CVE-2001-0164

Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed recipient field...

CVE-2001-0361

CVE-2001-0361 affects SSH v1.5 implementations, notably OpenSSH up to 2.3.0, AppGate, and ssh-1 up to 1.2.31, when configured in certain ways. The issue enables a remote attacker to decrypt and/or alter traffic via a Bleichenbacher attack on PKCS#1 version 1.5. The connected PT security entries (...

CVE-2001-0361

Implementations of SSH version 1.5, including 1 OpenSSH up to version 2.3.0, 2 AppGate, and 3 ssh-1 up to version 1.2.31, in certain configurations, allow a remote attacker to decrypt and/or alter traffic via a "Bleichenbacher attack" on PKCS1 version 1.5...

CVE-2001-1353

ghostscript before 6.51 allows local users to read and write arbitrary files as the 'lp' user via the file operator, even with -dSAFER enabled...

CVE-2001-0353

CVE-2001-0353 describes a buffer overflow in the Solaris and BSD line printer daemons (in.lpd) that can allow local or remote attackers to gain root privileges via the transfer job routine. Public advisories (ISS X-Force/CERT CA-2001-15) detail remote-exploit scenarios affecting Solaris 2.6/7/8 a...

CVE-2001-0108

The CVE-2001-0108 issue affects the PHP 4.x Apache module, including versions up to 4.0.4, where a malformed HTTP request can cause PHP to apply access controls from .htaccess on the next requested page, effectively bypassing restrictions. Connected advisories (Mandrake MDKSA-2001:013 and Debian ...

CVE-2001-0121

ImageCast Control Center 4.1.0 allows remote attackers to cause a denial of service resource exhaustion or system crash via a long string to port 12002...

CVE-2001-0494

Buffer overflow in IPSwitch IMail SMTP server 6.06 and possibly prior versions allows remote attackers to execute arbitrary code via a long From: header...

CVE-2001-0473

CVE-2001-0473 affects the Mutt email client (Imap-related code) prior to version 1.2.5. The vulnerability is a format string issue in the IMAP handling that can allow a remote, malicious IMAP server to execute arbitrary commands on the local machine. The Mandrakelinux MDKSA-2001:031 advisory spec...

CVE-2001-0346

The CVE-2001-0346 entry pertains to Microsoft Windows 2000 Telnet Service, where a handle leak during termination of an excessive number of Telnet sessions can exhaust system handles and cause a denial-of-service across services. Affected component: Windows 2000 Telnet Service; root cause: failur...

CVE-2001-0402

CVE-2001-0402 affects IPFilter 3.4.16 and earlier. The issue is that the module does not include sufficient session information in its cache, enabling a remote attacker to bypass access restrictions by sending fragmented packets to a restricted port after sending unfragmented packets to an unrest...

CVE-2001-0078

in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host running HA-NFS...

CVE-2001-0207

CVE-2001-0207: A buffer overflow in bing allows remote attackers to execute arbitrary commands via a long hostname that is copied into a small buffer after a reverse DNS lookup (gethostbyaddr). Affected software is bing; the underlying cause is unsafe handling of hostname data leading to potentia...

CVE-2001-0241

CVE-2001-0241 affects the IIS 5.0 ISAPI Internet Printing Protocol extension (.printer) on Windows 2000. A buffer overflow in the Host: field of HTTP Printer requests allows remote code execution with the web server’s privileges. The provided documents describe an unchecked buffer in the ISAPI .p...

CVE-2001-0341

Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration request URL to fp30reg.dll...

CVE-2001-0340

An issue in Outlook Web Access (OWA) for Microsoft Exchange 2000 Server and Internet Explorer lets a malicious HTML attachment execute script when opened via OWA, with the script running under the OWA user’s privileges and potentially accessing/manipulating messages and folders on the server. Exp...

CVE-2001-0388

CVE-2001-0388 concerns the time server daemon, timed. The Mandrake advisory (MDKSA-2001:034) states a bug in timed can be triggered remotely to crash the time server daemon, enabling a remote denial-of-service. The advisory references the affected Mandrake/Linux packages and provides upgrade inst...

CVE-2001-0405

Concrete details: CVE-2001-0405 affects ip_conntrack_ftp inside the Linux 2.4 iptables RELATED connection tracking. A crafted FTP PORT command could cause the firewall to allow an arbitrary IP/port through the RELATED table, bypassing access restrictions. Implication: arbitrary firewall holes for...

CVE-2001-0330

Bugzilla 2.10 contains a vulnerability where a remote attacker can access the database username and password by requesting the globals.pl file, which is served as plain text by the web server. The issue arises from exposing sensitive configuration data in a Perl CGI file. A fix is available in Bu...

CVE-2001-0467

The CVE-2001-0467 vulnerability affects RobTex Viking Web Server prior to 1.07-381. A directory-traversal flaw allows remote attackers to read arbitrary files via a modified dot-dot sequence in an HTTP URL request, exposing server file contents (read access as allowed by the web server). CERT/KB ...