CVE-2001-0355

The CVE-2001-0355 entry affects Novell GroupWise 5.5 (service packs 1 and 2). The vulnerability arises from an implementation error in GroupWise system policies that allows a remote attacker to access arbitrary files. The connected documents confirm the affected product and the root cause (policy...

CVE-2001-0426

CVE-2001-0426 describes a buffer overflow in the dtsession component affecting Solaris (and possibly other OSes) that lets local users gain privileges when a long LANG environment variable is processed. The vulnerability is triggered by excessively long LANG values, leading to privilege escalatio...

CVE-2001-0424

Summary: CVE-2001-0424 affects BubbleMon 1.31, where the process does not drop group privileges before executing programs. This results in a local privilege escalation where local users can run arbitrary commands with the kmem group id. Impact (as described in sources): Local users gain complete ...

CVE-2001-0496

kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local users to gain privileges...

CVE-2001-0358

CVE-2001-0358 affects Sierra Half-Life builds 1573 and earlier. It is a buffer overflow vulnerability that lets remote attackers execute arbitrary code by sending overly long map commands, long exec commands, or excessive input in a configuration file. The NVD entry lists a network attack vector,...

CVE-2001-0417

The CVE-2001-0417 entry concerns Kerberos 4 (krb4) where local users can overwrite arbitrary files via a symlink attack on new ticket files. The connected records corroborate a local-privilege impact vector with a partial integrity impact, and a low overall CVSS score (2.1/10, AV:L/AC:L/Au:N/I:P/...

CVE-2001-0396

The pre-login mode in the System Administrator interface of Lightwave ConsoleServer 3200 allows remote attackers to obtain sensitive information such as system status, configuration, and users...

CVE-2001-0360

The CVE-2001-0360 entry describes a directory traversal flaw in Ikonboard 2.1.7b and earlier, where help.cgi process accepts a malformed helpon parameter containing .. to read arbitrary files. The affected software is Ikonboard; the vulnerable component is help.cgi; root cause is improper validat...

CVE-2001-0385

GoAhead WebServer is affected by DoS vulnerabilities in multiple paths. CVE-2001-0385 covers GoAhead WebServer 2.1 where a crafted HTTP request to the /aux directory can crash the daemon. Red Hat CVE-2003-1569 extends this on Windows 95/98/ME, showing that GoAhead WebServer before 2.1.5 can be fo...

CVE-2001-0376

CVE-2001-0376 affects SonicWALL Tele2 and SOHO firewalls running firmware 6.0.0.0 when using IPsec with IKE pre-shared keys. The root cause is that the implementation supports only 48-byte IKE PSKs instead of the full 128-byte length, reducing the effective key space. This enables a remote attack...

CVE-2001-0410

Buffer overflow in Trend Micro Virus Buster 2001 8.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long "From" header...

CVE-2001-0399

CVE-2001-0399 affects Caucho Resin 1.3b1 and earlier. A path traversal / information disclosure flaw lets remote attackers read Javabean source by inserting a .jsp before the WEB-INF specifier in an HTTP request. OpenVAS entries corroborate the issue as a remote vulnerability with a 5.0 CVSS base...

CVE-2001-0399

Caucho Resin 1.3b1 and earlier allows remote attackers to read source code for Javabean files by inserting a .jsp before the WEB-INF specifier in an HTTP request...

CVE-2001-0384

ppd in Reliant Sinix allows local users to corrupt arbitrary files via a symlink attack in the /tmp/ppd.trace file...

CVE-2001-0424

BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute arbitrary commands with the kmem group id...

CVE-2001-0380

Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via a default, undocumented community string 'ILMI'...

CVE-2001-0374

CVE-2001-0374 affects the HTTP server in Compaq Web‑Based Management Agent across multiple products (Foundation Agents, Survey, Power Manager, Availability Agents, Intelligent Cluster Administrator, Insight Manager). The vulnerability allows the management HTTP server to act as a generic proxy, e...

CVE-2001-0450

CVE-2001-0450 concerns a directory traversal vulnerability in Transsoft FTP Broker prior to 5.5. The issue allows an attacker to perform file operations outside the FTP root via a crafted filename containing .., enabling (1) deletion of arbitrary files via DELETE and (2) listing of arbitrary dire...

CVE-2001-0328

TCP implementations that use random increments for initial sequence numbers ISN can allow remote attackers to perform session hijacking or disruption by injecting a flood of packets with a range of ISN values, one of which may match the expected ISN...

CVE-2001-0263

Gene6 G6 FTP Server 2.0 aka BPFTP Server 2.10 allows attackers to read file attributes outside of the web root via the 1 SIZE and 2 MDTM commands when the "show relative paths" option is not enabled...