CVE-2001-0948

Cross-site scripting CSS vulnerability in ValiCert Enterprise Validation Authority EVA 3.3 through 4.2.1 allows remote attackers to execute arbitrary code or display false information by including HTML or script in the certificate's description, which is executed when the certificate is viewed...

CVE-2001-0949

Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority EVA Administration Server 3.3 through 4.2.1 allows remote attackers to execute arbitrary code via long arguments to the parameters 1 Mode, 2 CertificateFile, 3 useExpiredCRLs, 4 listenLength, 5 maxThread, 6...

CVE-2001-0946

apmscript in Apmd in Red Hat 7.2 "Enigma" allows local users to create or change the modification dates of arbitrary files via a symlink attack on the LOWPOWER temporary file, which could be used to cause a denial of service, e.g. by creating /etc/nologin and disabling logins...

CVE-2001-0945

Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service via an e-mail message that contains a long line...

CVE-2001-0944

DDE in mIRC allows local users to launch applications under another user's account via a DDE message that executes a command, which may be executed by the other user's process...

CVE-2001-1437

easyScripts easyNews 1.5 allows remote attackers to obtain the full path of the web root via a view request with a non-integer news message id field, which leaks the path in a PHP error message when the script times out...

CVE-2001-0871

CVE-2001-0871 affects Alchemy Eye and Alchemy Network Monitor’s built-in HTTP server. Versions 2.0–2.6.18 are vulnerable to simple dotdot traversal; versions 2.6.19–3.0.10 are vulnerable to a variant using a DOS device name (e.g., NUL) plus traversal. Successful exploitation allows remote attacke...

CVE-2001-0870

The CVE-2001-0870 issue affects Alchemy Eye and Alchemy Network Monitor versions 1.9x through 2.6.18, whose built-in HTTP server is enabled by default and allows remote, unauthenticated access to view monitoring logs by directly requesting the eye.ini file. The vulnerability enables disclosure of...

Immunity Canvas: WUGLOB

Name| wuglob ---|--- CVE| CVE-2001-0550 Exploit Pack| CANVAS Description| WuFTPD Globbing Arbitrary Free Notes| CVE Name: CVE-2001-0550 VENDOR: wuftpd.org References: CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0550 CERT Advisory: Date public: CVSS: 7.5...

CVE-2001-0870

HTTP server in Alchemy Eye and Alchemy Network Monitor 1.9x through 2.6.18 is enabled without authentication by default, which allows remote attackers to obtain network monitoring logs with potentially sensitive information by directly requesting the eye.ini file...

CVE-2001-0896

Inetd in OpenServer 5.0.5 allows remote attackers to cause a denial of service crash via a port scan, e.g. with nmap -PO...

CVE-2001-0937

PGPMail.pl 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 recipient or 2 pgpuserid parameters...

CVE-2001-0939

Lotus Domino 5.08 and earlier allows remote attackers to cause a denial of service crash via a SunRPC NULL command to port 443...

CVE-2001-0912

Packaging error for expect 8.3.3 in Mandrake Linux 8.1 causes expect to search for its libraries in the /home/snailtalk directory before other directories, which could allow a local user to gain root privileges...

CVE-2001-0550

wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "" argument to commands such as CWD, which is not properly handled by the glob function ftpglob...

CVE-2001-0938

Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and read arbitrary files, and list arbitrary directories, via a .. dot dot in the Filename parameter in 1 UploadScript11.asp or 2 DirectoryListing.asp...

CVE-2001-0942

dbsnmp in Oracle 8.1.6 and 8.1.7 uses the ORACLEHOME environment variable to find and execute the dbsnmp program, which allows local users to execute arbitrary programs by pointing the ORACLEHOME to an alternate directory that contains a malicious version of dbsnmp...

CVE-2001-0868

Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to 1 stronghold-info or 2 stronghold-status...

CVE-2001-0868

Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to 1 stronghold-info or 2 stronghold-status...

CVE-2001-0868

CVE-2001-0868 affects Red Hat Stronghold Secure Server (versions 2.3–3.0). A remote attacker can disclose sensitive system files by accessing /stronghold-info or /stronghold-status, leaking configuration details (e.g., httpd.conf) and other data. OpenVAS entries describe a file-system disclosure ...