CVE-2001-0227

Buffer overflow in BiblioWeb web server 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request...

CVE-2001-0208

CVE-2001-0208 affects MicroFocus Cobol 4.1 with the AppTrack feature enabled. The root cause is insecure permissions on the installed mfaslmf directory and a nolicense file, which allows local users to modify these files and gain privileges. The connected sources confirm the issue but do not spec...

CVE-2001-0212

CVE-2001-0212 describes a directory traversal in HIS Auktion 1.62 allowing remote read of arbitrary files via an encoded dot-dot in the menue parameter, with potential command execution through shell metacharacters. The Nessus plugin for HIS Auktion (auktion.cgi) flags a well-known flaw in the au...

CVE-2001-0200

HSWeb 2.0 HTTP server is affected by a path-disclosure vulnerability: remote attackers can obtain the server’s physical path by requesting the /cgi/ directory if directory browsing is enabled. This results in partial confidentiality impact. The available sources do not provide exploit details, af...

CVE-2001-0168

CVE-2001-0168 affects AT&T WinVNC Windows server up to version 3.3.3r7. A buffer overflow in the HTTP handling (vncHTTPConnect/Log.cpp) can be triggered by an overly long HTTP GET when the DebugLevel registry key > 0, allowing remote code execution with the privileges of the VNC server user. P...

CVE-2001-0184

CVE-2001-0184 concerns eEye Iris 1.01 beta, where a remote attacker can trigger a denial of service by sending a malformed packet that crashes Iris when viewed. Affected component is the Iris client; underlying cause is mishandling of a crafted packet leading to crash. Exploitation details are no...

CVE-2001-0225

Infobot prior to 0.44.5.3 is affected by CVE-2001-0225 due to a Fortran math component that allows remote attackers to execute arbitrary commands through shell metacharacters. The entry notes a complete impact on confidentiality, integrity, and availability (base CVSS v2 score 10.0), with network...

CVE-2001-0232

newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via shell metacharacters...

CVE-2001-0186

The CVE-2001-0186 issue affects Free Java Web Server 1.0 and is a path traversal vulnerability. The root cause is improper handling of directory traversal sequences (".."), enabling remote attackers to read arbitrary files. Documented impact is access to files via crafted requests; no explicit fi...

CVE-2001-0226

CVE-2001-0226 describes a directory traversal vulnerability in BiblioWeb web server 2.0 where an attacker can read arbitrary files by exploiting .. or ... patterns in an HTTP GET request. This is a remote, unauthenticated attack that targets the server’s file path handling and allows partial conf...

CVE-2001-0146

IIS 5.0 and Exchange 2000 are vulnerable to a DoS via repeated malformed URLs that trigger a memory allocation error, disrupting IIS (and web-based mail on Exchange). The CERT/MS MS01-014 patch (and MS01-044 for IIS-only scenarios) are the remediation paths described; no exploitation details are ...

CVE-2001-0199

CVE-2001-0199 affects the SEDUM HTTP Server 2.0. A directory traversal flaw allows remote attackers to read files outside the web root by sending a GET request containing "..". The issue is exploitable over the network without authentication, with no required user interaction. The NVD entry lists...

CVE-2001-0210

CVE-2001-0210 describes a directory traversal in the commerce.cgi CGI program that lets remote attackers read arbitrary files by manipulating the page parameter with a .. (dot dot) traversal. Documented impact is partial confidentiality loss; attack vector is remote over the network with low comp...

CVE-2001-0181

Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute arbitrary commands...

CVE-2001-0180

CVE-2001-0180 involves a vulnerability in Lars Ellingsen’s guestserver.cgi where remote attackers can execute arbitrary commands through shell metacharacters in the email parameter. The issue is a command injection in the CGI handling of user-provided input, enabling full compromise of confidenti...

CVE-2001-0211

CVE-2001-0211 describes a directory traversal vulnerability in WebSPIRS 3.1 where the CGI parameter sp.nextform can be manipulated with a .. sequence to read arbitrary files. Multiple sources (NVD and CVE listings) confirm the affected product as WebSPIRS 3.1 and the impact as information disclos...

CVE-2001-0192

CVE-2001-0192 describes a buffer overflow in CTRLServer (XMail) that can be triggered via the cfgfileget or domaindel functions, allowing arbitrary command execution. The vulnerability is categorized with a NETWORK attack vector and HIGH impact (complete confidentiality, integrity, and availabili...

CVE-2001-0208

MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, which allows local users to gain privileges by modifying files...

CVE-2001-0225

fortran math component in Infobot 0.44.5.3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2001-0173

Buffer overflow in qDecoder library 5.08 and earlier, as used in CrazyWWWBoard, CrazySearch, and other CGI programs, allows remote attackers to execute arbitrary commands via a long MIME Content-Type header...