CVE-2001-0509

CVE-2001-0509 affects RPC servers in Microsoft Exchange Server 2000 and earlier, Microsoft SQL Server 2000 and earlier, Windows NT 4.0, and Windows 2000. The vulnerability allows remote attackers to cause a denial of service via malformed inputs. No exploitation details or specific fixes are prov...

CVE-2001-0509

Vulnerabilities in RPC servers in 1 Microsoft Exchange Server 2000 and earlier, 2 Microsoft SQL Server 2000 and earlier, 3 Windows NT 4.0, and 4 Windows 2000 allow remote attackers to cause a denial of service via malformed inputs...

CVE-2001-0683

CVE-2001-0683 describes a memory leak in Netscape Collabra Server 3.5.4 and earlier that allows a remote attacker to cause a denial of service (memory exhaustion) by repeatedly sending approximately 5 KB of data to TCP port 5238. Affected software: Netscape Collabra Server (versions ≤ 3.5.4). Roo...

CVE-2001-0708

CVE-2001-0708 affects Denicomp REXECD 1.05 and earlier. A remote attacker can cause a crash (DoS) by sending a long string to the service. Public references list this CVE entry with the denial of service impact; no additional exploit details are provided in the connected documents. No remediation...

CVE-2001-0649

CVE-2001-0649 affects Personal Web Sharing 1.5.5. The vulnerability is a denial-of-service caused by processing a too-long HTTP request, which can crash the PWS service. Public details in the provided documents consistently describe a remote DoS vector via oversized requests, with no evidence of ...

CVE-2001-1167

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2001-0976. Reason: This candidate is a duplicate of CVE-2001-0976. Notes: CVE-2001-0976 should be used instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...

CVE-2001-1455

Netegrity SiteMinder 3.6 through 4.5.1 allows remote attackers to bypass filtering via URLs containing Unicode characters...

MS01-046: IrDA Driver Malformed Packet Remote DoS (252795)

The hotfix for the 'IrDA access violation patch' problem has not been applied. This vulnerability can allow an attacker who is physically near the W2K host to shut it down using a remote control. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10734;...

Sendmail < 8.11.6 -d category Value Local Overflow

The remote Sendmail server, according to its version number, may be vulnerable to a local buffer overflow allowing local users to gain root privileges. C Tenable Network Security, Inc. References also vulnerable to a heap overflow Date: Mon, 28 May 2001 18:16:57 -0400 EDT From: "Michal Zalewski"...

CVE-2001-0577

recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first command line argument...

CVE-2001-0580

Hughes Technologies Virtual DNS VDNS Server 1.0 allows a remote attacker to create a denial of service by connecting to port 6070, sending some data, and closing the connection...

CVE-2001-0584

IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service hang via long 1 SELECT or 2 EXAMINE commands...

CVE-2001-0606

Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 VVOS with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service...

CVE-2001-0633

Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web root via a '..' dot dot attack in the sample script 'codebrws.asp'...

CVE-2001-0556

The Nirvana Editor NEdit 5.1.1 and earlier allows a local attacker to overwrite other users' files via a symlink attack on 1 backup files or 2 temporary files used when nedit prints a file or portions of a file...

CVE-2001-0568

Digital Creations Zope 2.3.1 b1 and earlier allows a local attacker Zope user with through-the-web scripting capabilities to alter ZClasses class attributes...

CVE-2001-0578

Buffer overflow in lpforms in SCO OpenServer 5.0-5.0.6 can allow a local attacker to gain additional privileges via a long first argument to the lpforms command...

CVE-2001-0582

Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' dot dot attack, or variations, in 1 GET, 2 CD, 3 NLST, 4 SIZE, 5 RETR...

CVE-2001-0583

Alt-N Technologies MDaemon 3.5.4 allows a remote attacker to create a denial of service via the URL request of a MS-DOS device such as GET /aux to 1 the Worldclient service at port 3000, or 2 the Webconfig service at port 3001...

CVE-2001-0586

TrendMicro ScanMail for Exchange 3.5 Evaluation allows a local attacker to recover the administrative credentials for ScanMail via a combination of unprotected registry keys and weakly encrypted passwords...