3489 matches found
CVE-2001-0831
The CVE-2001-0831 issue concerns Oracle Label Security in Oracle 8.1.7 and 9.0.1. The vulnerability is triggered when audit functionality, SET_LABEL, or SQL*Predicate is used, enabling local users to gain additional access. This is a local privilege escalation vulnerability affecting the listed O...
CVE-2001-0855
Buffer overflow in dbloader in ClearCase 4.2 and earlier allows local users to gain root privileges via a long TERM environment variable...
CVE-2001-0855
CVE-2001-0855 details a buffer overflow in db_loader of ClearCase 4.2 and earlier, exploitable by a long TERM environment variable to gain root privileges locally. Affected software: ClearCase (db_loader) on version 4.2 and earlier. Root cause: buffer overflow triggered by unbounded TERM value. I...
CVE-2001-0853
Directory traversal vulnerability in Entrust GetAccess allows remote attackers to read arbitrary files via a .. dot dot in the locale parameter to 1 helpwin.gas.bat or 2 AboutBox.gas.bat...
CVE-2001-0799
Technical details of CVE-2001-0799 are not publicly provided in the connected documents; only the baseline description of buffer overflow in IRIX lpsched is available. Monitor for updates.
CVE-2001-0835
CVE-2001-0835 describes a cross-site scripting vulnerability in Webalizer (notably 2.01-06 and possibly other versions) where an attacker can inject arbitrary HTML into reports by supplying malicious input in (1) search keywords embedded in HTTP referrer information, or (2) host names obtained vi...
CVE-2001-0854
CVE-2001-0854 affects PHP-Nuke 5.2. An attacker can copy and delete arbitrary files by invoking case.filemanager.php with admin.php as an argument, which sets the $PHP_SELF variable and makes case.filemanager.php appear to be called by admin.php. The description documents the vulnerability mechan...
CVE-2001-0827
Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service crash via a large number of "PASV" requests...
CVE-2001-0829
Apache Tomcat 3.x is affected by a cross-site scripting vulnerability (CVE-2001-0829) in which a malicious user can craft a request for a JSP file so that the default error page echoes the user-supplied input without proper escaping. The root cause is the error page displaying unvalidated URLs, a...
CVE-2001-0913
Format string vulnerability in Network Solutions Rwhoisd 1.5.7.2 and earlier, when using syslog, allows remote attackers to corrupt memory and possibly execute arbitrary code via a rwhois request that contains format specifiers...
CVE-2001-0915
Format string vulnerability in Berkeley parallel make pmake 2.1.33 and earlier allows a local user to gain root privileges via format specifiers in the check argument of a shell definition...
CVE-2001-0910
Legato Networker before 6.1 allows remote attackers to bypass access restrictions and gain privileges on the Networker interface by spoofing the admin server name and IP address and connecting to Networker from an IP address whose hostname can not be determined by a DNS reverse lookup...
CVE-2001-0914
Linux kernel before 2.4.11pre3 in multiple Linux distributions allows local users to cause a denial of service crash by starting the core vmlinux kernel, possibly related to poor error checking during ELF loading...
CVE-2001-0902
Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters...
CVE-2001-0900
Directory traversal vulnerability in modules.php in Gallery before 1.2.3 allows remote attackers to read arbitrary files via a .. dot dot in the include parameter...
CVE-2001-1228
Buffer overflows in gzip 1.3x, 1.2.4, and other versions might allow attackers to execute code via a long file name, possibly remotely if gzip is run on an FTP server...
CVE-2001-0897
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board UBB before 5.47e allows remote attackers to steal user cookies via an IMG tag that references an about: URL with an onerror field...
CVE-2001-0898
Opera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and links for other domains via Javascript that uses setTimeout to 1 access data after a new window to the domain has been opened or 2 access data via about:cache...