CVE-2001-0062

procfs in FreeBSD and possibly other operating systems allows local users to cause a denial of service by calling mmap on the process' own mem file, which causes the kernel to hang...

CVE-2001-0070

Buffer overflow in 1st Up Mail Server 4.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long MAIL FROM command...

CVE-2001-0082

Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via malformed, fragmented packets...

CVE-2001-0085

Buffer overflow in Kermit communications software in HP-UX 11.0 and earlier allows local users to cause a denial of service and possibly execute arbitrary commands...

CVE-2001-0087

itetris/xitetris 1.6.2 and earlier trusts the PATH environmental variable to find and execute the gunzip program, which allows local users to gain root privileges by changing their PATH so that it points to a malicious gunzip program...

CVE-2001-0104

MDaemon Pro 3.5.1 and earlier allows local users to bypass the "lock server" security setting by pressing the Cancel button at the password prompt, then pressing the enter key...

CVE-2001-0014

Remote Data Protocol RDP in Windows 2000 Terminal Service does not properly handle certain malformed packets, which allows remote attackers to cause a denial of service, aka the "Invalid RDP Data" vulnerability...

CVE-2001-0106

Vulnerability in inetd server in HP-UX 11.04 and earlier allows attackers to cause a denial of service when the "swait" state is used by a server...

CVE-2001-1453

Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via a long host parameter...

CVE-2001-1454

Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database request...

CVE-2001-1357

Multiple vulnerabilities in phpMyChat before 0.14.5 exist in 1 input.php3, 2 handleinputH.php3, or 3 index.lib.php3 with unknown consequences, possibly related to user spoofing or improperly initialized variables...

CVE-2001-0082

Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via malformed, fragmented packets...

CVE-2001-0044

The CVE-2001-0044 entry concerns Lexmark MarkVision printer driver components; specifically, multiple buffer overflows in cat_network, cat_paraller, and cat_serial allow local users to gain privileges via long command arguments. The root cause is a buffer overflow in argument handling within thes...

CVE-2001-0027

The CVE-2001-0027 issue concerns the ProFTPD mod_sqlpw module where the cached password is not reset when a user issues the "user" command to switch accounts. This can allow an authenticated attacker to gain privileges of another user. The vulnerability affects the mod_sqlpw component within ProF...

CVE-2001-0037

CVE-2001-0037 affects HomeSeer prior to version 1.4.29 and is a directory traversal vulnerability. The issue arises from insufficient validation of URL-embedded .. sequences, allowing remote attackers to read arbitrary files. Impact is read access to non-public files; no exploit details are provi...

CVE-2001-0052

IBM DB2 Universal Database version 6.1 allows users to cause a denial of service via a malformed query...

CVE-2001-0030

FoolProof 3.9 allows local users to bypass program execution restrictions by downloading the restricted executables from another source and renaming them...

CVE-2001-0022

CVE-2001-0022 affects the simplestguest.cgi CGI program by Leif Wright, allowing remote attackers to execute arbitrary commands via shell metacharacters in the guestbook parameter. The NVD entry assigns a CVSS v2 base score of 10.0 (HIGH) with network access, low attack complexity, no authenticat...

CVE-2001-0038

Offline Explorer 1.4 is affected by a local file read vulnerability present before Service Release 2. An attacker could specify a drive letter (for example C:) in the requested URL to read arbitrary files on the system. Root cause: inadequate validation of the URL drive letter in requests. Impact...

CVE-2001-0024

The CVE-2001-0024 entry concerns the simplestmail.cgi CGI program by Leif Wright, where remote attackers can execute arbitrary commands via shell metacharacters in the MyEmail parameter. This is a remote command execution flaw with high impact (as per NVD) and network attack vector; no concrete e...