CVE-2001-1045

CVE-2001-1045 describes a directory traversal vulnerability in Basilix Webmail up to version 1.0.3beta, where an attacker can read arbitrary files by injecting a .. (dot dot) into the request_id[DUMMY] parameter of basilix.php3. The connected documents corroborate that the vulnerability allows re...

CVE-2001-0948

Cross-site scripting CSS vulnerability in ValiCert Enterprise Validation Authority EVA 3.3 through 4.2.1 allows remote attackers to execute arbitrary code or display false information by including HTML or script in the certificate's description, which is executed when the certificate is viewed...

CVE-2001-0949

Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority EVA Administration Server 3.3 through 4.2.1 allows remote attackers to execute arbitrary code via long arguments to the parameters 1 Mode, 2 CertificateFile, 3 useExpiredCRLs, 4 listenLength, 5 maxThread, 6...

CVE-2001-0933

Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls LIST command that includes the drive letter as an argument, e.g. "ls C:"...

CVE-2001-1051

Dark Hart Portal darkportal PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable...

CVE-2001-0941

CVE-2001-0941 is a vulnerability in Oracle’s dbsnmp where a buffer overflow occurs in versions 8.0.6 through 9.0.1. The flaw allows local users to execute arbitrary code by supplying a long ORACLE_HOME environment variable, indicating the overflow happens via environment data passed to dbsnmp. Af...

CVE-2001-1070

Sage Software MAS 200 allows remote attackers to cause a denial of service by connecting to port 10000 and entering a series of control characters...

CVE-2001-0992

ShopPlus CGI (shopplus.cgi) in the ShopPlus shopping cart is vulnerable to remote arbitrary command execution via shell metacharacters in the file parameter. The issue allows execution with the web server’s privileges, with CVSS base score 7.5 (HIGH) and network attack vector with no authenticati...

CVE-2001-0903

Linear key exchange process in High-bandwidth Digital Content Protection HDCP System allows remote attackers to access data as plaintext, avoid device blacklists, clone devices, and create new device keyvectors by computing and using alternate key combinations for authentication...

CVE-2001-0913

CVE-2001-0913 : A format-string vulnerability in Network Solutions Rwhoisd ≤ 1.5.7.2 (when using syslog) allows remote attackers to trigger memory corruption and possibly execute arbitrary code via a rwhois request containing format specifiers. The issue is caused by improper handling of format s...

CVE-2001-0964

The CVE-2001-0964 entry concerns the Half-Life client (versions 1.1.0.8 and earlier). The vulnerability is a buffer overflow in the client triggered by a long console command, allowing a malicious remote server to execute arbitrary code on the affected system. The impact is remote code execution ...

CVE-2001-1070

Sage Software MAS 200 is affected by CVE-2001-1070, where a remote attacker can trigger a denial-of-service by connecting to port 10000 and sending a sequence of control characters. The vulnerability is described as impacting availability (partial impact) with no confidentiality or integrity impa...

CVE-2001-1000

rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file...

CVE-2001-1000

The CVE-2001-1000 issue affects Merit AAA Server’s rlmadmin RADIUS management utility (versions including 3.8M and 5.01). The vulnerability arises from a symlink attack on the rlmadmin.help file, allowing local users to read arbitrary files. The documented impact is local access with partial conf...

CVE-2001-1041

CVE-2001-1041 affects Oracle 8.0.x, 8.1.x, and 9.0.1. The vulnerability arises from a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory identified by ORACLE_HOME, enabling local users to overwrite arbitrary files. The root cause is the mishandling of...

CVE-2001-0979

Buffer overflow in swverify in HP-UX 11.0, and possibly other programs, allows local users to gain privileges via a long command line argument...

CVE-2001-0955

XFree86 vulnerable to a buffer overflow in fbglyph.c (before 4.2.0) related to glyph clipping for large origins. The issue can cause a denial of service and may allow privilege escalation via a large number of characters, potentially triggered by a long title in an xterm or through KDE Konqueror ...

CVE-2001-1007

Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a delay when an incorrect key is entered, which allows attackers to more quickly guess the key via a brute force attack...

CVE-2001-1040

CVE-2001-1040 affects HP LaserJet and possibly other JetDirect devices, where certain power-off behavior resets the admin password. The result is that a remote attacker could gain administrative access without a password after the device is turned off, per the available description. The provided ...

CVE-2001-1033

The CVE-2001-1033 entry describes a vulnerability in Compaq TruCluster 1.5 where remote attackers can trigger a denial of service by performing a port scan from a system lacking a DNS PTR record, causing the cluster to enter a split-brain state.