CVE-2001-0254

FaSTream FTP++ Server 2.0 allows remote attackers to obtain the real pathname of the server via the "pwd" command...

CVE-2001-0256

FaSTream FTP++ Server 2.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long username...

CVE-2001-0258

The Easycom/Safecom Print Server firmware 404.590 PrintGuide server allows remote attackers to cause a denial of service via a large number of connections that send null characters...

CVE-2001-0309

inetd in Red Hat 6.2 does not properly close sockets for internal services such as chargen, daytime, echo, etc., which allows remote attackers to cause a denial of service via a series of connections to the internal services...

CVE-2001-0314

Buffer overflow in www.tol module in America Online AOL 5.0 may allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long URL in a link...

CVE-2001-0322

MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of service application crash via a script that creates and deletes an object that is associated with the browser window object...

CVE-2001-1046

Buffer overflow in qpopper aka qpop or popper 4.0 through 4.0.2 allows remote attackers to gain privileges via a long username...

CVE-2001-0318

Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the FTP server while using a malformed working directory cwd...

CVE-2001-0214

Way-board CGI program allows remote attackers to read arbitrary files by specifying the filename in the db parameter and terminating the filename with a null byte...

CVE-2001-1028

Buffer overflow in ultimatesource function of man 1.5 and earlier allows local users to gain privileges...

CVE-2001-1349

Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers...

CVE-2001-1335

Directory traversal vulnerability in CesarFTP 0.98b and earlier allows remote authenticated users such as anonymous to read arbitrary files via a GET with a filename that contains a ...%5c modified dot dot...

CVE-2001-0453

Directory traversal vulnerability in BRS WebWeaver HTTP server allows remote attackers to read arbitrary files via a .. dot dot attack in the 1 syshelp, 2 sysimages, or 3 scripts directories...

CVE-2001-0453

The CVE-2001-0453 entry concerns the BRS WebWeaver HTTP server, where a directory traversal flaw allows remote attackers to read arbitrary files. The vulnerability is triggered by a .. (dot dot) path traversal in one of three directories (syshelp, sysimages, or scripts). The provided documents co...

CVE-2001-0452

CVE-2001-0452 affects the BRS WebWeaver FTP server prior to 0.64 Beta. The vulnerability allows a remote attacker to obtain the real pathname of the server by issuing a sequence: first a problematic CD * command, followed by an ls. The available documents confirm the affected product and the exac...

CVE-2001-0452

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD " command followed by an ls command...

CVE-2001-0472

The CVE-2001-0472 entry affects Hursley Software Laboratories Consumer Transaction Framework (HSLCTF). It describes a vulnerability in the HTTP object that allows remote attackers to trigger a denial of service (crash) by sending an extremely long HTTP request. The available documents confirm the...

CVE-2001-0397

CVE-2001-0397 describes a buffer overflow in Silent Runner Collector (SRC) 1.6.1 that can be triggered by a long SMTP HELO command. The vulnerability allows remote attackers to cause a denial of service and, potentially, execute arbitrary commands. CVSS v2 base metrics are provided: AV:N/AC:L/Au:...

CVE-2001-0246

Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain, aka a variant of the "Frame Domain...

CVE-2001-0433

CVE-2001-0433 affects Savant 3.0 web server. A buffer overflow in the handling of the long Host HTTP header allows remote attackers to cause a denial of service and potentially execute arbitrary commands. Exploitation is described as remote and via crafted Host headers. No remediation details are...