CVE-2001-0569

Digital Creations Zope 2.3.1 b1 and earlier contains a problem in the method return values related to the classes 1 ObjectManager, 2 PropertyManager, and 3 PropertySheet...

CVE-2001-0600

Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated URL requests with the same HTTP headers, such as 1 Accept, 2 Accept-Charset, 3 Accept-Encoding, 4 Accept-Language, and 5 Content-Type...

CVE-2001-0603

Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeatedly sending large 10Kb amounts of data to the DIIOP - CORBA service on TCP port 63148...

CVE-2001-0582

CrushFTP FTP Server 2.1.6 and earlier is affected by a local directory-traversal vulnerability allowing access to arbitrary files via traversal sequences in FTP commands (GET, CD, NLST, SIZE, RETR). The underlying issue is inadequate input filtering that permits ".."-style path traversal, enablin...

CVE-2001-0571

Directory traversal vulnerability in the web server for 1 Elron Internet Manager IM Message Inspector and 2 Anti-Virus before 3.0.4 allows remote attackers to read arbitrary files via a .. dot dot in the requested URL...

CVE-2001-0562

a1disp.cgi program in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to execute commands via a specially crafted URL which includes shell metacharacters...

CVE-2001-0601

Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via HTTP requests containing certain combinations of UNICODE characters...

CVE-2001-0602

CVE-2001-0602 affects Lotus Domino R5 prior to 5.0.7, where a remote attacker can cause a denial of service by sending repeated URL requests (>400) to DOS devices. The vulnerability is evidenced by multiple sources in the connected documents, which describe the same impact class for Domino R5

CVE-2001-0632

Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX are affected by CVE-2001-0632 due to a default admin username/password created during default installation, enabling a remote attacker to gain additional privileges. The NVD entry assigns a CVSS v2 base score of 7.5 (HIGH) with network access, no authe...

CVE-2001-0606

The CVE-2001-0606 entry concerns iPlanet Web Server 4.X on HP-UX 11.04 (VVOS) with VirtualVault A.04.00, where a remote attacker can cause a denial of service via the HTTPS service. The connected sources (NVD/CVE records) provide the affected product and the vulnerability class (remote DoS over H...

CVE-2001-0576

lpusers as included with SCO OpenServer 5.0 through 5.0.6 allows a local attacker to gain additional privileges via a buffer overflow attack in the '-u' command line parameter...

CVE-2001-0592

Watchguard Firebox II prior to 4.6 is affected. Remote attacker can induce a kernel denial of service by sending a large stream (>10,000) of malformed ICMP or TCP packets. No exploit details are provided in the connected documents. No remediation details are specified in the available sources.

CVE-2001-0349

CVE-2001-0349 affects Microsoft Windows 2000, specifically the Telnet Service. The Telnet Service creates named pipes to share data between session handlers, using an algorithm to name pipes that is easily predictable, and it does not properly verify the pipe names. If a local attacker with acces...

CVE-2001-0570

CVE-2001-0570 affects minicom 1.83.1 and earlier. The root cause is format-string handling allowing a local attacker to gain additional privileges (local, low complexity, no authentication). The impact is privilege escalation with complete confidentiality, integrity, and availability concerns as ...

CVE-2001-0519

Aladdin eSafe Gateway versions 2.x are affected by CVE-2001-0519: a remote attacker can bypass HTML SCRIPT filtering through a crafted HTML sequence that nests SCRIPT tags within other SCRIPT tags. This is the vulnerability described in NVD/NVD-derived records, with a CVSS v2 base score of 7.5 (N...

CVE-2001-0561

CVE-2001-0561 affects Drummond Miles A1Stats prior to 1.6, via directory traversal in a1disp2.cgi, a1disp3.cgi, or a1disp4.cgi. The underlying issue is a dot-dot (.. ) traversal that allows reading arbitrary files, as documented in the initial entry. Connected Nessus plugins include multiple item...

CVE-2001-0571

The CVE-2001-0571 entry describes a directory traversal vulnerability in the web server component used by (1) Elron Internet Manager Message Inspector and (2) Anti-Virus prior to 3.0.4. The flaw allows remote attackers to read arbitrary files by supplying a ... sequence in the requested URL. Affe...

CVE-2001-0579

SCO OpenServer 5.0.6 is affected by CVE-2001-0579 due to a buffer overflow in the first argument to lpadmin, enabling a local attacker to gain additional privileges. The connected sources confirm the flaw is in lpadmin and describe privilege escalation, but do not provide exploit code, affected v...

CVE-2001-0614

CVE-2001-0614 affects Carello E-Commerce. Connected sources confirm a remote command-execution vulnerability in Carello.dll up to version 1.3, exploitable via a specially crafted URL, allowing arbitrary commands with the web server’s privileges. Impact is described as remote code execution with w...

CVE-2001-0623

CVE-2001-0623 affects the sendfiled component of SAFT on Linux, where privileges are not properly dropped when sending notification emails, enabling a local user to gain privileges (local privilege escalation). The issue is documented in Debian security advisories DSA-050-1 and DSA-052-1, which d...