3468 matches found
CVE-2001-0273
CVE-2001-0273 affects pgp4pine 1.75-6. The module fails to verify whether public keys loaded from GnuPG are expired, which can lead to encrypt attempts returning errors while the cleartext message is transmitted. According to CERT/CC and NVD entries, the vulnerability can cause sensitive informat...
CVE-2001-0283
Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. dot dot characters in various commands, including 1 GET, 2 MKDIR, 3 RMDIR, 4 RENAME, or 5 PUT...
CVE-2001-0293
Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitrary files via a .. dot dot in the GET command...
CVE-2001-0303
Pi3Web 1.0.1 isapi: tstisapi.dll leakage allows remote attackers to determine the server’s physical path by requesting a non-existent file, an information disclosure vulnerability. The Nessus plugin additionally notes that the /isapi/tstisapi.dll CGI has a well-known flaw that can allow arbitrary...
CVE-2001-0324
The vulnerability (CVE-2001-0324) affects Windows 98 and Windows 2000 Java clients. A Java applet can open a large number of UDP sockets, the underlying cause being excessive UDP socket creation, which prevents the host from establishing additional UDP connections and can lead to a crash. No expl...
CVE-2001-0283
SunFTP directory traversal (CVE-2001-0283) affects SunFTP build 9. Affected component: FTP server SunFTP. Vulnerability: directory traversal allowing reading of arbitrary files via ".." in commands such as GET, MKDIR, RMDIR, RENAME, and PUT. Underlying cause: improper normalization/validation of ...
CVE-2001-0256
FaSTream FTP++ Server 2.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long username...
CVE-2001-0258
The CVE-2001-0258 issue affects the Easycom/Safecom Print Server PrintGuide server (firmware 404.590). The vulnerability is a remote denial of service caused by a large number of connections that send null characters, affecting availability (CVSS base metric shows Availability impact PARTIAL). Th...
CVE-2001-0322
MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of service application crash via a script that creates and deletes an object that is associated with the browser window object...
CVE-2001-0302
Buffer overflow in tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long URL...
CVE-2001-0300
oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory ldaplog that has world-writable permissions, which may allow local users to delete logs and/or overwrite other files via a symlink attack...
CVE-2001-0282
CVE-2001-0282 affects the SEDUM 2.1 HTTP server. The vulnerability arises when processing long HTTP requests, which can cause remote denial of service and may allow arbitrary command execution. Documentation indicates the issue impacts the server’s availability and could enable execution of comma...
CVE-2001-0257
CVE-2001-0257 concerns the Easycom/Safecom Print Server Web service (versions
CVE-2001-0286
Directory traversal vulnerability in A1 HTTP server 1.0a allows remote attackers to read arbitrary files via a .. dot dot in an HTTP GET request...
CVE-2001-0325
CVE-2001-0325 affects QNX RTP 5.60. The vulnerability is a buffer/stack overflow in parsing arguments to the stat command (also described as a strtok()-related overflow in the FTP stat handling), allowing a remote attacker to cause a denial of service and potentially execute arbitrary code. Conne...
CVE-2001-0293
CVE-2001-0293 concerns the FtpXQ FTP server (version 2.0.93) and describes a directory traversal vulnerability where an attacker can read arbitrary files via a .. in the GET command. The connected documents confirm the affected product and the root cause (path traversal via GET), but do not provi...
CVE-2001-0253
CVE-2001-0253 : A directory traversal vulnerability exists in the iWeb Hyperseek 2000 hsx.cgi show parameter, allowing remote attackers to read arbitrary files and directories via a .. path. The affected component is the hsx.cgi CGI in iWeb Hyperseek 2000. The underlying issue is insufficient inp...
CVE-2001-0273
pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu Privacy Guard GnuPG, which causes the message to be sent in cleartext...
CVE-2001-0300
The CVE-2001-0300 issue pertains to the Oracle Internet Directory LDAP Daemon (oidldapd) version 2.1.1.1 included with Oracle 8i/8.1.7. The daemon writes logs to a directory (ldaplog) that has world‑writable permissions, enabling a local user to delete logs and, via a symlink attack, overwrite ot...