CVE-2001-0749

Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to read arbitrary files via a webserver root directory set to system root...

CVE-2001-1347

Windows 2000 allows local users to cause a denial of service and possibly gain privileges by setting a hardware breakpoint that is handled using global debug registers, which could cause other processes to terminate due to an exception, and allow hijacking of resources such as named pipes...

CVE-2001-1327

pmake before 2.1.35 in Turbolinux 6.05 and earlier is installed with setuid root privileges, which could allow local users to gain privileges by exploiting vulnerabilities in pmake or programs that are used by pmake...

CVE-2001-1339

Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct brute force password guessing attacks...

CVE-2001-1341

The Beck GmbH IPC@Chip embedded web server installs the chipcfg.cgi program by default, which allows remote attackers to obtain sensitive network information via a request to the program...

CVE-2001-0401

CVE-2001-0401 involves a buffer overflow in the Solaris tip tool on Solaris 8 and earlier. The overflow is triggered by a long HOME environment variable, allowing local users to execute arbitrary commands. The core details provided indicate the affected component is the tip program, with the root...

CVE-2001-0391

CVE-2001-0391 affects Xitami Web Server (version 2.5d4 and earlier). The vulnerability permits remote attackers to crash the server by sending an HTTP request to the /aux directory, producing availability impact as described in the CVSS metrics (base score 5.0, MEDIUM). The provided documents do ...

CVE-2001-0491

Directory traversal vulnerability in RaidenFTPD Server 2.1 before build 952 allows attackers to access files outside the ftp root via dot dot attacks, such as 1 .... in CWD, 2 .. in NLST, or 3 ... in NLST...

CVE-2001-0435

The CVE-2001-0435 entry concerns the split key mechanism in PGP 7.0 . The root issue is that a key share holder can obtain access to the entire key by enabling the “Cache passphrase while logged on” option and then capturing the passphrases of other share holders as they authenticate. Documents s...

CVE-2001-0329

Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then processed by 1 the Bugzillalogin cookie in postbug.cgi, or 2 the who parameter in processbug.cgi...

CVE-2001-0328

CVE-2001-0328 describes a vulnerability in TCP initial sequence number (ISN) generation where random increments can enable remote attackers to hijack sessions or disrupt traffic by sending a flood of packets with varying ISNs. Connected documents show this is discussed across multiple UNIX system...

CVE-2001-0380

Crosscom/Olicom XLT-F (XL 80 IM Version 5.5 Build Level 2) is affected; a default, undocumented SNMP community string “ILMI” enables remote read/write access via SNMP. This is a remote-access vulnerability allowing partial confidentiality and integrity impact; no exploit details or fixed versions...

CVE-2001-0395

Lightwave ConsoleServer 3200 is affected by a vulnerability where the system does not disconnect users after unsuccessful login attempts. This enables remote attackers to brute-force passwords. Connected documents confirm the impact as credential guessing with potential for unauthorized access; n...

CVE-2001-0384

The CVE-2001-0384 issue affects Reliant Sinix’s ppd component, where a local user can exploit a symlink in the /tmp/ppd.trace file to corrupt arbitrary files. The exists description confirms a local attack via a symlink; no exploit details or affected versions are provided. The provided documents...

CVE-2001-0441

CVE-2001-0441 describes a buffer overflow in the slrn news reader (wrapping and unwrapping functions) that allows remote code execution via a long message header. The vulnerability affects versions prior to the fixed releases cited in connected advisories: Debian DSA-040-1 and Mandrake MDKSA-2001...

CVE-2001-0329

Bugzilla 2.10 is vulnerable to remote arbitrary command execution via shell metacharacters in a username, processed by (1) the Bugzilla_login cookie in post_bug.cgi or (2) the who parameter in process_bug.cgi. The root cause is lack of input sanitization in the CGI workflow, enabling an attacker ...

CVE-2001-0385

GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory...

CVE-2001-0381

The CVE-2001-0381 entry describes a vulnerability in the OpenPGP/PGP standard where an attacker can determine the private signature key through a cryptanalytic attack that involves modifying the encrypted private key file and then signing a single message. The available documents identify the aff...

CVE-2001-0390

IBM Websphere/NetCommerce3 3.1.2 is affected by a DoS vulnerability where remote attackers can trigger the macro.d2w macro with a long string of %0a characters. The description from multiple sources confirms the vulnerability exists in the specified product version and is exploitable remotely via...

CVE-2001-0247

Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a sequence, as seen in 1 gopendir, 2 glstat, 3 gstat, and 4 the glob0 buffer as used in the glob functions glob2 and glob3...