CVE-2001-0481

Vulnerability in rpmdrake in Mandrake Linux 8.0 related to insecure temporary file handling...

CVE-2001-0405

ipconntrackftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command that lists an arbitrary IP address and port number, which is added to the RELATED table and allowed by the firewall...

CVE-2001-0339

Summary: CVE-2001-0339 corresponds to a Web page spoofing vulnerability in Internet Explorer 5.5 and earlier, where the address bar could display a URL different from the actual page, enabling phishing-type spoofing. The connected OpenVAS entries reference Internet Explorer patches (e.g., 890923/...

CVE-2001-0353

CVE-2001-0353 describes a buffer overflow in the Solaris and BSD line printer daemons (in.lpd) that can allow local or remote attackers to gain root privileges via the transfer job routine. Public advisories (ISS X-Force/CERT CA-2001-15) detail remote-exploit scenarios affecting Solaris 2.6/7/8 a...

CVE-2001-0020

Technical details about CVE-2001-0020 are not publicly available in the provided connected documents. The material confirms a directory traversal vulnerability in Arrowpoint, but no further specifics, affected versions, or mitigations are included here. Monitor for updates.

CVE-2001-0377

Infradig Inframail prior to 3.98a allows a remote attacker to create a denial of service via a malformed POST request which includes a space followed by a large string...

CVE-2001-0486

Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port 353...

CVE-2001-0439

licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

CVE-2001-0339

Internet Explorer 5.5 and earlier allows remote attackers to display a URL in the address bar that is different than the URL that is actually being displayed, which could be used in web site spoofing attacks, aka the "Web page spoofing vulnerability."...

CVE-2001-0469

rwho daemon rwhod in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service via malformed packets with a short length...

CVE-2001-0164

Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed recipient field...

CVE-2001-0475

index.php in Jelsoft vBulletin does not properly initialize a PHP variable that is used to store template information, which allows remote attackers to execute arbitrary PHP code via special characters in the templatecache parameter...

CVE-2001-0020

Directory traversal vulnerability in Arrowpoint aka Cisco Content Services, or CSS allows local unprivileged users to read arbitrary files via a .. dot dot attack...

CVE-2001-0488

pcltotiff in HP-UX 10.x has unnecessary set group id permissions, which allows local users to cause a denial of service...

CVE-2001-0353

Buffer overflow in the line printer daemon in.lpd for Solaris 8 and earlier allows local and remote attackers to gain root privileges via a "transfer job" routine...

CVE-2001-0189

Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a .. dot dot attack in an HTTP GET request...

CVE-2001-0348

Microsoft Windows 2000 telnet service allows attackers to cause a denial of service crash via a long logon command that contains a backspace...

CVE-2001-0440

Buffer overflow in logging functions of licq before 1.0.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands...

CVE-2001-0379

Vulnerability in the newgrp program included with HP9000 servers running HP-UX 11.11 allows a local attacker to obtain higher access rights...

CVE-2001-0189

CVE-2001-0189 is confirmed via connected sources as a LocalWeb2000 vulnerability. Affected product: LocalWeb2000 (notably version 2.1.0). Issue: directory traversal allowing remote attackers to read protected files through a dot-dot (.. ) sequence in HTTP GET requests, potentially revealing file ...