3489 matches found
CVE-2001-1229
Buffer overflows in 1 Icecast before 1.3.9 and 2 libshout before 1.0.4 allow remote attackers to cause a denial of service crash and execute arbitrary code...
CVE-2001-0141
mgetty 1.1.22 allows local users to overwrite arbitrary files via a symlink attack in some configurations...
Icecast / Libshout remote vulnerabilities
We have found numerous remotely exploitable buffer overflows in both Icecast and Libshout, two popular packages for streaming audio. All users of these packages are urged to upgrade immediately. Patched versions of these packages are available as of March 11, 2001 from www.icecast.org. All versio...
CVE-2001-0225
fortran math component in Infobot 0.44.5.3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters...
CVE-2001-0173
Buffer overflow in qDecoder library 5.08 and earlier, as used in CrazyWWWBoard, CrazySearch, and other CGI programs, allows remote attackers to execute arbitrary commands via a long MIME Content-Type header...
CVE-2001-0202
Picserver web server allows remote attackers to read arbitrary files via a .. dot dot attack in an HTTP GET request...
CVE-2001-0224
Muscat Empower CGI program allows remote attackers to obtain the absolute pathname of the server via an invalid request in the DB parameter...
CVE-2001-0186
Directory traversal vulnerability in Free Java Web Server 1.0 allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2001-0210
Directory traversal vulnerability in commerce.cgi CGI program allows remote attackers to read arbitrary files via a .. dot dot attack in the page parameter...
CVE-2001-0188
GoodTech FTP server 3.0.1.2.1.0 and earlier allows remote attackers to cause a denial of service via a flood of connections to the server, which causes it to crash...
CVE-2001-0208
MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, which allows local users to gain privileges by modifying files...
CVE-2001-0217
Directory traversal vulnerability in PALS Library System pals-cgi program allows remote attackers to read arbitrary files via a .. dot dot in the documentName parameter...
CVE-2001-0146
IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service memory allocation error by repeatedly sending a series of specially formatted URL's...
CVE-2001-0227
Buffer overflow in BiblioWeb web server 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request...
CVE-2001-0212
CVE-2001-0212 describes a directory traversal in HIS Auktion 1.62 allowing remote read of arbitrary files via an encoded dot-dot in the menue parameter, with potential command execution through shell metacharacters. The Nessus plugin for HIS Auktion (auktion.cgi) flags a well-known flaw in the au...
CVE-2001-0211
CVE-2001-0211 describes a directory traversal vulnerability in WebSPIRS 3.1 where the CGI parameter sp.nextform can be manipulated with a .. sequence to read arbitrary files. Multiple sources (NVD and CVE listings) confirm the affected product as WebSPIRS 3.1 and the impact as information disclos...
CVE-2001-0173
The CVE-2001-0173 entry describes a buffer overflow in the qDecoder library (versions ≤ 5.08) used by CrazyWWWBoard, CrazySearch, and other CGI programs. The overflow occurs in parsing a long MIME Content-Type header, enabling remote command execution. Affected component: qDecoder library. Root c...
CVE-2001-0181
Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute arbitrary commands...