CVE-2001-0521

CVE-2001-0521 affects Aladdin eSafe Gateway versions 3.0 and earlier. The issue allows a remote attacker to bypass the gateway’s HTML SCRIPT filtering by using Unicode-encoded SCRIPT tags within the HTML document. This describes a filtering bypass in the web gateway; the documents do not provide ...

CVE-2001-0519

Aladdin eSafe Gateway versions 2.x are affected by CVE-2001-0519: a remote attacker can bypass HTML SCRIPT filtering through a crafted HTML sequence that nests SCRIPT tags within other SCRIPT tags. This is the vulnerability described in NVD/NVD-derived records, with a CVSS v2 base score of 7.5 (N...

CVE-2001-0581

CVE-2001-0581 affects Spytech Spynet Chat Server 6.5. The vulnerability allows a remote attacker to cause a denial of service (crash) by establishing a large number of connections to port 6387. The NVD entry lists a CVSS v2 base score of 5.0 (MEDIUM) with network attack vector and no privileges r...

CVE-2001-0562

CVE-2001-0562 affects the a1disp.cgi component of Drummond Miles A1Stats prior to version 1.6. The initial description documents a remote command execution vulnerability where a crafted URL containing shell metacharacters can force the execution of arbitrary commands on the server. The impact is ...

CVE-2001-0570

CVE-2001-0570 affects minicom 1.83.1 and earlier. The root cause is format-string handling allowing a local attacker to gain additional privileges (local, low complexity, no authentication). The impact is privilege escalation with complete confidentiality, integrity, and availability concerns as ...

CVE-2001-0577

CVE-2001-0577 concerns a local-privilege escalation in SCO OpenServer 5.0–5.0.6, where a buffer overflow in the first command-line argument can allow a local attacker to gain additional privileges. The affected software is SCO OpenServer 5.0 through 5.0.6; the underlying cause is a buffer overflo...

CVE-2001-0607

asecure as included with HP-UX 10.01 through 11.00 can allow a local attacker to create a denial of service and gain additional privileges via unsafe permissions on the asecure program, a different vulnerability than CVE-2000-0083...

CVE-2001-0600

CVE-2001-0600 affects Lotus Domino R5 prior to 5.0.7. The vulnerability allows a remote attacker to cause a denial-of-service by making repeated URL requests using the same HTTP headers (e.g., Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type). The issue is documented by NVD ...

CVE-2001-0599

Sybase Adaptive Server Anywhere Database Engine 6.0.3.2747 and earlier as included with Symantec Ghost 6.5 allows a remote attacker to create a denial of service by sending large 45Kb amounts of data to port 2638...

CVE-2001-0633

The CVE-2001-0633 issue affects Sun Chili!Soft ASP on multiple Unix platforms. The vulnerability is a directory traversal in the sample script codebrws.asp, allowing a remote attacker to read arbitrary files above the web root by using a .. path traversal. The description does not specify affecte...

CVE-2001-0618

Orinoco RG-1000 wireless Residential Gateway uses the last 5 digits of the 'Network Name' or SSID as the default Wired Equivalent Privacy WEP encryption key. Since the SSID occurs in the clear during communications, a remote attacker could determine the WEP key and decrypt RG-1000 traffic...

CVE-2001-0614

CVE-2001-0614 affects Carello E-Commerce. Connected sources confirm a remote command-execution vulnerability in Carello.dll up to version 1.3, exploitable via a specially crafted URL, allowing arbitrary commands with the web server’s privileges. Impact is described as remote code execution with w...

CVE-2001-0607

CVE-2001-0607 affects HP-UX 10.01–11.00 where the asecure program can be exploited by local attackers due to unsafe permissions on the asecure file, enabling denial of service and privilege escalation. The underlying issue is improper file permissions on the asecure component, allowing a local at...

CVE-2001-0632

Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX are affected by CVE-2001-0632 due to a default admin username/password created during default installation, enabling a remote attacker to gain additional privileges. The NVD entry assigns a CVSS v2 base score of 7.5 (HIGH) with network access, no authe...

CVE-2001-0588

CVE-2001-0588 affects sendmail 8.9.3 included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6. A local attacker can gain additional privileges via a buffer overflow in the first argument to the command. The root cause is a buffer overflow in handling the first argument, leading to partial c...

CVE-2001-0570

minicom 1.83.1 and earlier allows a local attacker to gain additional privileges via numerous format string attacks...

CVE-2001-0602

Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated 400 URL requests for DOS devices...

CVE-2001-0597

The CVE-2001-0597 entry concerns Zetetic Secure Tool for Recalling Important Passwords (STRIP) for PalmOS (0.5 and earlier). The vulnerability arises from STRIP using SysRandom seeded by TimeGetTicks, coupled with an implementation flaw that greatly reduces the password search space, enabling a l...

CVE-2001-0598

CVE-2001-0598 affects Symantec Ghost 6.5 and earlier. A remote attacker can cause a denial of service by sending large (>45 KB) data to the Ghost Configuration Server on port 1347, triggering an unhandled error. Public details confirm the vulnerable component is the Ghost Configuration Server,...

CVE-2001-0350

Summary: CVE-2001-0350 affects Microsoft Windows 2000 Telnet Service, where the service creates named pipes with predictable names and does not verify them, enabling unprivileged local users to execute arbitrary code in the Local System context by providing a malicious named pipe and triggering c...