CVE-2001-0290

Mailman 2.0.1 and earlier contain a vulnerability that allows list administrators to obtain user passwords. The available sources confirm the affected product/version and the impact on confidentiality, but do not provide the underlying root cause specifics or a remediation fix/version. No exploit...

CVE-2001-0066

CVE-2001-0066 affects slocate (Secure Locate). A malformed database file can specify an offset that causes out-of-bounds memory access, resulting in memory corruption. In Mandrake advisories this could be exploited to run arbitrary code by supplying a crafted database. These details come from the...

CVE-2001-0130

The CVE-2001-0130 entry describes a buffer overflow in the HTML parser of Lotus Domino components: Lotus R5 Domino Server prior to 5.06 and Domino Client prior to 5.05. The overflow is triggered by a malformed font size specifier and can allow remote attackers to cause a denial of service and pot...

CVE-2001-0080

Cisco Catalyst 6000/5000/4000 series switches expose a denial-of-service vulnerability when an SSH service is contacted by a non-SSH client, triggering a protocol-mismatch error that restarts the device. The issue affects multiple Catalyst models and allows unauthenticated remote restart. Cisco p...

CVE-2001-0147

CVE-2001-0147 concerns a buffer overflow in the Windows 2000 Event Viewer snap-in. The overflow occurs when processing/displaying properties of individual event records, and can allow arbitrary code execution when a user examines a malicious event log entry. CERT/CC notes that the data enabling a...

CVE-2001-0092

Affected software: Internet Explorer 5.0–5.5. The issue is a Frame Domain Verification vulnerability where the frame domain is not properly verified within a browser window, allowing a remote attacker to read local client files. This is described as a new variant of the Frame Domain Verification ...

CVE-2001-0090

The CVE-2001-0090 issue affects Internet Explorer 5.5 where the Print Templates feature can execute arbitrary ActiveX controls via custom print templates without user prompts. Root cause is that print templates are allowed to run ActiveX controls, creating remote code execution risk for the user ...

CVE-2001-0138

privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0116

gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0110

Buffer overflow in jaZip Zip/Jaz drive manager allows local users to gain root privileges via a long DISPLAY environmental variable...

CVE-2001-0015

Network Dynamic Data Exchange DDE in Windows 2000 allows local users to gain SYSTEM privileges via a "WMCOPYDATA" message to an invisible window that is running with the privileges of the WINLOGON process...

CVE-2001-0061

The CVE-2001-0061 issue affects procfs in FreeBSD (and possibly other OSes), where access to per-process mem and ctl files is not properly restricted. This lets a local attacker cause a privilege escalation by forking a child process and running a privileged executable from the child, while the p...

CVE-2001-0124

CVE-2001-0124 describes a buffer overflow in the Solaris utility exrecover on Solaris 2.6 and earlier, potentially allowing a local user to gain privileges via a long command line argument. The connected documents do not specify a vendor patch/version or a remediation. The exploitation status is ...

CVE-2001-0091

CVE-2001-0091 concerns the ActiveX control used to invoke a scriptlet in Internet Explorer 5.0–5.5. The control renders arbitrary file types instead of HTML, enabling an attacker to read arbitrary files. The vulnerability is characterized as a variant of the Scriptlet Rendering issue. Documented ...

CVE-2001-0195

The CVE-2001-0195 issue affects sash

CVE-2001-0157

Palm OS 3.5.2 and earlier is affected by a debugging utility in the backdoor mode that lets an attacker with physical access bypass access restrictions and obtain passwords despite a lockout mechanism. The available sources do not specify a patch or remediation steps. Exploit specifics are not pr...

CVE-2001-0149

Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object...

CVE-2001-0053

The CVE-2001-0053 entry describes a one-byte buffer overflow in the replydirname() function of BSD-based ftpd, allowing remote code execution with root privileges. The vulnerability stems from an off-by-one issue in a path-buffer NPATH sized at MAXPATHLEN (1024 bytes) where an extra increment can...

CVE-2001-0316

CVE-2001-0316 affects Linux kernels 2.2 and 2.4 where sysctl can be invoked with a negative length, allowing unprivileged local users to read kernel memory and potentially obtain root privileges. Mitigation in the public records points to upgrading to kernel 2.2.19 or later (and vendor advisories...

CVE-2001-0119

Getty_ps 2.0.7j is affected by a local symlink race that can cause overwriting of arbitrary files in /tmp, potentially impacting files writable by the effective UID (often root). Mandrake/MGK advisories indicate a temporary-file race fix, updating to getty_ps 2.1.0a (or newer) to remediate. CERT ...