3467 matches found
CVE-2001-0898
Opera 6.0 and earlier are affected by a remote information disclosure vulnerability where JavaScript using setTimeout can access data across domains (1) after opening a new window to a different domain, and (2) via about:cache, exposing cookies and cross-domain links. Root cause: cross-origin dat...
CVE-2001-0933
Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls LIST command that includes the drive letter as an argument, e.g. "ls C:"...
CVE-2001-0892
Vulnerability : Acme Thttpd Secure Webserver prior to 2.22, with the chroot option enabled, is exposed to remote access that can view sensitive files under the document root (e.g., .htpasswd) via a GET request with a trailing slash. Affected product : Acme Thttpd Secure Webserver (before 2.22). R...
CVE-2001-0935
The CVE concerns wu-ftpd up to 2.6.0 (and possibly earlier) with a vulnerability in the ftp globbing code (ftpglob) that can be triggered remotely. OpenVAS and Debian advisories associate CVE-2001-0550 with a remote root issue in wu-ftpd’s glob handling, including references to specific advisorie...
CVE-2001-1077
rxvt 2.6.2 is affected by a buffer overflow in the tt_printf() function triggered by a long -T or -name argument, enabling a local user to gain privileges (stack overflow). Debian DSA 062-1 and OpenVAS entries describe the issue and advise upgrading rxvt to a patched package. The vulnerability in...
CVE-2001-1044
CVE-2001-1044 affects Basilix Webmail 0.9.7beta (and possibly other versions). The issue is that ".class" and ".inc" files are stored under the document root without access restrictions, enabling remote attackers to read sensitive information such as MySQL passwords and usernames from the mysql.c...
CVE-2001-0927
The CVE-2001-0927 issue affects GNOME libgtop_daemon (libgtop) and was present in libgtop versions 1.0.12 and earlier. The vulnerability is a format-string defect in the libgtop_daemon’s permitted function, allowing remote attackers to execute arbitrary code via arguments containing format specif...
CVE-2001-0944
CVE-2001-0944 describes a DDE-based risk in mIRC where a local user can trigger a DDE message that executes a command, potentially running in another user’s process. This enables local privilege escalation with the command execution potentially affecting confidentiality, integrity, and availabili...
CVE-2001-1042
Transsoft Broker 5.9.5.0 is vulnerable: an attacker can upload a .lnk file that points to a target file, enabling remote reading of arbitrary files and directories. Root cause: mis-handling of .lnk file uploads allows access to target paths. Impact: read access to arbitrary files/directories on t...
CVE-2001-1058
The CVE-2001-1058 entry affects the Mathematica License Manager (mathlm) used with Mathematica 4.0/4.1. The root cause is a weakness in access control enforcement via the -restrict option, allowing remote attackers to bypass restrictions and obtain a license by sending a client request that inclu...
CVE-2001-1012
CVE-2001-1012 affects the screen utility prior to version 3.9.10. The issue is described as a multi-attach error that allows local users to gain root privileges when there is a subdirectory under /tmp/screens/. The connected sources confirm the affected component and the local-privilege escalatio...
CVE-2001-1031
Technical details about CVE-2001-1031 are not publicly available in the provided documents. Monitor for updates from official advisories.
CVE-2001-0948
CVE-2001-0948 affects ValiCert Enterprise Validation Authority (EVA) versions 3.3–4.2.1 . A cross‑site scripting flaw allows remote attackers to cause arbitrary code execution or display false information by injecting HTML/script into a certificate’s description, which runs when the certificate i...
CVE-2001-1065
CVE-2001-1065 affects Cisco 600-series routers running CBOS 2.0.1–2.4.2ap, where the web-based configuration utility binds to port 80 even when web configuration services are disabled. This could leave the device accessible to an attacker via the web interface. Root cause: the process binds port ...
CVE-2001-0913
CVE-2001-0913 : A format-string vulnerability in Network Solutions Rwhoisd ≤ 1.5.7.2 (when using syslog) allows remote attackers to trigger memory corruption and possibly execute arbitrary code via a rwhois request containing format specifiers. The issue is caused by improper handling of format s...
CVE-2001-1040
CVE-2001-1040 affects HP LaserJet and possibly other JetDirect devices, where certain power-off behavior resets the admin password. The result is that a remote attacker could gain administrative access without a password after the device is turned off, per the available description. The provided ...
CVE-2001-0904
CVE-2001-0904 concerns Internet Explorer versions 5.5 and 6, where the MS01-055 (Q312461) patch modifies the HTTP_USER_AGENT string to indicate that the patch is installed. This behavior can enable remote malicious websites to more easily identify vulnerable clients. The provided records describe...
CVE-2001-0933
The connected records confirm the issue affects Cooolsoft PowerFTP Server 2.03. A remote attacker can list contents of arbitrary drives by issuing a LIST (ls) command that includes a drive letter argument (e.g., "ls C:"). This indicates a potential command handling/input validation flaw in the FT...
CVE-2001-0971
CVE-2001-0971 affects the ACI/4D WebServer. The 4D WebServer (versions 6.5.7 and earlier) fails to validate HTTP requests, enabling directory traversal that allows remote attackers to read arbitrary files outside the web root. Impact is remote file disclosure with web server privileges. The CERT/...