3468 matches found
CVE-2001-0314
CVE-2001-0314 : A buffer overflow in the AOL 5.0 “www.tol” module can be triggered by a long URL in a link, potentially allowing remote denial of service and possibly arbitrary command execution. The provided documents do not include specific exploit details or remediation/version information. No...
CVE-2001-0313
Borderware Firewall Server 6.1.2 is vulnerable to a denial-of-service condition triggered by a ping to the broadcast address of the server’s public network. The affected component is the server’s network stack handling ICMP echoes; exploitation causes the device to continuously send echo requests...
CVE-2001-0275
CVE-2001-0275 affects Moby Netsuite Web Server 1.02. A long HTTP request can trigger denial of service and possibly allow execution of arbitrary commands. The connected sources reference this product/version and the impact as described; no concrete root cause or patch details are provided in the ...
CVE-2001-0308
UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by calling the servlet to upload a program, then using a ... modified .. to access the file that was created for the program...
CVE-2001-0307
Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request for a CGI program that does not exist...
CVE-2001-0323
The ICMP path MTU PMTU discovery feature in various UNIX systems allows remote attackers to cause a denial of service by spoofing "ICMP Fragmentation needed but Don't Fragment DF set" packets between two target hosts, which could cause one host to lower its MTU when transmitting to the other host...
CVE-2001-0286
CVE-2001-0286 describes a directory traversal vulnerability in the A1 HTTP server 1.0a, where remote attackers can read arbitrary files by using a “..” sequence in an HTTP GET request. The publicly documented impact is file-read access; exploit details or in-the-wild status are not provided in th...
CVE-2001-0304
CVE-2001-0304 affects Caucho Resin 1.2.2 and is a directory traversal vulnerability that allows remote attackers to read arbitrary files by sending a URL containing a ..? path component. The issue arises from handling of dot-dot sequences in requests, enabling potential exposure of sensitive file...
CVE-2001-0270
Marconi ASX-1000 ASX switches allow remote attackers to cause a denial of service in the telnet and web management interfaces via a malformed packet with the SYN-FIN and More Fragments attributes set...
CVE-2001-0251
CVE-2001-0251 affects Netscape Enterprise Server 3.x via the Web Publishing feature. The vulnerability allows remote attackers to cause a denial-of-service by sending the REVLOG command. The connected documents corroborate the issue across multiple sources (NVD entry, CVE record, and EUVD referen...
Дырка в Virus Buster 2001
Переполнение буфера при длинном MIME-заголовке письма...
CVE-2001-0177
WebMaster ConferenceRoom 1.8.1 allows remote attackers to cause a denial of service via a buddy relationship between the IRC server and a server clone...
CVE-2001-0182
FireWall-1 4.1 with a limited-IP license allows remote attackers to cause a denial of service by sending a large number of spoofed IP packets with various source addresses to the inside interface, which floods the console with warning messages and consumes CPU resources...
CVE-2001-0190
Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by executing cu with a long program name arg0...
CVE-2001-0170
glibc 2.1.9x and earlier does not properly clear the RESOLVHOSTCONF, HOSTALIASES, or RESOPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files...
CVE-2001-0187
Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment...
CVE-2001-0189
Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a .. dot dot attack in an HTTP GET request...
CVE-2001-0223
Buffer overflow in wwwwais allows remote attackers to execute arbitrary commands via a long QUERYSTRING HTTP GET request...
CVE-2001-0169
When using the LDPRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib...