CVE-2001-0253

Directory traversal vulnerability in hsx.cgi program in iWeb Hyperseek 2000 allows remote attackers to read arbitrary files and directories via a .. dot dot attack in the show parameter...

CVE-2001-0251

The Web Publishing feature in Netscape Enterprise Server 3.x allows remote attackers to cause a denial of service via the REVLOG command...

CVE-2001-0315

CVE-2001-0315 affects mIRC 5.7. The vulnerability arises from the locking feature, where local users can bypass the password mechanism by modifying the LockOptions registry key. Exploitation requires local access; the CVSS base score is 7.5 (HIGH) with partial impacts to confidentiality, integrit...

CVE-2001-0292

CVE-2001-0292 concerns PHP-Nuke 4.4.1a. The vulnerability allows remote attackers to modify a user’s email address and obtain the password by guessing the user id (UID) and invoking the user.php page with the saveuser operator. The description indicates an unauthenticated vector that leverages UI...

CVE-2001-0261

CVE-2001-0261 affects Microsoft Windows 2000 Encrypted File System. The issue is that backups of encrypted files are not properly destroyed, allowing a local attacker to recover the plaintext. The NVD entry assigns a low impact with partial confidentiality loss (CVSS v2 base score 2.1, LOCAL acce...

CVE-2001-0297

CVE-2001-0297 affects Simple Server HTTPd 1.0 (originally Free Java Server). The vulnerability is a directory traversal that allows remote attackers to read arbitrary files via a .. in the URL. This is described in NVD; connected EUVD entry mentions malware without remediation details. The provid...

CVE-2001-0250

CVE-2001-0250 : The vulnerability affects the Web Publishing feature of Netscape Enterprise Server (version 4.x and earlier). A remote attacker can trigger an arbitrary directory listing by sending the INDEX command to the web server, exposing internal site structure. Impact is information disclo...

CVE-2001-0257

Buffer overflow in Easycom/Safecom Print Server Web service, version 404.590 and earlier, allows remote attackers to execute arbitrary commands via 1 a long URL or 2 a long HTTP header field such as "Host:"...

CVE-2001-0281

CVE-2001-0281 concerns a format-string vulnerability in the DbgPrint debugging function used by some Windows NT drivers (potentially via DebugMessage). The flaw could allow local attackers to gain privileges. Documents identify the affected component as Windows NT drivers and the vulnerability as...

CVE-2001-0285

Buffer overflow in A1 HTTP server 1.0a allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request...

CVE-2001-0254

FaSTream FTP++ Server 2.0 is affected. The vulnerability allows remote attackers to reveal the server’s real pathname by issuing the pwd command, constituting an information-disclosure issue. The provided documents confirm the affected product and the nature of the data exposed (real pathname), b...

CVE-2001-0281

Format string vulnerability in DbgPrint function, used in debug messages for some Windows NT drivers possibly when called through DebugMessage, may allow local users to gain privileges...

CVE-2001-0294

CVE-2001-0294 affects TYPSoft FTP Server 0.85 with a directory traversal vulnerability. The issue allows remote attackers to read arbitrary files by sending a GET with .. (dot dot) or a CWD with ... in the path. Public details across sources reiterate the vulnerable component and input handling a...

CVE-2001-0272

The CVE-2001-0272 issue is a directory-traversal flaw in the W3.org Anaya Web development server’s sendtemp.pl CGI. The templ parameter can be manipulated with .. to read arbitrary server files, enabling unauthorized access to sensitive data. Affected component: sendtemp.pl in the CGI-bin of the ...

CVE-2001-0306

The CVE-2001-0306 entry concerns ITAfrica WEBactive HTTP Server 1.00 and describes a directory traversal vulnerability that allows remote attackers to read arbitrary files via a .. in the URL. The NVD entry provides a CVSS v2 base score of 5.0 (Medium) with network attack vector, low attack compl...

CVE-2001-0305

The CVE-2001-0305 issue affects the store.cgi CGI in Thinking Arts ES.One. It enables a directory traversal via .. in the StartID parameter, allowing remote attackers to read arbitraries files with the web server’s privileges. Multiple sources (NVD/NVD-derived entries, CVE lists, and Nessus plugi...

CVE-2001-0282

SEDUM 2.1 HTTP server allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request...

CVE-2001-0291

CVE-2001-0291 describes a buffer overflow vulnerability in a post-query sample CGI program. The flaw allows remote attackers to execute arbitrary commands by sending an HTTP POST request containing at least 10001 parameters. The NVD entry lists a high impact (base score 10.0) with complete confid...

CVE-2001-0145

Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a malformed vCard birthday field...

CVE-2001-0323

The CVE-2001-0323 entry describes a denial-of-service risk in the ICMP path MTU (PMTU) discovery feature used by various UNIX systems. The underlying issue is that remote attackers can spoof ICMP messages of type “Fragmentation needed but Don’t Fragment (DF) set” between two hosts, potentially ca...