CVE-2001-0574 entry describes a directory traversal flaw in MP3Mystic prior to version 1.04b3. A remote attacker can download arbitrary files by using a ‘..’ sequence in the URL. This is reported as affecting MP3Mystic with the vulnerability enabling partial confidentiality impact (cited in C...

CVE-2001-0526

Buffer overflow in the Xview library, as used by mailtool in Solaris 8 and earlier, allows a local attacker to gain privileges via the OPENWINHOME environment variable. The description notes a local privilege escalation; no additional exploit details, impacted versions, or remediation steps are p...

CVE-2001-0500

CVE-2001-0500 is a buffer-overflow in the IDQ ISAPI handler (idq.dll) used by Microsoft IIS Indexing Service/Index Server 2.0 (and IIS 6.0 beta and earlier). The vulnerability allows remote attackers to execute arbitrary commands by sending a long argument to the .ida and .idq entry points (e.g.,...

CVE-2001-0442

The CVE-2001-0442 entry concerns a buffer overflow in the Mercury MTA POP3 server for NetWare 1.48 and earlier. The vulnerability arises from handling a long APOP command, enabling remote attackers to cause a denial of service and potentially execute arbitrary code. The available connected source...

CVE-2001-0276

The vulnerability CVE-2001-0276 affects BadBlue Personal Edition (1.02.07) where ext.dll can be invoked directly without arguments, causing an error message that reveals the server’s physical path. This is a path disclosure issue in the web server software. The available connected documents confi...

CVE-2001-0265

CVE-2001-0265 concerns the Windows PGP ASCII Armor parser (versions Windows PGP 5 to 7.0.3, latest). The vulnerability arises from handling malformed ASCII-armored data, which allows an attacker to create arbitrary files in the same directory as the armored file. This can lead to arbitrary code e...

CVE-2001-0965

Affected software: glFTPD 1.23. The issue is a remote denial-of-service via the LIST command when the argument contains a large number of * characters, causing CPU consumption. The connected documents provide the same vulnerability description across multiple sources, but do not include a confirm...

CVE-2001-0787

LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lowering privileges, which could allow a local user to elevate privileges...

CVE-2001-0422

Buffer overflow in Xsun in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable...

CVE-2001-0280

Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN command...

CVE-2001-0973

BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and extracting a tar file with a symlink into the data-bag space...

CVE-2001-0987

Cross-site scripting vulnerability in CGIWrap before 3.7 allows remote attackers to execute arbitrary Javascript on other web clients by causing the Javascript to be inserted into error messages that are generated by CGIWrap...

CVE-2001-0692

SMTP proxy in WatchGuard Firebox 2500 and 4500 4.5 and 4.6 allows a remote attacker to bypass firewall filtering via a base64 MIME encoded email attachment whose boundary name ends in two dashes...