CVE-2001-0226

CVE-2001-0226 describes a directory traversal vulnerability in BiblioWeb web server 2.0 where an attacker can read arbitrary files by exploiting .. or ... patterns in an HTTP GET request. This is a remote, unauthenticated attack that targets the server’s file path handling and allows partial conf...

CVE-2001-0220

CVE-2001-0220 describes a buffer overflow in the ja-elvis and ko-helvis ports of the Elvis program that allows local users to gain root privileges. The NVD entry lists a CVSSv2 base score of 7.2 ( HIGH ) with LOCAL attack vector, LOW complexity, no authentication required, and complete impact on ...

CVE-2001-0177

CVE-2001-0177 affects WebMaster ConferenceRoom 1.8.1. A remote attacker can trigger a denial of service via a buddy relationship between the IRC server and a server clone. The available records do not document the underlying root cause, exploit status, or a provided remediation in the connected s...

CVE-2001-0223

The CVE-2001-0223 issue concerns the wwwwais CGI (wwwwais) on affected web servers. A buffer overflow in the CGI allows remote attackers to execute arbitrary commands by crafting a long QUERY_STRING in an HTTP GET request. The Nessus entry reiterates that the wwwwais CGI has a flaw enabling arbit...

CVE-2001-0171

CVE-2001-0171 affects SlimServe HTTPd 1.0 via a buffer overflow in handling a long GET request. This leads to a remote denial of service and may allow arbitrary command execution . The provided documents identify the root cause as the overflow in SlimServe HTTPd 1.0 and state the impact as DoS an...

CVE-2001-0186

The CVE-2001-0186 issue affects Free Java Web Server 1.0 and is a path traversal vulnerability. The root cause is improper handling of directory traversal sequences (".."), enabling remote attackers to read arbitrary files. Documented impact is access to files via crafted requests; no explicit fi...

CVE-2001-0205

CVE-2001-0205 : A directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting a modified .. (dot dot) sequence ("...") into the requested pathname. The issue affects the pathname handling in AOLserver versions up to and including 3.2...

CVE-2001-0232

News Desk 1.2 is affected by CVE-2001-0232 via the newsdesk.cgi script, allowing remote attackers to read arbitrary files by supplying shell metacharacters. Root cause: improper handling of shell metacharacters in the CGI. Impact documented as partial confidentiality. CVSS info from NVD indicates...

CVE-2001-0213

CVE-2001-0213 describes a buffer overflow in the PlanetIntra 2.5 “pi” program that allows remote attackers to perform arbitrary command execution. The vulnerability is triggered by malformed input to the pi component, enabling an attacker to potentially take control of the affected system. Docume...

CVE-2001-0208

CVE-2001-0208 affects MicroFocus Cobol 4.1 with the AppTrack feature enabled. The root cause is insecure permissions on the installed mfaslmf directory and a nolicense file, which allows local users to modify these files and gain privileges. The connected sources confirm the issue but do not spec...

CVE-2001-0171

Buffer overflow in SlimServe HTTPd 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long GET request...

CVE-2001-0232

newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via shell metacharacters...

CVE-2001-0212

CVE-2001-0212 describes a directory traversal in HIS Auktion 1.62 allowing remote read of arbitrary files via an encoded dot-dot in the menue parameter, with potential command execution through shell metacharacters. The Nessus plugin for HIS Auktion (auktion.cgi) flags a well-known flaw in the au...

CVE-2001-0211

CVE-2001-0211 describes a directory traversal vulnerability in WebSPIRS 3.1 where the CGI parameter sp.nextform can be manipulated with a .. sequence to read arbitrary files. Multiple sources (NVD and CVE listings) confirm the affected product as WebSPIRS 3.1 and the impact as information disclos...

CVE-2001-0173

The CVE-2001-0173 entry describes a buffer overflow in the qDecoder library (versions ≤ 5.08) used by CrazyWWWBoard, CrazySearch, and other CGI programs. The overflow occurs in parsing a long MIME Content-Type header, enabling remote command execution. Affected component: qDecoder library. Root c...

CVE-2001-0206: Undefined Security Weakness

Directory traversal vulnerability in Soft Lite ServerWorx 3.00 allows remote attackers to read arbitrary files by inserting a .. dot dot or ... into the requested pathname of an HTTP GET request...

Microsoft IIS WebDAV Malformed PROPFIND Request Remote DoS

It was possible to disable the remote IIS server by making a specially formed PROPFIND request. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This security check is heavily based on Georgi Guninski's post on the bugtraq mailing list include'deprecatednasllevel.inc'; include'compat.inc'; if...

CVE-2001-1445

Unknown vulnerability in the SMTP server in Lotus Domino 5.0 through 5.7 allows remote attackers to bypass mail relaying restrictions via crafted e-mail addresses in "RCPT TO" commands...

CVE-2001-1434

Cisco IOS 12.05XU through 12.12 allows remote attackers to read system administration and topology information via an "snmp-server host" command, which creates a readable "community" community string if one has not been previously created...

HP OpenView OmniBack II A.03.50 - Command Execution (Metasploit)

HP OpenView OmniBack II A.03.50 - Command Execution Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...