CVE-2001-1339

Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct brute force password guessing attacks...

CVE-2001-0247

Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a sequence, as seen in 1 gopendir, 2 glstat, 3 gstat, and 4 the glob0 buffer as used in the glob functions glob2 and glob3...

CVE-2001-0468

Buffer overflow in FTPFS allows local users to gain root privileges via a long user name...

CVE-2001-0359

Format string vulnerability in Sierra Half-Life build 1573 and earlier allows a remote attacker to execute arbitrary code via the map command...

CVE-2001-0389

IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro with a NOEXISTINGHTMLBLOCK argument...

CVE-2001-0380

Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via a default, undocumented community string 'ILMI'...

CVE-2001-0431

Vulnerability in iPlanet Web Server Enterprise Edition 4.x...

CVE-2001-0399

CVE-2001-0399 affects Caucho Resin 1.3b1 and earlier. A path traversal / information disclosure flaw lets remote attackers read Javabean source by inserting a .jsp before the WEB-INF specifier in an HTTP request. OpenVAS entries corroborate the issue as a remote vulnerability with a 5.0 CVSS base...

CVE-2001-0401

CVE-2001-0401 involves a buffer overflow in the Solaris tip tool on Solaris 8 and earlier. The overflow is triggered by a long HOME environment variable, allowing local users to execute arbitrary commands. The core details provided indicate the affected component is the tip program, with the root...

CVE-2001-0425

CVE-2001-0425 affects AdLibrary.pm in AdCycle 0.78b. The vulnerability stems from a malformed Agent: header in HTTP requests, which is inserted into a login-verification SQL query, enabling remote attackers to gain privileges. Documents explicitly describe the component and the root cause (SQL in...

CVE-2001-0466

CVE-2001-0466 is a directory traversal vulnerability in ustorekeeper 1.61 that allows remote attackers to read arbitrary files through a ".." in the file parameter. The issue stems from improper validation of the file parameter in the ustorekeeper CGI, enabling unauthorized disclosure (confidenti...

CVE-2001-0471

CVE-2001-0471 applies to SSH1 (SSH server 1.2.30 or earlier). The issue is that SSH1 SSH Daemon does not log repeated login attempts, which could allow remote attackers to carry out brute-force-style account compromises without detection. Multiple connected sources (NVD/Nessus/OpenVAS entries) co...

CVE-2001-0249

CVE-2001-0249 is a heap overflow issue in the Solaris 8 FTP daemon caused by the glob command handling. The vulnerability allows a remote attacker to execute arbitrary code by supplying a long pathname via FTP LIST, which triggers unbounded string operations during glob expansion. OpenVAS materia...

CVE-2001-0382

CVE-2001-0382 affects Computer Associates CCC Harvest 5.0 for Windows NT/2000. The vulnerability arises from weak password encryption, allowing a remote attacker to gain privileges within the Harvest application. CVSS v2 base score is 7.5 (HIGH) with network attack vector and no authentication. T...

CVE-2001-0395

Lightwave ConsoleServer 3200 is affected by a vulnerability where the system does not disconnect users after unsuccessful login attempts. This enables remote attackers to brute-force passwords. Connected documents confirm the impact as credential guessing with potential for unauthorized access; n...

CVE-2001-0447

CVE-2001-0447 affects the Web configuration server component of 602Pro LAN SUITE. A crafted long HTTP request containing %2e (dot dot) characters can trigger a denial of service and may allow arbitrary command execution. This is documented across NVD and CVE records; no explicit exploit code or i...

CVE-2001-0401

Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable...

CVE-2001-0406

Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using 1 a printer queue query, 2 the more command in smbclient, or 3 the mput command in smbclient...

CVE-2001-0419

Buffer overflow in shared library ndwfn4.so for iPlanet Web Server iWS 4.1, when used as a web listener for Oracle application server 4.0.8.2, allows remote attackers to execute arbitrary commands via a long HTTP request that is passed to the application server, such as /jsp/...

CVE-2001-0483

CVE-2001-0483 affects Axent Raptor Firewall 6.5. A configuration error allows remote attackers to use the firewall as a proxy to access internal web resources when the http.noproxy rule is not set. CVSS2 base score 7.5 (NETWORK, LOW auth, PARTIAL confidentiality/integrity/availability). Exploit d...