CVE-2001-0721

The CVE-2001-0721 entry concerns Universal Plug and Play (UPnP) in Windows 98, 98SE, ME, and XP. The flaw allows remote attackers to cause a denial of service (memory consumption or crash) by sending a malformed UPnP request. The affected stack is UPnP handling in Windows, with NETWORK attack vec...

CVE-2001-0821

The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via an HTTP GET request for 1 orders.txt or 2 authuserfile.txt...

CVE-2001-0845

Technical details about CVE-2001-0845 are not publicly available in the provided connected documents. Monitor for updates from NVD/CVE records to obtain affected products, scope, impact, and remediation.

CVE-2001-0835

CVE-2001-0835 describes a cross-site scripting vulnerability in Webalizer (notably 2.01-06 and possibly other versions) where an attacker can inject arbitrary HTML into reports by supplying malicious input in (1) search keywords embedded in HTTP referrer information, or (2) host names obtained vi...

CVE-2001-0844

CVE-2001-0844 describes a vulnerability in two components, the Book of guests and Post it!, where remote attackers can execute arbitrary code by supplying shell metacharacters in the email parameter. The NVD entry cites a CVSS v2 base score of 7.5 (HIGH) with NETWORK attack vector, low complexity...

CVE-2001-0671

CVE-2001-0671 describes buffer overflow vulnerabilities in the AIX 4.3 and 5.1 line printer daemon (lpd), affecting the three functions: send_status(), kill_print(), and chk_fhost(). A successful remote exploit could grant root privileges or cause a DoS. Exploitation generally requires the attack...

CVE-2001-0855

Buffer overflow in dbloader in ClearCase 4.2 and earlier allows local users to gain root privileges via a long TERM environment variable...

CVE-2001-0854

PHP-Nuke 5.2 allows remote attackers to copy and delete arbitrary files by calling case.filemanager.php with admin.php as an argument, which sets the $PHPSELF variable and makes it appear that case.filemanager.php is being called by admin.php instead of the user...

CVE-2001-0853

Directory traversal vulnerability in Entrust GetAccess allows remote attackers to read arbitrary files via a .. dot dot in the locale parameter to 1 helpwin.gas.bat or 2 AboutBox.gas.bat...

CVE-2001-0820

Buffer overflows in GazTek ghttpd 1.4 allows a remote attacker to execute arbitrary code via long arguments that are passed to 1 the Log function in util.c, or 2 serveconnection in protocol.c...

CVE-2001-0818

CVE-2001-0818 affects MDBMS 0.99b9 and earlier, where a buffer overflow in the shell command '\s' allows an attacker to send a large amount of data to the console, enabling remote command execution. The vulnerability location is the '\s' console command implementation; impact is remote arbitrary ...

CVE-2001-0671

Buffer overflows in 1 sendstatus, 2 killprint, and 3 chkfhost in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root privileges...

CVE-2001-0848

CVE-2001-0848 affects join.cfm in e-Zone Media Fuse Talk, where a local user can inject and execute arbitrary SQL through a semicolon in a form variable. The vulnerability is tied to SQL injection in the application’s handling of input data, enabling partial confidentiality/integrity/availability...

CVE-2001-0809

The CVE-2001-0809 issue affects HP-UX 11.0/11.11 CIFS/9000 Server (SAMBA) prior to patch A.01.06. When configured as a print server, local users can overwrite arbitrary files by modifying certain resources. The vulnerability is documented in HP patch PHNE_24164 (A.01.06) for s700/s800 11.X CIFS/9...

CVE-2001-0838

Network Solutions Rwhoisd 1.5.x is affected by a remote format-string vulnerability in the -soa handling, allowing arbitrary code execution. Root cause: format string vulnerability in the server’s error/format handling. Impact: remote code execution with the privileges of the RWhoisd process; pot...

CVE-2001-0845

Vulnerability in DECwindows Motif Server on OpenVMS VAX or Alpha 6.2 through 7.3, and SEVMS VAX or Alpha 6.2, allows local users to gain access to unauthorized resources...

CVE-2001-0807

The provided records indicate CVE-2001-0807 affects Internet Explorer 5.0 (and possibly other versions). The vulnerability allows a remote attacker from a malicious web page to read known text files from a client’s hard drive by using a SCRIPT tag with a SRC attribute that points to the local tex...

CVE-2001-0841

CVE-2001-0841 : Affected software is Ikonboard (Search.cgi in ib219 and earlier). The vulnerability is a directory traversal flaw that allows remote attackers to overwrite files and gain privileges by sending the dot-dot sequence in the amembernamecookie cookie. The available sources identify thi...

CVE-2001-0854

CVE-2001-0854 affects PHP-Nuke 5.2. An attacker can copy and delete arbitrary files by invoking case.filemanager.php with admin.php as an argument, which sets the $PHP_SELF variable and makes case.filemanager.php appear to be called by admin.php. The description documents the vulnerability mechan...

CVE-2001-0858

CVE-2001-0858 describes a buffer overflow in pppattach and other linked PPP utilities on Caldera Open UNIX 8.0 and UnixWare 7.1.0/7.1.1. The root cause is an overflow in these PPP-related components, enabling local privilege escalation. Affected products and versions are explicitly listed in the ...