3489 matches found
CVE-2001-0096
FrontPage Server Extensions FPSE in IIS 4.0 and 5.0 allows remote attackers to cause a denial of service via a malformed form, aka the "Malformed Web Form Submission" vulnerability...
CVE-2001-0083
Windows Media Unicast Service in Windows Media Services 4.0 and 4.1 is affected. The issue is a memory leak caused by improper shutdown of certain connections, which can allow a remote attacker to cause a denial of service via a sequence of severed connections. The available documents describe th...
CVE-2001-0154
CVE-2001-0154 affects Microsoft Internet Explorer 5.5 and earlier when rendering HTML and processing MIME parts. The vulnerability arises from a MIME handling table that can cause the browser to execute an embedded attachment if a malicious MIME type is set, without user confirmation. This can al...
CVE-2001-0193
Format string vulnerability in man in some Linux distributions allows local users to gain privileges via a malformed -l parameter...
CVE-2001-0008
Interbase servers (Borland/Inprise Interbase 4.x/5.x and Open Source Interbase 6.x; Firebird 0.9-3 and earlier) contain a compiled‑in backdoor account with a fixed password that can be used by any user to manipulate database objects via port 3050/tcp and potentially overwrite files. The CERT/CA a...
CVE-2001-0311
CVE-2001-0311 concerns HP OpenView OmniBack II. The connected documents confirm a directory traversal vulnerability in the OmniBack service that could allow a remote attacker to run a shell/interpreter and execute arbitrary commands on affected hosts (HP OpenView OmniBack II components). Exploita...
CVE-2001-0178
kdesu program in KDE2 KDE before 2.2.0-6 does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and gain privileges...
CVE-2001-0268
CVE-2001-0268 affects NetBSD 1.5 and earlier and OpenBSD 2.8 and earlier. When the USER_LDT kernel option is enabled, the i386_set_ldt system call does not validate a call gate target, allowing local users to gain root privileges by creating a segment call gate in the Local Descriptor Table whose...
CVE-2001-0118
rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack...
CVE-2001-0089
Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form, aka the "File Upload via Form" vulnerability...
CVE-2001-0190
Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by executing cu with a long program name arg0...
CVE-2001-0193
CVE-2001-0193 describes a format-string vulnerability in the man page viewer, observed in some Linux distributions via the -l parameter, enabling local privilege escalation. Connected documents identify Debian as affected via the man-db package and reference Debian Security Advisory DSA-028-1, wh...
CVE-2001-0194
Buffer overflow in httpGets function in CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long input line...
CVE-2001-0290
Mailman 2.0.1 and earlier contain a vulnerability that allows list administrators to obtain user passwords. The available sources confirm the affected product/version and the impact on confidentiality, but do not provide the underlying root cause specifics or a remediation fix/version. No exploit...
CVE-2001-0142
squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations...
CVE-2001-0040
APC UPS daemon, apcupsd, saves its process ID in a world-writable file, which allows local users to kill an arbitrary process by specifying the target process ID in the apcupsd.pid file...
CVE-2001-0069
dialog before 0.9a-20000118-3bis in Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack...
CVE-2001-0138
privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack...