3468 matches found
CVE-2001-0138
privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack...
CVE-2001-0123
Directory traversal vulnerability in eXtropia bbsforum.cgi 1.0 allows remote attackers to read arbitrary files via a .. dot dot attack on the file parameter...
CVE-2001-0131
htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack...
CVE-2001-0115
Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f parameter...
Icecast / Libshout remote vulnerabilities
We have found numerous remotely exploitable buffer overflows in both Icecast and Libshout, two popular packages for streaming audio. All users of these packages are urged to upgrade immediately. Patched versions of these packages are available as of March 11, 2001 from www.icecast.org. All versio...
CVE-2001-0188
GoodTech FTP server 3.0.1.2.1.0 and earlier allows remote attackers to cause a denial of service via a flood of connections to the server, which causes it to crash...
CVE-2001-0202
Picserver web server allows remote attackers to read arbitrary files via a .. dot dot attack in an HTTP GET request...
CVE-2001-0173
The CVE-2001-0173 entry describes a buffer overflow in the qDecoder library (versions ≤ 5.08) used by CrazyWWWBoard, CrazySearch, and other CGI programs. The overflow occurs in parsing a long MIME Content-Type header, enabling remote command execution. Affected component: qDecoder library. Root c...
CVE-2001-0214
The Way-board CGI (way-board.cgi) is vulnerable: an attacker can remotely read arbitrary files by supplying a filename in the db parameter terminated with a null byte. The NASL/Tenable data notes the CGI runs with the web server’s privileges (often root or nobody), enabling file disclosure. Remed...
CVE-2001-0205
CVE-2001-0205 : A directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting a modified .. (dot dot) sequence ("...") into the requested pathname. The issue affects the pathname handling in AOLserver versions up to and including 3.2...
CVE-2001-0228
CVE-2001-0228 describes a directory traversal vulnerability in the GoAhead Web Server up to version 2.1 and earlier. An attacker can read arbitrary files by crafting a URL containing a .. sequence in an HTTP GET request. This vulnerability is documented across multiple feeds (NVD entry) and is no...
CVE-2001-0188
Affected software: GoodTech FTP Server for Windows. Vulnerability: denial-of-service via a flood of connections that causes the server to crash (CVE-2001-0188, affected versions 3.0.1.2.1.0 and earlier). Evidence: multiple sources describe an DoS condition from rapid/abusive connection attempts; ...
CVE-2001-0202
The CVE-2001-0202 entry affects the Picserver web server, where a directory traversal (..) in an HTTP GET request allows an attacker to read arbitrary files. This root cause is described across multiple sources (e.g., NVD/NVD entry and CVE record) as a remote-access vulnerability with a notable i...
CVE-2001-0198
The CVE-2001-0198 issue affects the QuickTime Player plugin 4.1.2 (Japanese). The root cause is a buffer overflow caused by a long HREF parameter in an EMBED tag, allowing remote attackers to execute arbitrary commands. Public references describe a remote buffer overflow exploit via a crafted HTM...
CVE-2001-0216
The CVE-2001-0216 issue affects the PALS Library System pals-cgi program. The vulnerability arises from shell metacharacters in the documentName parameter, enabling remote attackers to execute arbitrary commands via the CGI. NVD data indicates a NETWORK attack vector with LOW complexity and no au...
CVE-2001-0224
CVE-2001-0224 affects the Muscat Empower CGI program. A remote attacker can cause disclosure of the server’s absolute pathname via an invalid request in the DB parameter. The issue is demonstrated by a misleading DB parameter in a GET request to the CGI (e.g., GET /cgi-bin/empower?DB=whatever), w...
CVE-2001-0227
The CVE-2001-0227 entry concerns the BiblioWeb web server 2.0. A buffer overflow can be triggered by a long HTTP GET request, allowing remote attackers to cause a denial of service and possibly execute arbitrary commands. The available documents provide these concrete details; no explicit patch v...
CVE-2001-0177
CVE-2001-0177 affects WebMaster ConferenceRoom 1.8.1. A remote attacker can trigger a denial of service via a buddy relationship between the IRC server and a server clone. The available records do not document the underlying root cause, exploit status, or a provided remediation in the connected s...