CVE-2001-1072

Apache with modrewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / slash characters into the requested path, which causes the regular expression in the RewriteRule to fail...

CVE-2001-0970

Cross-site scripting vulnerability in TDForum 1.2 CGI script tdforum12.cgi allows remote attackers to execute arbitrary script on other clients via a forum message that contains the script...

CVE-2001-0966

Directory traversal vulnerability in Nudester 1.10 and earlier allows remote attackers to read or write arbitrary files via a .. dot dot in the CD CWD command...

CVE-2001-0943

dbsnmp in Oracle 8.0.5 and 8.1.5, under certain conditions, trusts the PATH environment variable to find and execute the 1 chown or 2 chgrp commands, which allows local users to execute arbitrary code by modifying the PATH to point to Trojan Horse programs...

CVE-2001-0965

glFTPD 1.23 allows remote attackers to cause a denial of service CPU consumption via a LIST command with an argument that contains a large number of asterisk characters...

CVE-2001-1068

qpopper 4.01 with PAM based authentication on Red Hat systems generates different error messages when an invalid username is provided instead of a valid name, which allows remote attackers to determine valid usernames on the system...

CVE-2001-1064

Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to the router on the 1 HTTP or 2 telnet service, which causes the router to become unresponsive and stop forwarding packets...

CVE-2001-1004

Cross-site scripting CSS vulnerability in gnut Gnutella client before 0.4.27 allows remote attackers to execute arbitrary script on other clients by sharing a file whose name contains the script tags...

CVE-2001-0973

BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and extracting a tar file with a symlink into the data-bag space...

Solaris LPD Command Execution

This module exploits an arbitrary command execution flaw in the in.lpd service shipped with all versions of Sun Solaris up to and including 8.0. This module uses a technique discovered by Dino Dai Zovi to exploit the flaw without needing to know the resolved name of the attacking system. Module...

CVE-2001-0703

The CVE-2001-0703 entry concerns tradecli.dll in Arcadia Internet Store 1.0, where a remote attacker can cause a denial of service by issuing a URL request containing an MS-DOS device name in the template parameter. The vulnerability is described as a DoS with partial availability impact (per the...

CVE-2001-0703

tradecli.dll in Arcadia Internet Store 1.0 allows a remote attacker to cause a denial of service via a URL request with an MS-DOS device name in the template parameter...

CVE-2001-0704

The CVE-2001-0704 entry affects Arcadia Internet Store 1.0 (tradecli.dll); a remote attacker can disclose the full path to the working directory by requesting a URL that uses a template argument for a file that does not exist. Documented impact aligns with partial confidentiality/integrity/availa...

CVE-2001-0694

CVE-2001-0694 affects WFTPD 3.00 R5 with a directory traversal vulnerability exposed via a dot-dot sequence in the CD command. The vulnerability allows a remote attacker to view arbitrary files, impacting confidentiality and integrity (CVSS v2 base score 7.5, HIGH; network attack, low complexity,...

CVE-2001-0687

The CVE-2001-0687 entry concerns Broker FTP Server 5.9.5 for Windows NT/9x. The vulnerability allows a remote attacker to disclose information from the web server by (1) issuing a CD command (CD C:) followed by LS, and (2) specifying arbitrary paths in UNC format (\computername\sharename). The av...

CVE-2001-0691

UW-IMAP imapd (Washington University) v2000a–2000c contains buffer overflows that could allow a local user, after authentication, to execute code with that user’s privileges in certain configurations. Mandrake MDKSA-2001:054 notes these vulnerabilities and that updates are provided, but the exact...

CVE-2001-0709

Vulnerability summary (CVE-2001-0709): Microsoft IIS 4.0 and earlier, when installed on a FAT partition, is susceptible to remote disclosure of ASP source code. An attacker can obtain the source by requesting a URL encoded with Unicode. The description in the provided documents confirms the expos...

CVE-2001-0688

CVE-2001-0688 concerns Broker FTP Server 5.9.5.0, where a remote attacker can trigger a denial of service by repeatedly issuing invalid CD or CWD commands (CD . .). The available connected documents provide the vulnerability description and confirm the affected product and the attack pattern, but...

CVE-2001-0695

CVE-2001-0695 : WFTPD 3.00 R5 is vulnerable to a remote denial-of-service caused by repeated requests to change directory to the floppy drive (A:). The description indicates a network-accessible condition with low attack complexity and no authentication required, leading to partial availability i...

CVE-2001-0674

CVE-2001-0674 describes a directory traversal vulnerability in the RobTex Viking Web server, prior to version 1.07-381. An unauthenticated remote attacker can read arbitrary files by crafting a hexadecimal encoded dot-dot sequence in an HTTP URL (e.g., http://www.server.com/%2e%2e/%2e%2e). The vu...