CVE-2001-0856

The CVE-2001-0856 entry concerns IBM 4758 cryptographic hardware (CCA). The affected component is the CCA functionality used to protect DES/3DES keys. According to the description, an attacker with physical access and Combine_Key_Parts permissions can perform a brute-force attack to create a 3DES...

CVE-2001-0840

Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute arbitrary code via 1 SNMP and 2 DMI...

CVE-2001-0840

The CVE applies to Compaq Insight Manager XE (version 2.1b and earlier). The vulnerability is a buffer overflow in the product that can be triggered remotely over SNMP or DMI, leading to arbitrary code execution. The root cause is an overflow condition in the handling of SNMP/DMI inputs. Exploita...

CVE-2001-0831

The CVE-2001-0831 issue concerns Oracle Label Security in Oracle 8.1.7 and 9.0.1. The vulnerability is triggered when audit functionality, SET_LABEL, or SQL*Predicate is used, enabling local users to gain additional access. This is a local privilege escalation vulnerability affecting the listed O...

CVE-2001-0799

Technical details of CVE-2001-0799 are not publicly provided in the connected documents; only the baseline description of buffer overflow in IRIX lpsched is available. Monitor for updates.

CVE-2001-0913

Format string vulnerability in Network Solutions Rwhoisd 1.5.7.2 and earlier, when using syslog, allows remote attackers to corrupt memory and possibly execute arbitrary code via a rwhois request that contains format specifiers...

CVE-2001-0847

CVE-2001-0847 affects Lotus Domino Web Server 5.x. The vulnerability allows remote attackers to disclose sensitive information by accessing the default navigator $defaultNav, either by URL-encoding the request or by directly requesting the ReplicaID. The public records describe the affected compo...

CVE-2001-0808

GNATS GnatsWeb 2.7–3.95 is affected by CVE-2001-0808 where remote attackers can execute arbitrary commands via certain characters in the help_file parameter. The underlying cause is a command-execution input handling issue in gnatsweb.pl. Documented impact is arbitrary command execution with netw...

CVE-2001-0829

Apache Tomcat 3.x is affected by a cross-site scripting vulnerability (CVE-2001-0829) in which a malicious user can craft a request for a JSP file so that the default error page echoes the user-supplied input without proper escaping. The root cause is the error page displaying unvalidated URLs, a...

CVE-2001-0839

CVE-2001-0839 affects the iBill web app’s ibillpm.pl CGI password management. The vulnerability arises from a weak password generation mechanism that creates passwords based on a client’s MASTER_ACCOUNT, enabling brute-force guessing to modify entries in the .htpasswd file via remote access. The ...

CVE-2001-0853

Entrust GetAccess contains a directory traversal vulnerability: remote attackers can read arbitrary files by passing a .. in the locale parameter to helpwin.gas.bat or AboutBox.gas.bat. Affected product is Entrust GetAccess; vulnerability exposed over network with low attack complexity and no aut...

CVE-2001-0847

Lotus Domino Web Server 5.x allows remote attackers to gain sensitive information by accessing the default navigator $defaultNav via 1 URL encoding the request, or 2 directly requesting the ReplicaID...

CVE-2001-0827

Cerberus FTP server versions 1.0–1.5 are affected by a vulnerability that allows remote denial of service (crash) via a high volume of PASV requests. The NVD entry CVE-2001-0827 confirms the issue and impact (availability loss). Several connected sources reference the same description, with PT-20...

CVE-2001-0826

The CVE-2001-0826 entry pertains to CesarFTP 0.98b and is supported by connected data showing a buffer overflow condition triggered by long arguments to commands (HELP, USER, PASS, PORT, DELE, REST, RMD, MKD). The vulnerability enables remote attackers to execute arbitrary commands on the affecte...

CVE-2001-0820

GazTek ghttpd 1.4 is affected by buffer overflows that enable a remote attacker to execute arbitrary code via excessively long arguments passed to (1) Log in util.c or (2) serveconnection in protocol.c. The CVE entry (CVE-2001-0820) documents a remote code execution risk with a CVSSv2 base score ...

CVE-2001-0824

CVE-2001-0824 is a cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2. The issue allows remote attackers to inject JavaScript by placing it in a request targeting a .JSP file or the webapp/examples/ directory, which then gets echoed into an error page. The vulnerability is tied ...

CVE-2001-0827

Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service crash via a large number of "PASV" requests...

CVE-2001-0841

Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain privileges via .. dot dot sequences in the amembernamecookie cookie...

CVE-2001-0855

CVE-2001-0855 details a buffer overflow in db_loader of ClearCase 4.2 and earlier, exploitable by a long TERM environment variable to gain root privileges locally. Affected software: ClearCase (db_loader) on version 4.2 and earlier. Root cause: buffer overflow triggered by unbounded TERM value. I...

CVE-2001-0842

The CVE-2001-0842 entry describes a directory traversal in Search.cgi on Leoboard LB5000/LB5000II (versions up to 1029 and earlier). The vulnerability occurs via .. sequences in the amembernamecookie cookie, enabling remote attackers to overwrite files and gain privileges. Affected component: Sea...