CVE-2001-0329

Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then processed by 1 the Bugzillalogin cookie in postbug.cgi, or 2 the who parameter in processbug.cgi...

CVE-2001-0328

CVE-2001-0328 describes a vulnerability in TCP initial sequence number (ISN) generation where random increments can enable remote attackers to hijack sessions or disrupt traffic by sending a flood of packets with varying ISNs. Connected documents show this is discussed across multiple UNIX system...

CVE-2001-0380

Crosscom/Olicom XLT-F (XL 80 IM Version 5.5 Build Level 2) is affected; a default, undocumented SNMP community string “ILMI” enables remote read/write access via SNMP. This is a remote-access vulnerability allowing partial confidentiality and integrity impact; no exploit details or fixed versions...

CVE-2001-0395

Lightwave ConsoleServer 3200 is affected by a vulnerability where the system does not disconnect users after unsuccessful login attempts. This enables remote attackers to brute-force passwords. Connected documents confirm the impact as credential guessing with potential for unauthorized access; n...

CVE-2001-0384

The CVE-2001-0384 issue affects Reliant Sinix’s ppd component, where a local user can exploit a symlink in the /tmp/ppd.trace file to corrupt arbitrary files. The exists description confirms a local attack via a symlink; no exploit details or affected versions are provided. The provided documents...

CVE-2001-0441

CVE-2001-0441 describes a buffer overflow in the slrn news reader (wrapping and unwrapping functions) that allows remote code execution via a long message header. The vulnerability affects versions prior to the fixed releases cited in connected advisories: Debian DSA-040-1 and Mandrake MDKSA-2001...

CVE-2001-0329

Bugzilla 2.10 is vulnerable to remote arbitrary command execution via shell metacharacters in a username, processed by (1) the Bugzilla_login cookie in post_bug.cgi or (2) the who parameter in process_bug.cgi. The root cause is lack of input sanitization in the CGI workflow, enabling an attacker ...

CVE-2001-0385

GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory...

CVE-2001-0381

The CVE-2001-0381 entry describes a vulnerability in the OpenPGP/PGP standard where an attacker can determine the private signature key through a cryptanalytic attack that involves modifying the encrypted private key file and then signing a single message. The available documents identify the aff...

CVE-2001-0390

IBM Websphere/NetCommerce3 3.1.2 is affected by a DoS vulnerability where remote attackers can trigger the macro.d2w macro with a long string of %0a characters. The description from multiple sources confirms the vulnerability exists in the specified product version and is exploitable remotely via...

CVE-2001-0247

Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a sequence, as seen in 1 gopendir, 2 glstat, 3 gstat, and 4 the glob0 buffer as used in the glob functions glob2 and glob3...

CVE-2001-0354

TheNet CheckBO 1.56 allows remote attackers to cause a denial of service via a flood of characters to the TCP ports which it is listening on...

CVE-2001-0392

CVE-2001-0392 affects Navision Financials Server 2.60 and earlier. The vulnerability allows remote attackers to cause a denial of service by sending a null character followed by a long string to the server’s port 2407, leading to a crash. The connected sources (NVD, CVE listing) confirm this beha...

CVE-2001-0477

CVE-2001-0477 affects WebCalendar 0.9.26 and enables remote command execution due to improper input validation in the WebCalendar Web application (PHP). The CERT entry states that arbitrary commands can be executed by a malicious WebCalendar user, with the potential bypass in single-user mode whe...

CVE-2001-0432

Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 allow remote attackers to execute arbitrary commands...

CVE-2001-0249

CVE-2001-0249 is a heap overflow issue in the Solaris 8 FTP daemon caused by the glob command handling. The vulnerability allows a remote attacker to execute arbitrary code by supplying a long pathname via FTP LIST, which triggers unbounded string operations during glob expansion. OpenVAS materia...

CVE-2001-0425

CVE-2001-0425 affects AdLibrary.pm in AdCycle 0.78b. The vulnerability stems from a malformed Agent: header in HTTP requests, which is inserted into a login-verification SQL query, enabling remote attackers to gain privileges. Documents explicitly describe the component and the root cause (SQL in...

CVE-2001-0470

CVE-2001-0470 describes a buffer overflow in the Solaris 8 SNMP proxy agent snmpd triggered by a long argv[0], allowing local users to gain root privileges. The issue is component-level: the vulnerable code path is within snmpd’s handling of the process name. Reported impact is local privilege es...

CVE-2001-0459

Buffer overflows in ascdc Afterstep while running setuid allows local users to gain root privileges via a long 1 -d option, 2 -m option, or 3 -f option...

CVE-2001-0459

CVE-2001-0459 corresponds to buffer overflows in the ascdc component of AfterStep when run with setuid. The vulnerability allows local users to gain root privileges by providing excessively long arguments via the long options -d, -m, or -f. The connected sources confirm the affected component and...