CVE-2001-0046

The default permissions for the SNMP Parameters registry key in Windows NT 4.0 allows remote attackers to read and possibly modify the SNMP community strings to obtain sensitive information or modify network configuration, aka one of the "Registry Permissions" vulnerabilities...

CVE-2001-0086

CGI Script Center Subscribe Me LITE 2.0 and earlier allows remote attackers to delete arbitrary mailing list users without authentication by directly calling subscribe.pl with the target address as a parameter...

CVE-2001-0068

Mac OS Runtime for Java MRJ 2.2.3 allows remote attackers to use malicious applets to read files outside of the CODEBASE context via the ARCHIVE applet parameter...

CVE-2001-0022

simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the guestbook parameter...

CVE-2001-0037

CVE-2001-0037 affects HomeSeer prior to version 1.4.29 and is a directory traversal vulnerability. The issue arises from insufficient validation of URL-embedded .. sequences, allowing remote attackers to read arbitrary files. Impact is read access to non-public files; no exploit details are provi...

CVE-2001-0076

CVE-2001-0076 affects Ikonboard (register.cgi)

CVE-2001-0067

CVE-2001-0067 concerns the jpilot program, which creates a .jpilot directory in the user’s home with world-writable permissions (777). This insecure default enables local attackers to read other users’ PalmOS backups if umasks are not strictly set. Root cause is directory creation with permissive...

CVE-2001-0086

CVE-2001-0086 affects CGI Script Center Subscribe Me LITE 2.0 and earlier. The vulnerability allows remote attackers to delete arbitrary mailing-list users by directly calling subscribe.pl with the target address as a parameter, without authentication. The NVD entry notes a CVSS v2 base score of ...

CVE-2001-0023

everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter...

CVE-2001-0076

register.cgi in Ikonboard 2.1.7b and earlier allows remote attackers to execute arbitrary commands via the SENDMAIL parameter, which overwrites an internal program variable that references a program to be executed...

CVE-2001-0101

CVE-2001-0101 affects fetchmail 5.5.0-2 and earlier, with vulnerability in the AUTHENTICATE GSSAPI command. The available connected records confirm the affected software and the vulnerable component, but do not provide further technical details on root cause, impact specifics beyond what NVD list...

CVE-2001-0097

The Web interface for Infinite Interchange 3.6.1 allows remote attackers to cause a denial of service application crash via a large POST request...

CVE-2001-0023

CVE-2001-0023 affects the everythingform.cgi CGI program by Leif Wright. It allows a remote attacker to execute arbitrary commands via shell metacharacters in the config parameter. The available documents do not specify affected versions, root cause details beyond this description, or any provide...

CVE-2001-0068

The CVE-2001-0068 entry concerns Mac OS Runtime for Java (MRJ) 2.2.3. The connected NVD entry states that remote attackers could exploit malicious applets to read files outside the CODEBASE context by abusing the ARCHIVE applet parameter. The vulnerability description does not provide exploit cod...

CVE-2001-0032

Format string vulnerability in ssldump possibly allows remote attackers to cause a denial of service and possibly gain root privileges via malicious format string specifiers in a URL...

CVE-2001-0030

The CVE-2001-0030 entry describes a vulnerability in FoolProof 3.9 where local users can bypass program execution restrictions by downloading restricted executables from an external source and renaming them. This indicates a local privilege escalation flaw due to improper enforcement of execution...

CVE-2001-0029

CVE-2001-0029 affects the ooops WWW proxy server (v1.4.6 and possibly earlier). The vulnerability is a buffer overflow in handling host/domain names obtained from reverse DNS lookups, enabling a remote attacker to execute arbitrary commands. The CVSS/impact metrics show a base score of 10.0 (HIGH...

CVE-2001-0051

CVE-2001-0051 is linked to IBM DB2 UDB 6.1 where a default account/password enables remote access. Connected docs corroborate generic risk through default-db2 credentials (db2as, db2inst1, db2fenc1, etc.) and multiple related CVEs (CVE-1999-0501, CVE-1999-0502, CVE-2001-0051). OpenVAS/Nessus entr...

CVE-2001-0024

simplestmail.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the MyEmail parameter...

CVE-2001-0104

MDaemon Pro 3.5.1 and earlier have a local privilege bypass: a user can bypass the "lock server" security setting by pressing Cancel at the password prompt and then pressing Enter. The available documents confirm the affected product and UI-based trigger, but do not provide concrete mitigation st...