CVE-2001-0033

KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR environmental variable, which allows the user to gain additional privileges...

CVE-2001-0063

CVE-2001-0063 affects FreeBSD (procfs) and possibly other OSes; local users can bypass access controls in a jail environment to gain additional privileges (complete impact on confidentiality, integrity, and availability per NVD). The description provided does not include specific vulnerable versi...

CVE-2001-0115

Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f parameter...

CVE-2001-0185

Netopia R9100 router (version 4.6) is affected. An authenticated user can trigger a denial-of-service by using the router’s telnet interface to connect to the router’s own IP, causing the device to crash. The CVE entry does not provide exploit details beyond this described vector. No additional r...

CVE-2001-0279

The CVE-2001-0279 entry concerns a buffer overflow in sudo prior to version 1.6.3p6 that could allow a local user to gain root privileges. Multiple connected advisories confirm this vulnerability and reference updating to a fixed package (e.g., 1.6.3p6 or newer) as the remedy. Affected documents ...

CVE-2001-0119

Getty_ps 2.0.7j is affected by a local symlink race that can cause overwriting of arbitrary files in /tmp, potentially impacting files writable by the effective UID (often root). Mandrake/MGK advisories indicate a temporary-file race fix, updating to getty_ps 2.1.0a (or newer) to remediate. CERT ...

CVE-2001-0110

CVE-2001-0110 describes a buffer overflow in jazip (Zip/Jaz drive manager) that allows local users to gain root privileges by supplying a long DISPLAY environment variable. OpenVAS/DSA references confirm Debian jazip packages were vulnerable and later fixed; the advisory notes a workaround: the p...

CVE-2001-0085

No connected documents with concrete technical details were found for CVE-2001-0085. The Initial Description notes a buffer overflow in HP-UX Kermit (HP-UX 11.0 and earlier), but no additional technical specifics are provided in the connected documents. Monitor for updates.

CVE-2001-0059

patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0012

CVE-2001-0012 concerns ISC BIND 4.x and 8.x where an information-leak vulnerability allows a remote attacker to access environment variables by sending a specially crafted query. The CERT/CC and Debian/Red Hat advisories document that this issue arises in BIND 4/8 and can lead to leakage of sensi...

CVE-2001-0317

Race condition in ptrace in Linux kernel 2.4 and 2.2 allows local users to gain privileges by using ptrace to track and modify a running setuid process...

CVE-2001-0196

inetd ident server in FreeBSD 4.x and earlier does not properly set group permissions, which allows remote attackers to read the first 16 bytes of files that are accessible by the wheel group...

CVE-2001-0196

The CVE-2001-0196 issue affects the inetd ident service in FreeBSD 4.x and earlier. The root cause is improper setting of group permissions, which can allow remote attackers to read the first 16 bytes of files accessible by the wheel group. Impact is partial confidentiality loss for wheel-group f...

CVE-2001-0117

CVE-2001-0117 concerns diffutils’ sdiff 2.7, where sdiff creates temporary files insecurely, enabling a local user to overwrite files via a symlink attack. The issue affects diffutils in affected distributions (e.g., Red Hat advisories note a temporary-file handling vulnerability in sdiff). Explo...

CVE-2001-0006

The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to modify the permissions to "No Access" and disable Winsock network connectivity to cause a denial of service, aka the "Winsock Mutex" vulnerability...

CVE-2001-0069

CVE-2001-0069 affects the Debian GNU/Linux package dialog prior to version 0.9a-20000118-3bis. The vulnerability is a symlink attack that allows a local user to overwrite arbitrary files. The issue arises from a race condition involving symlinks, enabling manipulation of file targets by a non-pri...

CVE-2001-0187

Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment...

CVE-2001-0289

Joe text editor 2.8 searches the current working directory CWD for the .joerc configuration file, which could allow local users to gain privileges of other users by placing a Trojan Horse .joerc file into a directory, then waiting for users to execute joe from that directory...

CVE-2001-0137

CVE-2001-0137 affects Windows Media Player 7. The vulnerability lets remote attackers cause the execution of malicious Java applets in Internet Explorer by embedding the applet in a skin.wmz skin file and referencing it via the skin in the codebase parameter of an applet tag (Windows Media Player...

CVE-2001-0301

Vulnerability CVE-2001-0301 affects Analog prior to version 4.16. A remote attacker can exploit via the ALIAS command to construct long strings and execute arbitrary commands. Impact is remote code execution with complete confidentiality/integrity/availability. Remediation: upgrade Analog to 4.16...