CVE-2001-0162

Summary of CVE-2001-0162 : Windows CE 3.0.9348 is affected by a vulnerability where the TCP Initial Sequence Numbers (ISNs) are predictable. The underlying issue allows remote attackers to spoof or hijack TCP connections by exploiting the ISN predictability. The available documents consistently i...

CVE-2001-0163

Cisco AP340 base station is affected by CVE-2001-0163, which causes predictable TCP Initial Sequence Numbers (ISNs) enabling a attacker to spoof or hijack TCP connections. The vulnerability is described across CVE records and corroborated by Nessus (TCP/IP Predictable ISN). The available document...

Debian DSA-706-1 : axel - buffer overflow

Ulf Harnhammar from the Debian Security Audit Project discovered a buffer overflow in axel, a light download accelerator. When reading remote input the program did not check if a part of the input can overflow a buffer and maybe trigger the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenab...

CVE-2001-1429

CVE-2001-1429 concerns a buffer overflow in mcedit of Midnight Commander (notably around 4.5.1) that locally could cause a denial of service and potentially allow arbitrary code execution via a crafted text file. Connected data references Midnight Commander 4.x with a DOS via a symlink attack, bu...

CVE-2001-1430

CVE-2001-1430 concerns the Cayman 3220-H DSL Router (1.0) shipped with no password, enabling remote attackers to gain unauthorized access. The vulnerability stems from the device shipping without credentials, leading to potential compromise of confidentiality, integrity, and availability as indic...

CVE-2001-1433

The CVE-2001-1433 entry concerns Cherokee web server before 0.2.7. The core issue is twofold: (1) after binding to port 80 it does not properly drop root privileges, creating a risk that a remote attacker could gain privileges, and (2) the remote version is vulnerable to remote command execution ...

CVE-2001-1428

The CVE-2001-1428 entry concerns Beck GmbH IPC@Chip where the FTP and Telnet services ship with a default password, enabling remote attackers to gain unauthorized access. The underlying issue is a default credential disclosure in core services, leading to potential partial confidentiality, integr...

CVE-2001-1431

CVE-2001-1431 affects Nokia Firewall Appliances (IPSO 3.3/3.4 and VPN-1/Firewall-1 4.1 SP3/4/5) when SYN Defender is in Active Gateway mode. The third packet of the TCP three-way handshake is not rewritten to use the NAT IP address, allowing remote attackers to gain sensitive information. Exploit...

CVE-2001-1424

The CVE-2001-1424 entry concerns the Alcatel Speed Touch ADSL modem. Affected firmware KHDSAA.108, KHDSAA.132, KHDSBA.133, and KHDSAA.134 exposes a blank default password, enabling remote attackers to gain unauthorized access. Exposure is network‑vector with low complexity and no authentication r...

CVE-2001-1425

The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain privileges by directly computing the response based on information that is provided by the device during login...

CVE-2001-1426

Affected product: Alcatel Speed Touch with firmware KHDSAA.108 and KHDSAA.132–KHDSAA.134. Vulnerability: TFTP server runs without a password, enabling remote modification of firmware versions or device configurations. Root cause: insecure TFTP service exposed on the device. Impact: allows uninten...

CVE-2001-1427

Technical details of CVE-2001-1427 are not publicly available in the provided documents. Please monitor for updates from official advisories; current sources describe an unknown vulnerability in ColdFusion Server 2.0–4.5.1 SP2 without specifics.

[SECURITY] [DSA 695-1] New xli packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 695-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2005 http://www.debian.org/security/faq -...

CVE-2001-1416

The CVE-2001-1416 entry concerns multiple cross-site scripting (XSS) vulnerabilities in the log messages of certain Alpha versions of AOL Instant Messenger (AIM) 4.4. The vulnerability allows remote attackers to execute arbitrary web script or HTML via an image in the (1) DATA, (2) STYLE, or (3) ...

CVE-2001-1417

CVE-2001-1417 affects AOL Instant Messenger (AIM) 4.7. An attacker can trigger a denial of service by sending a buddy icon GIF where the length/width values exceed the actual image data, causing the application to hang or crash. The available sources (NVD/CVE records) describe the impact as a DoS...

CVE-2001-1418

CVE-2001-1418 affects AOL Instant Messenger (AIM) 4.7, where remote attackers can trigger a denial of service by sending a malformed WAV file. The vulnerability is described with a MEDIUM base score (5.0) and a network attack vector with no authentication required; exploitation details are not pr...

CVE-2001-1420

CVE-2001-1420 affects AOL Instant Messenger (AIM) 4.7. The vulnerability is a denial of service caused by processing a long filename, likely due to a buffer overflow in the file/name handling path, which can crash the application when a crafted filename is encountered. The exposed impact is a loc...

CVE-2001-1421

AOL Instant Messenger (AIM) versions up to 4.7 are affected. The vulnerability arises when processing a benign-looking input consisting of a large number of different fonts followed by an HTML HR tag, which can trigger a remote denial of service resulting in an application crash. The affected pro...

CVE-2001-1422

The CVE-2001-1422 entry concerns WinVNC 3.3.3 and earlier, where generating the same challenge string for multiple connections allows remote attackers to bypass VNC authentication by sniffing the challenge/response of other users. Affected software: WinVNC versions up to 3.3.3 (and earlier). Unde...

CVE-2001-1423

The CVE-2001-1423 entry describes a privilege-escalation vulnerability in Advanced Poll prior to version 1.61 when using a flat-file database. The issue arises when an attacker can set the logged_in parameter to gain elevated privileges remotely. Documented impacts indicate partial confidentialit...