CVE-2001-1522

The CVE-2001-1522 entry describes an XSS vulnerability in im.php of IMessenger for PHP-Nuke , allowing remote attackers to inject arbitrary script or HTML via a message. Affected software: IMessenger for PHP-Nuke; root cause: insufficient input sanitization in im.php. Impact: partial integrity im...

CVE-2001-1543

Axis Network Camera models 2120, 2110, 2100, 200+ and 200 are affected by CVE-2001-1543 due to a default administrator password. This root cause allows remote attackers to gain access using the credentials pass. Impact stated across multiple sources is unauthorized access to the camera. No explic...

CVE-2001-1562

CVE-2001-1562 affects the nvi editor; it is a format string vulnerability in which, before version 1.79, local users could gain privileges via format specifiers embedded in a filename. The Debian advisory DSA-085-1 and OpenVAS entries reiterate that nvi (and nvi-m17n) needed updates to address th...

CVE-2001-1519

CVE-2001-1519 affects Windows 2000 RunAs (runas.exe). Multiple sources describe a local-privilege issue where, if the RunAs service is stopped, a local attacker can create a spoofed named pipe and potentially capture cleartext usernames and passwords when clients connect. The Red Hat and CVE/CVE-...

CVE-2001-1549

The CVE-2001-1549 entry affects Tiny Personal Firewall versions 1.0 and 2.0. The vulnerability permits local users to bypass filtering by sending non-standard TCP packets created with non-Windows protocol adapters, indicating a local-privilege or local-bypass risk depending on the deployment. The...

CVE-2001-1507

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2001-1548

CVE-2001-1548 affects ZoneAlarm versions 2.1–2.6 and ZoneAlarm Pro 2.4–2.6. The root cause is bypass of filtering by local users through non-standard TCP packets crafted with non-Windows protocol adapters, enabling potential evasion of security controls. The public records describe the vulnerabil...

CVE-2001-1559

The CVE-2001-1559 issue affects OpenBSD 2.9 and 3.0, where the uipc_syscalls.c logic returns user-mode values to the fdrelease kernel function, enabling local users to trigger a denial of service and a null dereference. The root cause is the mismatched value returned by uipc system calls to a ker...

CVE-2001-1565

The CVE affects the MacOS X Point-to-Point Protocol daemon (pppd) for versions 10.0 to 10.1.5. The issue is that the daemon exposes the username and password on the process command line, allowing local users to read authentication information via the ps utility. Root cause: credentials displayed ...

CVE-2001-1570

Technical details about CVE-2001-1570 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2001-1515

This CVE (CVE-2001-1515) affects Windows 2000 SP1 when Macintosh clients access NTFS volumes. The issue arises as subdirectories created by Macintosh clients automatically modify inherited NTFS permissions, potentially giving less restrictive permissions than intended. Documented by multiple sour...

CVE-2001-1547

Outlook Express 6.0 vulnerability: when the setting to block potentially virus-laden attachments is enabled, forwarded messages may bypass this and allow remote code execution. Affected component is attachments handling in forwarded email. The provided documents state the issue but do not specify...

CVE-2001-1517

CVE-2001-1517 affects Windows 2000 RunAs (runas.exe). The issue is that cleartext authentication data is stored in memory, potentially allowing a attacker to recover usernames and passwords by a process sharing the same memory page after a RunAs operation ends. Evidence in connected sources confi...

CVE-2001-1572

CVE-2001-1572 affects the Linux kernel Netfilter MAC module (versions 2.4.1–2.4.11) and allows remote attackers to bypass MAC-based packet filters by sending small packets. This is a network-vector, low-complexity, no-authentication exploit with partial impacts on confidentiality , integrity , an...

CVE-2001-1554

IBM AIX 430 is affected by CVE-2001-1554 due to improper unlocking of IPPMTU_LOCK, which allows remote attackers to cause a denial of service (hang) by sending PMTU IP packets. The impact is a partial loss of availability as described in the sources. The connected documents confirm the root cause...

CVE-2001-1513

CVE-2001-1513 affects Macromedia JRun 3.0 and 3.1. The issue allows remote attackers to obtain duplicate active user session IDs and perform actions as other users by crafting a URL request for the web application directory without the trailing '/'. This implies potential session impersonation wi...

CVE-2001-1510

The CVE-2001-1510 entry concerns Allaire JRun versions 2.3.3, 3.0 and 3.1 running on IIS 4.0/5.0, iPlanet, Apache, JRun Web Server (JWS) and possibly other web servers. Affected component: the web server handling of certain crafted URLs, where appending one of three fragments ("%3f.jsp", "?.jsp",...

CVE-2001-1536

CVE-2001-1536 affects Autogalaxy. The root cause is storing usernames and passwords in cleartext cookies, which can enable remote attackers to obtain authentication data through sniffing or cross-site scripting. Impact is confidentiality loss and potential unauthorized access; exploitation status...

CVE-2001-1519

RunAs runas.exe in Windows 2000 allows local users to create a spoofed named pipe when the service is stopped, then capture cleartext usernames and passwords when clients connect to the service. NOTE: the vendor disputes this issue, saying that administrative privileges are already required to...

CVE-2005-2251

CVE-2005-2251 documents a PHP remote file inclusion vulnerability in phpSecurePages (PHPSecurePages/phpSP) 0.28beta and earlier. The issue is triggered via the cfgProgDir parameter, allowing a remote attacker to include code from a URL on a remote Web server and execute arbitrary PHP, a variant o...