3467 matches found
CVE-2001-0729
CVE-2001-0729 concerns Apache HTTP Server on Windows (Win32) where a bug in Apache 1.3.20 can expose directory contents. The vulnerability arises when a client sends a very long URI composed of many forward slashes, allowing a remote attacker to bypass the default index page and cause directory l...
CVE-2001-0756
The CVE-2001-0756 issue affects CatalogMgr.pl in VirtualCatalog, where the program “incorrectly claimed to be in VirtualCart” and allows remote attackers to execute arbitrary code via the template parameter. This is described across multiple sources (NVD entry and CVE listings). The vulnerability...
CVE-2001-0776
The provided documents identify CVE-2001-0776 as a buffer overflow in DynFX MailServer 2.10 that allows remote denial of service via a long username sent to the POP3 service. The vulnerability is caused by an overflow in the POP3 username handling, with the NVD entry listing a MEDIUM base score (...
CVE-2001-0786
Vulnerability summary (CVE-2001-0786) : Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2 stores usernames and passwords in plaintext in the pUser.Dat file. The issue affects the authentication data, enabling potential privacy disclosure if the password file is exposed. The N...
CVE-2001-0714
The CVE-2001-0714 entry describes a local DoS in Sendmail pre-8.12.1 where an attacker can cause data loss by abusing queue processing options: setting a high initial hop count (-h), or using -qR/-qS, if RestrictQueueRun is not enabled. Connected sources (NVD, Nessus plugins, OpenVAS NASL) confir...
CVE-2001-0778
OmniHTTPd 2.0.8 and earlier allow remote attackers to obtain source code via a GET request with the URL-encoded symbol for a space %20...
CVE-2001-0786
Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 stores user passwords in plaintext in the pUser.Dat file...
CVE-2001-0734
Hitachi Super-H architecture in NetBSD 1.5 and 1.4.1 allows a local user to gain privileges via modified Status Register contents, which are not properly handled by 1 the sigreturn system call or 2 the processwriteregs kernel routine...
CVE-2001-1285
Directory traversal vulnerability in readmail.cgi for Ipswitch IMail 7.04 and earlier allows remote attackers to access the mailboxes of other users via a .. dot dot in the mbx parameter...
CVE-2001-0771
CVE-2001-0771 affects Spytech SpyAnywhere 1.50. The NVD entry states remote attackers can gain administrator access by exploiting a single character in the loginpass field. Metrics indicate a network-based, low-attack-complexity, no-auth scenario with partial confidentiality, integrity, and avail...
CVE-2001-0734
CVE-2001-0734 affects Hitachi Super-H architecture on NetBSD 1.5 and 1.4.1, enabling a local user to gain privileges via manipulated Status Register contents not correctly handled by the sigreturn system call or the process_write_regs kernel routine. The connected documents do not provide additio...
CVE-2001-0715
CVE-2001-0715 affects Sendmail up to version 8.12.0/8.12.x prior to 8.12.1. The flaw allows a local user to disclose sensitive information about the mail queue by enabling debug flags (-d) when RestrictQueueRun is not enabled. The OpenVAS/Nessus entries confirm the vulnerability is a local inform...
CVE-2001-0744
Summary: CVE-2001-0744 affects Horde IMP 2.2.4 and earlier. The vulnerability arises from a symlink attack on a temporary file that allows local users to overwrite files. The impact is limited to local integrity (partial) with no confidentiality or availability impact stated, according to the pro...
CVE-2001-0794
CVE-2001-0794 : The connected sources indicate a buffer overflow in the A-FTP Anonymous FTP Server triggered by a long USER command, causing a denial of service. The impact is described as partial availability. No versions, vendor, or detailed root-cause fixes are provided in the documents, and t...
CVE-2001-0767
Directory traversal vulnerability in GuildFTPd 0.9.7 allows attackers to list or read arbitrary files and directories via a .. in 1 LS or 2 GET...
CVE-2001-0768
GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, allowing local users to gain privileges as other FTP users by reading the file. This is a local privilege escalation through credential disclosure; no exploit specifics are provided in the available documents. R...
CVE-2001-0790
Specter IDS versions 4.5 and 5.0 are affected by a remote DoS vulnerability: a port scan can cause the server to exhaust CPU while preparing alerts. The CVE entry confirms the issue originates from Specter IDS, with impact described as CPU exhaustion (availability impact). No specific remediation...
CVE-2001-0783
Cisco TFTP server 1.1 allows remote attackers to read arbitrary files via a ..dot dot attack in the GET command...
CVE-2001-0758
Directory traversal vulnerability in Shambala 4.5 allows remote attackers to escape the FTP root directory via "CWD ..." command...
CVE-2001-0669
Various Intrusion Detection Systems IDS including 1 Cisco Secure Intrusion Detection System, 2 Cisco Catalyst 6000 Intrusion Detection System Module, 3 Dragon Sensor 4.x, 4 Snort before 1.8.1, 5 ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and 6 ISS RealSecure Server Sensor 5.5 and 6...