3467 matches found
CVE-2001-0733
The sinclude directive in Embedded Perl ePerl 2.2.14 and earlier allows a remote attacker to execute arbitrary code by modifying the 'sinclude' file to point to another file that contains a include directive that references a file that contains the code...
CVE-2001-1447
NetInfo Manager for Mac OS X 10.0 through 10.1 allows local users to gain root privileges by opening applications using the 1 "recent items" and 2 "services" menus, which causes the applications to run with root privileges...
CVE-2001-1151
Trend Micro OfficeScan Corporate Edition aka Virus Buster 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, which contains a weakly encrypted password...
CVE-2001-1458
Directory traversal vulnerability in Novell GroupWise 5.5 and 6.0 allows remote attackers to read arbitrary files via a request for /servlet/webacc?User.html= that contains "../" dot dot sequences and a null character...
CVE-2001-0788
Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 allows remote attackers to obtain an absolute path for the server directory by viewing the Location header...
CVE-2001-0713
Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files, which allows local users to gain privileges via malformed arguments in the configuration file whose names contain characters with the high bit set, such as 1 macro names that ar...
CVE-2001-0743
Paging function in O'Reilly WebBoard Pager 4.10 allows remote attackers to cause a denial of service via a message with an escaped ' character followed by JavaScript commands...
CVE-2001-0772
Buffer overflows and other vulnerabilities in multiple Common Desktop Environment CDE modules in HP-UX 10.10 through 11.11 allow attackers to cause a denial of service and possibly gain additional privileges...
CVE-2001-0715
Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to obtain potentially sensitive information about the mail queue by setting debugging flags to enable debug mode...
CVE-2001-0781
Buffer overflow in SpoonFTP 1.0.0.12 allows remote attackers to execute arbitrary code via a long argument to the commands 1 CWD or 2 LIST...
CVE-2001-0712
The CVE concerns Internet Explorer’s rendering engine where MIME types are determined by the client rather than the server. This enables remote servers to coax script execution from files whose MIME type would not normally be treated as executable (e.g., .txt, .jpg). Reported impact scores indica...
CVE-2001-0775
Buffer overflow in xloadimage 4.1 aka xli 1.16 and 1.17 in Linux allows remote attackers to execute arbitrary code via a FACES format image containing a long 1 Firstname or 2 Lastname field...
CVE-2001-0747
The provided sources describe CVE-2001-0747 as a buffer overflow in iPlanet Web Server (iWS) Enterprise Edition 4.1 on SP3–SP7, exploitable via a long method name in an HTTP request. This leads to denial of service and may allow arbitrary code execution. Affected product details come from the NVD...
CVE-2001-0713
Sendmail 8.12.0.x is vulnerable to CVE-2001-0713 through improper privilege dropping when the -C option loads custom configuration files. A programming error allows a local attacker to regain dropped privileges by crafting configuration entries with high-bit characters (e.g., one-character macro ...
CVE-2001-0758
Summary: CVE-2001-0758 describes a directory traversal vulnerability in Shambala 4.5 that allows remote attackers to escape the FTP root directory using the CWD command. The connected documents corroborate this description, identifying the affected product as Shambala 4.5 and the attack vector as...
CVE-2001-0795
Perception LiteServe 1.25 is affected by CVE-2001-0795. Remote attackers can obtain the source code of CGI scripts by requesting URLs that contain MS‑DOS conventions, such as uppercase letters or 8.3 file names. The PT-2001-1972 advisory notes a vulnerability in Perception LiteServe 1.25 and prov...
CVE-2001-0777
CVE-2001-0777 affects Omnicron OmniHTTPd 2.0.8. Remote attackers can cause a denial of service via memory exhaustion by a series of requests for PHP scripts. CVSS v2: AV:N/AC:L/Au:N/C:N/I:N/A:P, base score 5.0 (Medium); network vector, no authentication, partial availability impact.
CVE-2001-0775
Buffer overflow in xloadimage 4.1 aka xli 1.16 and 1.17 in Linux allows remote attackers to execute arbitrary code via a FACES format image containing a long 1 Firstname or 2 Lastname field...
CVE-2001-1281
Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifying the olduser parameter in the "Change User Information" web form...