CVE-2001-0092

Affected software: Internet Explorer 5.0–5.5. The issue is a Frame Domain Verification vulnerability where the frame domain is not properly verified within a browser window, allowing a remote attacker to read local client files. This is described as a new variant of the Frame Domain Verification ...

CVE-2001-0006

The CVE-2001-0006 issue affects Windows NT 4.0 (and Terminal Server Edition) where the Winsock2ProtocolCatalogMutex has insecure Everyone/Full Control permissions. This allows a local user to modify the ACL to “No Access,” effectively disabling Winsock network connectivity and causing a denial of...

CVE-2001-0129

Buffer overflow in Tinyproxy HTTP proxy 1.3.3 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long connect request...

CVE-2001-0129

The CVE-2001-0129 issue affects Tinyproxy HTTP proxy (versions 1.3.3 and earlier). A buffer overflow triggered by a long CONNECT request can lead to denial of service and, per the consolidated sources, may allow arbitrary command execution. Public references (NVD, CVE list, Debian security adviso...

CVE-2001-0061

The CVE-2001-0061 issue affects procfs in FreeBSD (and possibly other OSes), where access to per-process mem and ctl files is not properly restricted. This lets a local attacker cause a privilege escalation by forking a child process and running a privileged executable from the child, while the p...

CVE-2001-0033

CVE-2001-0033 affects KTH Kerberos IV. Local users can alter a Kerberos server’s configuration by supplying an alternate directory via the KRBCONFDIR environmental variable, enabling escalation of privileges. The description identifies the root cause as the ability to specify a custom configurati...

CVE-2001-0141

CVE-2001-0141 affects mgetty: multiple sources confirm insecure temporary-file handling that allows local users to overwrite arbitrary files via a symlink attack in certain configurations. Vulnerable until versions before 1.1.24 (Mandrake/MDKSA-2001:009; Debian DSA-011-2 notes patch in 1.1.21-3po...

CVE-2001-0274

The CVE-2001-0274 entry affects the kicq IRC client (version 1.0.0 and possibly later). The root cause is the processing of a URL containing shell metacharacters that enables remote attackers to execute arbitrary commands on the affected host. The provided documents do not include exploitation de...

CVE-2001-0123

Technical details for CVE-2001-0123 are not publicly provided in the supplied connected documents. Monitor for updates.

CVE-2001-0060

CVE-2001-0060 affects stunnel up to version 3.8 and earlier. The vulnerability is a format-string flaw in handling the ident username, enabling an attacker to execute arbitrary commands. Connected advisories reference Debian DSA 009-1 and indicate the need to update/stabilize stunnel; no exploit ...

CVE-2001-0154

HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly...

CVE-2001-0072

gpg aka GnuPG 1.0.4 and other versions imports both public and private keys from public key servers without notifying the user about the private keys, which could allow an attacker to break the web of trust...

CVE-2001-0222

CVE-2001-0222 affects Webmin 0.84 and earlier. The vulnerability is a local, file-overwrite via a symlink attack, enabling local users to create or overwrite arbitrary files on the system. The available sources (NVD/CVE listing and Nessus plugin linking CVE-2001-0222 with Webmin 0.85+ family) con...

CVE-2001-0100

The CVE-2001-0100 entry concerns the bslist.cgi mailing list script. The vulnerability arises when an attacker supplies shell metacharacters in the email address, allowing remote execution of arbitrary commands. The description indicates a remote, unauthenticated impact affecting the bslist.cgi c...

CVE-2001-0120

useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0072

CVE-2001-0072 is confirmed via multiple connected sources: GnuPG 1.0.4 and related versions import private keys when importing public keys from key servers without notifying the user, potentially corrupting the user’s web of trust. The Mandrake advisory MDKSA-2000:087 notes this behavior and indi...

CVE-2001-0043

Affected software: PhpGroupWare (before 0.9.7). The vulnerability allows remote attackers to execute arbitrary PHP commands by specifying a malicious include file in the phpgw_info parameter of phpgw.inc.php, due to an include/file inclusion flaw. The described impact is remote command execution ...

CVE-2001-0197

CVE-2001-0197 affects the Icecast server: vulnerable in the print_client function for Icecast versions 1.3.8beta2 and earlier. The issue is a format-string vulnerability that allows remote attackers to execute arbitrary commands. The Debian advisory notes fixes in Icecast 1.3.10-1, indicating a p...

CVE-2001-0010

Buffer overflow in transaction signature TSIG handling code in BIND 8 allows remote attackers to gain root privileges...

CVE-2001-0036

Technical details about CVE-2001-0036 are not publicly available in the supplied documents. Monitor for updates; the description notes a symlink-based local overwrite vulnerability but no explicit affected products, versions, or fixes are documented here.