CVE-2001-0961

Buffer overflow in tab expansion capability of the most program allows local or remote attackers to execute arbitrary code via a malformed file that is viewed with most...

CVE-2001-0244

The CVE-2001-0244 issue concerns Microsoft Index Server 2.0, where a buffer overflow in the index/search parameter handling allows remote attackers to execute arbitrary commands. The core affected component is Microsoft Index Server 2.0 (server-side indexing/search functionality); the root cause ...

CVE-2001-0430

The CVE-2001-0430 entry refers to a vulnerability in exuberant-ctags prior to version 3.2.4-0.1 where temporary files are created insecurely, leading to potential local file exposure or corruption. Public sources in the connected documents confirm the issue and identify the Debian package update ...

CVE-2001-0330

Bugzilla 2.10 contains a vulnerability where a remote attacker can access the database username and password by requesting the globals.pl file, which is served as plain text by the web server. The issue arises from exposing sensitive configuration data in a Perl CGI file. A fix is available in Bu...

CVE-2001-0245

Microsoft Index Server 2.0 (Windows NT 4.0) and Indexing Service (Windows 2000) are affected by a vulnerability described as a Malformed Hit-Highlighting issue that allows remote readers to view server-side include files via a crafted search request. The CERT advisory confirms the ability to read...

CVE-2001-0456

Summary: CVE-2001-0456 affects ProFTPD in Debian 2.2 where the postinst script fails to properly adjust the “run as uid/gid root” setting when anonymous access is enabled, causing the server to run with elevated privileges. What’s affected: proftpd on Debian 2.2 (potato); issue in post-install co...

CVE-2001-0235

CVE-2001-0235 affects crontab in Vixie cron. Local users can read other users’ crontab files by replacing the temporary file used during editing while cron is running. Documented impact is partial confidentiality loss with a low base score (CVSS v2.0: 2.1, LOCAL access, no authentication). Connec...

CVE-2001-0182

FireWall-1 4.1 with a limited-IP license allows remote attackers to cause a denial of service by sending a large number of spoofed IP packets with various source addresses to the inside interface, which floods the console with warning messages and consumes CPU resources...

CVE-2001-0414

Buffer overflow in ntpd ntp daemon 4.0.99k and earlier aka xntpd and xntp3 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument...

CVE-2001-0345

Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions...

CVE-2001-0243

CVE-2001-0243 affects Windows Media Player 6.4/7: Internet shortcuts created in the user’s Temporary Files folder with a fixed name cause HTML to render in the Local Computer Zone rather than Internet Zone, enabling a remote attacker to read local files or execute commands when a user views a mal...

CVE-2001-0333

CVE-2001-0333 is a directory-traversal vulnerability in Microsoft IIS 5.0 and earlier. An attacker can craft requests that double-encode dot-dot and backslash characters to bypass checks and remotely execute commands on the server. This is associated with MS01-026/MS01-044 (IIS CGI double-decode)...

CVE-2001-0348

CVE-2001-0348 affects Microsoft Windows 2000 Telnet Service. A vulnerability in range checking on incoming Telnet session requests can be exploited by sending a long logon sequence including delete (backspace) characters to crash the Telnet Service, causing a denial of service. Microsoft addresse...

CVE-2001-0462

The CVE-2001-0462 entry describes a directory traversal vulnerability in the Perl web server versions 0.3 and earlier. The underlying issue allows an attacker to read arbitrary files by supplying a .. (dot dot) in the URL. Affected component: Perl web server software prior to 0.3. Impact is unaut...

CVE-2001-0368

CVE-2001-0368 affects BearShare 2.2.2 and earlier. A directory-traversal flaw lets a remote attacker read certain files via a URL containing a series of dots (variation of .. attack). The vulnerability is described across CVE records (NVD/CVE List) but the provided documents do not include a reme...

CVE-2001-0473

CVE-2001-0473 affects the Mutt email client (Imap-related code) prior to version 1.2.5. The vulnerability is a format string issue in the IMAP handling that can allow a remote, malicious IMAP server to execute arbitrary commands on the local machine. The Mandrakelinux MDKSA-2001:031 advisory spec...

CVE-2001-0345

CVE-2001-0345 affects Microsoft Windows 2000 Telnet Service. A denial-of-service occurs when remote attackers establish many idle Telnet sessions to prevent the service from enforcing idle-timeout values, exhausting available sessions. Root cause: the Telnet Service fails to enforce pre-defined t...

CVE-2001-0387

CVE-2001-0387 is a format-string vulnerability in HylaFAX’s hfaxd that allows local users to gain privileges via the -q command-line argument in versions prior to 4.1.b2_2. The issue is documented across multiple sources (NVD, CVE list, Debian/DSA and Mandrake advisory). Exploitation would enable...

CVE-2001-0331

CVE-2001-0331 describes a buffer overflow in SGI IRIX Embedded Support Partner (ESP) daemon rpc.espd, affecting IRIX 6.5.8 and earlier. The vulnerability allows remote attackers to execute arbitrary commands with superuser privileges, with the ESP daemon enabled by default on IRIX installations a...

CVE-2001-0334

Affected software: IIS FTP service on IIS 5.0 and earlier. Vulnerability: remote denial of service via a wildcard sequence that expands to a long string. Root cause: expansion of a wildcard sequence in FTP handling leads to DoS. Exploitation details are not provided in the documents. Mitigation: ...