CVE-2001-1473

CVE-2001-1473 : The SSH-1 protocol vulnerability allows a remote attacker to perform man-in-the-middle and replay attacks by crafting a Session ID that matches the target’s Session ID but uses a weaker public key, enabling the attacker to compute the corresponding private key and masquerade as th...

CVE-2001-1447

CVE-2001-1447 involves NetInfo Manager on Mac OS X 10.0–10.1. The vulnerability allows a local user to obtain root privileges by launching applications through the (1) recent items and (2) services menus, which causes those applications to run with root privileges. The provided documents do not i...

CVE-2001-1448

Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly execute code via a symlink attack on temporary files created by the 1 mkuserproc, 2 mgrnt, and 3 mgdatasrvr.sc scripts...

CVE-2001-1439

The CVE concerns a buffer overflow in HP-UX 10.01–11.04 on HP9000 Series 700/800 affecting text editors (e, ex, vi, edit, view, vedit). Root cause: overflow in the text editor functionality that can be triggered locally, leading to a denial of service affecting system availability. The provided d...

CVE-2001-1462

WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to cause the WebID agent to enter debug mode via a URL containing null characters, which may allow attackers to obtain sensitive information...

CVE-2001-1475

SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key VK is generated...

CVE-2001-1453

CVE-2001-1453 describes a stack/buffer overflow in the MySQL client library (libmysqlclient.so) that affects MySQL 3.23.33 and earlier. The vulnerability allows remote attackers to trigger code execution by supplying a long host parameter, due to a buffer overflow in the library’s handling of hos...

CVE-2001-1441

CVE-2001-1441 describes a cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional . The issue allows remote attackers to trigger JavaScript in other clients by crafting a URL that injects a script into the resulting error message. According to the NVD entry, the vulnerabil...

CVE-2001-1472

The CVE-2001-1472 entry describes a SQL injection in phpBB 1.4.0/1.4.1 through prefs.php via the viewemail parameter. This allows remote authenticated users to execute arbitrary SQL commands and gain administrative access. Affected: phpBB 1.4.0 and 1.4.1; vulnerability originates from the handlin...

CVE-2001-1446

CVE-2001-1446 is an information-disclosure issue in Mac OS X Finder: Finder-created hidden files (.FBCIndex and .DS_Store) in directories viewed or served by Apache can reveal directory contents. OpenVAS entries describe .FBCIndex exposing file contents (including HTML, JavaScript, passwords, or ...

CVE-2001-1475

SSH before 2.0, when using RC4 and password authentication, is vulnerable to replaying messages until a new server key is generated. The affected component is the SSH protocol implementation prior to 2.0, with the underlying issue arising from RC4-based session handling that allows remote attacke...

CVE-2001-1458

Novell GroupWise WebAcc is affected by a directory traversal vulnerability that enables an attacker to read arbitrary files via a crafted request to /servlet/webacc?User.html= containing "../" sequences and a null character. The OpenVAS content disclosure note confirms the WebAcc Servlet exposes ...

CVE-2001-1442

CVE-2001-1442 affects ISC InterNetNews (INN) via a buffer overflow in innfeed prior to 2.3.0. Local users in the news group can gain privileges through a long -c argument. Reports across CVE listings confirm the impact but no public exploitation details or patches are included in the provided doc...

CVE-2001-1448

CVE-2001-1448 affects Magic eDeveloper Enterprise Edition 8.30-5 and earlier. The vulnerability arises from local file overwrites and potential code execution via a symlink attack on temporary files created by the scripts (1) mkuserproc, (2) mgrnt, and (3) mgdatasrvr.sc. The described impact is l...

CVE-2001-1464

Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords...

CVE-2001-1459

OpenSSH

CVE-2001-1469

The CVE-2001-1469 entry concerns the RC4-based use in SSH1, where remote attackers can modify messages without detection by XOR’ing the original message CRC with the CRC of a mask of the modified bits. Affected component is the RC4 stream cipher implementation within SSH1; impact is partial integ...

CVE-2001-0160

CVE-2001-0160 involves Lucent/ORiNOCO WaveLAN wireless cards where the Initialization Vector (IV) values used by WEP are predictable. This weakens the confidentiality of WEP-protected traffic because a remote attacker can build information to decrypt messages. The underlying issue is compromised ...

CVE-2001-0160

Lucent/ORiNOCO WaveLAN cards generate predictable Initialization Vector IV values for the Wireless Encryption Protocol WEP which allows remote attackers to quickly compile information that will let them decrypt messages...

CVE-2001-0161

The CVE-2001-0161 entry concerns Cisco 340-series Aironet access points running firmware 11.01. The vulnerability arises because the device does not use 6 of the 24 available IV bits in WEP, which makes it easier for remote attackers to perform brute-force attacks. The provided documents confirm ...