CVE-2001-1026

The CVE-2001-1026 entry concerns Trend Micro InterScan AppletTrap 2.0. The vulnerability arises because URL filtering fails when URLs are modified in specific ways: using a double slash //, URL-encoded characters, requesting the IP address instead of the domain, or a leading 0 in an IP octet. The...

CVE-2001-0944

CVE-2001-0944 describes a DDE-based risk in mIRC where a local user can trigger a DDE message that executes a command, potentially running in another user’s process. This enables local privilege escalation with the command execution potentially affecting confidentiality, integrity, and availabili...

CVE-2001-0994

Marconi ForeThought 7.1 is affected by CVE-2001-0994. The vulnerability allows remote attackers to cause a denial of service by sending unusual input that locks both telnet sessions, preventing other users from logging in. The available documents describe the affected product and the DoS effect b...

CVE-2001-0941

Buffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary code via a long ORACLEHOME environment variable...

CVE-2001-1039

The CVE describes a vulnerability in the JetAdmin web interface for HP JetDirect where the telnet interface password is not set after the admin password is changed. This allows remote attackers to gain access to the printer over the network (attack vector: network, low complexity). The available ...

CVE-2001-0898

Opera 6.0 and earlier are affected by a remote information disclosure vulnerability where JavaScript using setTimeout can access data across domains (1) after opening a new window to a different domain, and (2) via about:cache, exposing cookies and cross-domain links. Root cause: cross-origin dat...

CVE-2001-1019

The OpenVAS entry and CVE data confirm a directory traversal flaw in the sglMerchant 1.0 CGI view_item that allows reading arbitrary files by manipulating HTML_FILE. The vulnerability stems from escaping the HTML root and reading system files, enabling information disclosure. No exploit details o...

CVE-2001-0911

CVE-2001-0911 affects PHP-Nuke 5.1, where user and administrator passwords are stored in a base-64 encoded cookie. This could allow remote attackers to gain privileges by stealing/sniffing the cookie and decoding it. The connected sources corroborate the cookie-based credential exposure, but no p...

CVE-2001-1014

CVE-2001-1014 concerns the E-Shop (WebDiscount) CGI used by eshop.pl. The OpenVAS NASL entry documents a vulnerability in the WebDiscount CGI that allows remote attackers to execute arbitrary commands with the web server’s privileges by supplying shell metacharacters in the seite parameter. This ...

CVE-2001-1047

OpenBSD kernel VFS is impacted by a race condition that can lead to a local denial of service (kernel panic). The vulnerability arises when (1) a pipe is created in one thread and another thread closes/sets a descriptor to NULL, or (2) dup2 is used on a descriptor in one process and it is later s...

CVE-2001-0985

shop.pl in Hassan Consulting Shopping Cart 1.23 allows remote attackers to execute arbitrary commands via shell metacharacters in the "page" parameter...

CVE-2001-0922

The vulnerability CVE-2001-0922 affects Netdynamics ndcgi.exe (Netdynamics 4.x through 5.x, possibly earlier). The issue allows remote attackers to hijack user sessions by reading SPIDERSESSION and uniqueValue variables from the login field and then reusing them after the next user logs in, enabl...

CVE-2001-0953

CVE-2001-0953 affects Kebi WebMail. The vulnerability lets remote attackers access the administrator menu and gain privileges via the /a/ hidden directory located under the web document root. The issue is described as a remote privilege escalation with complete confidentiality, integrity, and ava...

CVE-2001-0948

CVE-2001-0948 affects ValiCert Enterprise Validation Authority (EVA) versions 3.3–4.2.1 . A cross‑site scripting flaw allows remote attackers to cause arbitrary code execution or display false information by injecting HTML/script into a certificate’s description, which runs when the certificate i...

CVE-2001-0949

CVE-2001-0949 affects ValiCert Enterprise Validation Authority (EVA) Administration Server, versions 3.3–4.2.1. The vulnerability is a buffer overflow in the forms.exe CGI program that enables remote attackers to execute arbitrary code by supplying long arguments to a set of parameters (Mode, Cer...

CVE-2001-0950

CVE-2001-0950 concerns the ValiCert Enterprise Validation Authority (EVA) Administration Server, version 3.3–4.2.1. The root cause is the use of insufficiently random data: session tokens for HSMs are generated with the C rand() function, and certificate/key generation may rely on /dev/urandom in...

CVE-2001-0955

Buffer overflow in fbglyph.c in XFree86 before 4.2.0, related to glyph clipping for large origins, allows attackers to cause a denial of service and possibly gain privileges via a large number of characters, possibly through the web page search form of KDE Konqueror or from an xterm command with ...

CVE-2001-1041

oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace .trc file that is created in an alternate home directory identified by the ORACLEHOME environment variable...

CVE-2001-1076

CVE-2001-1076 : Buffer overflow in the Solaris SunOS whodo utility (versions 5.5.1–5.8) allows local users to execute arbitrary code via overly long environment variables (SOR or CFIME). The connected documents confirm the affected platform and vulnerable component, and that exploitation is local...

CVE-2001-0952

The vulnerability CVE-2001-0952 affects THQ Volition Red Faction game. It allows remote attackers to cause a denial of service (hang) on a client or server by sending crafted UDP packets to port 7755. According to the records, the issue is documented with a CVSS v2 base score of 5.0 (Medium sever...