CVE-2001-0217

Directory traversal vulnerability in PALS Library System pals-cgi program allows remote attackers to read arbitrary files via a .. dot dot in the documentName parameter...

CVE-2001-0167

CVE-2001-0167 describes a buffer overflow in the RealVNC/WinVNC client prior to or at version 3.3.3r7 (WinVNC) that can be triggered by a crafted rfbConnFailed packet and a long reason string, allowing a remote attacker to execute arbitrary code with the user’s privileges. Connected sources show ...

CVE-2001-0210

Directory traversal vulnerability in commerce.cgi CGI program allows remote attackers to read arbitrary files via a .. dot dot attack in the page parameter...

CVE-2001-0229

The CVE affects Chili!Soft ASP for Linux before 3.6. In inherited mode it missets group privileges, enabling local privilege escalation via malicious scripts. Impact is described as complete confidentiality, integrity, and availability losses. No explicit remediation steps are documented in the p...

CVE-2001-0232

News Desk 1.2 is affected by CVE-2001-0232 via the newsdesk.cgi script, allowing remote attackers to read arbitrary files by supplying shell metacharacters. Root cause: improper handling of shell metacharacters in the CGI. Impact documented as partial confidentiality. CVSS info from NVD indicates...

CVE-2001-0171

CVE-2001-0171 affects SlimServe HTTPd 1.0 via a buffer overflow in handling a long GET request. This leads to a remote denial of service and may allow arbitrary command execution . The provided documents identify the root cause as the overflow in SlimServe HTTPd 1.0 and state the impact as DoS an...

CVE-2001-0172

CVE-2001-0172 describes a buffer overflow in ReiserFS 3.5.28 on SuSE Linux that allows local users to trigger a denial of service and potentially execute arbitrary commands by supplying a long directory name. The vulnerability is local (attack vector: LOCAL) with low complexity and authentication...

CVE-2001-0217

The connected Nessus source (PALS Library System WebPALS pals-cgi Multiple Vulnerabilities) confirms a directory traversal flaw in the pals-cgi CGI of the PALS Library System. The vulnerability allows an attacker to read arbitrary files via the .. sequence in the documentName parameter, with the ...

CVE-2001-0220

CVE-2001-0220 describes a buffer overflow in the ja-elvis and ko-helvis ports of the Elvis program that allows local users to gain root privileges. The NVD entry lists a CVSSv2 base score of 7.2 ( HIGH ) with LOCAL attack vector, LOW complexity, no authentication required, and complete impact on ...

CVE-2001-0172

Buffer overflow in ReiserFS 3.5.28 in SuSE Linux allows local users to cause a denial of service and possibly execute arbitrary commands by via a long directory name...

CVE-2001-0146

IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service memory allocation error by repeatedly sending a series of specially formatted URL's...

CVE-2001-0186

Directory traversal vulnerability in Free Java Web Server 1.0 allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2001-0213

CVE-2001-0213 describes a buffer overflow in the PlanetIntra 2.5 “pi” program that allows remote attackers to perform arbitrary command execution. The vulnerability is triggered by malformed input to the pi component, enabling an attacker to potentially take control of the affected system. Docume...

CVE-2001-0224

Muscat Empower CGI program allows remote attackers to obtain the absolute pathname of the server via an invalid request in the DB parameter...

CVE-2001-0223

The CVE-2001-0223 issue concerns the wwwwais CGI (wwwwais) on affected web servers. A buffer overflow in the CGI allows remote attackers to execute arbitrary commands by crafting a long QUERY_STRING in an HTTP GET request. The Nessus entry reiterates that the wwwwais CGI has a flaw enabling arbit...

CVE-2001-0201

The CVE-2001-0201 entry describes a vulnerability in the Postaci frontend for PostgreSQL where improper filtering of characters (e.g., semicolons) could allow remote attackers to execute arbitrary SQL queries via the deletecontact.php program. This yields partial confidentiality, integrity, and a...

CVE-2001-0209

CVE-2001-0209 : Buffer overflow in Shoutcast Distributed Network Audio Server (DNAS) 1.7.1 enables remote attackers to cause a denial of service, and possibly execute arbitrary commands, through a long description. The provided documents confirm DNAS as affected and describe the vulnerability as ...

Microsoft IIS WebDAV Malformed PROPFIND Request Remote DoS

It was possible to disable the remote IIS server by making a specially formed PROPFIND request. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This security check is heavily based on Georgi Guninski's post on the bugtraq mailing list include'deprecatednasllevel.inc'; include'compat.inc'; if...

CVE-2001-1445

Unknown vulnerability in the SMTP server in Lotus Domino 5.0 through 5.7 allows remote attackers to bypass mail relaying restrictions via crafted e-mail addresses in "RCPT TO" commands...

CVE-2001-1434

Cisco IOS 12.05XU through 12.12 allows remote attackers to read system administration and topology information via an "snmp-server host" command, which creates a readable "community" community string if one has not been previously created...