CVE-2001-1449

The CVE-2001-1449 issue affects Apache

CVE-2001-1464

Crystal Reports vulnerability: when displaying data for a password-protected database via HTML pages, it embeds the username and password in cleartext in the HTML content and in the URL, allowing remote attackers to obtain passwords. Affected: Crystal Reports HTML rendering for password-protected...

CVE-2001-1453

CVE-2001-1453 describes a stack/buffer overflow in the MySQL client library (libmysqlclient.so) that affects MySQL 3.23.33 and earlier. The vulnerability allows remote attackers to trigger code execution by supplying a long host parameter, due to a buffer overflow in the library’s handling of hos...

CVE-2001-1464

Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords...

CVE-2001-1448

Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly execute code via a symlink attack on temporary files created by the 1 mkuserproc, 2 mgrnt, and 3 mgdatasrvr.sc scripts...

CVE-2001-1475

SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key VK is generated...

CVE-2001-1462

WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to cause the WebID agent to enter debug mode via a URL containing null characters, which may allow attackers to obtain sensitive information...

CVE-2001-1451

CVE-2001-1451 describes a memory leak in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows 2000 before SP3. When the Print Spooler is not running, remote attackers can trigger a denial of service by issuing a large number of GET or GETNEXT requests, leading to memory consumption. ...

CVE-2001-1460

CVE-2001-1460 describes a SQL injection in PostNuke 0.62–0.64 that allows remote bypass of authentication via the user parameter in article.php. CVSS: base 7.5 (HIGH); network vector, low complexity, no authentication. Affected products: PostNuke 0.62–0.64. Root cause: insufficient input validati...

CVE-2001-1469

The CVE-2001-1469 entry concerns the RC4-based use in SSH1, where remote attackers can modify messages without detection by XOR’ing the original message CRC with the CRC of a mask of the modified bits. Affected component is the RC4 stream cipher implementation within SSH1; impact is partial integ...

CVE-2001-1434

The vulnerability CVE-2001-1434 affects Cisco IOS 12.0(5)XU through 12.1(2). An SNMP command snmp-server host can cause creation of a readable SNMP community string, enabling remote attackers to read system administration and topology information. Exploitation is remote and depends on SNMP access...

CVE-2001-1439

The CVE concerns a buffer overflow in HP-UX 10.01–11.04 on HP9000 Series 700/800 affecting text editors (e, ex, vi, edit, view, vedit). Root cause: overflow in the text editor functionality that can be triggered locally, leading to a denial of service affecting system availability. The provided d...

CVE-2001-1457

CVE-2001-1457 concerns buffer overflow in CrazyWWWBoard 2000p4 and 2000LEp5. The underlying issue is a vulnerability in handling a long HTTP_USER_AGENT CGI environment variable, allowing a remote attacker to potentially execute arbitrary code. Affected software is CrazyWWWBoard 2000 series (p4 an...

CVE-2001-1473

CVE-2001-1473 : The SSH-1 protocol vulnerability allows a remote attacker to perform man-in-the-middle and replay attacks by crafting a Session ID that matches the target’s Session ID but uses a weaker public key, enabling the attacker to compute the corresponding private key and masquerade as th...

CVE-2001-0160

CVE-2001-0160 involves Lucent/ORiNOCO WaveLAN wireless cards where the Initialization Vector (IV) values used by WEP are predictable. This weakens the confidentiality of WEP-protected traffic because a remote attacker can build information to decrypt messages. The underlying issue is compromised ...

CVE-2001-0160

Lucent/ORiNOCO WaveLAN cards generate predictable Initialization Vector IV values for the Wireless Encryption Protocol WEP which allows remote attackers to quickly compile information that will let them decrypt messages...

CVE-2001-0162

Summary of CVE-2001-0162 : Windows CE 3.0.9348 is affected by a vulnerability where the TCP Initial Sequence Numbers (ISNs) are predictable. The underlying issue allows remote attackers to spoof or hijack TCP connections by exploiting the ISN predictability. The available documents consistently i...

CVE-2001-0163

Cisco AP340 base station is affected by CVE-2001-0163, which causes predictable TCP Initial Sequence Numbers (ISNs) enabling a attacker to spoof or hijack TCP connections. The vulnerability is described across CVE records and corroborated by Nessus (TCP/IP Predictable ISN). The available document...

CVE-2001-0161

The CVE-2001-0161 entry concerns Cisco 340-series Aironet access points running firmware 11.01. The vulnerability arises because the device does not use 6 of the 24 available IV bits in WEP, which makes it easier for remote attackers to perform brute-force attacks. The provided documents confirm ...

Debian DSA-706-1 : axel - buffer overflow

Ulf Harnhammar from the Debian Security Audit Project discovered a buffer overflow in axel, a light download accelerator. When reading remote input the program did not check if a part of the input can overflow a buffer and maybe trigger the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenab...