CVE-2001-0284

The CVE-2001-0284 entry describes a buffer overflow in the IPSEC authentication mechanism for OpenBSD 2.8 and earlier. The underlying issue is in the IPSEC AH (IPv4 option) processing, allowing remote attackers to cause a denial of service and potentially execute arbitrary commands via a malforme...

CVE-2001-0033

CVE-2001-0033 affects KTH Kerberos IV. Local users can alter a Kerberos server’s configuration by supplying an alternate directory via the KRBCONFDIR environmental variable, enabling escalation of privileges. The description identifies the root cause as the ability to specify a custom configurati...

CVE-2001-0153

This CVE concerns the VB-TSQL Debugger Object (VB T-SQL Debugger) in Visual Studio 6.0 Enterprise Edition. The root cause is a buffer overflow in the DCOM object’s NewSPID method due to an unchecked sprintf on the database name, allowing a remote attacker to run arbitrary code on systems where th...

CVE-2001-0289

The CVE-2001-0289 entry concerns the joe text editor (version 2.8). It vulnerably searches for a .joerc configuration file in the current working directory, the user’s home directory, and then /etc/joe. This enables a local attacker to place a Trojan Horse .joerc in a directory and cause other us...

CVE-2001-0026

CVE-2001-0026 affects rp-pppoe, a userspace PPPoE client. The issue occurs when a crafted TCP segment uses the Clamp MSS option with a zero-length option, which can cause the client to enter an infinite loop and drop the connection (denial of service). Mandrake/MDKSA-2000:084 notes versions prior...

CVE-2001-0183

The CVE-2001-0183 issue affects ipfw/ip6fw on FreeBSD 4.2 and earlier, where a remote attacker can bypass access restrictions by setting the ECE bit in a TCP packet so it appears part of an established connection. OpenVAS/Nessus entries corroborate the firewall ECE-bit bypass behavior on FreeBSD ...

CVE-2001-0190

Vulnerable component: Solaris cu (cu) in /usr/bin/cu. Root cause: buffer overflow triggered by a long program name (arg0). Impact: local privilege escalation on Solaris 2.8 and earlier (and potentially other OSes as per CVE). Remediation: apply Solaris Update for cu 111071-01 (cu update) or equiv...

CVE-2001-0123

Directory traversal vulnerability in eXtropia bbsforum.cgi 1.0 allows remote attackers to read arbitrary files via a .. dot dot attack on the file parameter...

CVE-2001-0309

inetd in Red Hat 6.2 does not properly close sockets for internal services such as chargen, daytime, echo, etc., which allows remote attackers to cause a denial of service via a series of connections to the internal services...

CVE-2001-0069

dialog before 0.9a-20000118-3bis in Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0128

Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges...

CVE-2001-0059

patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0028

Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute arbitrary commands via a large number of " quotation characters...

CVE-2001-0014

Remote Data Protocol RDP in Windows 2000 Terminal Service does not properly handle certain malformed packets, which allows remote attackers to cause a denial of service, aka the "Invalid RDP Data" vulnerability...

CVE-2001-0011

Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges...

CVE-2001-0021

MailMan Webmail 3.0.25 and earlier is affected by an arbitrary command execution vulnerability in mmstdod.cgi. Input to the ALTERNATE_TEMPLATES/alternate_template parameters is not properly sanitized, allowing a remote attacker to execute arbitrary commands. The issue is documented in CVE-2001-00...

CVE-2001-0034

KTH Kerberos IV is affected by a local privilege issue where the krb4_proxy variable can be used to specify an alternate proxy, enabling a user to generate false proxy responses and potentially gain privileges. The vulnerability is local in scope, with impact described as complete confidentiality...

CVE-2001-0100

The CVE-2001-0100 entry concerns the bslist.cgi mailing list script. The vulnerability arises when an attacker supplies shell metacharacters in the email address, allowing remote execution of arbitrary commands. The description indicates a remote, unauthenticated impact affecting the bslist.cgi c...

CVE-2001-0123

Technical details for CVE-2001-0123 are not publicly provided in the supplied connected documents. Monitor for updates.

CVE-2001-0274

The CVE-2001-0274 entry affects the kicq IRC client (version 1.0.0 and possibly later). The root cause is the processing of a URL containing shell metacharacters that enables remote attackers to execute arbitrary commands on the affected host. The provided documents do not include exploitation de...