CVE-2001-0049

WatchGuard SOHO Firewall 2.2.1 and earlier is affected by a denial-of-service vulnerability triggered by a large number of HTTP GET requests. The available descriptions identify the affected product and the impact but do not provide explicit root-cause details, affected subcomponents, versions be...

CVE-2001-0084

The CVE-2001-0084 issue affects the GTK+ library, where the GTK_MODULES environment variable lets local users specify arbitrary modules. If GTK+ is used by a setuid/setgid program, this can let local users gain privileges. Reports from PT-2001-1319 describe GTK+ (affected versions not specified) ...

CVE-2001-0074

Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. dot dot attack in the board parameter...

CVE-2001-0075

CVE-2001-0075 involves the Technote package where the CGI script main.cgi is vulnerable to a directory traversal via the filename parameter (using “..”). This allows remote attackers to read arbitrary files on the host, with the privileges of the web server. The vulnerability is concrete in the T...

CVE-2001-0101

CVE-2001-0101 affects fetchmail 5.5.0-2 and earlier, with vulnerability in the AUTHENTICATE GSSAPI command. The available connected records confirm the affected software and the vulnerable component, but do not provide further technical details on root cause, impact specifics beyond what NVD list...

CVE-2001-0027

modsqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, which allows authenticated attackers to gain privileges of other users...

CVE-2001-0047

CVE-2001-0047 affects Windows NT 4.0 where the registry key HKLM\SOFTWARE\Microsoft\Transaction Server\Packages (MTS) has weak permissions. Local users can modify this key to install or alter MTS packages and gain privileges, constituting a local privilege escalation as described in the Nessus en...

CVE-2001-0037

Directory traversal vulnerability in HomeSeer before 1.4.29 allows remote attackers to read arbitrary files via a URL containing .. dot dot specifiers...

CVE-2001-0079

Support Tools Manager STM A.22.00 for HP-UX allows local users to overwrite arbitrary files via a symlink attack on the toolstat.txt log file...

CVE-2001-0064

MDaemon IMAP Server DoS (CVE-2001-0064): The vulnerability affects MDaemon Webconfig/IMAP in versions up to 3.5.0 and earlier, where a remote attacker can crash the service by sending a long URL/argument terminated by a CRLF (LOGIN) string. OpenVAS/Nessus entries confirm remote DoS via long input...

CVE-2001-0032

CVE-2001-0032: A format-string vulnerability in ssldump could allow remote attackers to cause a denial of service and possibly gain root privileges via malicious format specifiers in a URL. The NVD records a base score of 10.0 (HIGH). Connected sources confirm the issue and describe the vulnerabi...

CVE-2001-0073

CVE-2001-0073 describes a buffer overflow in the find_default_type function of libsecure in NSA Security-Enhanced Linux (SELinux). The issue can lead to memory data modification with local access and partial integrity impact (base score 2.1, low severity). Details on exploitability, affected vers...

CVE-2001-0070

The CVE-2001-0070 entry concerns a buffer overflow in 1st Up Mail Server 4.1. The vulnerability is triggered by a long MAIL FROM command, enabling remote attackers to cause a denial of service and potentially execute arbitrary commands. Affected software is 1st Up Mail Server 4.1; the root cause ...

CVE-2001-0088

The CVE-2001-0088 entry concerns phpWebLog 0.4.2 where the common.inc.php initialization fails to set the $CONF array correctly, causing the password to be reduced to a single character. This weakens the SiteKey and enables remote attackers to potentially gain administrative privileges. Documenta...

CVE-2001-0031

BroadVision One-To-One Enterprise allows remote attackers to determine the physical path of server files by requesting a .JSP file name that does not exist...

CVE-2001-0098

WebLogic Server before 5.1.0 is affected by a buffer overflow in URL handling triggered by a long URL starting with "..". The CVE entry (CVE-2001-0098) is supported by OpenVAS references noting that requesting an overly long URL starting with a double dot can crash certain WebLogic versions and m...

CVE-2001-0102

"Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effectively removes the Owner password and allows the Normal user to log in as the Owner account without a password...

CVE-2001-0097

The CVE-2001-0097 entry concerns the Web interface of Infinite Interchange 3.6.1, where remote attackers can trigger a denial-of-service (application crash) by sending a large POST request. The available sources confirm the vulnerable component is the Web interface, and the impact is a partial av...

CVE-2001-0087

CVE-2001-0087 affects itetris/xitetris 1.6.2 and earlier. The vulnerability arises because the program trusts the PATH environment variable to locate and execute the gunzip program, enabling local users to gain root privileges by arranging PATH to point to a crafted, malicious gunzip. The connect...

CVE-2001-0070

Buffer overflow in 1st Up Mail Server 4.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long MAIL FROM command...