3468 matches found
CVE-2001-0789
Format string vulnerability in avpkeeper in Kaspersky KAV 3.5.135.2 for Sendmail allows remote attackers to cause a denial of service or possibly execute arbitrary code via a malformed mail message...
CVE-2001-0735
Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOWLINEPARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file...
CVE-2001-0755
CVE-2001-0755 concerns a buffer overflow in the ftp daemon (ftpd) 6.2 used in Debian GNU/Linux. The vulnerability allows a remote attacker to trigger a denial of service and potentially execute arbitrary code by sending a long SITE command. The available connected sources confirm the affected com...
CVE-2001-0785
Affects Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2. The Webpaging interface contains a directory-traversal flaw that lets remote attackers read arbitrary files via a .. path. Root cause: directory traversal in the Webpaging interface. Impact: partial confidentiality lo...
CVE-2001-0535
The CVE-2001-0535 issue affects ColdFusion Server 4.x Exampleapps, where access checks do not correctly limit requests from outside the local host domain. This enables remote attackers to spoof the HTTP Host (CGI.Host) to the Web Publish and Email example scripts, allowing upload, read, or execut...
CVE-2001-0767
CVE-2001-0767 corresponds to a directory traversal flaw in GuildFTPd. Multiple sources (NVD and OpenVAS entries) document that versions around 0.9x/0.97 are affected, allowing an attacker with a valid FTP login to read arbitrary files and directories by inserting .. in FTP commands (LS or GET). T...
CVE-2001-0790
Specter IDS version 4.5 and 5.0 allows a remote attacker to cause a denial of service CPU exhaustion via a port scan, which causes the server to consume CPU while preparing alerts...
CVE-2001-1283
The webmail interface for Ipswitch IMail 7.04 and earlier allows remote authenticated users to cause a denial of service crash via a mailbox name that contains a large number of . dot or other characters to programs such as 1 readmail.cgi or 2 printmail.cgi, possibly due to a buffer overflow that...
CVE-2001-0505
Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service memory exhaustion via a large number of malformed requests to 1 the Telnet service, or 2 the NFS service...
CVE-2001-1282
Ipswitch IMail 7.04 and earlier records the physical path of attachments in an e-mail message header, which could allow remote attackers to obtain potentially sensitive configuration information...
CVE-2001-0759
A concise summary of CVE-2001-0759: A buffer overflow in bctool of Jetico BestCrypt versions up to 0.8.1 allows local users to execute arbitrary code via a file or directory with an excessively long pathname processed during an unmount. Affected software: Jetico BestCrypt (bctool)
CVE-2001-0778
Affected software: OmniHTTPd (OmniPro HTTPd) up to 2.08. Vulnerability: remote attackers can disclose source code of scripting files by sending a URL with an encoded space (%20); the flaw is not present for CGI directories (cgibin/cgi-win). Impact: information disclosure of script/source files (c...
CVE-2001-0782
KDE ktvision 0.1.1-271 and earlier is affected by a local privilege escalation through a symlink attack on a user configuration file. The underlying cause is a symbolic-link/race condition that allows a local attacker to gain root privileges. The provided documents identify the affected product a...
CVE-2001-0788
CVE-2001-0788 affects Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2. Remote attackers can obtain the server's absolute directory path by viewing the Location header; no remediation details are provided in the supplied documents.
CVE-2001-0735
Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOWLINEPARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file...
CVE-2001-0758
Directory traversal vulnerability in Shambala 4.5 allows remote attackers to escape the FTP root directory via "CWD ..." command...
CVE-2001-0737
CVE-2001-0737 describes a vulnerability in Logitech wireless mice and keyboard receivers where a long “synch” delay enables a remote attacker to hijack connections via a man‑in‑the‑middle attack. The description specifies the affected component as the wireless receivers used with Logitech periphe...
CVE-2001-0772
The CVE-2001-0772 record concerns HP-UX systems with multiple CDE modules affected (HP-UX 10.10–11.11). The underlying issue is buffer overflows and related vulnerabilities in those modules, which the documents state can lead to a denial of service and may allow an attacker to gain additional pri...
CVE-2001-0789
The CVE-2001-0789 entry describes a format string vulnerability in avpkeeper of Kaspersky KAV 3.5.135.2 for Sendmail. The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code through a malformed mail message. Affected product is KAV with Sendmail integrati...