CVE-2001-0428

CVE-2001-0428 affects Cisco VPN 3000 series concentrators prior to 2.5.2(F). The vulnerability arises from handling IP packets with an invalid IP option, enabling remote denial of service. The available sources list the affected product and the impact (DoS) but do not provide details on exploits,...

CVE-2001-0215

Summary (CVE-2001-0215) : The ROADS project’s CGI, search.pl, is vulnerable to a remote arbitrary-file-read via the filename parameter terminated with a null byte. This is due to improper handling of the filename in the CGI, allowing an attacker to access files the HTTP server has read privileges...

CVE-2001-0456

Summary: CVE-2001-0456 affects ProFTPD in Debian 2.2 where the postinst script fails to properly adjust the “run as uid/gid root” setting when anonymous access is enabled, causing the server to run with elevated privileges. What’s affected: proftpd on Debian 2.2 (potato); issue in post-install co...

CVE-2001-0486

CVE-2001-0486 affects Novell BorderManager 3.6 and earlier. Remote attackers can cause a denial of service by sending a TCP SYN flood to port 353. Metrics indicate a Network attack with low complexity and no authentication, yielding a base score of 5.0 (Medium) and Partial Availability impact. No...

CVE-2001-0207

Buffer overflow in bing allows remote attackers to execute arbitrary commands via a long hostname, which is copied to a small buffer after a reverse DNS lookup using the gethostbyaddr function...

CVE-2001-0155

Format string vulnerability in VShell SSH gateway 1.0.1 and earlier allows remote attackers to execute arbitrary commands via a user name that contains format string specifiers...

CVE-2001-0175

The caching module in Netscape Fasttrack Server 4.1 allows remote attackers to cause a denial of service resource exhaustion by requesting a large number of non-existent URLs...

CVE-2001-0486

Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port 353...

CVE-2001-0430

The CVE-2001-0430 entry refers to a vulnerability in exuberant-ctags prior to version 3.2.4-0.1 where temporary files are created insecurely, leading to potential local file exposure or corruption. Public sources in the connected documents confirm the issue and identify the Debian package update ...

CVE-2001-0239

CVE-2001-0239 affects Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy. The vulnerability allows remote attackers to cause a denial of service by sending a long web request with a specific type. The provided documents do not specify the exact vulnerable component version, ...

CVE-2001-0333

Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. dot dot and "" characters twice...

CVE-2001-0121

CVE-2001-0121 affects ImageCast Control Center 4.1.0. A remote attacker can cause a denial of service (resource exhaustion or system crash) by sending a long string to port 12002. Based on the NVD entry, attack vector is Network, access complexity Low, no authentication, with partial availability...

CVE-2001-0405

ipconntrackftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command that lists an arbitrary IP address and port number, which is added to the RELATED table and allowed by the firewall...

CVE-2001-0469

The CVE concerns the rwho/rwhod service on FreeBSD 4.2 and earlier, where remote attackers can cause a denial of service by sending malformed packets with a short length. The available sources reiterate this impact but do not provide exploit details, affected versions beyond the FreeBSD 4.2 era, ...

CVE-2001-0243

Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename instead of in the Internet Explorer cache, which causes the HTML in those shortcuts to run in the Local Computer Zone instead of the Internet Zone, which allows remote attackers t...

CVE-2001-0244

Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter...

CVE-2001-0155

The CVE-2001-0155 entry describes a format string vulnerability in the VShell SSH gateway 1.0.1 and earlier . The issue arises when a user name containing format string specifiers is processed, allowing a remote attacker to execute arbitrary commands. The vulnerability impact is described as remo...

CVE-2001-0078

CVE-2001-0078 affects Sun Cluster 2.x via the component/feature named “in.mond.” The vulnerability arises from a symlink attack on the status file of a host running HA-NFS, allowing local users to read arbitrary files. Root cause: a symlink race condition in the status file handling. Impact: part...

CVE-2001-0402

IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers to bypass access restrictions by sending fragmented packets to a restricted port after sending unfragmented packets to an unrestricted port...

CVE-2001-0237

CVE-2001-0237 affects Microsoft Windows 2000 domain controllers, where the Kerberos service can leak memory when it receives certain invalid Kerberos requests, potentially exhausting memory and causing a denial of service. Affected component is the Kerberos service (KDC) on Windows 2000 domain co...