CVE-2001-0421

The CVE-2001-0421 issue affects the Solaris FTP server (Solaris 8 and earlier). The vulnerability arises when an authenticated/invalid password sequence is followed by a CWD ~ command, which can trigger a core dump in the root directory and may lead to leaking sensitive data (e.g., shadowed passw...

CVE-2001-0491

Affected product: RaidenFTPD Server 2.1 (before build 952). Vulnerability: Directory traversal allowing access to files outside the FTP root via dot-dot sequences in CWD and NLST commands. The Nessus plugin confirms that an authenticated attacker could read and write arbitrary files outside the i...

CVE-2001-0491

Directory traversal vulnerability in RaidenFTPD Server 2.1 before build 952 allows attackers to access files outside the ftp root via dot dot attacks, such as 1 .... in CWD, 2 .. in NLST, or 3 ... in NLST...

CVE-2001-0398

The BAT! mail client is affected by CVE-2001-0398. An attachment whose file name contains many spaces can bypass the user warning for executable attachments and allow remote attackers to execute arbitrary commands, while also causing the client to misrepresent the attachment’s type with a differe...

CVE-2001-0470

Buffer overflow in SNMP proxy agent snmpd in Solaris 8 may allow local users to gain root privileges by calling snmpd with a long program name...

CVE-2001-0370

CVE-2001-0370 affects the fcheck tool prior to version 2.57.59. The vulnerability arises because it calls the file signature checking program insecurely, allowing a local user to execute arbitrary commands by providing a file name containing shell metacharacters. This is a local-elevation style i...

CVE-2001-0355

The CVE-2001-0355 entry affects Novell GroupWise 5.5 (service packs 1 and 2). The vulnerability arises from an implementation error in GroupWise system policies that allows a remote attacker to access arbitrary files. The connected documents confirm the affected product and the root cause (policy...

CVE-2001-0396

The CVE-2001-0396 entry concerns Lightwave ConsoleServer 3200, where the pre-login mode of the System Administrator interface exposes sensitive information (system status, configuration, users) to remote attackers. The vulnerability arises before authentication, enabling information disclosure wi...

CVE-2001-0384

The CVE-2001-0384 issue affects Reliant Sinix’s ppd component, where a local user can exploit a symlink in the /tmp/ppd.trace file to corrupt arbitrary files. The exists description confirms a local attack via a symlink; no exploit details or affected versions are provided. The provided documents...

CVE-2001-0381

The CVE-2001-0381 entry describes a vulnerability in the OpenPGP/PGP standard where an attacker can determine the private signature key through a cryptanalytic attack that involves modifying the encrypted private key file and then signing a single message. The available documents identify the aff...

CVE-2001-0478

CVE-2001-0478 affects phpMyAdmin 2.2.0 and earlier. The vulnerability is a directory traversal in the sql.php parameter that allows a remote attacker to execute arbitrary code by supplying a .. path segment. Several sources corroborate arbitrary code execution or arbitrary file access via sql.php...

CVE-2001-0392

CVE-2001-0392 affects Navision Financials Server 2.60 and earlier. The vulnerability allows remote attackers to cause a denial of service by sending a null character followed by a long string to the server’s port 2407, leading to a crash. The connected sources (NVD, CVE listing) confirm this beha...

CVE-2001-0411

CVE-2001-0411 affects Reliant Unix 5.44 and earlier. The vulnerability allows remote attackers to cause a denial of service by sending an ICMP port unreachable packet, causing Reliant to drop all connections to the packet’s source address. Available records indicate a network-remote impact with p...

CVE-2001-0403

Solaris: The /opt/JSparm/bin/perfmon program is affected. Local users can leverage the GUI’s Logging File option to create arbitrary files with root privileges. The vulnerability description and impact are drawn from CVE-2001-0403/NVD entries, which specify local root impact (C/C/I/A = high). No ...

CVE-2001-0424

BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute arbitrary commands with the kmem group id...

CVE-2001-1327

pmake before 2.1.35 in Turbolinux 6.05 and earlier is installed with setuid root privileges, which could allow local users to gain privileges by exploiting vulnerabilities in pmake or programs that are used by pmake...

CVE-2001-1339

Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct brute force password guessing attacks...

CVE-2001-1347

Windows 2000 allows local users to cause a denial of service and possibly gain privileges by setting a hardware breakpoint that is handled using global debug registers, which could cause other processes to terminate due to an exception, and allow hijacking of resources such as named pipes...

CVE-2001-0380

Crosscom/Olicom XLT-F (XL 80 IM Version 5.5 Build Level 2) is affected; a default, undocumented SNMP community string “ILMI” enables remote read/write access via SNMP. This is a remote-access vulnerability allowing partial confidentiality and integrity impact; no exploit details or fixed versions...

CVE-2001-0454

CVE-2001-0454 describes a directory traversal vulnerability in SlimServe HTTPd 1.1a. The issue allows an unauthenticated attacker to read arbitrary files by supplying a modified dot-dot sequence in the HTTP request path. The impact is partial confidentiality (read access to files) with no indicat...