CVE-2001-0005

Microsoft PowerPoint 2000 is affected by a buffer overflow in the file loader’s parsing mechanism, allowing arbitrary code execution when a user opens a malicious PowerPoint file or views a malicious web page. The root cause is a parsing overflow in the loader that can be triggered by crafted inp...

CVE-2001-0268

CVE-2001-0268 affects NetBSD 1.5 and earlier and OpenBSD 2.8 and earlier. When the USER_LDT kernel option is enabled, the i386_set_ldt system call does not validate a call gate target, allowing local users to gain root privileges by creating a segment call gate in the Local Descriptor Table whose...

CVE-2001-0279

The CVE-2001-0279 entry concerns a buffer overflow in sudo prior to version 1.6.3p6 that could allow a local user to gain root privileges. Multiple connected advisories confirm this vulnerability and reference updating to a fixed package (e.g., 1.6.3p6 or newer) as the remedy. Affected documents ...

CVE-2001-0060

CVE-2001-0060 affects stunnel up to version 3.8 and earlier. The vulnerability is a format-string flaw in handling the ident username, enabling an attacker to execute arbitrary commands. Connected advisories reference Debian DSA 009-1 and indicate the need to update/stabilize stunnel; no exploit ...

CVE-2001-0221

CVE-2001-0221 describes a buffer overflow in ja-xklock version 2.7.1 and earlier that can allow local users to gain root privileges. The affected component is ja-xklock (no vendor/version context beyond the versioning in the CVE). The connected documents confirm the generic impact (local privileg...

CVE-2001-0110

CVE-2001-0110 describes a buffer overflow in jazip (Zip/Jaz drive manager) that allows local users to gain root privileges by supplying a long DISPLAY environment variable. OpenVAS/DSA references confirm Debian jazip packages were vulnerable and later fixed; the advisory notes a workaround: the p...

CVE-2001-0010

CVE-2001-0010 describes a buffer overflow in the TSIG handling code of ISC BIND. The vulnerability is in BIND 8.2.x (and related TSIG processing paths) and can allow remote attackers to gain the same privileges as the BIND server (typically root) by sending specially crafted requests, enabling ar...

CVE-2001-0040

APC UPS daemon, apcupsd, saves its process ID in a world-writable file, which allows local users to kill an arbitrary process by specifying the target process ID in the apcupsd.pid file...

CVE-2001-0062

The CVE-2001-0062 entry concerns procfs in FreeBSD (and possibly other OSes) where a local user can trigger a denial of service by calling mmap on the process’ own /mem, causing the kernel to hang. Technical details across connected sources confirm the vulnerability involves the procfs mmap path ...

CVE-2001-0178

CVE-2001-0178 affects KDE2’s kdesu: the keep-password feature uses a UNIX socket to pass authentication data, but KDE2 (before 2.2.0-6) does not verify the socket listener’s identity. This can allow local users to obtain root passwords and gain privileges. Multiple advisories confirm the issue an...

CVE-2001-0196

The CVE-2001-0196 issue affects the inetd ident service in FreeBSD 4.x and earlier. The root cause is improper setting of group permissions, which can allow remote attackers to read the first 16 bytes of files accessible by the wheel group. Impact is partial confidentiality loss for wheel-group f...

CVE-2001-0260

Buffer overflow in Lotus Domino Mail Server (Lotus Domino R5 SMTP server) versions 5.0.5 and earlier can be triggered by a long RCPT TO command, allowing a remote attacker to crash the server or execute arbitrary code. The vulnerability affects Domino R5 SMTP server with domain restrictions enabl...

CVE-2001-0016

NTLM Security Support Provider NTLMSSP service does not properly check the function number in an LPC request, which could allow local users to gain administrator level access...

CVE-2001-0309

CVE-2001-0309 concerns the Red Hat 6.2 inetd server. The vulnerability is a bug where inetd does not properly close sockets for internal services (chargen, daytime, echo, etc.), allowing a remote attacker to cause a denial of service by issuing a series of connections to these internal services. ...

CVE-2001-0039

IPSwitch IMail SMTP Buffer Overflow affects the IMail SMTP daemon (versions

CVE-2001-0137

CVE-2001-0137 affects Windows Media Player 7. The vulnerability lets remote attackers cause the execution of malicious Java applets in Internet Explorer by embedding the applet in a skin.wmz skin file and referencing it via the skin in the codebase parameter of an applet tag (Windows Media Player...

CVE-2001-0120

CVE-2001-0120 relates to the shadow-utils package, specifically the useradd component. The vulnerability arises from insecure temporary file handling: useradd creates temporary files in /etc/default with predictable names. If /etc/default is world-writable, an attacker could perform a symbolic-li...

CVE-2001-0118

CVE-2001-0118 affects rdist 6.1.5 and describes a local vulnerability where an attacker can overwrite arbitrary files via a symlink attack. The Connected documents corroborate the issue as a local symlink-based overwrite vulnerability. No specific remediation, affected versions beyond 6.1.5, expl...

CVE-2001-0165

CVE-2001-0165 concerns a buffer overflow in the ximp40 shared library on Solaris 7 and Solaris 8, allowing local users to gain privileges via a long arg0 (process name) argument. Affected component: ximp40 shared library; root cause: buffer overflow. Impact: local privilege escalation with comple...

CVE-2001-0195

sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking...