3489 matches found
CVE-2001-0484
CVE-2001-0484 : Tektronix PhaserLink 850 allows remote attackers to access configuration pages (_ncl_subjects.shtml, _ncl_items.shtml) without authentication, enabling modification of configuration information and causing a Denial of Service by accessing those pages. Affected software: PhaserLink...
CVE-2001-0354
TheNet CheckBO 1.56 allows remote attackers to cause a denial of service via a flood of characters to the TCP ports which it is listening on...
CVE-2001-0392
CVE-2001-0392 affects Navision Financials Server 2.60 and earlier. The vulnerability allows remote attackers to cause a denial of service by sending a null character followed by a long string to the server’s port 2407, leading to a crash. The connected sources (NVD, CVE listing) confirm this beha...
CVE-2001-0477
CVE-2001-0477 affects WebCalendar 0.9.26 and enables remote command execution due to improper input validation in the WebCalendar Web application (PHP). The CERT entry states that arbitrary commands can be executed by a malicious WebCalendar user, with the potential bypass in single-user mode whe...
CVE-2001-0432
Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 allow remote attackers to execute arbitrary commands...
CVE-2001-0249
CVE-2001-0249 is a heap overflow issue in the Solaris 8 FTP daemon caused by the glob command handling. The vulnerability allows a remote attacker to execute arbitrary code by supplying a long pathname via FTP LIST, which triggers unbounded string operations during glob expansion. OpenVAS materia...
CVE-2001-0425
CVE-2001-0425 affects AdLibrary.pm in AdCycle 0.78b. The vulnerability stems from a malformed Agent: header in HTTP requests, which is inserted into a login-verification SQL query, enabling remote attackers to gain privileges. Documents explicitly describe the component and the root cause (SQL in...
CVE-2001-0470
CVE-2001-0470 describes a buffer overflow in the Solaris 8 SNMP proxy agent snmpd triggered by a long argv[0], allowing local users to gain root privileges. The issue is component-level: the vulnerable code path is within snmpd’s handling of the process name. Reported impact is local privilege es...
CVE-2001-0459
Buffer overflows in ascdc Afterstep while running setuid allows local users to gain root privileges via a long 1 -d option, 2 -m option, or 3 -f option...
CVE-2001-0459
CVE-2001-0459 corresponds to buffer overflows in the ascdc component of AfterStep when run with setuid. The vulnerability allows local users to gain root privileges by providing excessively long arguments via the long options -d, -m, or -f. The connected sources confirm the affected component and...
CVE-2001-0460
Websweeper 4.0 does not limit the length of certain HTTP headers, which allows remote attackers to cause a denial of service memory exhaustion via an extremely large HTTP Referrer: header...
CVE-2001-0248
HP-UX ftpd glob() Expansion STAT Buffer Overflow (CVE-2001-0248): The HP-UX 11 FTP server is affected by a buffer overflow triggered by the STAT command when a long pathname is expanded via glob(), allowing remote attackers to execute arbitrary commands. Affected component: HP-UX FTP daemon; root...
CVE-2001-0359
The CVE-2001-0359 entry describes a format-string vulnerability in Sierra Half-Life (build 1573 and earlier) that allows a remote attacker to execute arbitrary code via the map command. Affected software is Sierra Half-Life prior to build 1573; vulnerable component/function is the map command’s h...
CVE-2001-0415
REDIPlus program, REDI.exe, stores passwords and user names in cleartext in the StartLog.txt log file, which allows local users to gain access to other accounts...
CVE-2001-0479
Directory traversal vulnerability in phpPgAdmin 2.2.1 and earlier versions allows remote attackers to execute arbitrary code via a .. dot dot in an argument to the sql.php script...
CVE-2001-0468
Buffer overflow in FTPFS allows local users to gain root privileges via a long user name...
CVE-2001-0437
uploadfile.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to uploadfile...
CVE-2001-0367
The vulnerability CVE-2001-0367 affects Mirabilis ICQ WebFront Plug-in for ICQ2000b (Build 3278). A remote attacker can cause a denial of service by sending HTTP URL requests containing a large number of percent characters. The issue impacts availability (PARTIAL) with a CVSS v2 base score of 5.0...
CVE-2001-0369
The CVE-2001-0369 entry describes a buffer overflow in the DGUX lpsched service on versions R4.20MU06 and MU02. The vulnerability allows a local attacker to gain root privileges by supplying a long command line argument (an non-existent printer name). The available documents confirm the affected ...