CVE-2001-0125

CVE-2001-0125 affects exmh 2.2 and earlier, where insecure handling of temporary files in /tmp (e.g., exmhErrorMsg) allows local users to overwrite files via a symlink attack. Connected advisories confirm the issue and note that newer versions (e.g., exmh 2.3.1+) fix the vulnerability by switchin...

CVE-2001-0165

Buffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long "arg0" process name argument...

CVE-2001-0310

The issue is with the UNIX sort utility on FreeBSD 4.1.1 and earlier, where temporary files are created with predictable names and not properly handled when the file already exists. This can cause sort to crash, effectively denying service to scripts or administration tasks that rely on sort. Pub...

CVE-2001-0295

CVE-2001-0295 refers to a directory traversal vulnerability in War FTP Daemon (WarFTPd) around version 1.67.04. The vulnerability allows remote attackers to list directory contents and possibly read files by issuing a specially crafted directory command (dir *./../..), potentially exposing files ...

CVE-2001-0171

Buffer overflow in SlimServe HTTPd 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long GET request...

CVE-2001-0179

Allaire JRun 3.0 allows remote attackers to list contents of the WEB-INF directory, and the web.xml file in the WEB-INF directory, via a malformed URL that contains a "."...

CVE-2001-0194

Buffer overflow in httpGets function in CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long input line...

CVE-2001-0202

Picserver web server allows remote attackers to read arbitrary files via a .. dot dot attack in an HTTP GET request...

CVE-2001-0234

NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed userusername parameter...

CVE-2001-0274

kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

CVE-2001-0280

Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN command...

CVE-2001-0281

Format string vulnerability in DbgPrint function, used in debug messages for some Windows NT drivers possibly when called through DebugMessage, may allow local users to gain privileges...

CVE-2001-0285

Buffer overflow in A1 HTTP server 1.0a allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request...

CVE-2001-0287

VERITAS Cluster Server VCS 1.3.0 on Solaris allows local users to cause a denial of service system panic via the -L option to the lltstat command...

CVE-2001-0289

Joe text editor 2.8 searches the current working directory CWD for the .joerc configuration file, which could allow local users to gain privileges of other users by placing a Trojan Horse .joerc file into a directory, then waiting for users to execute joe from that directory...

CVE-2001-0296

Buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command...

CVE-2001-0301

Buffer overflow in Analog before 4.16 allows remote attackers to execute arbitrary commands by using the ALIAS command to construct large strings...

CVE-2001-0319

orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them into the orderrn option of the report capability...

CVE-2001-0271

mailnews.cgi 1.3 and earlier allows remote attackers to execute arbitrary commands via a user name that contains shell metacharacters...

Immunity Canvas: SNMPXDMID

Name| snmpXdmid ---|--- CVE| CVE-2001-0236 Exploit Pack| CANVAS Description| snmpXdmid Buffer Overflow Notes| References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F26981&zone32=category%3Asecurity%20snmpXdmid CVE Name: CVE-2001-0236 VENDOR: Sun Development Notes: This is a one sho...