CVE-2001-0476

Aspseek vulnerable component: s.cgi in Aspseek 1.03 and earlier. Root cause: multiple buffer overflows in s.cgi allow remote attackers to execute arbitrary commands via (1) a long HTTP query string or (2) a long tmpl parameter. Impact: remote command execution with partial confidentiality/integri...

CVE-2001-0433

CVE-2001-0433 affects Savant 3.0 web server. A buffer overflow in the handling of the long Host HTTP header allows remote attackers to cause a denial of service and potentially execute arbitrary commands. Exploitation is described as remote and via crafted Host headers. No remediation details are...

CVE-2001-0447

CVE-2001-0447 affects the Web configuration server component of 602Pro LAN SUITE. A crafted long HTTP request containing %2e (dot dot) characters can trigger a denial of service and may allow arbitrary command execution. This is documented across NVD and CVE records; no explicit exploit code or i...

CVE-2001-0479

CVE-2001-0479 affects phpPgAdmin 2.2.1 and earlier. A directory traversal flaw in sql.php (via a .. in an argument) allows remote attackers to execute arbitrary code. The issue is documented across multiple sources (NVD/Nessus/PTSecurity) with verified impact and references. Remediation: upgrade ...

CVE-2001-0419

CVE-2001-0419 describes a buffer overflow in the shared library ndwfn4.so used by iPlanet Web Server 4.1 when acting as a web listener for Oracle Application Server 4.0.8.2. An attacker can trigger the overflow by sending a very long HTTP request (e.g., to /jsp/) to cause remote code execution on...

CVE-2001-0431

Vulnerability in iPlanet Web Server Enterprise Edition 4.x...

CVE-2001-0420

Directory traversal vulnerability in talkback.cgi program allows remote attackers to read arbitrary files via a .. dot dot in the article parameter...

CVE-2001-0451

INDEXU 2.0 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the cookieadminauthenticated cookie value to 1...

CVE-2001-0470

Buffer overflow in SNMP proxy agent snmpd in Solaris 8 may allow local users to gain root privileges by calling snmpd with a long program name...

CVE-2001-0490

The CVE-2001-0490 entry concerns WINAMP 2.6x and 2.7x. A vulnerability exists in the AIP file handling that can cause a buffer overflow when processing a long string in an AIP file, allowing potential arbitrary code execution. The available documents identify the affected product and the input-ba...

CVE-2001-0264

Summary (CVE-2001-0264): Gene6 G6 FTP Server 2.0 (also BPFTP Server 2.10) exposes NetBIOS credentials when information about a file in a network share is requested, causing the server to send credentials to the share owner’s host and enabling eavesdropping. Affected component: BPFTP/G6 FTP Server...

CVE-2001-0496

CVE-2001-0496 affects the kdesu component of kdelibs. Affected software creates world-readable temporary files that contain authentication information, enabling a local attacker to gain privileges on the system. The Mandrake advisory MDKSA-2001:046-3 describes the issue and provides updated packa...

CVE-2001-0246

CVE-2001-0246 affects Internet Explorer 5.5 and earlier. The vulnerability arises from improper verification of the domain of a frame within a browser window, enabling remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different...

CVE-2001-0483

Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access internal web resources when the http.noproxy Rule is not set...

CVE-2001-0359

Format string vulnerability in Sierra Half-Life build 1573 and earlier allows a remote attacker to execute arbitrary code via the map command...

CVE-2001-0393

Navision Financials Server 2.0 allows remote attackers to cause a denial of service via a series of connections to the server without providing a username/password combination, which consumes the license limits...

CVE-2001-0448

The CVE-2001-0448 entry concerns the Web Configuration Server in 602Pro LAN SUITE. It is exploitable by remote attackers via an HTTP GET request to the aux directory (and possibly other directories with legacy DOS device names), causing a denial of service. The cited CVSS data indicates a network...

CVE-2001-0397

Buffer overflow in Silent Runner Collector SRC 1.6.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long SMTP HELO command...

CVE-2001-0419

Buffer overflow in shared library ndwfn4.so for iPlanet Web Server iWS 4.1, when used as a web listener for Oracle application server 4.0.8.2, allows remote attackers to execute arbitrary commands via a long HTTP request that is passed to the application server, such as /jsp/...

CVE-2001-0443

CVE-2001-0443 describes a buffer overflow in QPC QVT/Net Popd 4.20 within QVT/Net 5.0. Attackers could remotely trigger the overflow by sending an excessively long username or password, potentially causing a denial of service and possibly executing arbitrary commands. The provided documents ident...