3489 matches found
CVE-2001-0420
CVE-2001-0420 is a directory traversal vulnerability in the talkback.cgi program that allows remote attackers to read arbitrary files by sending a dot-dot sequence (.. ) in the article parameter. The vulnerability stems from insufficient input validation in talkback.cgi and enables access to file...
CVE-2001-0433
CVE-2001-0433 affects Savant 3.0 web server. A buffer overflow in the handling of the long Host HTTP header allows remote attackers to cause a denial of service and potentially execute arbitrary commands. Exploitation is described as remote and via crafted Host headers. No remediation details are...
CVE-2001-0492
Netcruiser Web server (versions
CVE-2001-0484
CVE-2001-0484 : Tektronix PhaserLink 850 allows remote attackers to access configuration pages (_ncl_subjects.shtml, _ncl_items.shtml) without authentication, enabling modification of configuration information and causing a Denial of Service by accessing those pages. Affected software: PhaserLink...
CVE-2001-0376
CVE-2001-0376 affects SonicWALL Tele2 and SOHO firewalls running firmware 6.0.0.0 when using IPsec with IKE pre-shared keys. The root cause is that the implementation supports only 48-byte IKE PSKs instead of the full 128-byte length, reducing the effective key space. This enables a remote attack...
CVE-2001-0447
Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request containing "%2e" dot dot characters...
CVE-2001-0249
Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generate long strings...
CVE-2001-0496
kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local users to gain privileges...
CVE-2001-0393
CVE-2001-0393 affects Navision Financials Server 2.0. The issue allows remote attackers to cause a denial of service by establishing a series of connections to the server without providing a username/password, consuming license limits. The available references (NVD/NVD entry) describe the impact ...
CVE-2001-0392
CVE-2001-0392 affects Navision Financials Server 2.60 and earlier. The vulnerability allows remote attackers to cause a denial of service by sending a null character followed by a long string to the server’s port 2407, leading to a crash. The connected sources (NVD, CVE listing) confirm this beha...
CVE-2001-0410: Undefined Security Weakness
Buffer overflow in Trend Micro Virus Buster 2001 8.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long "From" header...
CVE-2001-1337
Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to cause a denial of service via a long HTTP request...
CVE-2001-1346
Computer Associates ARCserveIT 6.61 and 6.63 also called ARCservIT allows local users to overwrite arbitrary files via a symlink attack on the temporary files 1 asagent.tmp or 2 inetd.tmp...
MS01-026 Microsoft IIS/PWS CGI Filename Double Decode Command Execution
This module will execute an arbitrary payload on a Microsoft IIS installation that is vulnerable to the CGI double-decode vulnerability of 2001. This module has been tested successfully on: Windows 2000 Professional SP0 EN; Windows 2000 Professional SP1 AR; Windows 2000 Professional SP1 CZ; Windo...
CVE-2001-1342
Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service GPF via an HTTP request for a URI that contains a large number of / slash or other characters, which causes certain functions to dereference a null pointer...
CVE-2001-1450
Microsoft Internet Explorer 5.0 through 6.0 allows attackers to cause a denial of service browser crash via a crafted FTP URL such as "/../"...
Tektronix PhaserLink Multiple Admin Page Unauthenticated Configuration Manipulation
The file /nclitems.shtml or /nclsubjects.shtml exists on the remote web server. If the remote host is a Tektronix printer, then this page allows anyone to reconfigure it without any authentication means whatsoever. An attacker may use this flaw to conduct a denial of service attack against your...
CVE-2001-0006
The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to modify the permissions to "No Access" and disable Winsock network connectivity to cause a denial of service, aka the "Winsock Mutex" vulnerability...
CVE-2001-0014
Remote Data Protocol RDP in Windows 2000 Terminal Service does not properly handle certain malformed packets, which allows remote attackers to cause a denial of service, aka the "Invalid RDP Data" vulnerability...