3489 matches found
CVE-2001-0960
Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 stores the backup agent user name and password in cleartext in the aremote.dmp file in the ARCSERVE$ hidden share, which allows local and remote attackers to gain privileges...
CVE-2001-1014
eshop.pl in WebDiscounteshop allows remote attackers to execute arbitrary commands via shell metacharacters in the seite parameter...
CVE-2001-0986
SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, file attributes, or portions of source code by directly calling sqlqhit.asp with a CiScope parameter set to 1 webinfo, 2 extendedfileinfo, 3 extendedwebinfo, or...
Alcatel ADSL Modem Unrestricted Remote Access
On the Alcatel Speed Touch Pro ADSL modem, a protection mechanism feature is available to ensure that nobody can gain remote access to the modem via the WAN/DSL interface. This mechanism guarantees that nobody from outside your network can access the modem's management interface and potentially...
CVE-2001-0984
Password Safe 1.71 leaves cleartext passwords in memory when a user copies the password to the clipboard and minimizes Password Safe with the "Clear the password when minimized" and "Lock password database on minimize and prompt on restore" options enabled, which could allow an attacker with acce...
CVE-2001-1136
The libsecurity library in HP-UX 11.04 VVOS allows attackers to cause a denial of service...
CVE-2001-0711
Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Local Management Interface ILMI SNMP community string...
CVE-2001-0999
Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is text/plain, contrary to the expected behavior that text/plain messages will not run script...
CVE-2001-1013
Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no publichtml directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server...
CVE-2001-1109
Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory contents via a .. dot dot in the 1 LIST, 2 QUOTE SIZE, and 3 QUOTE MDTM commands...
CVE-2001-1110
EFTP 2.0.7.337 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection...
CVE-2001-1111
EFTP 2.0.7.337 stores user passwords in plaintext in the eftp2users.dat file...
CVE-2001-0711
CVE-2001-0711 affects Cisco IOS 11.x and 12.0 with ATM support. The flaw allows an attacker to cause a denial of service via the undocumented ILMI SNMP community string. The issue is present in combinations of IOS releases that include ATM/ILMI support. Cisco documents a fix through free software...
CVE-2001-0679
A buffer overflow in InterScan VirusWall 3.23 and 3.3 allows a remote attacker to execute arbitrary code by sending a long HELO command to the server...
CVE-2001-0647
CVE-2001-0647 affects Orange Web Server 2.1 (GoAhead-based). A malformed HTTP GET request that does not include an HTTP version can cause a remote denial of service, potentially crashing the server. Affected component is the HTTP request handling; the vulnerability is leveraged by sending a craft...
CVE-2001-1105
RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attackers to bypass SSL client authentication and gain access to sensitive data by logging in after an initial failure...
CVE-2001-0647
Orange Web Server 2.1, based on GoAhead, allows a remote attacker to perform a denial of service via an HTTP GET request that does not include the HTTP version...
CVE-2001-0679
CVE-2001-0679 describes a buffer overflow in InterScan VirusWall 3.23 and 3.3 . A remote attacker can trigger arbitrary code execution by sending a long HELO command to the server. The connected records confirm the vulnerable component and the nature of the flaw, but do not provide versions beyon...