CVE-2001-0868

Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to 1 stronghold-info or 2 stronghold-status...

CVE-2001-0926

SSIFilter in Allaire JRun 3.1, 3.0 and 2.3.3 allows remote attackers to obtain source code for Java server pages .jsp and other files in the web root via an HTTP request for a non-existent SSI page, in which the request's body has an include statement...

CVE-2001-0931

Directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03 allows attackers to list or read arbitrary files and directories via a .. dot dot in 1 LS or 2 GET...

CVE-2001-0868

CVE-2001-0868 affects Red Hat Stronghold Secure Server (versions 2.3–3.0). A remote attacker can disclose sensitive system files by accessing /stronghold-info or /stronghold-status, leaking configuration details (e.g., httpd.conf) and other data. OpenVAS entries describe a file-system disclosure ...

CVE-2001-0920

Format string vulnerability in auto nice daemon AND 1.0.4 and earlier allows a local user to possibly execute arbitrary code via a process name containing a format string...

CVE-2001-0922

ndcgi.exe in Netdynamics 4.x through 5.x, and possibly earlier versions, allows remote attackers to steal session IDs and hijack user sessions by reading the SPIDERSESSION and uniqueValue variables from the login field, then using those variables after the next user logs in...

CVE-2001-1350

Cross-site scripting vulnerability in namazu.cgi for Namazu 2.0.7 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the lang parameter...

CVE-2001-0721

The CVE-2001-0721 entry concerns Universal Plug and Play (UPnP) in Windows 98, 98SE, ME, and XP. The flaw allows remote attackers to cause a denial of service (memory consumption or crash) by sending a malformed UPnP request. The affected stack is UPnP handling in Windows, with NETWORK attack vec...

CVE-2001-0842

The CVE-2001-0842 entry describes a directory traversal in Search.cgi on Leoboard LB5000/LB5000II (versions up to 1029 and earlier). The vulnerability occurs via .. sequences in the amembernamecookie cookie, enabling remote attackers to overwrite files and gain privileges. Affected component: Sea...

CVE-2001-0840

The CVE applies to Compaq Insight Manager XE (version 2.1b and earlier). The vulnerability is a buffer overflow in the product that can be triggered remotely over SNMP or DMI, leading to arbitrary code execution. The root cause is an overflow condition in the handling of SNMP/DMI inputs. Exploita...

CVE-2001-0840

Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute arbitrary code via 1 SNMP and 2 DMI...

CVE-2001-0841

Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain privileges via .. dot dot sequences in the amembernamecookie cookie...

CVE-2001-0671

Buffer overflows in 1 sendstatus, 2 killprint, and 3 chkfhost in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root privileges...

CVE-2001-0858

CVE-2001-0858 describes a buffer overflow in pppattach and other linked PPP utilities on Caldera Open UNIX 8.0 and UnixWare 7.1.0/7.1.1. The root cause is an overflow in these PPP-related components, enabling local privilege escalation. Affected products and versions are explicitly listed in the ...

CVE-2001-0839

CVE-2001-0839 affects the iBill web app’s ibillpm.pl CGI password management. The vulnerability arises from a weak password generation mechanism that creates passwords based on a client’s MASTER_ACCOUNT, enabling brute-force guessing to modify entries in the .htpasswd file via remote access. The ...

CVE-2001-0820

GazTek ghttpd 1.4 is affected by buffer overflows that enable a remote attacker to execute arbitrary code via excessively long arguments passed to (1) Log in util.c or (2) serveconnection in protocol.c. The CVE entry (CVE-2001-0820) documents a remote code execution risk with a CVSSv2 base score ...

CVE-2001-0848

CVE-2001-0848 affects join.cfm in e-Zone Media Fuse Talk, where a local user can inject and execute arbitrary SQL through a semicolon in a form variable. The vulnerability is tied to SQL injection in the application’s handling of input data, enabling partial confidentiality/integrity/availability...

CVE-2001-0832

Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a symlink attack or incorrect file permissions in 1 the ORACLEHOME/rdbms/log directory or 2 an alternate directory as specified in the ORACLEHOME environmental variable, aka the "Orac...

CVE-2001-0853

Entrust GetAccess contains a directory traversal vulnerability: remote attackers can read arbitrary files by passing a .. in the locale parameter to helpwin.gas.bat or AboutBox.gas.bat. Affected product is Entrust GetAccess; vulnerability exposed over network with low attack complexity and no aut...

CVE-2001-0827

The Cerberus FTP server (versions 1.0 through 1.5 ) is vulnerable to a denial of service (DoS) attack. A remote attacker can cause the server to crash by sending a large volume of "PASV" requests. This issue is categorized as Uncontrolled Resource Consumption (CWE-400 ). To mitigate the risk, it ...