3489 matches found
CVE-2001-0339
Internet Explorer 5.5 and earlier allows remote attackers to display a URL in the address bar that is different than the URL that is actually being displayed, which could be used in web site spoofing attacks, aka the "Web page spoofing vulnerability."...
CVE-2001-0189
Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a .. dot dot attack in an HTTP GET request...
CVE-2001-0174
CVE-2001-0174 concerns a buffer overflow in Trend Micro Virus Buster 2001 8.00. The vulnerability is triggered by a large "/To" address, potentially allowing remote attackers to cause a denial of service and, possibly, execute arbitrary commands. Affected product/version: Trend Micro Virus Buster...
CVE-2001-0413
This CVE covers BinTec X4000 Access router (and possibly other versions) that is vulnerable to a remote denial-of-service via a SYN port scan, causing the device to hang. The provided sources confirm the affected product and the impact on availability (PARTIAL). No explicit root-cause details or ...
CVE-2001-0341
Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration request URL to fp30reg.dll...
CVE-2001-0361
CVE-2001-0361 affects SSH v1.5 implementations, notably OpenSSH up to 2.3.0, AppGate, and ssh-1 up to 1.2.31, when configured in certain ways. The issue enables a remote attacker to decrypt and/or alter traffic via a Bleichenbacher attack on PKCS#1 version 1.5. The connected PT security entries (...
CVE-2001-0345
Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions...
CVE-2001-0378
CVE-2001-0378 affects OpenBSD readline prior to 4.1 (OpenBSD 2.8 and earlier). The vulnerability stems from creating readline history files with insecure permissions, allowing a local attacker to recover potentially sensitive information via history files. The NVD metrics list a base score of 2.1...
CVE-2001-0243
CVE-2001-0243 affects Windows Media Player 6.4/7: Internet shortcuts created in the user’s Temporary Files folder with a fixed name cause HTML to render in the Local Computer Zone rather than Internet Zone, enabling a remote attacker to read local files or execute commands when a user views a mal...
CVE-2001-0077
CVE-2001-0077 concerns the clustmon service in Sun Cluster 2.x, which does not require authentication. This allows remote attackers to access sensitive information such as system logs and cluster configurations. The available connected documents confirm the vulnerability details (unauthenticated ...
CVE-2001-0331
CVE-2001-0331 describes a buffer overflow in SGI IRIX Embedded Support Partner (ESP) daemon rpc.espd, affecting IRIX 6.5.8 and earlier. The vulnerability allows remote attackers to execute arbitrary commands with superuser privileges, with the ESP daemon enabled by default on IRIX installations a...
CVE-2001-0339
Summary: CVE-2001-0339 corresponds to a Web page spoofing vulnerability in Internet Explorer 5.5 and earlier, where the address bar could display a URL different from the actual page, enabling phishing-type spoofing. The connected OpenVAS entries reference Internet Explorer patches (e.g., 890923/...
CVE-2001-0189
CVE-2001-0189 is confirmed via connected sources as a LocalWeb2000 vulnerability. Affected product: LocalWeb2000 (notably version 2.1.0). Issue: directory traversal allowing remote attackers to read protected files through a dot-dot (.. ) sequence in HTTP GET requests, potentially revealing file ...
CVE-2001-0176
CVE-2001-0176 concerns the Voyant Sonata 3.x setuid doroot program, where passing arbitrary command line arguments can grant local users root privileges. The vulnerability stems from the program’s setuid behavior, enabling privilege escalation when specific arguments are invoked. Public reference...
CVE-2001-0136
Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed...
CVE-2001-0961
Buffer overflow in tab expansion capability of the most program allows local or remote attackers to execute arbitrary code via a malformed file that is viewed with most...
CVE-2001-1353
ghostscript before 6.51 allows local users to read and write arbitrary files as the 'lp' user via the file operator, even with -dSAFER enabled...
CVE-2001-0155
Format string vulnerability in VShell SSH gateway 1.0.1 and earlier allows remote attackers to execute arbitrary commands via a user name that contains format string specifiers...
CVE-2001-0174: Undefined Security Weakness
Buffer overflow in Trend Micro Virus Buster 2001 8.00 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a large "To" address...