CVE-2001-0848

CVE-2001-0848 affects join.cfm in e-Zone Media Fuse Talk, where a local user can inject and execute arbitrary SQL through a semicolon in a form variable. The vulnerability is tied to SQL injection in the application’s handling of input data, enabling partial confidentiality/integrity/availability...

CVE-2001-0832

Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a symlink attack or incorrect file permissions in 1 the ORACLEHOME/rdbms/log directory or 2 an alternate directory as specified in the ORACLEHOME environmental variable, aka the "Orac...

CVE-2001-0853

Entrust GetAccess contains a directory traversal vulnerability: remote attackers can read arbitrary files by passing a .. in the locale parameter to helpwin.gas.bat or AboutBox.gas.bat. Affected product is Entrust GetAccess; vulnerability exposed over network with low attack complexity and no aut...

CVE-2001-0827

The Cerberus FTP server (versions 1.0 through 1.5 ) is vulnerable to a denial of service (DoS) attack. A remote attacker can cause the server to crash by sending a large volume of "PASV" requests. This issue is categorized as Uncontrolled Resource Consumption (CWE-400 ). To mitigate the risk, it ...

CVE-2001-0809

The CVE-2001-0809 issue affects HP-UX 11.0/11.11 CIFS/9000 Server (SAMBA) prior to patch A.01.06. When configured as a print server, local users can overwrite arbitrary files by modifying certain resources. The vulnerability is documented in HP patch PHNE_24164 (A.01.06) for s700/s800 11.X CIFS/9...

CVE-2001-0808

GNATS GnatsWeb 2.7–3.95 is affected by CVE-2001-0808 where remote attackers can execute arbitrary commands via certain characters in the help_file parameter. The underlying cause is a command-execution input handling issue in gnatsweb.pl. Documented impact is arbitrary command execution with netw...

CVE-2001-0845

Vulnerability in DECwindows Motif Server on OpenVMS VAX or Alpha 6.2 through 7.3, and SEVMS VAX or Alpha 6.2, allows local users to gain access to unauthorized resources...

CVE-2001-0845

Technical details about CVE-2001-0845 are not publicly available in the provided connected documents. Monitor for updates from NVD/CVE records to obtain affected products, scope, impact, and remediation.

CVE-2001-0841

CVE-2001-0841 : Affected software is Ikonboard (Search.cgi in ib219 and earlier). The vulnerability is a directory traversal flaw that allows remote attackers to overwrite files and gain privileges by sending the dot-dot sequence in the amembernamecookie cookie. The available sources identify thi...

CVE-2001-0849

Viralator vulnerability (CVE-2001-0849) affects Viralator 0.9pre1 and earlier, where the CGI (viralator.cgi) insecurely passes a file URL to wget, enabling remote code execution with the web server’s privileges. OpenVAS findings confirm a command execution path via the Viralator CGI, with remedia...

CVE-2001-0671

CVE-2001-0671 describes buffer overflow vulnerabilities in the AIX 4.3 and 5.1 line printer daemon (lpd), affecting the three functions: send_status(), kill_print(), and chk_fhost(). A successful remote exploit could grant root privileges or cause a DoS. Exploitation generally requires the attack...

CVE-2001-0807

The provided records indicate CVE-2001-0807 affects Internet Explorer 5.0 (and possibly other versions). The vulnerability allows a remote attacker from a malicious web page to read known text files from a client’s hard drive by using a SCRIPT tag with a SRC attribute that points to the local tex...

CVE-2001-0854

PHP-Nuke 5.2 allows remote attackers to copy and delete arbitrary files by calling case.filemanager.php with admin.php as an argument, which sets the $PHPSELF variable and makes it appear that case.filemanager.php is being called by admin.php instead of the user...

CVE-2001-0847

CVE-2001-0847 affects Lotus Domino Web Server 5.x. The vulnerability allows remote attackers to disclose sensitive information by accessing the default navigator $defaultNav, either by URL-encoding the request or by directly requesting the ReplicaID. The public records describe the affected compo...

CVE-2001-0820

Buffer overflows in GazTek ghttpd 1.4 allows a remote attacker to execute arbitrary code via long arguments that are passed to 1 the Log function in util.c, or 2 serveconnection in protocol.c...

CVE-2001-0818

CVE-2001-0818 affects MDBMS 0.99b9 and earlier, where a buffer overflow in the shell command '\s' allows an attacker to send a large amount of data to the console, enabling remote command execution. The vulnerability location is the '\s' console command implementation; impact is remote arbitrary ...

CVE-2001-0856

The CVE-2001-0856 entry concerns IBM 4758 cryptographic hardware (CCA). The affected component is the CCA functionality used to protect DES/3DES keys. According to the description, an attacker with physical access and Combine_Key_Parts permissions can perform a brute-force attack to create a 3DES...

CVE-2001-0847

Lotus Domino Web Server 5.x allows remote attackers to gain sensitive information by accessing the default navigator $defaultNav via 1 URL encoding the request, or 2 directly requesting the ReplicaID...

CVE-2001-0824

CVE-2001-0824 is a cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2. The issue allows remote attackers to inject JavaScript by placing it in a request targeting a .JSP file or the webapp/examples/ directory, which then gets echoed into an error page. The vulnerability is tied ...

CVE-2001-0838

Network Solutions Rwhoisd 1.5.x is affected by a remote format-string vulnerability in the -soa handling, allowing arbitrary code execution. Root cause: format string vulnerability in the server’s error/format handling. Impact: remote code execution with the privileges of the RWhoisd process; pot...