CVE-2001-0548

CVE-2001-0548 describes a buffer overflow in Solaris 2.6/7’s dtmail MUA triggered by the MAIL environment variable, allowing local users to gain privileges. Affected component: dtmail; impact: local privilege escalation (to the mail group). Underlying cause: insufficient boundary checking of envi...

CVE-2001-1391

CVE-2001-1391 is an off-by-one vulnerability in the CPIA driver of the Linux kernel prior to 2.2.19 that allows a local user to write into kernel memory. The issue is documented in multiple advisories (Mandrake MDKSA-2001:037, Debian DSA-047-1) and is described as a problem in the CPIA driver’s b...

CVE-2001-1347

CVE-2001-1347 affects Windows 2000. The vulnerability arises when a local user sets a hardware breakpoint that is handled via global debug registers, which can cause other processes to terminate due to an exception and may allow hijacking of resources such as named pipes. The available sources de...

CVE-2001-0423

CVE-2001-0423 concerns a buffer overflow in Solaris 7 x86 ‘ipcs’ that local users can exploit by supplying a long TZ environment variable, enabling arbitrary code execution on the affected host. The vulnerability is specific to Solaris 7 x86; it is described as a local privilege escalation/vector...

CVE-2001-0907

CVE-2001-0907 affects Linux kernel 2.2.1–2.2.19 and 2.4.1–2.4.10. Local users can cause a denial of service by triggering a series of deeply nested symlinks, causing the kernel to spend excessive time when accessing the link. The provided documents do not specify a concrete remediation or patched...

CVE-2001-0902

Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters...

CVE-2001-1367

The checkAccess function in PHPSlice 0.1.4, and all other versions between 0.1.1 and 0.1.6, does not properly verify the administrative access level, which could allow remote attackers to gain privileges...

CVE-2001-1350

Cross-site scripting vulnerability in namazu.cgi for Namazu 2.0.7 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the lang parameter...

CVE-2001-1267

Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose filenames contain a .. dot dot...

CVE-2001-1386

WFTPD 3.00 is affected. The vulnerability allows remote attackers to read arbitrary files by uploading a file that ends in a ".lnk" extension, bypassing WFTPD’s check for that extension. Root cause is the handling of specially crafted (link) files that bypass the extension filter. Impact stated i...

CVE-2001-1066

The CVE-2001-1066 issue affects the Netscape 6.0.1 installation script on Solaris (and related versions) where the installer creates a temporary, predictably named file in a world-writable /tmp directory without proper existence/ownership checks. This enables a local attacker to perform a symlink...

CVE-2001-1328

The CVE-2001-1328 issue is a buffer overflow in the Solaris ypbind daemon (Solaris 5.4–8) that allows remote code execution. Concrete details: the root cause is a stack overflow within YPBINDPROC_DOMAIN. Impact is described as remote arbitrary code execution with partial confidentiality/integrity...

CVE-2001-1267

The CVE-2001-1267 entry describes a directory traversal in GNU tar

CVE-2001-0749

The CVE-2001-0749 issue affects Beck IPC GmbH IPC@CHIP Embedded-Webserver. The vulnerability allows remote attackers to read arbitrary files because the web server default root directory is set to the system root ("/"), enabling access to files outside the web root (e.g., chip.ini with login cred...

CVE-2001-0951

CVE-2001-0951 : Windows 2000 is affected. Vulnerability allows remote attackers to cause a denial of service by flooding the IKE UDP port 500 with packets containing a large number of dot characters, leading to CPU consumption. The connected records confirm Windows 2000 as the affected platform a...

CVE-2001-0375

Cisco PIX Firewall 515 and 520 with 5.1.4 OS running aaa authentication to a TACACS+ server allows remote attackers to cause a denial of service via a large number of authentication requests...

CVE-2001-0485

Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute arbitrary commands via the -n option...

CVE-2001-1069

libCoolType library as used in Adobe Acrobat acroread on Linux creates the AdobeFnt.lst file with world-writable permissions, which allows local users to modify the file and possibly modify acroread's behavior...

CVE-2001-0792

Format string vulnerability in XChat 1.2.x allows remote attackers to execute arbitrary code via a malformed nickname...

CVE-2001-1347

Windows 2000 allows local users to cause a denial of service and possibly gain privileges by setting a hardware breakpoint that is handled using global debug registers, which could cause other processes to terminate due to an exception, and allow hijacking of resources such as named pipes...