CVE-2001-0262

CVE-2001-0262 is a historical buffer overflow in Netscape SmartDownload 1.3. The vulnerability resides in the sdph20.dll URL parser: it reserves 256 chars for a URL on the stack but can overflow when URLs longer than that are copied, allowing remote code execution as the logged-in user. Affected ...

CVE-2001-0450

Directory traversal vulnerability in Transsoft FTP Broker before 5.5 allows attackers to 1 delete arbitrary files via DELETE, or 2 list arbitrary directories via LIST, via a .. dot dot in the file name...

CVE-2001-0376

SonicWALL Tele2 and SOHO firewalls with 6.0.0.0 firmware using IPSEC with IKE pre-shared keys do not allow for the use of full 128 byte IKE pre-shared keys, which is the intended design of the IKE pre-shared key, and only support 48 byte keys. This allows a remote attacker to brute force attack t...

CVE-2001-0398

The BAT! mail client is affected by CVE-2001-0398. An attachment whose file name contains many spaces can bypass the user warning for executable attachments and allow remote attackers to execute arbitrary commands, while also causing the client to misrepresent the attachment’s type with a differe...

CVE-2001-0404

Vulnerability: Directory traversal in JavaServer Web Dev Kit (JSWDK) 1.0.1 allows remote read of arbitrary files via a .. sequence in an HTTP request targeting the WEB-INF directory. Affected product/component: JSWDK 1.0.1. Root cause: improper path handling enabling traversal to WEB-INF. Impact:...

CVE-2001-0480

CVE-2001-0480 involves a directory traversal vulnerability in Alex’s FTP Server 0.7 . An attacker can read arbitrary files by sending a modified dot dot sequence in either the GET or CD commands, exploiting improper path handling. The connected records confirm the affected product/version and the...

CVE-2001-0446

CVE-2001-0446 affects IBM WCS (WebSphere Commerce Suite) 4.0.1 with Application Server 3.0.2. The issue enables remote attackers to read source code for *.jsp files by appending a "/" to the requested URL, exposing partial confidentiality (C:P/I:N/A:N; CVSS v2 base 5.0). No exploitation details a...

CVE-2001-0418

The CVE-2001-0418 entry concerns the NCM Content Management System where the content.pl script is vulnerable to SQL injection through the id parameter. This allows remote attackers to read arbitrary contents from the content database. The available documents confirm the affected component (conten...

CVE-2001-0491

Affected product: RaidenFTPD Server 2.1 (before build 952). Vulnerability: Directory traversal allowing access to files outside the FTP root via dot-dot sequences in CWD and NLST commands. The Nessus plugin confirms that an authenticated attacker could read and write arbitrary files outside the i...

CVE-2001-0468

CVE-2001-0468 describes a buffer overflow in FTPFS that allows local users to gain root privileges via a long user name. The linked sources (NVD entry) confirm local elevation of privilege with a buffer overflow condition; no vendor/product/version details are provided in the available documents....

CVE-2001-0464

CVE-2001-0464 describes a buffer overflow in the Cyberscheduler component websync.exe . The overflow is triggered by a long tzs (timezone) parameter, allowing a remote attacker to execute arbitrary commands. The vulnerability is rated with a HIGH base score and network attack Vector with no authe...

CVE-2001-0382

CVE-2001-0382 affects Computer Associates CCC Harvest 5.0 for Windows NT/2000. The vulnerability arises from weak password encryption, allowing a remote attacker to gain privileges within the Harvest application. CVSS v2 base score is 7.5 (HIGH) with network attack vector and no authentication. T...

CVE-2001-0372

CVE-2001-0372 affects Akopia Interchange versions 4.5.3 through 4.6.3. The vulnerability arises because the installation of demo stores creates a default group account named ":backup" with no password, enabling a remote attacker to gain administrative access via the demo stores using the accounts...

CVE-2001-0454

CVE-2001-0454 describes a directory traversal vulnerability in SlimServe HTTPd 1.1a. The issue allows an unauthenticated attacker to read arbitrary files by supplying a modified dot-dot sequence in the HTTP request path. The impact is partial confidentiality (read access to files) with no indicat...

CVE-2001-0451

The CVE-2001-0451 entry concerns INDEXU 2.0 beta and earlier. Affected component: authentication/session handling via the cookie_admin_authenticated cookie. Root cause: setting the cookie value to 1 allows remote attackers to bypass authentication and gain privileges. Documented impact: privilege...

CVE-2001-0411

CVE-2001-0411 affects Reliant Unix 5.44 and earlier. The vulnerability allows remote attackers to cause a denial of service by sending an ICMP port unreachable packet, causing Reliant to drop all connections to the packet’s source address. Available records indicate a network-remote impact with p...

CVE-2001-0438

Preview version of Timbuktu for Mac OS X allows local users to modify System Preferences without logging in via the About Timbuktu menu...

CVE-2001-0401

Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable...

CVE-2001-0452

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD " command followed by an ls command...

CVE-2001-0397

CVE-2001-0397 describes a buffer overflow in Silent Runner Collector (SRC) 1.6.1 that can be triggered by a long SMTP HELO command. The vulnerability allows remote attackers to cause a denial of service and, potentially, execute arbitrary commands. CVSS v2 base metrics are provided: AV:N/AC:L/Au:...