CVE-2001-0749

Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to read arbitrary files via a webserver root directory set to system root...

CVE-2001-0907

Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a series of deeply nested symlinks, which causes the kernel to spend extra time when trying to access the link...

CVE-2001-1352

Cross-site scripting vulnerability in Namazu 2.0.9 and earlier allows remote attackers to execute arbitrary Javascript as other web users via an error message that is returned when an invalid index file is specified in the idxname parameter...

CVE-2001-1351

Cross-site scripting vulnerability in Namazu 2.0.8 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the index file name that is displayed when displaying hit numbers...

CVE-2001-1391

Off-by-one vulnerability in CPIA driver of Linux kernel before 2.2.19 allows users to modify kernel memory...

CVE-2001-0792

CVE-2001-0792 describes a format-string vulnerability in XChat 1.2.x that lets remote attackers execute arbitrary code via a malformed nickname. The provided documents identify the affected product as XChat 1.2.x and classify the issue as a remote, unauthenticated vector with potential for arbitr...

CVE-2001-0902

Microsoft IIS 5.0 is affected. The vulnerability allows remote attackers to spoof web log entries by sending HTTP requests containing hex-encoded newline or form-feed characters, enabling log pollution/improper logging. CVE-2001-0902 details indicate impact to log integrity (partial) and potentia...

CVE-2001-0643

Affected software: Internet Explorer 5.5. Issue: CLSID not displayed when it appears at the end of a file name, enabling spoofing of file type and potentially deceiving users into executing a dangerous program. Impact: user may run unintended or unsafe code due to misleading file type indication....

CVE-2001-1186

CVE-2001-1186 affects Microsoft IIS 5.0. The issue is a denial of service caused by an HTTP request whose Content-Length is larger than the request body, preventing IIS from timing out the connection. The connected documents confirm the same description across NVD and CVE lists. There are no deta...

CVE-2001-1352

CVE-2001-1352 is a cross-site scripting vulnerability in Namazu 2.0.9 and earlier. The issue arises when an invalid index file is specified in the idxname parameter, allowing remote attackers to execute arbitrary JavaScript in the context of other web users via an error message returned by the ap...

CVE-2001-1386

WFTPD 3.00 allows remote attackers to read arbitrary files by uploading a link file that ends in a ".lnk." extension, which bypasses WFTPD's check for a ".lnk" extension...

CVE-2001-1081

Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers to cause a denial of service and possibly execute arbitrary code via format specifiers that are injected into log messages...

CVE-2001-1367

The CVE-2001-1367 entry concerns PHPSlice, specifically the checkAccess function. Affected versions 0.1.1 through 0.1.6 (including 0.1.4) do not properly verify administrative access level, enabling remote attackers to gain privileges. Documented impact is privilege escalation. A temporary mitiga...

CVE-2001-1103

CVE-2001-1103 concerns the FTP Voyager ActiveX control, prior to version 8.0. When flagged as safe for scripting (the default) or when permitted by the IObjectSafety interface, the control could allow remote attackers to execute arbitrary commands. The affected component is the FTP Voyager Active...

CVE-2001-1029

CVE-2001-1029 : In FreeBSD 4.4 and earlier, libutil in OpenSSH does not drop privileges before verifying capabilities for reading copyright and welcome files, allowing local users to bypass capability checks and read arbitrary files by specifying alternate files. The description provides the vuln...

CVE-2001-0907

CVE-2001-0907 affects Linux kernel 2.2.1–2.2.19 and 2.4.1–2.4.10. Local users can cause a denial of service by triggering a series of deeply nested symlinks, causing the kernel to spend excessive time when accessing the link. The provided documents do not specify a concrete remediation or patched...

CVE-2001-0909

CVE-2001-0909 : Affected software is Microsoft Help Center on Windows XP, vulnerable via a buffer overflow in the helpctr.exe component when processing a long hcp: URL. This could allow a remote attacker to execute arbitrary code. CVSS v2 base score is 7.5 (HIGH) with network access, low attack c...

CVE-2001-0423

CVE-2001-0423 concerns a buffer overflow in Solaris 7 x86 ‘ipcs’ that local users can exploit by supplying a long TZ environment variable, enabling arbitrary code execution on the affected host. The vulnerability is specific to Solaris 7 x86; it is described as a local privilege escalation/vector...

CVE-2001-1069

The CVE describes a Linux issue in the libCoolType library used by Adobe Acrobat (acroread): the AdobeFnt.lst file is created with world-writable permissions, allowing local users to modify the file and possibly alter acroread’s behavior. Vulnerable component: libCoolType in Acrobat/acroread on L...

CVE-2001-0741

CVE-2001-0741 covers a vulnerability in Cisco’s Hot Standby Router Protocol (HSRP) where an attacker on the same LAN can spoof HSRP packets to disrupt traffic, causing a denial of service. The CERT CERT/CC advisory notes a workaround of using HSRP with IPsec; Cisco’s own entry confirms the vulner...