CVE-2001-0474

The CVE affects Mesa’s Utah-glx on Mandrake Linux 7.2. A temporary file race in Utah-glx enables a symlink attack on /tmp/glxmemory, allowing local users to overwrite arbitrary files during the next X server start. The Mandrake advisory MDKSA-2001:029 notes the issue and lists updated Mesa packag...

CVE-2001-0078

CVE-2001-0078 affects Sun Cluster 2.x via the component/feature named “in.mond.” The vulnerability arises from a symlink attack on the status file of a host running HA-NFS, allowing local users to read arbitrary files. Root cause: a symlink race condition in the status file handling. Impact: part...

CVE-2001-0456

postinst installation script for Proftpd in Debian 2.2 does not properly change the "run as uid/gid root" configuration when the user enables anonymous access, which causes the server to run at a higher privilege than intended...

CVE-2001-0469

The CVE concerns the rwho/rwhod service on FreeBSD 4.2 and earlier, where remote attackers can cause a denial of service by sending malformed packets with a short length. The available sources reiterate this impact but do not provide exploit details, affected versions beyond the FreeBSD 4.2 era, ...

CVE-2001-0095

Catman in Solaris 2.7/2.8 creates insecure temporary files with predictable names in world-writable /tmp, enabling local users to perform a symlink attack to overwrite arbitrary files. The root cause is predictable temp-file naming and symlink handling when run as root. Impact is local privilege ...

CVE-2001-0203

Watchguard Firebox II firewall is affected. The issue lets users with read-only access gain read-write privileges and administrative access by accessing a file that contains hashed passphrases and using those hashes during authentication. The provided documents do not specify concrete exploit ste...

CVE-2001-0455

CVE-2001-0455 affects Cisco Aironet 340 Series wireless bridge prior to version 8.55. The issue is that the device does not properly disable access to its web interface, enabling remote attackers to modify configuration settings. The sources provided describe the vulnerability in this product/ver...

CVE-2001-0108

The CVE-2001-0108 issue affects the PHP 4.x Apache module, including versions up to 4.0.4, where a malformed HTTP request can cause PHP to apply access controls from .htaccess on the next requested page, effectively bypassing restrictions. Connected advisories (Mandrake MDKSA-2001:013 and Debian ...

CVE-2001-0457

man2html before 1.5-22 allows remote attackers to cause a denial of service memory exhaustion...

CVE-2001-0361

Implementations of SSH version 1.5, including 1 OpenSSH up to version 2.3.0, 2 AppGate, and 3 ssh-1 up to version 1.2.31, in certain configurations, allow a remote attacker to decrypt and/or alter traffic via a "Bleichenbacher attack" on PKCS1 version 1.5...

CVE-2001-0215

Summary (CVE-2001-0215) : The ROADS project’s CGI, search.pl, is vulnerable to a remote arbitrary-file-read via the filename parameter terminated with a null byte. This is due to improper handling of the filename in the CGI, allowing an attacker to access files the HTTP server has read privileges...

CVE-2001-0405

Concrete details: CVE-2001-0405 affects ip_conntrack_ftp inside the Linux 2.4 iptables RELATED connection tracking. A crafted FTP PORT command could cause the firewall to allow an arbitrary IP/port through the RELATED table, bypassing access restrictions. Implication: arbitrary firewall holes for...

CVE-2001-0241

CVE-2001-0241 affects the IIS 5.0 ISAPI Internet Printing Protocol extension (.printer) on Windows 2000. A buffer overflow in the Host: field of HTTP Printer requests allows remote code execution with the web server’s privileges. The provided documents describe an unchecked buffer in the ISAPI .p...

CVE-2001-1353

ghostscript before 6.51 allows local users to read and write arbitrary files as the 'lp' user via the file operator, even with -dSAFER enabled...

CVE-2001-0121

CVE-2001-0121 affects ImageCast Control Center 4.1.0. A remote attacker can cause a denial of service (resource exhaustion or system crash) by sending a long string to port 12002. Based on the NVD entry, attack vector is Network, access complexity Low, no authentication, with partial availability...

CVE-2001-0488

This CVE concerns HP-UX 10.x where the pcltotiff utility has setgid permissions (sgid bin) to read fonts, allowing local users to cause denial of service. The root cause is insecure sgid settings on /opt/sharedprint/bin/pcltotiff, as described in HP advisory HPSBUX0104-149. Impact is local DoS; n...

CVE-2001-0020

Technical details about CVE-2001-0020 are not publicly available in the provided connected documents. The material confirms a directory traversal vulnerability in Arrowpoint, but no further specifics, affected versions, or mitigations are included here. Monitor for updates.

CVE-2001-0489

The CVE-2001-0489 entry concerns gftp before version 2.0.8, where a printf/format string vulnerability in the logging of network data allows a remote FTP server to cause arbitrary commands to be executed. Affected component is the gftp client; root cause is unsafe handling of data received from t...

CVE-2001-0174

CVE-2001-0174 concerns a buffer overflow in Trend Micro Virus Buster 2001 8.00. The vulnerability is triggered by a large "/To" address, potentially allowing remote attackers to cause a denial of service and, possibly, execute arbitrary commands. Affected product/version: Trend Micro Virus Buster...

CVE-2001-0481

Mandrake Linux 8.0 is affected by a vulnerability in rpmdrake related to insecure temporary file handling (CVE-2001-0481). The connected Nessus advisory MDKSA-2001:043 confirms a temporary-file vulnerability in rpmdrake and provides an updated rpmdrake package to fix it. The NVD entry mirrors the...