CVE-2001-0150

Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web site, which could allow remote attackers to execute arbitrary commands if the IE client is using the Telnet client provided in Services for Unix SFU 2.0, which creates session...

CVE-2001-0081

Technical details about CVE-2001-0081 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

CVE-2001-0149

Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object...

CVE-2001-0063

procfs in FreeBSD and possibly other operating systems allows local users to bypass access control restrictions for a jail environment and gain additional privileges...

CVE-2001-0021

MailMan Webmail 3.0.25 and earlier is affected by an arbitrary command execution vulnerability in mmstdod.cgi. Input to the ALTERNATE_TEMPLATES/alternate_template parameters is not properly sanitized, allowing a remote attacker to execute arbitrary commands. The issue is documented in CVE-2001-00...

CVE-2001-0191

Summary: CVE-2001-0191 affects gnuserv prior to 3.12 (shipped with XEmacs). The issue arises from improper checking of the length of the X Windows MIT-MAGIC-COOKIE, enabling remote attackers to execute arbitrary commands via a buffer overflow or to brute-force authentication with a short cookie l...

CVE-2001-0050

Buffer overflow in BitchX IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary commands via an IP address that resolves to a long DNS hostname or domain name...

CVE-2001-0090

The Print Templates feature in Internet Explorer 5.5 executes arbitrary custom print templates without prompting the user, which could allow an attacker to execute arbitrary ActiveX controls, aka the "Browser Print Template" vulnerability...

CVE-2001-0284

The CVE-2001-0284 entry describes a buffer overflow in the IPSEC authentication mechanism for OpenBSD 2.8 and earlier. The underlying issue is in the IPSEC AH (IPv4 option) processing, allowing remote attackers to cause a denial of service and potentially execute arbitrary commands via a malforme...

CVE-2001-0090

The CVE-2001-0090 issue affects Internet Explorer 5.5 where the Print Templates feature can execute arbitrary ActiveX controls via custom print templates without user prompts. Root cause is that print templates are allowed to run ActiveX controls, creating remote code execution risk for the user ...

CVE-2001-0059

CVE-2001-0059 : Solaris’s patchadd is vulnerable to a local symlink attack that allows a local user to overwrite arbitrary files. This affects the patchadd utility used on Solaris, with a CVSSv2 base score of 6.2 (MEDIUM) and an impact of Confidentiality=Complete, Integrity=Complete, Availability...

CVE-2001-0011

CVE-2001-0011 describes a buffer overflow in the nslookupComplain() routine of ISC BIND 4, enabling remote attackers to execute code with the BIND process’s privileges (typically root) and potentially gain full control of affected systems. Affected lines include BIND 4.x and certain 8.x versions ...

CVE-2001-0170

Technical specifics (affected product versions, root cause, mitigations, or exploit details) are not publicly provided in the supplied documents; monitor for updates.

CVE-2001-0003

The CVE-2001-0003 entry concerns Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me. The issue is that WEC does not correctly process Internet Explorer security settings for NTLM authentication, which can allow an attacker to obtain NTLM credentials and potentially o...

CVE-2001-0141

mgetty 1.1.22 allows local users to overwrite arbitrary files via a symlink attack in some configurations...

CVE-2001-0139

inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations...

CVE-2001-0279

Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges...

CVE-2001-0058

The CVE-2001-0058 issue affects Cisco 600 Series Routers running CBOS 2.4.1 and earlier, where the Web/HTTP interface can be forced into a denial-of-service by sending a request with a URL that does not end in a space character. The vulnerability is exposed via the Cisco CBOS web interface and is...

CVE-2001-0099

CVE-2001-0099 concerns the bsguest.cgi guestbook script. The issue allows a remote attacker to execute arbitrary commands by supplying shell metacharacters in the email address field, enabling a direct command-execution path via the web server. This vulnerability is evidenced across multiple sour...

CVE-2001-0157

Palm OS 3.5.2 and earlier is affected by a debugging utility in the backdoor mode that lets an attacker with physical access bypass access restrictions and obtain passwords despite a lockout mechanism. The available sources do not specify a patch or remediation steps. Exploit specifics are not pr...