3467 matches found
CVE-2001-0677
Eudora 5.0.2 allows a remote attacker to read arbitrary files via an email with the path of the target file in the "Attachment Converted" MIME header, which sends the file when the email is forwarded to the attacker by the user...
CVE-2001-0861
The CVE-2001-0861 issue affects Cisco 12000 Series routers running IOS 12.0 with Engine 2 (and earlier) line cards, where a remote attacker can cause a denial of service by flooding the device with traffic that generates a large number of ICMP Unreachable replies, degrading throughput due to CPU ...
CVE-2001-0560
CVE-2001-0560 describes a local privilege escalation in Vixie cron (3.0.1-56 and earlier) caused by a buffer overflow triggered by a username longer than 20 characters. Affected component: crontab handling in Vixie cron. Impact per sources: partial confidentiality/integrity/availability, local at...
CVE-2001-0993
NetBSD 1.3–1.5 is affected in the kernel sendmsg path where a msghdr with a large msg_controllen can trigger a local denial of service (kernel trap or panic). The underlying vulnerability is a kernel instability when processing msghdr data in sendmsg, leading to DoS for local users. Public source...
CVE-2001-0784
Directory traversal vulnerability in Icecast 1.3.10 and earlier allows remote attackers to read arbitrary files via a modified .. dot dot attack using encoded URL characters...
CVE-2001-0627
The CVE cites SCO OpenServer’s vi (5.0.0–5.0.6) as vulnerable: it creates insecure, world-writable temporary files in /tmp with predictable names, allowing a local attacker to exploit a symlink to overwrite arbitrary files writable by the user. The impact is file integrity loss for targeted files...
CVE-2001-0269
The vulnerability CVE-2001-0269 affects the pam_ldap authentication module in Solaris 8, where remote attackers can bypass authentication by providing a NULL password. This leads to complete compromise of confidentiality, integrity, and availability for affected sessions. The available documents ...
CVE-2001-0497
dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key file used for DNS Transactional Signatures TSIG, which allows attackers to obtain the keys and perform dynamic DNS updates...
CVE-2001-0327
iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or cause a denial of service, via a URL-encoded Host: header in the HTTP request, which reveals memory in the Location: header that is returned by the server...
CVE-2001-0018
The CVE-2001-0018 entry affects Windows 2000 domain controllers (Windows 2000 Server, Advanced Server, or Datacenter Server). It describes a denial-of-service vulnerability caused by remote attackers sending a flood of malformed service requests to the DC, leading to partial availability impact. ...
CVE-2001-0585
Gordano NTMail 6.0.3c allows a remote attacker to create a denial of service via a long = 255 characters URL request to port 8000 or port 9000...
CVE-2001-0998
CVE-2001-0998 affects IBM HACMP 4.4. A completed TCP connection to HACMP ports (e.g., during a port scan) that sends no additional data can cause a failure in snmpd, yielding a denial-of-service condition. The available sources identify the affected product and the remote DoS impact but do not pr...
CVE-2001-0544
CVE-2001-0544 affects IIS 5.0. A crafted invalid MIME Content-Type header can cause a denial of service by corrupting the File Type table. Local user access, no authentication required, partial availability impact. Connected docs mention related MS01-044 references; no patch/fix details are provi...
CVE-2001-0364
SSH Communications Security sshd 2.4 for Windows allows remote attackers to create a denial of service via a large number of simultaneous connections...
CVE-2001-0493
Small HTTP server 2.03 allows remote attackers to cause a denial of service via a URL that contains an MS-DOS device name such as aux...
CVE-2001-0625
ftpdownload in Computer Associates InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink attack on /tmp/ftpdownload.log...
CVE-2001-0641
CVE-2001-0641 concerns a buffer overflow in the man program across various Linux distributions. The vulnerability allows a local unprivileged user to execute arbitrary code with the effective group Man ID by supplying a very long -S option. This is a local-privilege escalation via memory corrupti...
CVE-2001-0660
CVE-2001-0660 affects Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier. The back-end function that processes the Global Address List (GAL) can be accessed without authentication, allowing remote attackers to identify valid user email addresses stored in the GAL. Connected sourc...
CVE-2001-0545
CVE-2001-0545 affects IIS 4.0 with URL redirection enabled. A malformed request with a length mismatch can cause the server to crash, yielding a remote denial of service. The provided documents do not detail exploitation steps. For remediation, see MS01-044 (Microsoft security bulletin) and relat...