3489 matches found
CVE-2001-0081
swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to gain access to application keys...
CVE-2001-0166
CVE-2001-0166 affects the Macromedia Shockwave/Flash plug-in (version 8 and earlier). The vulnerability arises from malformed SWF tag length fields, triggering a buffer overflow on processing the file, which may crash the plug-in and cause a denial of service. CERT reports the issue as a crash (D...
CVE-2001-0055
CBOS 2.4.1 and earlier in Cisco 600 routers allows remote attackers to cause a denial of service via a slow stream of TCP SYN packets...
CVE-2001-0218
Format string vulnerability in marsnwe 0.99.pl19 allows remote attackers to execute arbitrary commands...
CVE-2001-0099
CVE-2001-0099 concerns the bsguest.cgi guestbook script. The issue allows a remote attacker to execute arbitrary commands by supplying shell metacharacters in the email address field, enabling a direct command-execution path via the web server. This vulnerability is evidenced across multiple sour...
CVE-2001-0009
Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a .. attack...
CVE-2001-0035
Buffer overflow in the kdcreplycipher function in KTH Kerberos IV allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long authentication request...
CVE-2001-0219
Vulnerability in Support Tools Manager xstm,cstm,stm in HP-UX 11.11 and earlier allows local users to cause a denial of service...
CVE-2001-0317
The CVE covers a race condition in Linux kernel ptrace handling that lets an unprivileged local user attach to and modify a running setuid process to gain root. Affected: Linux kernel 2.2.x and 2.4.x (ptrace/procfs/execve paths cited). Root cause: race in ptrace usage during privileged operations...
CVE-2001-0259
ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generated by another user, which the attacker can use to decrypt that user's private key file...
CVE-2001-0152
The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a file, which allows local users to recover the passwords and read the compressed folders...
CVE-2001-0316
CVE-2001-0316 affects Linux kernels 2.2 and 2.4 where sysctl can be invoked with a negative length, allowing unprivileged local users to read kernel memory and potentially obtain root privileges. Mitigation in the public records points to upgrading to kernel 2.2.19 or later (and vendor advisories...
CVE-2001-0219
The CVE-2001-0219 entry maps to a vulnerability in the HP-UX Support Tools Manager (xstm, cstm, stm). Affected HP-UX versions include 11.11 and earlier (notably 11.11, 11.00, and 10.20 per CERT). Local attackers can cause a denial-of-service condition. HP has released patches for affected version...
CVE-2001-0266
Technical details about CVE-2001-0266 are not publicly available in the provided connected documents. No confirmed affected products, vectors, or fixes are described here. Monitor for updates.
CVE-2001-0153
This CVE concerns the VB-TSQL Debugger Object (VB T-SQL Debugger) in Visual Studio 6.0 Enterprise Edition. The root cause is a buffer overflow in the DCOM object’s NewSPID method due to an unchecked sprintf on the database name, allowing a remote attacker to run arbitrary code on systems where th...
CVE-2001-0191
gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a buffer overflow, or brute force authentication by using a short cookie length...
CVE-2001-0058
The CVE-2001-0058 issue affects Cisco 600 Series Routers running CBOS 2.4.1 and earlier, where the Web/HTTP interface can be forced into a denial-of-service by sending a request with a URL that does not end in a space character. The vulnerability is exposed via the Cisco CBOS web interface and is...
CVE-2001-0062
procfs in FreeBSD and possibly other operating systems allows local users to cause a denial of service by calling mmap on the process' own mem file, which causes the kernel to hang...
CVE-2001-0178
CVE-2001-0178 affects KDE2’s kdesu: the keep-password feature uses a UNIX socket to pass authentication data, but KDE2 (before 2.2.0-6) does not verify the socket listener’s identity. This can allow local users to obtain root passwords and gain privileges. Multiple advisories confirm the issue an...