CVE-2001-0239

CVE-2001-0239 affects Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy. The vulnerability allows remote attackers to cause a denial of service by sending a long web request with a specific type. The provided documents do not specify the exact vulnerable component version, ...

CVE-2001-0336

The CVE-2001-0336 entry concerns Microsoft IIS 5.0 and earlier. According to provided records, the MS00-060 patch for IIS 5.0/earlier introduces an error that allows an attacker to cause a denial of service via a malformed request. The connected sources confirm the affected product version and th...

CVE-2001-0440

The connected document (MDKSA-2001:032-1) confirms a vulnerability in Licq pre-1.0.3 where received URLs are parsed without sufficient checks and passed to the system() call. This allows remote attackers to cause arbitrary commands to be executed on the client, via crafted URLs, and can lead to d...

CVE-2001-0467

The CVE-2001-0467 vulnerability affects RobTex Viking Web Server prior to 1.07-381. A directory-traversal flaw allows remote attackers to read arbitrary files via a modified dot-dot sequence in an HTTP URL request, exposing server file contents (read access as allowed by the web server). CERT/KB ...

CVE-2001-0341

CVE-2001-0341 describes a remote code execution vulnerability in the Microsoft FrontPage Server Extensions, specifically the fp30reg.dll component used by IIS FrontPage. The root cause is an unchecked stack-based buffer overflow triggered by a registration URL longer than the expected length, all...

CVE-2001-0486

CVE-2001-0486 affects Novell BorderManager 3.6 and earlier. Remote attackers can cause a denial of service by sending a TCP SYN flood to port 353. Metrics indicate a Network attack with low complexity and no authentication, yielding a base score of 5.0 (Medium) and Partial Availability impact. No...

CVE-2001-0164

The CVE-2001-0164 issue affects Netscape Directory Server versions 4.12 and earlier, with a buffer overflow triggered by a specially crafted request in the recipient field. The Security Advisory (SECURITYVULNS/DOC:1363) confirms the exposure in Directory Server 4.11/4.12 and notes that artifacts ...

CVE-2001-0155

The CVE-2001-0155 entry describes a format string vulnerability in the VShell SSH gateway 1.0.1 and earlier . The issue arises when a user name containing format string specifiers is processed, allowing a remote attacker to execute arbitrary commands. The vulnerability impact is described as remo...

CVE-2001-0335

The CVE-2001-0335 issue affects Microsoft IIS FTP Service on IIS 5.0 and earlier. The vulnerability arises when a remote user supplies a username preceded by a special sequence of characters, causing the FTP service to enumerate Guest accounts in trusted domains. This could enable account discove...

CVE-2001-0340

An interaction between the Outlook Web Access OWA service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code, which is executed automatically...

CVE-2001-0473

Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands...

CVE-2001-0439

CVE-2001-0439 affects Licq prior to 1.0.3. The vulnerability stems from how Licq parses received URLs: the URL is passed to the web browser via system() without sufficient input validation, allowing a remote attacker to inject shell metacharacters and execute arbitrary commands. Impact is remote ...

CVE-2001-0378

CVE-2001-0378 affects OpenBSD readline prior to 4.1 (OpenBSD 2.8 and earlier). The vulnerability stems from creating readline history files with insecure permissions, allowing a local attacker to recover potentially sensitive information via history files. The NVD metrics list a base score of 2.1...

CVE-2001-0078

in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host running HA-NFS...

CVE-2001-0244

Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter...

CVE-2001-0482

Configuration error in Argus PitBull LX allows root users to bypass specified access control restrictions and cause a denial of service or execute arbitrary commands by modifying kernel variables such as MaxFiles, MaxInodes, and ModProbePath in /proc/sys via calls to sysctl...

CVE-2001-0413

This CVE covers BinTec X4000 Access router (and possibly other versions) that is vulnerable to a remote denial-of-service via a SYN port scan, causing the device to hang. The provided sources confirm the affected product and the impact on availability (PARTIAL). No explicit root-cause details or ...

CVE-2001-0238

The CVE-2001-0238 entry concerns Microsoft Data Access Component Internet Publishing Provider (ID 8.103.2519.0 and earlier). The available connected documents describe that remote attackers can bypass Security Zone restrictions through WebDAV requests. The root cause details are not explicitly st...

CVE-2001-0408

CVE-2001-0408 affects Vim (gvim); a crafted file containing VIM control codes can cause arbitrary commands to execute when opening the file. The root cause is Vim interpreting embedded control codes, enabled by the status line option in .vimrc, allowing code execution as the user. Mandrake adviso...

CVE-2001-0004

This CVE concerns IIS 4.0/5.0 where an attacker can cause the server to disclose file contents by sending a crafted GET request that appends %3F+.htr, causing the target file to be parsed as an .HTR ISAPI extension. Impact: unauthenticated remote disclosure of potentially sensitive files within t...