3489 matches found
CVE-2001-0729
Apache 1.3.20 on Windows servers allows remote attackers to bypass the default index page and list directory contents via a URL with a large number of / slash characters...
CVE-2001-0776
The provided documents identify CVE-2001-0776 as a buffer overflow in DynFX MailServer 2.10 that allows remote denial of service via a long username sent to the POP3 service. The vulnerability is caused by an overflow in the POP3 username handling, with the NVD entry listing a MEDIUM base score (...
CVE-2001-0735
CVE-2001-0735 affects cfingerd 1.4.3 and earlier. The root cause is a buffer overflow in the code that reads configuration files when ALLOW_LINE_PARSING is enabled, allowing local users to execute arbitrary code via a long line in the .nofinger file. The vulnerability is local, requires no authen...
CVE-2001-0795
Perception LiteServe 1.25 is affected by CVE-2001-0795. Remote attackers can obtain the source code of CGI scripts by requesting URLs that contain MS‑DOS conventions, such as uppercase letters or 8.3 file names. The PT-2001-1972 advisory notes a vulnerability in Perception LiteServe 1.25 and prov...
CVE-2001-0747
The provided sources describe CVE-2001-0747 as a buffer overflow in iPlanet Web Server (iWS) Enterprise Edition 4.1 on SP3–SP7, exploitable via a long method name in an HTTP request. This leads to denial of service and may allow arbitrary code execution. Affected product details come from the NVD...
CVE-2001-0505
The CVE-2001-0505 issue affects the Microsoft Services for UNIX (SFU) Telnet and NFS servers, where memory leaks can be triggered by a high volume of malformed requests, leading to denial of service via memory exhaustion. The affected components are the SFU Telnet server and SFU NFS server (on Wi...
CVE-2001-0737
CVE-2001-0737 describes a vulnerability in Logitech wireless mice and keyboard receivers where a long “synch” delay enables a remote attacker to hijack connections via a man‑in‑the‑middle attack. The description specifies the affected component as the wireless receivers used with Logitech periphe...
CVE-2001-0780
Directory traversal vulnerability in cosmicpro.cgi in Cosmicperl Directory Pro 2.0 allows remote attackers to gain sensitive information via a .. dot dot in the SHOW parameter...
CVE-2001-0713
Sendmail 8.12.0.x is vulnerable to CVE-2001-0713 through improper privilege dropping when the -C option loads custom configuration files. A programming error allows a local attacker to regain dropped privileges by crafting configuration entries with high-bit characters (e.g., one-character macro ...
CVE-2001-0713
Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files, which allows local users to gain privileges via malformed arguments in the configuration file whose names contain characters with the high bit set, such as 1 macro names that ar...
CVE-2001-0759
A concise summary of CVE-2001-0759: A buffer overflow in bctool of Jetico BestCrypt versions up to 0.8.1 allows local users to execute arbitrary code via a file or directory with an excessively long pathname processed during an unmount. Affected software: Jetico BestCrypt (bctool)
CVE-2001-0756
The CVE-2001-0756 issue affects CatalogMgr.pl in VirtualCatalog, where the program “incorrectly claimed to be in VirtualCart” and allows remote attackers to execute arbitrary code via the template parameter. This is described across multiple sources (NVD entry and CVE listings). The vulnerability...
CVE-2001-0768
GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, allowing local users to gain privileges as other FTP users by reading the file. This is a local privilege escalation through credential disclosure; no exploit specifics are provided in the available documents. R...
CVE-2001-0778
OmniHTTPd 2.0.8 and earlier allow remote attackers to obtain source code via a GET request with the URL-encoded symbol for a space %20...
CVE-2001-0729
CVE-2001-0729 concerns Apache HTTP Server on Windows (Win32) where a bug in Apache 1.3.20 can expose directory contents. The vulnerability arises when a client sends a very long URI composed of many forward slashes, allowing a remote attacker to bypass the default index page and cause directory l...
CVE-2001-0772
The CVE-2001-0772 record concerns HP-UX systems with multiple CDE modules affected (HP-UX 10.10–11.11). The underlying issue is buffer overflows and related vulnerabilities in those modules, which the documents state can lead to a denial of service and may allow an attacker to gain additional pri...
CVE-2001-0789
Format string vulnerability in avpkeeper in Kaspersky KAV 3.5.135.2 for Sendmail allows remote attackers to cause a denial of service or possibly execute arbitrary code via a malformed mail message...
CVE-2001-0734
CVE-2001-0734 affects Hitachi Super-H architecture on NetBSD 1.5 and 1.4.1, enabling a local user to gain privileges via manipulated Status Register contents not correctly handled by the sigreturn system call or the process_write_regs kernel routine. The connected documents do not provide additio...
CVE-2001-0714
The CVE-2001-0714 entry describes a local DoS in Sendmail pre-8.12.1 where an attacker can cause data loss by abusing queue processing options: setting a high initial hop count (-h), or using -qR/-qS, if RestrictQueueRun is not enabled. Connected sources (NVD, Nessus plugins, OpenVAS NASL) confir...