3468 matches found
CVE-2001-0329
Bugzilla 2.10 is vulnerable to remote arbitrary command execution via shell metacharacters in a username, processed by (1) the Bugzilla_login cookie in post_bug.cgi or (2) the who parameter in process_bug.cgi. The root cause is lack of input sanitization in the CGI workflow, enabling an attacker ...
CVE-2001-0446
CVE-2001-0446 affects IBM WCS (WebSphere Commerce Suite) 4.0.1 with Application Server 3.0.2. The issue enables remote attackers to read source code for *.jsp files by appending a "/" to the requested URL, exposing partial confidentiality (C:P/I:N/A:N; CVSS v2 base 5.0). No exploitation details a...
CVE-2001-0480
CVE-2001-0480 involves a directory traversal vulnerability in Alex’s FTP Server 0.7 . An attacker can read arbitrary files by sending a modified dot dot sequence in either the GET or CD commands, exploiting improper path handling. The connected records confirm the affected product/version and the...
CVE-2001-0249
Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generate long strings...
CVE-2001-0476
Aspseek vulnerable component: s.cgi in Aspseek 1.03 and earlier. Root cause: multiple buffer overflows in s.cgi allow remote attackers to execute arbitrary commands via (1) a long HTTP query string or (2) a long tmpl parameter. Impact: remote command execution with partial confidentiality/integri...
CVE-2001-0470
CVE-2001-0470 describes a buffer overflow in the Solaris 8 SNMP proxy agent snmpd triggered by a long argv[0], allowing local users to gain root privileges. The issue is component-level: the vulnerable code path is within snmpd’s handling of the process name. Reported impact is local privilege es...
CVE-2001-0490
The CVE-2001-0490 entry concerns WINAMP 2.6x and 2.7x. A vulnerability exists in the AIP file handling that can cause a buffer overflow when processing a long string in an AIP file, allowing potential arbitrary code execution. The available documents identify the affected product and the input-ba...
CVE-2001-0492
Netcruiser Web server version 0.1.2.8 and earlier allows remote attackers to determine the physical path of the server via a URL containing 1 con, 2 com2, or 3 com3...
CVE-2001-0424
Summary: CVE-2001-0424 affects BubbleMon 1.31, where the process does not drop group privileges before executing programs. This results in a local privilege escalation where local users can run arbitrary commands with the kmem group id. Impact (as described in sources): Local users gain complete ...
CVE-2001-0385
GoAhead WebServer is affected by DoS vulnerabilities in multiple paths. CVE-2001-0385 covers GoAhead WebServer 2.1 where a crafted HTTP request to the /aux directory can crash the daemon. Red Hat CVE-2003-1569 extends this on Windows 95/98/ME, showing that GoAhead WebServer before 2.1.5 can be fo...
CVE-2001-0468
CVE-2001-0468 describes a buffer overflow in FTPFS that allows local users to gain root privileges via a long user name. The linked sources (NVD entry) confirm local elevation of privilege with a buffer overflow condition; no vendor/product/version details are provided in the available documents....
CVE-2001-0337
The vulnerability CVE-2001-0337 affects Microsoft Internet Information Services 5.0 and earlier, specifically the WebDav component (httpext.dll). A memory-leak flaw allows a malicious user to exhaust server memory by issuing many LOCK requests against a non-existent filename, potentially leading ...
CVE-2001-0441
CVE-2001-0441 describes a buffer overflow in the slrn news reader (wrapping and unwrapping functions) that allows remote code execution via a long message header. The vulnerability affects versions prior to the fixed releases cited in connected advisories: Debian DSA-040-1 and Mandrake MDKSA-2001...
CVE-2001-0477
CVE-2001-0477 affects WebCalendar 0.9.26 and enables remote command execution due to improper input validation in the WebCalendar Web application (PHP). The CERT entry states that arbitrary commands can be executed by a malicious WebCalendar user, with the potential bypass in single-user mode whe...
CVE-2001-0484
CVE-2001-0484 : Tektronix PhaserLink 850 allows remote attackers to access configuration pages (_ncl_subjects.shtml, _ncl_items.shtml) without authentication, enabling modification of configuration information and causing a Denial of Service by accessing those pages. Affected software: PhaserLink...
CVE-2001-0358
CVE-2001-0358 affects Sierra Half-Life builds 1573 and earlier. It is a buffer overflow vulnerability that lets remote attackers execute arbitrary code by sending overly long map commands, long exec commands, or excessive input in a configuration file. The NVD entry lists a network attack vector,...
CVE-2001-1337
Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to cause a denial of service via a long HTTP request...
CVE-2001-1346
Computer Associates ARCserveIT 6.61 and 6.63 also called ARCservIT allows local users to overwrite arbitrary files via a symlink attack on the temporary files 1 asagent.tmp or 2 inetd.tmp...
CVE-2001-1342
Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service GPF via an HTTP request for a URI that contains a large number of / slash or other characters, which causes certain functions to dereference a null pointer...