CVE-2001-0283

Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. dot dot characters in various commands, including 1 GET, 2 MKDIR, 3 RMDIR, 4 RENAME, or 5 PUT...

CVE-2001-0257

Buffer overflow in Easycom/Safecom Print Server Web service, version 404.590 and earlier, allows remote attackers to execute arbitrary commands via 1 a long URL or 2 a long HTTP header field such as "Host:"...

CVE-2001-0304

Directory traversal vulnerability in Caucho Resin 1.2.2 allows remote attackers to read arbitrary files via a ".." dot dot in a URL request...

CVE-2001-0300

oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory ldaplog that has world-writable permissions, which may allow local users to delete logs and/or overwrite other files via a symlink attack...

CVE-2001-0251

The Web Publishing feature in Netscape Enterprise Server 3.x allows remote attackers to cause a denial of service via the REVLOG command...

CVE-2001-0145

Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a malformed vCard birthday field...

CVE-2001-0256

FaSTream FTP++ Server 2.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long username...

CVE-2001-0312

IBM WebSphere plugin for Netscape Enterprise server allows remote attackers to read source code for JSP files via an HTTP request that contains a host header that references a host that is not in WebSphere's host aliases list, which will bypass WebSphere processing...

CVE-2001-0270

Marconi ASX-1000 ASX switches allow remote attackers to cause a denial of service in the telnet and web management interfaces via a malformed packet with the SYN-FIN and More Fragments attributes set...

CVE-2001-0305

Directory traversal vulnerability in store.cgi in Thinking Arts ES.One package allows remote attackers to read arbitrary files via a .. dot dot in the StartID parameter...

CVE-2001-0254

FaSTream FTP++ Server 2.0 allows remote attackers to obtain the real pathname of the server via the "pwd" command...

CVE-2001-0303

tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to determine the physical path of the server via a URL that requests a non-existent file...

CVE-2001-0277

Buffer overflow in ext.dll in BadBlue 1.02.07 Personal Edition allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request...

CVE-2001-0286

Directory traversal vulnerability in A1 HTTP server 1.0a allows remote attackers to read arbitrary files via a .. dot dot in an HTTP GET request...

CVE-2001-0325

CVE-2001-0325 affects QNX RTP 5.60. The vulnerability is a buffer/stack overflow in parsing arguments to the stat command (also described as a strtok()-related overflow in the FTP stat handling), allowing a remote attacker to cause a denial of service and potentially execute arbitrary code. Conne...

CVE-2001-0283

SunFTP directory traversal (CVE-2001-0283) affects SunFTP build 9. Affected component: FTP server SunFTP. Vulnerability: directory traversal allowing reading of arbitrary files via ".." in commands such as GET, MKDIR, RMDIR, RENAME, and PUT. Underlying cause: improper normalization/validation of ...

CVE-2001-0270

CVE-2001-0270 affects Marconi ASX-1000 ASX switches. The issue allows remote attackers to cause a denial of service in the telnet and web management interfaces via a malformed TCP packet that uses SYN-FIN and the More Fragments attributes. Exploitation details or active exploit status are not pro...

CVE-2001-0313

Borderware Firewall Server 6.1.2 is vulnerable to a denial-of-service condition triggered by a ping to the broadcast address of the server’s public network. The affected component is the server’s network stack handling ICMP echoes; exploitation causes the device to continuously send echo requests...

CVE-2001-0291

CVE-2001-0291 describes a buffer overflow vulnerability in a post-query sample CGI program. The flaw allows remote attackers to execute arbitrary commands by sending an HTTP POST request containing at least 10001 parameters. The NVD entry lists a high impact (base score 10.0) with complete confid...

CVE-2001-0308

The CVE-2001-0308 entry affects Bajie HTTP JServer 0.78 (and possibly earlier than 0.80). The vulnerability is in UploadServlet, which lets a remote attacker upload a program and then (via a modified .. path) access the file created for that program to execute arbitrary commands. The connected do...