CVE-2001-0143

The CVE-2001-0143 issue affects the vpop3d component in the linuxconf package (versions 1.23r and earlier). The root cause is a temporary file race (symlink attack) that local users can exploit to overwrite arbitrary files. Public references in the Mandrake advisory MDKSA-2001:011 confirm the vul...

CVE-2001-0287

VERITAS Cluster Server VCS 1.3.0 on Solaris allows local users to cause a denial of service system panic via the -L option to the lltstat command...

CVE-2001-0062

The CVE-2001-0062 entry concerns procfs in FreeBSD (and possibly other OSes) where a local user can trigger a denial of service by calling mmap on the process’ own /mem, causing the kernel to hang. Technical details across connected sources confirm the vulnerability involves the procfs mmap path ...

CVE-2001-0268

The i386setldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USERLDT kernel option is enabled, does not validate a call gate target, which allows local users to gain root privileges by creating a segment call gate in the Local Descriptor Table LDT with a target that...

CVE-2001-0221

Buffer overflow in ja-xklock 2.7.1 and earlier allows local users to gain root privileges...

CVE-2001-0028

Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute arbitrary commands via a large number of " quotation characters...

CVE-2001-0309

CVE-2001-0309 concerns the Red Hat 6.2 inetd server. The vulnerability is a bug where inetd does not properly close sockets for internal services (chargen, daytime, echo, etc.), allowing a remote attacker to cause a denial of service by issuing a series of connections to these internal services. ...

CVE-2001-0005

Microsoft PowerPoint 2000 is affected by a buffer overflow in the file loader’s parsing mechanism, allowing arbitrary code execution when a user opens a malicious PowerPoint file or views a malicious web page. The root cause is a parsing overflow in the loader that can be triggered by crafted inp...

CVE-2001-0234

NewsDaemon is affected prior to version 0.21b, where a malformed user_username parameter allows remote attackers to execute arbitrary SQL queries and gain administrative privileges on the web site. The issue enables remote access to administer NewsDaemon through the web interface. Remediation: up...

CVE-2001-0026

CVE-2001-0026 affects rp-pppoe, a userspace PPPoE client. The issue occurs when a crafted TCP segment uses the Clamp MSS option with a zero-length option, which can cause the client to enter an infinite loop and drop the connection (denial of service). Mandrake/MDKSA-2000:084 notes versions prior...

CVE-2001-0066

CVE-2001-0066 affects slocate (Secure Locate). A malformed database file can specify an offset that causes out-of-bounds memory access, resulting in memory corruption. In Mandrake advisories this could be exploited to run arbitrary code by supplying a crafted database. These details come from the...

CVE-2001-0221

CVE-2001-0221 describes a buffer overflow in ja-xklock version 2.7.1 and earlier that can allow local users to gain root privileges. The affected component is ja-xklock (no vendor/version context beyond the versioning in the CVE). The connected documents confirm the generic impact (local privileg...

CVE-2001-0009

CVE-2001-0009 covers a directory traversal in Lotus Domino web server (5.0.x) allowing remote reading of arbitrary files via a .. path. The vulnerability affects Lotus Domino Server components that implement the HTTP task, enabling access to files outside the web root. Root cause is improper path...

CVE-2001-0013

CVE-2001-0013 describes a format-string vulnerability in the nslookupComplain() routine of ISC BIND 4. This flaw allows remote attackers to execute code with the BIND process’ privileges (typically root) by sending specially crafted DNS input. The CERT/CC note (CA-2001-02) identifies vulnerable v...

CVE-2001-0054

Serv-U FTP server prior to version 2.5i suffers a directory traversal vulnerability affecting the CD command. An attacker can escape the FTP root and read arbitrary files by appending payloads like "/..%20." to CD, due to improper input sanitization. This is CVE-2001-0054. Affected product/versio...

CVE-2001-0295

CVE-2001-0295 refers to a directory traversal vulnerability in War FTP Daemon (WarFTPd) around version 1.67.04. The vulnerability allows remote attackers to list directory contents and possibly read files by issuing a specially crafted directory command (dir *./../..), potentially exposing files ...

CVE-2001-0218

The CVE-2001-0218 entry concerns a format-string vulnerability in mars_nwe 0.99.pl19 that allows remote attackers to execute arbitrary commands. Affected component: mars_nwe 0.99.pl19. Root cause: improper handling of format strings leading to control of program flow and command execution. Impact...

CVE-2001-0080

Cisco Catalyst 6000/5000/4000 series switches expose a denial-of-service vulnerability when an SSH service is contacted by a non-SSH client, triggering a protocol-mismatch error that restarts the device. The issue affects multiple Catalyst models and allows unauthenticated remote restart. Cisco p...

CVE-2001-0319

The CVE-2001-0319 entry concerns IBM Net.Commerce 3.x, where the macro orderdspc.d2w in the report capability is vulnerable to SQL injection via the order_rn option. The underlying issue is a SQL injection flaw in the remote interface that lets an attacker supply crafted input to alter or execute...

CVE-2001-0190

Vulnerable component: Solaris cu (cu) in /usr/bin/cu. Root cause: buffer overflow triggered by a long program name (arg0). Impact: local privilege escalation on Solaris 2.8 and earlier (and potentially other OSes as per CVE). Remediation: apply Solaris Update for cu 111071-01 (cu update) or equiv...