CVE-2001-1553

CVE-2001-1553 describes a local buffer overflow in SETI@home 3.03 when the binary is installed setuid. An attacker could trigger arbitrary code execution via overly long command line options (socks_server, socks_user, socks_passwd). The note indicates the default SETI@home configuration is not se...

CVE-2005-2251

CVE-2005-2251 documents a PHP remote file inclusion vulnerability in phpSecurePages (PHPSecurePages/phpSP) 0.28beta and earlier. The issue is triggered via the cfgProgDir parameter, allowing a remote attacker to include code from a URL on a remote Web server and execute arbitrary PHP, a variant o...

Microsoft Log Sink Class ActiveX control incorrectly marked "safe for scripting"

Overview The Microsoft Log Sink Class ActiveX control is incorrectly marked safe for scripting. This may allow a remote attacker to create or append to arbitrary files on a vulnerable system. Description ActiveXActiveX is a technology that allows programmers to create reusable software components...

CVE-2001-1478

CVE-2001-1478 reports a buffer overflow in the xlock utility affecting UnixWare 7.1.0/7.1.1 and Open UNIX 8.0.0, enabling local users to execute arbitrary code. The description specifies a local attack requiring no user interaction beyond initiating the vulnerable xlock component; it does not pro...

CVE-2001-1481

Xitami 2.4–2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose permissions are world-readable, enabling remote attackers to gain privileges. Affected versions: Xitami 2.4–2.5 b4. Root cause: plaintext password storage with insecure default file permissions. Impact...

CVE-2001-1482

CVE-2001-1482 describes an SQL injection in phpBB 1.4.2, triggered via the $sortby parameter in bb_memberlist.php. The vulnerable component is the member list generation logic, where input is not sufficiently sanitized, allowing remote attackers to execute arbitrary SQL queries. The provided docu...

CVE-2001-1483

CVE-2001-1483 affects OPIE (One-Time Passwords In Everything) versions 2.32 and 2.4. It permits remote attackers to determine whether a user account exists by observing how passphrases are printed: random passphrases if the account does not exist, static passphrases if it does. This is an informa...

CVE-2001-1484

CVE-2001-1484 concerns Alcatel ADSL modems where the TFTP service can be accessed without authentication. A remote attacker on the LAN can use a bounce attack to modify firmware and configuration, implying network-based access with low complexity and potential partial impacts to confidentiality, ...

CVE-2001-1488

The CVE-2001-1488 entry concerns Open Projects Network Internet Relay Chat (IRC) daemon u2.10.05.18, which does not perform a double-reverse DNS lookup. This information indicates a potential hostname spoofing vulnerability where remote attackers could spoof any valid hostname on the Internet. Th...

CVE-2001-1490

CVE-2001-1490 affects Mozilla 0.9.6 and enables a remote denial-of-service through a web page containing a large number of images, causing CPU consumption and memory leaks. The connected documents confirm the vulnerable product and the impact but do not provide concrete remediation steps or patch...

CVE-2001-1491

Opera 5.11 is vulnerable to a denial of service via a web page containing a large number of images, causing CPU consumption and a memory leak. This results in partial loss of availability. The provided documents do not include specific exploit details, affected versions beyond Opera 5.11, or reme...

CVE-2001-1492

CVE-2001-1492 is a refinement duplicate of CVE-2001-1460 and has been removed from active use; the connected records show that CVE-2001-1460 documents a SQL injection vulnerability in PostNuke 0.62–0.64 (article.php) that allows remote bypass of authentication via the user parameter. No additiona...

CVE-2001-1494

CVE-2001-1494 affects util-linux (and mount) prior to versions updated in RHSA-2005:782. The issue is a hardlink-based flaw in the script command: a local attacker can create a hardlink named typescript in a writable directory, and when the script command is run by root, the attacker’s file can b...

CVE-2001-1495

Technical details about CVE-2001-1495 are not publicly available in the provided documents; no explicit affected products, versions, or remediation are listed beyond the basic description. Monitor for updates.

CVE-2001-1496

CVE-2001-1496 affects thttpd (Acme Labs) with an off-by-one buffer overflow in Basic Authentication across versions 1.95–2.20. The underlying issue is a buffer overflow in the Basic Auth handling, enabling remote attackers to cause a denial of service and potentially execute arbitrary code. Explo...

CVE-2001-1499

The CVE affects Check Point VPN-1 4.1SP4 with SecuRemote. The vulnerability arises from differing error messages for valid vs. invalid users, depending on authentication method, which can facilitate brute-force attempts. Affected component: VPN-1/SecuRemote authentication prompts. Impact: enables...

CVE-2001-1500

ProFTPD 1.2.2rc2 (and possibly other versions) is affected by a DNS validation issue where reverse-resolved hostnames are not properly verified via forward resolution. This can allow remote attackers to bypass access control lists or log an incorrect client hostname. The available connected docum...

CVE-2001-1501

The CVE-2001-1501 entry concerns ProFTPD 1.2.1 (and possibly other versions) where the globbing logic can be abused by commands containing many wildcard or special characters. Reported changes: remote attackers can trigger a denial of service through CPU and memory exhaustion by crafting commands...

CVE-2001-1504

The CVE-2001-1504 entry relates to Lotus Notes R5 Client 4.6, where a Lotus Notes object containing code in an event can be automatically executed when the user processes an e-mail message, enabling remote command execution. The vulnerability is rated CVSS v2 base score 7.5 (HIGH) with network at...

CVE-2001-1505

The CVE-2001-1505 entry covers tinc versions 1.0pre3 and 1.0pre4, where remote attackers can inject data into user sessions by sniffing and replaying packets. Affected component: tinc (specific versions cited). Underlying issue: packet sniffing/replay enables session data modification (integrity ...