CVE-2001-1006

Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different application...

CVE-2001-1082

Directory traversal vulnerability in Livingston/Lucent RADIUS before 2.1.va.1 may allow attackers to read arbitrary files via a .. dot dot attack...

CVE-2001-0986

SQLQHit.asp is a sample component of Microsoft Index Server 2.0 that, when reachable via CiScope values webinfo/extended_fileinfo/extended_webinfo/fileinfo, can disclose directories and file paths on the server. The vulnerability stems from a design/implementation flaw in the SQLQHit CGI that all...

CVE-2001-0952

The vulnerability CVE-2001-0952 affects THQ Volition Red Faction game. It allows remote attackers to cause a denial of service (hang) on a client or server by sending crafted UDP packets to port 7755. According to the records, the issue is documented with a CVSS v2 base score of 5.0 (Medium sever...

CVE-2001-0947

The CVE-2001-0947 issue affects ValiCert Enterprise Validation Authority (EVA) versions 3.3 through 4.2.1. It allows remote attackers to determine the server’s real pathname by requesting an invalid extension, which causes an error page that reveals the path. The vulnerability is a server-path di...

CVE-2001-0966

CVE-2001-0966 describes a directory traversal vulnerability in Nudester 1.10 and earlier that allows remote attackers to read or write arbitrary files via the .. sequence in the CD (CWD) command. The provided sources do not include remediation details; no explicit exploit or affected versions bey...

CVE-2001-0953

CVE-2001-0953 affects Kebi WebMail. The vulnerability lets remote attackers access the administrator menu and gain privileges via the /a/ hidden directory located under the web document root. The issue is described as a remote privilege escalation with complete confidentiality, integrity, and ava...

CVE-2001-0908

Technical details about CVE-2001-0908 are not publicly available in the provided connected documents. The initial description summarizes the issue (Citrix Metaframe 1.8 logs client IP, enabling spoofing) but no specifics on affected versions, exploit, or fixes are provided. Monitor for updates.

CVE-2001-1057

The License Manager mathlm for Mathematica 4.0 and 4.1 allows remote attackers to cause a denial of service resource exhaustion by connecting to port 16286 and not disconnecting, which prevents users from making license requests...

CVE-2001-1058

The License Manager mathlm for Mathematica 4.0 and 4.1 allows remote attackers to bypass access control specified by the -restrict argument and steal a license via a client request that includes the name of a host that is allowed to obtain the license...

CVE-2001-1052

Empris PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable...

CVE-2001-1019

Directory traversal vulnerability in viewitem CGI program in sglMerchant 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the HTMLFILE parameter...

CVE-2001-0893

Acme mini_httpd before 1.16 is affected. A remote attacker can view sensitive files under the document root (e.g., .htpasswd) by issuing a GET request with a trailing /. Root cause is not more detailed in the provided documents. The impact is exposure of confidential data on the server; exploitat...

CVE-2001-0942

The CVE concerns Oracle 8.1.6 and 8.1.7 where dbsnmp uses the ORACLE_HOME environment variable to locate and execute the dbsnmp program. A local user can point ORACLE_HOME to an attacker-controlled directory that contains a malicious dbsnmp, enabling arbitrary code execution with local privileges...

CVE-2001-0968

Knox Arkeia server 4.2, and possibly other versions, installs its root user with a null password by default, which allows local and remote users to gain privileges...

CVE-2001-1041

CVE-2001-1041 affects Oracle 8.0.x, 8.1.x, and 9.0.1. The vulnerability arises from a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory identified by ORACLE_HOME, enabling local users to overwrite arbitrary files. The root cause is the mishandling of...

CVE-2001-1019

The OpenVAS entry and CVE data confirm a directory traversal flaw in the sglMerchant 1.0 CGI view_item that allows reading arbitrary files by manipulating HTML_FILE. The vulnerability stems from escaping the HTML root and reading system files, enabling information disclosure. No exploit details o...

CVE-2001-1013

Apache on Red Hat Linux with the UserDir directive enabled is affected by CVE-2001-1013. The vulnerability arises because the web server generates different error codes depending on whether a username exists and a public_html directory is present, versus when the username does not exist. This beh...

CVE-2001-1051

Technical details about CVE-2001-1051 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2001-1000

The CVE-2001-1000 issue affects Merit AAA Server’s rlmadmin RADIUS management utility (versions including 3.8M and 5.01). The vulnerability arises from a symlink attack on the rlmadmin.help file, allowing local users to read arbitrary files. The documented impact is local access with partial conf...