CVE-2001-0403

/opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI...

CVE-2001-0447

Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request containing "%2e" dot dot characters...

CVE-2001-0396

The pre-login mode in the System Administrator interface of Lightwave ConsoleServer 3200 allows remote attackers to obtain sensitive information such as system status, configuration, and users...

CVE-2001-0420

Directory traversal vulnerability in talkback.cgi program allows remote attackers to read arbitrary files via a .. dot dot in the article parameter...

CVE-2001-0376

CVE-2001-0376 affects SonicWALL Tele2 and SOHO firewalls running firmware 6.0.0.0 when using IPsec with IKE pre-shared keys. The root cause is that the implementation supports only 48-byte IKE PSKs instead of the full 128-byte length, reducing the effective key space. This enables a remote attack...

CVE-2001-0450

CVE-2001-0450 concerns a directory traversal vulnerability in Transsoft FTP Broker prior to 5.5. The issue allows an attacker to perform file operations outside the FTP root via a crafted filename containing .., enabling (1) deletion of arbitrary files via DELETE and (2) listing of arbitrary dire...

CVE-2001-0432

Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 allow remote attackers to execute arbitrary commands...

CVE-2001-0410

Buffer overflow in Trend Micro Virus Buster 2001 8.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long "From" header...

CVE-2001-0438

The CVE-2001-0438 entry concerns Timbuktu for Mac OS X where a local user can modify System Preferences via the About Timbuktu menu without authentication. Affected component: Timbuktu on macOS (Preview version). Root cause details are not elaborated beyond the described UI misbehavior. Impact pe...

CVE-2001-0359

The CVE-2001-0359 entry describes a format-string vulnerability in Sierra Half-Life (build 1573 and earlier) that allows a remote attacker to execute arbitrary code via the map command. Affected software is Sierra Half-Life prior to build 1573; vulnerable component/function is the map command’s h...

CVE-2001-0426

Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges via a long LANG environmental variable...

CVE-2001-0431

Technical details for CVE-2001-0431 are not publicly available in the provided documents. Monitor for updates from official sources; no specifics on affected versions, impact, or remediation are provided here.

CVE-2001-0397

CVE-2001-0397 describes a buffer overflow in Silent Runner Collector (SRC) 1.6.1 that can be triggered by a long SMTP HELO command. The vulnerability allows remote attackers to cause a denial of service and, potentially, execute arbitrary commands. CVSS v2 base metrics are provided: AV:N/AC:L/Au:...

CVE-2001-0460

Websweeper 4.0 is affected: it does not limit the length of certain HTTP headers, enabling a DoS via an extremely large Referrer header. OpenVAS entries corroborate a denial-of-service path by sending invalid HTTP requests, potentially crashing or destabilizing the server. The CVE details do not ...

CVE-2001-0374

The HTTP server in Compaq web-enabled management software for 1 Foundation Agents, 2 Survey, 3 Power Manager, 4 Availability Agents, 5 Intelligent Cluster Administrator, and 6 Insight Manager can be used as a generic proxy server, which allows remote attackers to bypass access restrictions via th...

CVE-2001-0263

Gene6 G6 FTP Server 2.0 aka BPFTP Server 2.10 allows attackers to read file attributes outside of the web root via the 1 SIZE and 2 MDTM commands when the "show relative paths" option is not enabled...

CVE-2001-0385

GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory...

CVE-2001-0404

Vulnerability: Directory traversal in JavaServer Web Dev Kit (JSWDK) 1.0.1 allows remote read of arbitrary files via a .. sequence in an HTTP request targeting the WEB-INF directory. Affected product/component: JSWDK 1.0.1. Root cause: improper path handling enabling traversal to WEB-INF. Impact:...

CVE-2001-0398

The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attachment whose file name contains many spaces, which also causes the BAT! to misrepresent the attachment's type with a different icon...

CVE-2001-0262

CVE-2001-0262 is a historical buffer overflow in Netscape SmartDownload 1.3. The vulnerability resides in the sdph20.dll URL parser: it reserves 256 chars for a URL on the stack but can overflow when URLs longer than that are copied, allowing remote code execution as the logged-in user. Affected ...