3467 matches found
CVE-2001-0525
CVE-2001-0525 affects dsh in dqs 3.2.7 on SuSE Linux 7.0 and earlier (and possibly other OSes). The vulnerability is a buffer overflow triggered by a long first command line argument, allowing local users to gain privileges. The available documents do not specify patches or exact affected product...
CVE-2001-0252
CVE-2001-0252 affects iPlanet (Netscape) Enterprise Server 4.1. A remote attacker can trigger a denial of service by sending a long HTTP GET request containing many "/../" sequences, leading to server instability. The vulnerability is described across multiple sources (NVD/CVE entries and Nessus/...
CVE-2001-0828
The CVE-2001-0828 entry concerns Caucho Technology Resin (versions up to and including 1.2.3) vulnerable to cross-site scripting. According to the sources, the issue occurs when a web site embeds Javascript in a hyperlink that ends in .jsp, and the error page does not properly quote the Javascrip...
CVE-2001-0526
Buffer overflow in the Xview library, as used by mailtool in Solaris 8 and earlier, allows a local attacker to gain privileges via the OPENWINHOME environment variable. The description notes a local privilege escalation; no additional exploit details, impacted versions, or remediation steps are p...
CVE-2001-0641
CVE-2001-0641 concerns a buffer overflow in the man program across various Linux distributions. The vulnerability allows a local unprivileged user to execute arbitrary code with the effective group Man ID by supplying a very long -S option. This is a local-privilege escalation via memory corrupti...
CVE-2001-0586
Affected software: Trend Micro ScanMail for Exchange 3.5 Evaluation. Vulnerability: local attacker can recover administrative credentials by exploiting unprotected registry keys and weakly encrypted passwords. Root cause: insecure credential storage in registry and weak encryption. Impact: potent...
IBM DB2 Multiple CGI Single Byte Request Remote DoS
It was possible to crash the IBM DB2 database service by connecting to the affected service and sending just one byte to it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid10871; scriptversion"1.23";...
CVE-2001-1377
Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service crash via a Vendor-Length that is less than 2...
CVE-2001-1376
Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via shared secret data...
CVE-2001-1465
SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filtering by fragmenting packets so that no packet contains both data elements...
CVE-2001-0551
CVE-2001-0551 corresponds to a buffer overflow in the CDE Print Viewer (dtprintinfo) that enables a local attacker to execute arbitrary code, potentially as root, by overflowing the Help window search field via the clipboard. Connected advisories confirm impact on multiple platforms (Solaris 2.4–...
CVE-2001-1079
createkeyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to delete key files and cause a denial of service...
Oracle 9iAS mod_plsql Encoded Traversal Arbitrary File Access
In a default installation of Oracle 9iAS, it is possible to use the modplsql module to perform a directory traversal attack. This allows attackers to read arbitrary files on the server. %NASLMINLEVEL 70300 This script was written by Matt Moore See the Nessus Scripts License for details Changes by...
CVE-2001-1371
The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by default via urn:soap-service-manager and urn:soap-provider-manager...
CVE-2001-0941
Buffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary code via a long ORACLEHOME environment variable...
CVE-2001-1021
Buffer overflows in WSFTP 2.02 allow remote attackers to execute arbitrary code via long arguments to 1 DELE, 2 MDTM, 3 MLST, 4 MKD, 5 RMD, 6 RNFR, 7 RNTO, 8 SIZE, 9 STAT, 10 XMKD, or 11 XRMD...
CVE-2001-0931
Directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03 allows attackers to list or read arbitrary files and directories via a .. dot dot in 1 LS or 2 GET...
CVE-2001-0999
CVE-2001-0999 concerns Outlook Express 6.00, where remote attackers could cause arbitrary script execution by embedding SCRIPT tags in a message with MIME type text/plain. This contradicts the expected behavior that text/plain messages do not run scripts. The available references (NVD, CVE List) ...