CVE-2001-0789

Format string vulnerability in avpkeeper in Kaspersky KAV 3.5.135.2 for Sendmail allows remote attackers to cause a denial of service or possibly execute arbitrary code via a malformed mail message...

CVE-2001-0734

CVE-2001-0734 affects Hitachi Super-H architecture on NetBSD 1.5 and 1.4.1, enabling a local user to gain privileges via manipulated Status Register contents not correctly handled by the sigreturn system call or the process_write_regs kernel routine. The connected documents do not provide additio...

CVE-2001-0734

Hitachi Super-H architecture in NetBSD 1.5 and 1.4.1 allows a local user to gain privileges via modified Status Register contents, which are not properly handled by 1 the sigreturn system call or 2 the processwriteregs kernel routine...

CVE-2001-0714

The CVE-2001-0714 entry describes a local DoS in Sendmail pre-8.12.1 where an attacker can cause data loss by abusing queue processing options: setting a high initial hop count (-h), or using -qR/-qS, if RestrictQueueRun is not enabled. Connected sources (NVD, Nessus plugins, OpenVAS NASL) confir...

CVE-2001-0743

Paging function in O'Reilly WebBoard Pager 4.10 allows remote attackers to cause a denial of service via a message with an escaped ' character followed by JavaScript commands...

CVE-2001-0785

Affects Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2. The Webpaging interface contains a directory-traversal flaw that lets remote attackers read arbitrary files via a .. path. Root cause: directory traversal in the Webpaging interface. Impact: partial confidentiality lo...

CVE-2001-0746

The CVE-2001-0746 issue is a buffer overflow in the Web Publisher component of iPlanet Web Server Enterprise Edition 4.1 and earlier. An attacker can trigger this by sending a long URI in requests for certain methods (notably GETPROPERTIES and GETATTRIBUTENAMES), potentially causing a denial of s...

CVE-2001-0767

Directory traversal vulnerability in GuildFTPd 0.9.7 allows attackers to list or read arbitrary files and directories via a .. in 1 LS or 2 GET...

CVE-2001-0669

Various Intrusion Detection Systems IDS including 1 Cisco Secure Intrusion Detection System, 2 Cisco Catalyst 6000 Intrusion Detection System Module, 3 Dragon Sensor 4.x, 4 Snort before 1.8.1, 5 ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and 6 ISS RealSecure Server Sensor 5.5 and 6...

CVE-2001-0788

Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 allows remote attackers to obtain an absolute path for the server directory by viewing the Location header...

CVE-2001-0535

The CVE-2001-0535 issue affects ColdFusion Server 4.x Exampleapps, where access checks do not correctly limit requests from outside the local host domain. This enables remote attackers to spoof the HTTP Host (CGI.Host) to the Web Publish and Email example scripts, allowing upload, read, or execut...

CVE-2001-0746

Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request for a long URI with 1 GETPROPERTIES, 2 GETATTRIBUTENAMES, or other methods...

CVE-2001-0715

Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to obtain potentially sensitive information about the mail queue by setting debugging flags to enable debug mode...

CVE-2001-0771

CVE-2001-0771 affects Spytech SpyAnywhere 1.50. The NVD entry states remote attackers can gain administrator access by exploiting a single character in the loginpass field. Metrics indicate a network-based, low-attack-complexity, no-auth scenario with partial confidentiality, integrity, and avail...

CVE-2001-0735

Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOWLINEPARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file...

CVE-2001-0775

CVE-2001-0775 affects xloadimage/xli (Linux) in the FACES image handler: a buffer overflow in the loader can be triggered by a specially crafted image with long Firstname/Lastname fields, potentially allowing remote code execution. The vulnerability is documented for xloadimage 4.1 (xli 1.16/1.17...

CVE-2001-0775

Buffer overflow in xloadimage 4.1 aka xli 1.16 and 1.17 in Linux allows remote attackers to execute arbitrary code via a FACES format image containing a long 1 Firstname or 2 Lastname field...

CVE-2001-0777

CVE-2001-0777 affects Omnicron OmniHTTPd 2.0.8. Remote attackers can cause a denial of service via memory exhaustion by a series of requests for PHP scripts. CVSS v2: AV:N/AC:L/Au:N/C:N/I:N/A:P, base score 5.0 (Medium); network vector, no authentication, partial availability impact.

CVE-2001-0791

Trend Micro InterScan VirusWall for Windows NT allows remote attackers to make configuration changes by directly calling certain CGI programs, which do not restrict access...

CVE-2001-1282

Ipswitch IMail 7.04 and earlier records the physical path of attachments in an e-mail message header, which could allow remote attackers to obtain potentially sensitive configuration information...