CVE-2001-0498

Oracle 8i (version 8.1.7 and earlier) is affected by CVE-2001-0498 via Transparent Network Substrate (TNS) over Net8/SQLNet. The issue allows remote denial of service when a malformed SQLNet connection request uses a large header-extension offset. The connected sources confirm the affected compon...

CVE-2001-0579

lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first argument to the command...

CVE-2001-0352

CVE-2001-0352 affects 3Com AirConnect AP-4111 and Symbol 41X1 APs. The vulnerability arises from SNMP queries that read WEP keys from the IEEE 802.11b MIB (dot11WEPDefaultKeyValue in dot11WEPDefaultKeysTable) or the Symbol MIB (ap128bWepKeyValue), where keys should be write-only. This permits rem...

CVE-2001-0581

CVE-2001-0581 affects Spytech Spynet Chat Server 6.5. The vulnerability allows a remote attacker to cause a denial of service (crash) by establishing a large number of connections to port 6387. The NVD entry lists a CVSS v2 base score of 5.0 (MEDIUM) with network attack vector and no privileges r...

CVE-2001-0618

The CVE-2001-0618 entry concerns the Orinoco RG-1000 wireless Residential Gateway. The vulnerability arises because the device uses the last 5 digits of the SSID as the default WEP key, and since the SSID is transmitted in clear, a remote attacker could determine the WEP key and decrypt RG-1000 t...

CVE-2001-0524

CVE-2001-0524 affects eEye SecureIIS versions 1.0.3 and earlier. The issue is that SecureIIS does not perform length checking on individual HTTP headers, allowing a remote attacker to send arbitrarily long header strings to IIS, contradicting the product’s advertised behavior. The vulnerability’s...

CVE-2001-0601

CVE-2001-0601 affects Lotus Domino R5 before 5.0.7. The vulnerability allows a remote attacker to cause a denial of service by sending HTTP requests that contain certain combinations of UNICODE characters. The DoS is related to availability impact and is described as partial. Root cause is proces...

CVE-2001-0588

CVE-2001-0588 affects sendmail 8.9.3 included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6. A local attacker can gain additional privileges via a buffer overflow in the first argument to the command. The root cause is a buffer overflow in handling the first argument, leading to partial c...

CVE-2001-1288

Windows 2000 and Windows NT allows local users to cause a denial of service reboot by executing a command at the command prompt and pressing the F7 and enter keys several times while the command is executing, possibly related to an exception handling error in csrss.exe...

CVE-2001-0357

FormMail vulnerability CVE-2001-0357 affects FormMail.pl (FormMail) 1.6 and earlier. An attacker can remotely modify recipient and message parameters to send anonymous email, effectively enabling spam through the vulnerable script. Connected OpenVAS data identifies affected versions (All versions...

CVE-2001-0599

Sybase Adaptive Server Anywhere Database Engine 6.0.3.2747 and earlier as included with Symantec Ghost 6.5 allows a remote attacker to create a denial of service by sending large 45Kb amounts of data to port 2638...

CVE-2001-0620

iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server NAS LDAP database and read arbitrary files by obtaining the cleartext administrator username and password from the configuration file, which has insecure permissions...

CVE-2001-0352

SNMP agents in 3Com AirConnect AP-4111 and Symbol 41X1 Access Point allow remote attackers to obtain the WEP encryption key by reading it from a MIB when the value should be write-only, via 1 dot11WEPDefaultKeyValue in the dot11WEPDefaultKeysTable of the IEEE 802.11b MIB, or 2 ap128bWepKeyValue i...

CVE-2001-0584

IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service hang via long 1 SELECT or 2 EXAMINE commands...

CVE-2001-0570

minicom 1.83.1 and earlier allows a local attacker to gain additional privileges via numerous format string attacks...

CVE-2001-0603

CVE-2001-0603 affects Lotus Domino R5 prior to 5.0.7. The vulnerability permits a remote attacker to cause a denial-of-service by repeatedly sending large data (>10 KB) to the DIIOP-CORBA service over TCP port 63148. The NVD entry provides a basic impact assessment (availability impact) and a ...

CVE-2001-0499

Oracle 8i TNS Listener (CVE-2001-0499) is affected by a stack/buffer overflow when processing an overly long ARGUMENTS string, enabling remote code execution as the listener's process user. Public materials in the connected docs show an exploit path (Metasploit module, exploit scripts) and refere...

CVE-2001-0520

CVE-2001-0520 affects Aladdin eSafe Gateway versions 3.0 and earlier. The vulnerability allows a remote attacker to bypass filtering of SCRIPT tags by embedding scripts within certain HTML constructs (e.g., onload in BODY, href in A, BUTTON, INPUT, or other tag-defined scripts). The NVD entry lis...

CVE-2001-0557

The connected CERT entry details a directory traversal vulnerability in Jana Server versions 1.4x (Windows) where hex-encoded “..” requests are not properly filtered, allowing remote attackers to view any file within the server’s document root with the Jana process privileges. Impact: arbitrary f...

CVE-2001-0575

The vulnerability CVE-2001-0575 affects SCO OpenServer 5.0.6 and is caused by a buffer overflow in the lpshut component. A local attacker can potentially gain additional privileges by supplying a long first argument to lpshut. The connected documents confirm the affected software and the root cau...