CVE-2001-0250

CVE-2001-0250 : The vulnerability affects the Web Publishing feature of Netscape Enterprise Server (version 4.x and earlier). A remote attacker can trigger an arbitrary directory listing by sending the INDEX command to the web server, exposing internal site structure. Impact is information disclo...

CVE-2001-0304

CVE-2001-0304 affects Caucho Resin 1.2.2 and is a directory traversal vulnerability that allows remote attackers to read arbitrary files by sending a URL containing a ..? path component. The issue arises from handling of dot-dot sequences in requests, enabling potential exposure of sensitive file...

CVE-2001-0303

Pi3Web 1.0.1 isapi: tstisapi.dll leakage allows remote attackers to determine the server’s physical path by requesting a non-existent file, an information disclosure vulnerability. The Nessus plugin additionally notes that the /isapi/tstisapi.dll CGI has a well-known flaw that can allow arbitrary...

CVE-2001-0273

CVE-2001-0273 affects pgp4pine 1.75-6. The module fails to verify whether public keys loaded from GnuPG are expired, which can lead to encrypt attempts returning errors while the cleartext message is transmitted. According to CERT/CC and NVD entries, the vulnerability can cause sensitive informat...

CVE-2001-0257

CVE-2001-0257 concerns the Easycom/Safecom Print Server Web service (versions

CVE-2001-0251

CVE-2001-0251 affects Netscape Enterprise Server 3.x via the Web Publishing feature. The vulnerability allows remote attackers to cause a denial-of-service by sending the REVLOG command. The connected documents corroborate the issue across multiple sources (NVD entry, CVE record, and EUVD referen...

CVE-2001-0322

CVE-2001-0322 concerns MSHTML.DLL HTML parser in Internet Explorer 4.0 and newer, where a script that creates and deletes an object tied to the browser window object can trigger a denial of service (application crash). The vulnerability is described as remote, with impact limited to availability ...

CVE-2001-0292

CVE-2001-0292 concerns PHP-Nuke 4.4.1a. The vulnerability allows remote attackers to modify a user’s email address and obtain the password by guessing the user id (UID) and invoking the user.php page with the saveuser operator. The description indicates an unauthenticated vector that leverages UI...

CVE-2001-0307

CVE-2001-0307 affects Bajie HTTP JServer 0.78 and earlier than 0.80. The vulnerability allows remote command execution via shell metacharacters in an HTTP request for a CGI program that does not exist. NVD lists a CVSS v2 base score of 7.5 (HIGH) with network access, no authentication, and partia...

CVE-2001-0145

CVE-2001-0145 affects Outlook 2000/98 and Outlook Express 5.x, where a buffer overflow in the VCard handler can be triggered by a malformed vCard birthday field, allowing an attacker to execute arbitrary commands. The root cause described is a faulty VCard birthday parsing leading to memory corru...

CVE-2001-0272

The CVE-2001-0272 issue is a directory-traversal flaw in the W3.org Anaya Web development server’s sendtemp.pl CGI. The templ parameter can be manipulated with .. to read arbitrary server files, enabling unauthorized access to sensitive data. Affected component: sendtemp.pl in the CGI-bin of the ...

CVE-2001-0275

CVE-2001-0275 affects Moby Netsuite Web Server 1.02. A long HTTP request can trigger denial of service and possibly allow execution of arbitrary commands. The connected sources reference this product/version and the impact as described; no concrete root cause or patch details are provided in the ...

CVE-2001-0308

UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by calling the servlet to upload a program, then using a ... modified .. to access the file that was created for the program...

CVE-2001-0307

Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request for a CGI program that does not exist...

CVE-2001-0294

Directory traversal vulnerability in TYPSoft FTP Server 0.85 allows remote attackers to read arbitrary files via 1 a .. dot dot in a GET command, or 2 a ... in a CWD command...

CVE-2001-0253

Directory traversal vulnerability in hsx.cgi program in iWeb Hyperseek 2000 allows remote attackers to read arbitrary files and directories via a .. dot dot attack in the show parameter...

CVE-2001-0261

CVE-2001-0261 affects Microsoft Windows 2000 Encrypted File System. The issue is that backups of encrypted files are not properly destroyed, allowing a local attacker to recover the plaintext. The NVD entry assigns a low impact with partial confidentiality loss (CVSS v2 base score 2.1, LOCAL acce...

CVE-2001-0305

The CVE-2001-0305 issue affects the store.cgi CGI in Thinking Arts ES.One. It enables a directory traversal via .. in the StartID parameter, allowing remote attackers to read arbitraries files with the web server’s privileges. Multiple sources (NVD/NVD-derived entries, CVE lists, and Nessus plugi...

CVE-2001-0282

SEDUM 2.1 HTTP server allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request...

CVE-2001-0277

Buffer overflow in ext.dll in BadBlue 1.02.07 Personal Edition allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request...