CVE-2001-0428

CVE-2001-0428 affects Cisco VPN 3000 series concentrators prior to 2.5.2(F). The vulnerability arises from handling IP packets with an invalid IP option, enabling remote denial of service. The available sources list the affected product and the impact (DoS) but do not provide details on exploits,...

CVE-2001-0377

Inframail (Infradig) before version 3.98a is affected. A remote attacker can cause a denial of service by sending a malformed POST request that includes a space followed by a large string. The CVSS-derived impact indicates partial availability loss with network access and no authentication, no co...

CVE-2001-0340

An issue in Outlook Web Access (OWA) for Microsoft Exchange 2000 Server and Internet Explorer lets a malicious HTML attachment execute script when opened via OWA, with the script running under the OWA user’s privileges and potentially accessing/manipulating messages and folders on the server. Exp...

CVE-2001-0494

IPSwitch IMail SMTP Buffer Overflow (CVE-2001-0494) affects IMail Server 6.06 and earlier. The OpenVAS/Nessus/NVD entries describe a vulnerability in theIMail SMTP daemon where inadequate bounds checking on input passed to the Mailing List handler allows remote attackers to remotely execute arbit...

CVE-2001-0136

ProFTPD 1.2.0rc2 is affected by a memory leak that can be exploited to cause DoS via a sequence of USER commands and, if the server is installed with a writable scoreboard, possibly SIZE commands. Mandrake advisory notes the USER and SIZE leaks (SIZE only when scoreboard is writable) and mentions...

CVE-2001-0176

CVE-2001-0176 concerns the Voyant Sonata 3.x setuid doroot program, where passing arbitrary command line arguments can grant local users root privileges. The vulnerability stems from the program’s setuid behavior, enabling privilege escalation when specific arguments are invoked. Public reference...

CVE-2001-0429

CVE-2001-0429 affects Cisco Catalyst 5000 series switches (versions 6.1(2) and earlier). The issue occurs when an 802.1x frame is received on a STP blocked port and is forwarded within that VLAN, causing a network storm and a denial of service. The connected Nessus/CSCs detail the same STP/802.1x...

CVE-2001-0402

CVE-2001-0402 affects IPFilter 3.4.16 and earlier. The issue is that the module does not include sufficient session information in its cache, enabling a remote attacker to bypass access restrictions by sending fragmented packets to a restricted port after sending unfragmented packets to an unrest...

CVE-2001-0361

CVE-2001-0361 affects SSH v1.5 implementations, notably OpenSSH up to 2.3.0, AppGate, and ssh-1 up to 1.2.31, when configured in certain ways. The issue enables a remote attacker to decrypt and/or alter traffic via a Bleichenbacher attack on PKCS#1 version 1.5. The connected PT security entries (...

CVE-2001-1014

eshop.pl in WebDiscounteshop allows remote attackers to execute arbitrary commands via shell metacharacters in the seite parameter...

CVE-2001-0959

Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 creates a hidden share named ARCSERVE$, which allows remote attackers to obtain sensitive information and overwrite critical files...

CVE-2001-0960

Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 stores the backup agent user name and password in cleartext in the aremote.dmp file in the ARCSERVE$ hidden share, which allows local and remote attackers to gain privileges...

CVE-2001-0986

SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, file attributes, or portions of source code by directly calling sqlqhit.asp with a CiScope parameter set to 1 webinfo, 2 extendedfileinfo, 3 extendedwebinfo, or...

Alcatel ADSL Modem Unrestricted Remote Access

On the Alcatel Speed Touch Pro ADSL modem, a protection mechanism feature is available to ensure that nobody can gain remote access to the modem via the WAN/DSL interface. This mechanism guarantees that nobody from outside your network can access the modem's management interface and potentially...

CVE-2001-0984

Password Safe 1.71 leaves cleartext passwords in memory when a user copies the password to the clipboard and minimizes Password Safe with the "Clear the password when minimized" and "Lock password database on minimize and prompt on restore" options enabled, which could allow an attacker with acce...

CVE-2001-1136

The libsecurity library in HP-UX 11.04 VVOS allows attackers to cause a denial of service...

CVE-2001-0647

Orange Web Server 2.1, based on GoAhead, allows a remote attacker to perform a denial of service via an HTTP GET request that does not include the HTTP version...

CVE-2001-1110

EFTP 2.0.7.337 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection...

CVE-2001-1111

EFTP 2.0.7.337 stores user passwords in plaintext in the eftp2users.dat file...

CVE-2001-0711

CVE-2001-0711 affects Cisco IOS 11.x and 12.0 with ATM support. The flaw allows an attacker to cause a denial of service via the undocumented ILMI SNMP community string. The issue is present in combinations of IOS releases that include ATM/ILMI support. Cisco documents a fix through free software...