CVE-2001-0705

CVE-2001-0705 describes a directory traversal vulnerability in the Arcadia Internet Store 1.0 component tradecli.dll that allows a remote attacker to read arbitrary files on the web server by supplying URLs with "dot dot" sequences in the template argument. The public records (NVD) state the affe...

CVE-2001-0636

Buffer overflows in Raytheon SilentRunner allow remote attackers to 1 cause a denial of service in the collector cle.exe component of SilentRunner 2.0 via traffic containing long passwords, or 2 execute arbitrary commands via long HTTP queries in the Knowledge Browser component in SilentRunner 2....

CVE-2001-0681

CVE-2001-0681 describes a buffer overflow in ftpd of QPC QVT/Net 5.0 and QVT/Term 5.0 that allows a remote attacker to cause a denial of service by sending a long username or password. The available documents confirm the affected software and the underlying cause (buffer overflow) and the observe...

CVE-2001-0678

CVE-2001-0678 describes a buffer overflow in reggo.dll used by Trend Micro InterScan VirusWall prior to 3.51 build 1349 for Windows NT 3.5 and InterScan WebManager 1.2. The underlying issue is a buffer overflow in reggo.dll that could allow a local attacker to execute arbitrary code. The provided...

CVE-2001-0509

Vulnerabilities in RPC servers in 1 Microsoft Exchange Server 2000 and earlier, 2 Microsoft SQL Server 2000 and earlier, 3 Windows NT 4.0, and 4 Windows 2000 allow remote attackers to cause a denial of service via malformed inputs...

CVE-2001-0636

CVE-2001-0636 affects Raytheon SilentRunner 2.0 and 2.0.1. The root cause is buffer overflow vulnerabilities in the collector (cle.exe) when parsing long passwords, enabling potential DoS, and in the Knowledge Browser when processing long HTTP queries, enabling execution of arbitrary code. Impact...

CVE-2001-0702

Cerberus FTP 1.5 and earlier is affected by CVE-2001-0702. A long , , or PASV command can cause denial of service and possibly allow arbitrary code execution. The connected documents confirm the affected software and vectors but do not provide exploitation details or a confirmed patch/version for...

CVE-2001-0691

Buffer overflows in Washington University imapd 2000a through 2000c could allow local users without shell access to execute code as themselves in certain configurations...

CVE-2001-0645

CVE-2001-0645 affects Symantec/AXENT NetProwler 3.5.x. The provided materials indicate the presence of several default passwords that could permit an attacker to (1) access the management tier via the admin password, and (2) connect to a MySQL ODBC from the management tier using a blank password....

CVE-2001-0707

CVE-2001-0707 applies to Denicomp RSHD 2.18 and earlier. A remote attacker can trigger a denial of service (crash) by sending a long string to port 514. The provided sources confirm the affected product and the impact but do not document a precise root cause, vulnerable component, or available fi...

CVE-2001-0695

WFTPD 3.00 R5 allows a remote attacker to cause a denial of service by making repeated requests to cd to the floppy drive A:...

CVE-2001-0693

WebTrends HTTP Server 3.1c and 3.5 allows a remote attacker to view script source code via a filename followed by an encoded space %20...

CVE-2001-0642

The CVE-2001-0642 entry describes a directory traversal vulnerability in IncrediMail up to version 1400185 and earlier. By injecting leading “..” sequences into filenames listed in the content.ini file, local users could overwrite files on the local disk. The root cause is improper verification o...

CVE-2001-0649

Personal Web Sharing 1.5.5 allows a remote attacker to cause a denial of service via a long HTTP request...

CVE-2001-0681

Buffer overflow in ftpd in QPC QVT/Net 5.0 and QVT/Term 5.0 allows a remote attacker to cause a denial of service via a long 1 username or 2 password...

CVE-2001-0678

A buffer overflow in reggo.dll file used by Trend Micro InterScan VirusWall prior to 3.51 build 1349 for Windows NT 3.5 and InterScan WebManager 1.2 allows a local attacker to execute arbitrary code...

CVE-2001-0693

CVE-2001-0693 affects WebTrends HTTP Server 3.1c and 3.5, where a remote attacker can view script source by requesting a filename followed by an encoded space (%20). The underlying issue is an information disclosure vulnerability in the server’s handling of URL paths. The CVSS vector indicates ne...

CVE-2001-0688

Broker FTP Server 5.9.5.0 allows a remote attacker to cause a denial of service by repeatedly issuing an invalid CD or CWD "CD . ." command...

CVE-2001-0552

ovactiond in HP OpenView Network Node Manager NNM 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message...

CVE-2001-0552

CVE-2001-0552 affects HP OpenView Network Node Manager (NNM) 6.1 and Tivoli NetView (5.x/6.x). The vulnerability arises from ovactiond handling SNMP traps; remote attackers can inject shell metacharacters in a trap message to execute arbitrary commands, gaining the privileges of ovactiond (typica...