CVE-2001-0551

CVE-2001-0551 corresponds to a buffer overflow in the CDE Print Viewer (dtprintinfo) that enables a local attacker to execute arbitrary code, potentially as root, by overflowing the Help window search field via the clipboard. Connected advisories confirm impact on multiple platforms (Solaris 2.4–...

CVE-2001-1079

createkeyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to delete key files and cause a denial of service...

Oracle 9iAS mod_plsql Encoded Traversal Arbitrary File Access

In a default installation of Oracle 9iAS, it is possible to use the modplsql module to perform a directory traversal attack. This allows attackers to read arbitrary files on the server. %NASLMINLEVEL 70300 This script was written by Matt Moore See the Nessus Scripts License for details Changes by...

CVE-2001-1371

The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by default via urn:soap-service-manager and urn:soap-provider-manager...

CVE-2001-0892

Vulnerability : Acme Thttpd Secure Webserver prior to 2.22, with the chroot option enabled, is exposed to remote access that can view sensitive files under the document root (e.g., .htpasswd) via a GET request with a trailing slash. Affected product : Acme Thttpd Secure Webserver (before 2.22). R...

CVE-2001-0916

CVE-2001-0916 affects Berkeley parallel make (pmake) up to version 2.1.33, where a buffer overflow in a long check argument of a shell definition allows a local user to gain root privileges. The provided documents confirm the vulnerable component and root-priority impact but do not specify produc...

CVE-2001-0923

CVE-2001-0923 affects RPM Package Manager 4.0.x through 4.0.2.x and allows an attacker to execute arbitrary code via corrupted data in an RPM file when the file is queried. The NVD/CVE entries provide the vulnerability description and a CVSS v2 base score of 7.2 (HIGH) with LOCAL attack vector, b...

CVE-2001-0930

Technical details about CVE-2001-0930 are not publicly provided in the connected documents. Monitor for updates to confirm affected products, impact and remediation when additional details become available.

CVE-2001-0934

Cooolsoft PowerFTP Server 2.03 is vulnerable: the pwd command discloses the full server root path, enabling information disclosure. Impact is partial confidentiality; no exploitation details are provided. No remediation is stated in the supplied documents.

CVE-2001-0938

CVE-2001-0938 concerns AspUpload 2.1. Affected component: AspUpload (ASP-based file upload) with vulnerable code paths in UploadScript11.asp and DirectoryListing.asp. The underlying issue is a directory-traversal flaw triggered by a .. in the Filename parameter, enabling remote attackers to uploa...

CVE-2001-0942

The CVE concerns Oracle 8.1.6 and 8.1.7 where dbsnmp uses the ORACLE_HOME environment variable to locate and execute the dbsnmp program. A local user can point ORACLE_HOME to an attacker-controlled directory that contains a malicious dbsnmp, enabling arbitrary code execution with local privileges...

CVE-2001-0968

Knox Arkeia server 4.2 (and possibly other versions) installs its root user with a null password by default, enabling privilege escalation for local and remote users. The available documents describe the vulnerable condition but do not specify patches or fixes. No explicit exploit details or reme...

CVE-2001-0970

The CVE-2001-0970 vulnerability affects TDForum 1.2 (tdforum12.cgi) where input is not properly filtered, enabling cross-site scripting by malicious forum posts. CERT/CC notes TDForum 1.2 and earlier do not properly filter HTML/script tags, with no practical vendor patch available (as of the sour...

CVE-2001-0972

The CVE-2001-0972 entry concerns Surf-Net ASP Forum prior to version 2.30, where admin cookies are derived from the UserID and are easily guessable (example: admin cookie for UserID 1 is “0888888”). This creates a remote‑attack risk: a attacker could calculate the admin cookie and gain administra...

CVE-2001-0996

POP3Lite before 0.2.4 is vulnerable due to improper quoting of a dot in an email message, allowing a remote attacker to append arbitrary text to the end of an email. This text could be interpreted by mail clients as valid POP server responses or other input, potentially causing clients to crash o...

CVE-2001-0997

The CVE-2001-0997 entry concerns Textor Webmasters Ltd’s listrec.pl CGI. The vulnerability arises from shell metacharacter processing in the TEMPLATE parameter, enabling remote arbitrary command execution on the affected host with web server privileges. Public sources in the connected docs (NVD/N...

CVE-2001-1003

Affected software : Respondus 1.1.2 for WebCT. Vulnerability : weak encryption used to remember usernames and passwords stored in WEBCT.SVR. Impact : local users who can read WEBCT.SVR can decrypt passwords and gain additional privileges. Remediation : not specified in the provided documents.

CVE-2001-1006

Starfish Truesync Desktop 2.0b on the REX 5000 PDA stores sensitive files unencrypted and relies solely on password protection, enabling read access via another application. The CVE-2001-1006 entry notes lack of encryption with partial confidentiality impact, network‑level access, and no integrit...

CVE-2001-1007

CVE-2001-1007 affects Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA. The vulnerability arises from a small keyspace for device keys and the absence of a delay on incorrect keys, enabling faster brute-force guessing of the key. The NVD entry lists a MEDIUM base score (5.0/10) with net...

CVE-2001-1015

The CVE refers to a buffer overflow in Snes9x 1.37 when installed setuid root, allowing local users to gain root privileges via a long command line argument. Affected software: Snes9x 1.37. Root cause: buffer overflow triggered by oversized command line argument in a setuid context. Impact: local...