3468 matches found
CVE-2001-0703
tradecli.dll in Arcadia Internet Store 1.0 allows a remote attacker to cause a denial of service via a URL request with an MS-DOS device name in the template parameter...
CVE-2001-0691
UW-IMAP imapd (Washington University) v2000a–2000c contains buffer overflows that could allow a local user, after authentication, to execute code with that user’s privileges in certain configurations. Mandrake MDKSA-2001:054 notes these vulnerabilities and that updates are provided, but the exact...
CVE-2001-0707
CVE-2001-0707 applies to Denicomp RSHD 2.18 and earlier. A remote attacker can trigger a denial of service (crash) by sending a long string to port 514. The provided sources confirm the affected product and the impact but do not document a precise root cause, vulnerable component, or available fi...
CVE-2001-0709
Vulnerability summary (CVE-2001-0709): Microsoft IIS 4.0 and earlier, when installed on a FAT partition, is susceptible to remote disclosure of ASP source code. An attacker can obtain the source by requesting a URL encoded with Unicode. The description in the provided documents confirms the expos...
CVE-2001-0693
CVE-2001-0693 affects WebTrends HTTP Server 3.1c and 3.5, where a remote attacker can view script source by requesting a filename followed by an encoded space (%20). The underlying issue is an information disclosure vulnerability in the server’s handling of URL paths. The CVSS vector indicates ne...
CVE-2001-0702
Cerberus FTP 1.5 and earlier is affected by CVE-2001-0702. A long , , or PASV command can cause denial of service and possibly allow arbitrary code execution. The connected documents confirm the affected software and vectors but do not provide exploitation details or a confirmed patch/version for...
CVE-2001-0689
CVE-2001-0689 affects Trend Micro Virus Control System 1.8, where a remote attacker can view and modify configuration via a specific CGI program. The NVD entry documents a high-severity issue (CVSS v2 base score 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P). The connected documents do not provide concrete exp...
CVE-2001-0636
CVE-2001-0636 affects Raytheon SilentRunner 2.0 and 2.0.1. The root cause is buffer overflow vulnerabilities in the collector (cle.exe) when parsing long passwords, enabling potential DoS, and in the Knowledge Browser when processing long HTTP queries, enabling execution of arbitrary code. Impact...
CVE-2001-0649
CVE-2001-0649 affects Personal Web Sharing 1.5.5. The vulnerability is a denial-of-service caused by processing a too-long HTTP request, which can crash the PWS service. Public details in the provided documents consistently describe a remote DoS vector via oversized requests, with no evidence of ...
CVE-2001-0678
CVE-2001-0678 describes a buffer overflow in reggo.dll used by Trend Micro InterScan VirusWall prior to 3.51 build 1349 for Windows NT 3.5 and InterScan WebManager 1.2. The underlying issue is a buffer overflow in reggo.dll that could allow a local attacker to execute arbitrary code. The provided...
CVE-2001-0509
CVE-2001-0509 affects RPC servers in Microsoft Exchange Server 2000 and earlier, Microsoft SQL Server 2000 and earlier, Windows NT 4.0, and Windows 2000. The vulnerability allows remote attackers to cause a denial of service via malformed inputs. No exploitation details or specific fixes are prov...
CVE-2001-0674
CVE-2001-0674 describes a directory traversal vulnerability in the RobTex Viking Web server, prior to version 1.07-381. An unauthenticated remote attacker can read arbitrary files by crafting a hexadecimal encoded dot-dot sequence in an HTTP URL (e.g., http://www.server.com/%2e%2e/%2e%2e). The vu...
CVE-2001-0687
The CVE-2001-0687 entry concerns Broker FTP Server 5.9.5 for Windows NT/9x. The vulnerability allows a remote attacker to disclose information from the web server by (1) issuing a CD command (CD C:) followed by LS, and (2) specifying arbitrary paths in UNC format (\computername\sharename). The av...
CVE-2001-0552
CVE-2001-0552 affects HP OpenView Network Node Manager (NNM) 6.1 and Tivoli NetView (5.x/6.x). The vulnerability arises from ovactiond handling SNMP traps; remote attackers can inject shell metacharacters in a trap message to execute arbitrary commands, gaining the privileges of ovactiond (typica...
CVE-2001-0636
Buffer overflows in Raytheon SilentRunner allow remote attackers to 1 cause a denial of service in the collector cle.exe component of SilentRunner 2.0 via traffic containing long passwords, or 2 execute arbitrary commands via long HTTP queries in the Knowledge Browser component in SilentRunner 2....
CVE-2001-0688
Broker FTP Server 5.9.5.0 allows a remote attacker to cause a denial of service by repeatedly issuing an invalid CD or CWD "CD . ." command...
CVE-2001-0703
The CVE-2001-0703 entry concerns tradecli.dll in Arcadia Internet Store 1.0, where a remote attacker can cause a denial of service by issuing a URL request containing an MS-DOS device name in the template parameter. The vulnerability is described as a DoS with partial availability impact (per the...
CVE-2001-0704
The CVE-2001-0704 entry affects Arcadia Internet Store 1.0 (tradecli.dll); a remote attacker can disclose the full path to the working directory by requesting a URL that uses a template argument for a file that does not exist. Documented impact aligns with partial confidentiality/integrity/availa...
CVE-2001-0509
Vulnerabilities in RPC servers in 1 Microsoft Exchange Server 2000 and earlier, 2 Microsoft SQL Server 2000 and earlier, 3 Windows NT 4.0, and 4 Windows 2000 allow remote attackers to cause a denial of service via malformed inputs...