CVE-2001-0256

CVE-2001-0256 affects FaSTream FTP++ Server 2.0. A remote attacker can cause a denial of service and possibly execute arbitrary commands by supplying a long username, indicating an input handling vulnerability. CVSS v2 base score 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P). No remediation details are provid...

CVE-2001-0307

CVE-2001-0307 affects Bajie HTTP JServer 0.78 and earlier than 0.80. The vulnerability allows remote command execution via shell metacharacters in an HTTP request for a CGI program that does not exist. NVD lists a CVSS v2 base score of 7.5 (HIGH) with network access, no authentication, and partia...

CVE-2001-0271

CVE-2001-0271 affects mailnews.cgi (version 1.3 and earlier). The vulnerability allows remote attackers to execute arbitrary commands by supplying a user name that contains shell metacharacters. This is a remote command-execution flaw with high impact (complete confidentiality, integrity, and ava...

CVE-2001-0312

CVE-2001-0312 affects the IBM WebSphere plugin for Netscape Enterprise Server. The issue allows remote attackers to read JSP source code by issuing an HTTP request whose Host header references a host not in WebSphere’s host aliases, bypassing normal processing. The available connected documents p...

CVE-2001-0254

FaSTream FTP++ Server 2.0 allows remote attackers to obtain the real pathname of the server via the "pwd" command...

CVE-2001-0270

CVE-2001-0270 affects Marconi ASX-1000 ASX switches. The issue allows remote attackers to cause a denial of service in the telnet and web management interfaces via a malformed TCP packet that uses SYN-FIN and the More Fragments attributes. Exploitation details or active exploit status are not pro...

CVE-2001-0298

Buffer overflow in WebReflex 1.55 HTTPd allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request...

CVE-2001-0296

CVE-2001-0296: A buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command. Official descriptions (NVD) show high severity with network exploitability and complete impact on confidentiality, integrity, and availability. Connected documents ment...

CVE-2001-0298

CVE-2001-0298 affects WebReflex 1.55 HTTPd. The vulnerability is a buffer overflow triggered by a long HTTP GET request, enabling remote denial of service and potentially arbitrary command execution. The available descriptions from NVD/CVE records confirm the issue but do not specify affected pla...

CVE-2001-0302

Pi3Web 1.0.1 is vulnerable via the ISAPI extension tstisapi.dll. A buffer overflow triggered by a long URL allows remote attackers to cause denial of service and potentially execute arbitrary commands; the CGI runs with the HTTP service privileges and can disclose the web-root path. Remediation m...

CVE-2001-0322

CVE-2001-0322 concerns MSHTML.DLL HTML parser in Internet Explorer 4.0 and newer, where a script that creates and deletes an object tied to the browser window object can trigger a denial of service (application crash). The vulnerability is described as remote, with impact limited to availability ...

CVE-2001-0255

FaSTream FTP++ Server 2.0 is affected by a vulnerability where remote attackers can list arbitrary directories by issuing the ls command with a path containing a drive letter (e.g., C:). The entry indicates a remote access vector with low complexity and partial confidentiality impact (CVSS 2.0 ba...

CVE-2001-0308

The CVE-2001-0308 entry affects Bajie HTTP JServer 0.78 (and possibly earlier than 0.80). The vulnerability is in UploadServlet, which lets a remote attacker upload a program and then (via a modified .. path) access the file created for that program to execute arbitrary commands. The connected do...

CVE-2001-0277

Buffer overflow in ext.dll in BadBlue 1.02.07 Personal Edition allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request...

CVE-2001-0145

CVE-2001-0145 affects Outlook 2000/98 and Outlook Express 5.x, where a buffer overflow in the VCard handler can be triggered by a malformed vCard birthday field, allowing an attacker to execute arbitrary commands. The root cause described is a faulty VCard birthday parsing leading to memory corru...

CVE-2001-0305

Directory traversal vulnerability in store.cgi in Thinking Arts ES.One package allows remote attackers to read arbitrary files via a .. dot dot in the StartID parameter...

CVE-2001-0303

tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to determine the physical path of the server via a URL that requests a non-existent file...

CVE-2001-0306

Directory traversal vulnerability in ITAfrica WEBactive HTTP Server 1.00 allows remote attackers to read arbitrary files via a .. dot dot in a URL...

CVE-2001-0292

PHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by guessing the user id UID and calling user.php with the saveuser operator...

CVE-2001-0320

CVE-2001-0320 affects PHP-Nuke 4.4. The flaw is in bb_smilies.php and bbcode_ref.php where a malformed username argument containing a null byte and ".." sequences can allow remote attackers to read arbitrary files and gain PHP administrator privileges. This is supported by the NVD entry and corro...