Tektronix PhaserLink Multiple Admin Page Unauthenticated Configuration Manipulation

The file /nclitems.shtml or /nclsubjects.shtml exists on the remote web server. If the remote host is a Tektronix printer, then this page allows anyone to reconfigure it without any authentication means whatsoever. An attacker may use this flaw to conduct a denial of service attack against your...

CVE-2001-0006

The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to modify the permissions to "No Access" and disable Winsock network connectivity to cause a denial of service, aka the "Winsock Mutex" vulnerability...

CVE-2001-0279

Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges...

CVE-2001-0234

NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed userusername parameter...

CVE-2001-0190

Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by executing cu with a long program name arg0...

CVE-2001-0178

kdesu program in KDE2 KDE before 2.2.0-6 does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and gain privileges...

CVE-2001-0061

procfs in FreeBSD and possibly other operating systems does not properly restrict access to per-process mem and ctl files, which allows local users to gain root privileges by forking a child process and executing a privileged process from the child, while the parent retains access to the child's...

CVE-2001-0033

KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR environmental variable, which allows the user to gain additional privileges...

CVE-2001-0085

Buffer overflow in Kermit communications software in HP-UX 11.0 and earlier allows local users to cause a denial of service and possibly execute arbitrary commands...

CVE-2001-0081

swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to gain access to application keys...

CVE-2001-0081

Technical details about CVE-2001-0081 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

CVE-2001-0157

Debugging utility in the backdoor mode of Palm OS 3.5.2 and earlier allows attackers with physical access to a Palm device to bypass access restrictions and obtain passwords, even if the system lockout mechanism is enabled...

CVE-2001-0183

The CVE-2001-0183 issue affects ipfw/ip6fw on FreeBSD 4.2 and earlier, where a remote attacker can bypass access restrictions by setting the ECE bit in a TCP packet so it appears part of an established connection. OpenVAS/Nessus entries corroborate the firewall ECE-bit bypass behavior on FreeBSD ...

CVE-2001-0311

CVE-2001-0311 concerns HP OpenView OmniBack II. The connected documents confirm a directory traversal vulnerability in the OmniBack service that could allow a remote attacker to run a shell/interpreter and execute arbitrary commands on affected hosts (HP OpenView OmniBack II components). Exploita...

CVE-2001-0268

The i386setldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USERLDT kernel option is enabled, does not validate a call gate target, which allows local users to gain root privileges by creating a segment call gate in the Local Descriptor Table LDT with a target that...

CVE-2001-0150

Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web site, which could allow remote attackers to execute arbitrary commands if the IE client is using the Telnet client provided in Services for Unix SFU 2.0, which creates session...

CVE-2001-0318

Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the FTP server while using a malformed working directory cwd...

CVE-2001-0299

CVE-2001-0299 affects the Nokia IP440 Voyager web administration server. The vulnerability is a buffer overflow in the web admin interface triggered by processing a long URL, allowing local users to cause a denial of service and potentially execute arbitrary commands. The available documents conf...

CVE-2001-0014

CVE-2001-0014 affects Windows 2000 Terminal Services (Remote Data Protocol). The vulnerability arises from improper handling of certain malformed RDP packets, allowing remote attackers to cause a denial of service. The provided documents identify the affected component and DoS impact but do not s...

CVE-2001-0071

CVE-2001-0071 affects GnuPG (gpg) 1.0.4 and other versions, where the software does not properly verify detached signatures. This is reported to allow an attacker to modify the contents of a file without detection. The connected documents confirm the affected component and the underlying issue bu...