3467 matches found
CVE-2001-1073
Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that generates a server error message, which includes full pathname or internal IP address information in the variables 1 APPLPHYSICALPATH, 2 PATHTRANSLATED, and 3 LOCALADDR...
CVE-2001-0892
Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root such as .htpasswd via a GET request with a trailing /...
CVE-2001-0991
CVE-2001-0991 describes a cross-site scripting vulnerability in Proxomitron Naoko-4 BetaFour and earlier. The issue arises from an incorrect URL that contains a malicious script, which is echoed back in an error message, enabling remote attackers to execute arbitrary script on other clients. Conn...
CVE-2001-1060
phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into 1 the strCopyTableOK argument in tblcopy.php, or 2 the strRenameTableOK argument in tblrename.php...
CVE-2001-0972
The CVE-2001-0972 entry concerns Surf-Net ASP Forum prior to version 2.30, where admin cookies are derived from the UserID and are easily guessable (example: admin cookie for UserID 1 is “0888888”). This creates a remote‑attack risk: a attacker could calculate the admin cookie and gain administra...
CVE-2001-0945
CVE-2001-0945 describes a buffer overflow in Outlook Express 5.0–5.02 for Macintosh triggered by an email message containing a long line, allowing remote attackers to cause a denial of service. The underlying issue is a buffer overflow in handling long lines; impact is a denial of service with pa...
CVE-2001-0919
CVE-2001-0919 affects Internet Explorer 5.50.4134.0100 on Windows ME. When the browser’s cookie prompt option is enabled, it does not warn the user if a cookie is set via Javascript, exposing potential privacy leakage. The provided metrics indicate a low to moderate base severity (CVSS v2: 5.1, M...
CVE-2001-0994
Marconi ForeThought 7.1 is affected by CVE-2001-0994. The vulnerability allows remote attackers to cause a denial of service by sending unusual input that locks both telnet sessions, preventing other users from logging in. The available documents describe the affected product and the DoS effect b...
CVE-2001-0992
ShopPlus CGI (shopplus.cgi) in the ShopPlus shopping cart is vulnerable to remote arbitrary command execution via shell metacharacters in the file parameter. The issue allows execution with the web server’s privileges, with CVSS base score 7.5 (HIGH) and network attack vector with no authenticati...
CVE-2001-1061
Technical details about CVE-2001-1061 are not provided in the supplied documents. The available descriptions are high-level; no product/version/impact/exploit details are included here. Monitor for updates from official advisories.
CVE-2001-1021
WS_FTP Server (Ipswitch) before version 2.0.3 is affected by a buffer overflow vulnerability (CVE-2001-1021) that can be triggered by long arguments to multiple FTP commands (DELE, MDTM, MLST, MKD, RMD, RNFR, RNTO, SIZE, STAT, XMKD, XRMD). The connected OpenVAS/Nessus entries corroborate a remote...
CVE-2001-1068
CVE-2001-1068 affects qpopper 4.01 with PAM-based authentication on Red Hat systems. The issue is an information disclosure in authentication: when an invalid username is supplied, the system returns a different error message than for a valid username, enabling remote attackers to enumerate valid...
CVE-2001-0955
XFree86 vulnerable to a buffer overflow in fbglyph.c (before 4.2.0) related to glyph clipping for large origins. The issue can cause a denial of service and may allow privilege escalation via a large number of characters, potentially triggered by a long title in an xterm or through KDE Konqueror ...
CVE-2001-0953
CVE-2001-0953 affects Kebi WebMail. The vulnerability lets remote attackers access the administrator menu and gain privileges via the /a/ hidden directory located under the web document root. The issue is described as a remote privilege escalation with complete confidentiality, integrity, and ava...
CVE-2001-1019
The OpenVAS entry and CVE data confirm a directory traversal flaw in the sglMerchant 1.0 CGI view_item that allows reading arbitrary files by manipulating HTML_FILE. The vulnerability stems from escaping the HTML root and reading system files, enabling information disclosure. No exploit details o...
CVE-2001-0941
CVE-2001-0941 is a vulnerability in Oracle’s dbsnmp where a buffer overflow occurs in versions 8.0.6 through 9.0.1. The flaw allows local users to execute arbitrary code by supplying a long ORACLE_HOME environment variable, indicating the overflow happens via environment data passed to dbsnmp. Af...
CVE-2001-1051
Technical details about CVE-2001-1051 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2001-1000
The CVE-2001-1000 issue affects Merit AAA Server’s rlmadmin RADIUS management utility (versions including 3.8M and 5.01). The vulnerability arises from a symlink attack on the rlmadmin.help file, allowing local users to read arbitrary files. The documented impact is local access with partial conf...
CVE-2001-0891
Format string vulnerability in NQS daemon nqsdaemon in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to submit a batch job whose name contains formatting characters...