CVE-2001-0378

CVE-2001-0378 affects OpenBSD readline prior to 4.1 (OpenBSD 2.8 and earlier). The vulnerability stems from creating readline history files with insecure permissions, allowing a local attacker to recover potentially sensitive information via history files. The NVD metrics list a base score of 2.1...

CVE-2001-0462

The CVE-2001-0462 entry describes a directory traversal vulnerability in the Perl web server versions 0.3 and earlier. The underlying issue allows an attacker to read arbitrary files by supplying a .. (dot dot) in the URL. Affected component: Perl web server software prior to 0.3. Impact is unaut...

CVE-2001-0469

rwho daemon rwhod in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service via malformed packets with a short length...

CVE-2001-0235

Vulnerability in crontab allows local users to read crontab files of other users by replacing the temporary file that is being edited while crontab is running...

CVE-2001-0387

CVE-2001-0387 is a format-string vulnerability in HylaFAX’s hfaxd that allows local users to gain privileges via the -q command-line argument in versions prior to 4.1.b2_2. The issue is documented across multiple sources (NVD, CVE list, Debian/DSA and Mandrake advisory). Exploitation would enable...

CVE-2001-0439

licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

CVE-2001-0489

The CVE-2001-0489 entry concerns gftp before version 2.0.8, where a printf/format string vulnerability in the logging of network data allows a remote FTP server to cause arbitrary commands to be executed. Affected component is the gftp client; root cause is unsafe handling of data received from t...

CVE-2001-0351

The CVE-2001-0351 entry concerns Microsoft Windows 2000 Telnet Service. The vulnerability allows an unprivileged local user to invoke a system call that terminates an existing Telnet session, producing a denial-of-service condition. Affected software is Windows 2000 with the Telnet Service; the u...

CVE-2001-0335

FTP service in IIS 5.0 and earlier allows remote attackers to enumerate Guest accounts in trusted domains by preceding the username with a special sequence of characters...

CVE-2001-0335

The CVE-2001-0335 issue affects Microsoft IIS FTP Service on IIS 5.0 and earlier. The vulnerability arises when a remote user supplies a username preceded by a special sequence of characters, causing the FTP service to enumerate Guest accounts in trusted domains. This could enable account discove...

CVE-2001-0494

IPSwitch IMail SMTP Buffer Overflow (CVE-2001-0494) affects IMail Server 6.06 and earlier. The OpenVAS/Nessus/NVD entries describe a vulnerability in theIMail SMTP daemon where inadequate bounds checking on input passed to the Mailing List handler allows remote attackers to remotely execute arbit...

CVE-2001-0457

man2html before 1.5-22 allows remote attackers to cause a denial of service memory exhaustion...

CVE-2001-0333

A directory traversal vulnerability exists in Microsoft IIS 5.0 and earlier versions. The root cause is a flaw in how the web server handles CGI filename requests. Specifically, after the initial security check, IIS mistakenly performs a second decoding pass on the CGI filename. An attacker can e...

CVE-2001-0481

Vulnerability in rpmdrake in Mandrake Linux 8.0 related to insecure temporary file handling...

CVE-2001-0020

Directory traversal vulnerability in Arrowpoint aka Cisco Content Services, or CSS allows local unprivileged users to read arbitrary files via a .. dot dot attack...

CVE-2001-0340

An interaction between the Outlook Web Access OWA service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code, which is executed automatically...

CVE-2001-0345

Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions...

CVE-2001-0176

CVE-2001-0176 concerns the Voyant Sonata 3.x setuid doroot program, where passing arbitrary command line arguments can grant local users root privileges. The vulnerability stems from the program’s setuid behavior, enabling privilege escalation when specific arguments are invoked. Public reference...

CVE-2001-0136

ProFTPD 1.2.0rc2 is affected by a memory leak that can be exploited to cause DoS via a sequence of USER commands and, if the server is installed with a writable scoreboard, possibly SIZE commands. Mandrake advisory notes the USER and SIZE leaks (SIZE only when scoreboard is writable) and mentions...

CVE-2001-0414

Buffer overflow in ntpd ntp daemon 4.0.99k and earlier aka xntpd and xntp3 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument...