CVE-2001-0476

Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via 1 a long HTTP query string, or 2 a long tmpl parameter...

CVE-2001-0496

CVE-2001-0496 affects the kdesu component of kdelibs. Affected software creates world-readable temporary files that contain authentication information, enabling a local attacker to gain privileges on the system. The Mandrake advisory MDKSA-2001:046-3 describes the issue and provides updated packa...

CVE-2001-0435

The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the passphrases of other share holders as they authenticate...

CVE-2001-0472

The CVE-2001-0472 entry affects Hursley Software Laboratories Consumer Transaction Framework (HSLCTF). It describes a vulnerability in the HTTP object that allows remote attackers to trigger a denial of service (crash) by sending an extremely long HTTP request. The available documents confirm the...

CVE-2001-0436

The vulnerability CVE-2001-0436 affects DCForum 2000, specifically the dcboard.cgi CGI: remote attackers can execute arbitrary commands by uploading a Perl program to the server and referencing it via a .. in the AZ parameter. This is documented in the NVD entry for DCForum 2000 1.0 with a base s...

CVE-2001-0443

CVE-2001-0443 describes a buffer overflow in QPC QVT/Net Popd 4.20 within QVT/Net 5.0. Attackers could remotely trigger the overflow by sending an excessively long username or password, potentially causing a denial of service and possibly executing arbitrary commands. The provided documents ident...

CVE-2001-0390

IBM Websphere/NetCommerce3 3.1.2 is affected by a DoS vulnerability where remote attackers can trigger the macro.d2w macro with a long string of %0a characters. The description from multiple sources confirms the vulnerability exists in the specified product version and is exploitable remotely via...

CVE-2001-0432

The vulnerability CVE-2001-0432 affects Trend Micro Interscan VirusWall 3.01 through its remote administration CGI interface. Multiple CGI programs may overflow when given crafted inputs, allowing remote attackers to execute arbitrary commands. OpenVAS/Nessus entries also describe unauthenticated...

CVE-2001-0374

CVE-2001-0374 affects the HTTP server in Compaq Web‑Based Management Agent across multiple products (Foundation Agents, Survey, Power Manager, Availability Agents, Intelligent Cluster Administrator, Insight Manager). The vulnerability allows the management HTTP server to act as a generic proxy, e...

CVE-2001-0418

The CVE-2001-0418 entry concerns the NCM Content Management System where the content.pl script is vulnerable to SQL injection through the id parameter. This allows remote attackers to read arbitrary contents from the content database. The available documents confirm the affected component (conten...

CVE-2001-0391

CVE-2001-0391 affects Xitami Web Server (version 2.5d4 and earlier). The vulnerability permits remote attackers to crash the server by sending an HTTP request to the /aux directory, producing availability impact as described in the CVSS metrics (base score 5.0, MEDIUM). The provided documents do ...

CVE-2001-0264

Summary (CVE-2001-0264): Gene6 G6 FTP Server 2.0 (also BPFTP Server 2.10) exposes NetBIOS credentials when information about a file in a network share is requested, causing the server to send credentials to the share owner’s host and enabling eavesdropping. Affected component: BPFTP/G6 FTP Server...

CVE-2001-0376

SonicWALL Tele2 and SOHO firewalls with 6.0.0.0 firmware using IPSEC with IKE pre-shared keys do not allow for the use of full 128 byte IKE pre-shared keys, which is the intended design of the IKE pre-shared key, and only support 48 byte keys. This allows a remote attacker to brute force attack t...

CVE-2001-0328

TCP implementations that use random increments for initial sequence numbers ISN can allow remote attackers to perform session hijacking or disruption by injecting a flood of packets with a range of ISN values, one of which may match the expected ISN...

CVE-2001-0399

Caucho Resin 1.3b1 and earlier allows remote attackers to read source code for Javabean files by inserting a .jsp before the WEB-INF specifier in an HTTP request...

CVE-2001-0496

kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local users to gain privileges...

CVE-2001-0354

TheNet CheckBO 1.56 allows remote attackers to cause a denial of service via a flood of characters to the TCP ports which it is listening on...

CVE-2001-0459

Buffer overflows in ascdc Afterstep while running setuid allows local users to gain root privileges via a long 1 -d option, 2 -m option, or 3 -f option...

CVE-2001-0459

CVE-2001-0459 corresponds to buffer overflows in the ascdc component of AfterStep when run with setuid. The vulnerability allows local users to gain root privileges by providing excessively long arguments via the long options -d, -m, or -f. The connected sources confirm the affected component and...

CVE-2001-0393

Navision Financials Server 2.0 allows remote attackers to cause a denial of service via a series of connections to the server without providing a username/password combination, which consumes the license limits...