CVE-2001-0346

Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large number of sessions and terminating them...

CVE-2001-0481

Mandrake Linux 8.0 is affected by a vulnerability in rpmdrake related to insecure temporary file handling (CVE-2001-0481). The connected Nessus advisory MDKSA-2001:043 confirms a temporary-file vulnerability in rpmdrake and provides an updated rpmdrake package to fix it. The NVD entry mirrors the...

CVE-2001-0348

CVE-2001-0348 affects Microsoft Windows 2000 Telnet Service. A vulnerability in range checking on incoming Telnet session requests can be exploited by sending a long logon sequence including delete (backspace) characters to crash the Telnet Service, causing a denial of service. Microsoft addresse...

CVE-2001-0377

Inframail (Infradig) before version 3.98a is affected. A remote attacker can cause a denial of service by sending a malformed POST request that includes a space followed by a large string. The CVSS-derived impact indicates partial availability loss with network access and no authentication, no co...

CVE-2001-0377

Infradig Inframail prior to 3.98a allows a remote attacker to create a denial of service via a malformed POST request which includes a space followed by a large string...

CVE-2001-0334

FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that generates a long string when it is expanded...

CVE-2001-0334

Affected software: IIS FTP service on IIS 5.0 and earlier. Vulnerability: remote denial of service via a wildcard sequence that expands to a long string. Root cause: expansion of a wildcard sequence in FTP handling leads to DoS. Exploitation details are not provided in the documents. Mitigation: ...

CVE-2001-0020

Technical details about CVE-2001-0020 are not publicly available in the provided connected documents. The material confirms a directory traversal vulnerability in Arrowpoint, but no further specifics, affected versions, or mitigations are included here. Monitor for updates.

CVE-2001-0488

This CVE concerns HP-UX 10.x where the pcltotiff utility has setgid permissions (sgid bin) to read fonts, allowing local users to cause denial of service. The root cause is insecure sgid settings on /opt/sharedprint/bin/pcltotiff, as described in HP advisory HPSBUX0104-149. Impact is local DoS; n...

CVE-2001-0331

Buffer overflow in Embedded Support Partner ESP daemon rpc.espd in IRIX 6.5.8 and earlier allows remote attackers to execute arbitrary commands...

CVE-2001-0347

The connected CERT/KB entry confirms a vulnerability in Microsoft Windows 2000 Telnet Service that permits remote authentication using domain accounts without specifying a domain name, by exploiting a wildcard domain search. The issue can lead to unauthorized domain-login or information leakage. ...

CVE-2001-0475

index.php in Jelsoft vBulletin does not properly initialize a PHP variable that is used to store template information, which allows remote attackers to execute arbitrary PHP code via special characters in the templatecache parameter...

CVE-2001-0488

pcltotiff in HP-UX 10.x has unnecessary set group id permissions, which allows local users to cause a denial of service...

CVE-2001-0434

The CVE-2001-0434 issue affects the LogDataListToFile ActiveX function used in Compaq Presario Knowledge Center and Back web components. This function allows remote attackers to modify arbitrary files and cause denial of service. References indicate a patch (SSRT0716-01) is available, which shoul...

CVE-2001-0429

Cisco Catalyst 5000 series switches 6.12 and earlier will forward an 802.1x frame on a Spanning Tree Protocol STP blocked port, which causes a network storm and a denial of service...

CVE-2001-0489

Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands...

CVE-2001-0457

CVE-2001-0457 affects man2html prior to 1.5-22. The Debian security advisory DSA-035-1 and OpenVAS entries warn that remote attackers could trigger a denial of service via memory exhaustion. A patch/update to the affected man2html package is the indicated remediation. The OpenVAS NASL notes the i...

CVE-2001-0182

FireWall-1 4.1 with a limited-IP license allows remote attackers to cause a denial of service by sending a large number of spoofed IP packets with various source addresses to the inside interface, which floods the console with warning messages and consumes CPU resources...

CVE-2001-0341

CVE-2001-0341 describes a remote code execution vulnerability in the Microsoft FrontPage Server Extensions, specifically the fp30reg.dll component used by IIS FrontPage. The root cause is an unchecked stack-based buffer overflow triggered by a registration URL longer than the expected length, all...

CVE-2001-0238

The CVE-2001-0238 entry concerns Microsoft Data Access Component Internet Publishing Provider (ID 8.103.2519.0 and earlier). The available connected documents describe that remote attackers can bypass Security Zone restrictions through WebDAV requests. The root cause details are not explicitly st...