CVE-2001-1023

CVE-2001-1023 affects Xcache 2.1. Remote attackers can disclose the server’s absolute paths by requesting a URL that Xcache has not cached; the product returns the full pathname in the Content-PageName header. The vulnerability is an information disclosure: partial confidentiality impact. Affecte...

CVE-2001-1077

Buffer overflow in ttprintf function of rxvt 2.6.2 allows local users to gain privileges via a long 1 -T or 2 -name argument...

CVE-2001-0925

The CVE-2001-0925 entry describes a vulnerability in the default installation of Apache prior to 1.3.19 where a crafted HTTP request containing many slashes can cause directory listings (instead of the multiview index) due to mishandling by mod_negotiation, mod_dir, or mod_autoindex. Affected sof...

CVE-2001-1021

Buffer overflows in WSFTP 2.02 allow remote attackers to execute arbitrary code via long arguments to 1 DELE, 2 MDTM, 3 MLST, 4 MKD, 5 RMD, 6 RNFR, 7 RNTO, 8 SIZE, 9 STAT, 10 XMKD, or 11 XRMD...

CVE-2001-1061

Technical details about CVE-2001-1061 are not provided in the supplied documents. The available descriptions are high-level; no product/version/impact/exploit details are included here. Monitor for updates from official advisories.

CVE-2001-0927

The CVE-2001-0927 issue affects GNOME libgtop_daemon (libgtop) and was present in libgtop versions 1.0.12 and earlier. The vulnerability is a format-string defect in the libgtop_daemon’s permitted function, allowing remote attackers to execute arbitrary code via arguments containing format specif...

CVE-2001-0910

CVE-2001-0910 affects Legato NetWorker prior to 6.1, where remote attackers could bypass access restrictions and gain privileges on the Networker interface by spoofing the admin server name and IP, then connecting from an IP address whose hostname cannot be determined via reverse DNS. The provide...

CVE-2001-1060

phpMyAdmin 2.2.0rc3 and earlier is affected by CVE-2001-1060. The vulnerability is tied to two PHP scripts, tbl_copy.php and tbl_rename.php, where eval is used on user-controlled values (strCopyTableOK and strRenameTableOK). An attacker can craft a URL that, under certain conditions (including th...

CVE-2001-0984

Vulnerability summary: Password Safe 1.7(1) leaves cleartext passwords in memory when a user copies a password to the clipboard and minimizes the application with the options “Clear the password when minimized” and “Lock password database on minimize and prompt on restore” enabled. This could all...

CVE-2001-0955

XFree86 vulnerable to a buffer overflow in fbglyph.c (before 4.2.0) related to glyph clipping for large origins. The issue can cause a denial of service and may allow privilege escalation via a large number of characters, potentially triggered by a long title in an xterm or through KDE Konqueror ...

CVE-2001-0975

The CVE-2001-0975 entry describes buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 that allow remote code execution, demonstrated by the PROTOS LDAPv3 test suite. Supported details show Oracle released Solaris-based patches for these versions (July 2001...

CVE-2001-0930

Sendpage.pl allows remote attackers to execute arbitrary commands via a message containing shell metacharacters...

CVE-2001-0923

RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is queried...

CVE-2001-0956

CVE-2001-0956 affects speechd 0.54 and earlier when used with the Festival or rsynth speech synthesis packages. The root issue is that shell metacharacters can be exploited to execute arbitrary commands, leading to full compromise of the affected system. The vulnerability is local-privilege relat...

CVE-2001-1021

WS_FTP Server (Ipswitch) before version 2.0.3 is affected by a buffer overflow vulnerability (CVE-2001-1021) that can be triggered by long arguments to multiple FTP commands (DELE, MDTM, MLST, MKD, RMD, RNFR, RNTO, SIZE, STAT, XMKD, XRMD). The connected OpenVAS/Nessus entries corroborate a remote...

CVE-2001-1009

CVE-2001-1009 affects fetchmail (fetchmail-ssl) prior to 5.8.17. Multiple OpenVAS/DSA/Nessus entries describe a memory corruption in the IMAP and POP3 code where unverified input and missing bounds checking can allow a remote attacker—by controlling the server the client connects to—to cause writ...

CVE-2001-0919

Internet Explorer 5.50.4134.0100 on Windows ME with "Prompt to allow cookies to be stored on your machine" enabled does not warn a user when a cookie is set using Javascript...

CVE-2001-0924

CVE-2001-0924 describes a directory traversal vulnerability in the Informix SQL Web DataBlade CGI (LO parameter) that allows remote attackers to read arbitrary files on the affected system. The issue arises from improper handling of the .. (dot dot) path traversal in the LO parameter of the ifx C...

CVE-2001-0983

The CVE-2001-0983 entry concerns UltraEdit, where FTP passwords are stored in the uedit32.ini file using weak encryption. This weakness allows local users who can read the file to decrypt passwords and potentially gain privileges. The available connected documents corroborate UltraEdit as the aff...

CVE-2001-1082

CVE-2001-1082 describes a directory traversal vulnerability in Livingston/Lucent RADIUS prior to 2.1.va.1, allowing an attacker to read arbitrary files via a .. (dot dot) path traversal attack. Affected component is the RADIUS service; root cause is improper input validation in file access logic....