3468 matches found
CVE-2001-0025
CVE-2001-0025 affects the ad.cgi CGI program by Leif Wright. The vulnerability allows remote arbitrary command execution via shell metacharacters in the file parameter, with the CGI typically running under web server privileges (often root or nobody). The issue is documented in multiple sources (...
CVE-2001-0065
CVE-2001-0065 affects bftpd up to version 1.0.13, where a buffer overflow can be triggered by a very long SITE CHOWN command sent to the FTP server. This flaw enables remote attackers to cause a denial of service and may allow execution of arbitrary code on the affected host. The primary evidence...
CVE-2001-0074
CVE-2001-0074 is a directory traversal vulnerability in print.cgi of Technote that allows remote attackers to read arbitrary files via a .. path in the board parameter. The issue arises from unvalidated path handling in the CGI script, enabling partial confidentiality impact. Public references de...
CVE-2001-0102
CVE-2001-0102: In Mac OS 9, the “Multiple Users” Control Panel allows a normal user to gain Owner privileges by removing the Users & Groups Data File, effectively removing the Owner password and letting the Normal user log in as Owner without a password. This is a local privilege-escalation via d...
CVE-2001-0064
Webconfig, IMAP, and other services in MDaemon 3.5.0 and earlier allows remote attackers to cause a denial of service via a long URL terminated by a "\r\n" string...
CVE-2001-0101
Vulnerability in fetchmail 5.5.0-2 and earlier in the AUTHENTICATE GSSAPI command...
Security hole in Virus Buster 2001
Hi folks, I found a security hole in the feature of virus scan for e-mail in Virus Buster 2001 from Trend Micro Inc. Virus Buster 2001 is a japanese software package that has similar functions of PC-cillin 2000 such as eMail Virus Scanning and Browser Scanning. The feature of virus scan for e-mai...
MS01-003: Winsock2ProtocolCatalogMutex Mutex Local DoS (279336)
By default, Windows NT sets weak permissions on the Winsock mutex. A local user without any privilege may abuse these permissions to lock the mutex indefinitely and, therefore, disrupt the network operations of the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description...
CVE-2001-1422
WinVNC 3.3.3 and earlier generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users...
CVE-2001-1274
Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and possibly gain privileges...
CVE-2001-1436
Dallas Semiconductor iButton DS1991 returns predictable values when given an incorrect password, which makes it easier for users with physical access to conduct dictionary attacks against the device password...
CVE-2001-1416
Multiple cross-site scripting XSS vulnerabilities in the log messages in certain Alpha versions of AOL Instant Messenger AIM 4.4 allow remote attackers to execute arbitrary web script or HTML via an image in the 1 DATA, 2 STYLE, or 3 BINARY tags...
CVE-2001-1475
SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key VK is generated...
CVE-2001-1470
The IDEA cipher as implemented by SSH1 does not protect the final block of a message against modification, which allows remote attackers to modify the block without detection by changing its cyclic redundancy check CRC to match the modifications to the message...
CVE-2001-1474
SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently redirect connections to the localhost by poisoning the client's DNS cache...
CVE-2001-1469
The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the original message's cyclic redundancy check CRC with the CRC of a mask consisting of all the bits of the original message that were modified...
CVE-2001-1473
The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by creating a Session ID that matches the Session ID of the target, but which uses a public key pair that is weaker than the target's public key, which allows th...
Security Bulletin (MS01-001)
The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Web...
CVE-2001-0161
Cisco 340-series Aironet access point using firmware 11.01 does not use 6 of the 24 available IV bits for WEP encryption, which makes it easier for remote attackers to mount brute force attacks...