CVE-2001-1367

The CVE-2001-1367 entry concerns PHPSlice, specifically the checkAccess function. Affected versions 0.1.1 through 0.1.6 (including 0.1.4) do not properly verify administrative access level, enabling remote attackers to gain privileges. Documented impact is privilege escalation. A temporary mitiga...

CVE-2001-1367

The checkAccess function in PHPSlice 0.1.4, and all other versions between 0.1.1 and 0.1.6, does not properly verify the administrative access level, which could allow remote attackers to gain privileges...

CVE-2001-0914

The CVE-2001-0914 issue affects the Linux kernel prior to 2.4.11pre3. It allows local users to cause a denial of service (crash) by starting the core vmlinux kernel, with the root cause described as potentially poor error checking during ELF loading. Publicly available documents name the affected...

CVE-2001-0375

Cisco PIX Firewall 515 and 520 with 5.1.4 OS running aaa authentication to a TACACS+ server allows remote attackers to cause a denial of service via a large number of authentication requests...

CVE-2001-1267

Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose filenames contain a .. dot dot...

CVE-2001-1351

CVE-2001-1351 concerns a cross-site scripting vulnerability in Namazu 2.0.8 and earlier. The issue allows remote attackers to execute arbitrary JavaScript in the context of other web users when displaying hit numbers, via the index file name shown in results. Affected component: Namazu search int...

CVE-2001-1351

Cross-site scripting vulnerability in Namazu 2.0.8 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the index file name that is displayed when displaying hit numbers...

CVE-2001-0612

CVE-2001-0612 affects McAfee Remote Desktop 3.0 and earlier. The vulnerability allows a remote attacker to cause a denial of service (crash) by sending a large number of packets to port 5045. The NVD entry lists a CVSS v2 base score of 5.0 (Medium) with network access, no authentication, and part...

CVE-2001-1069

libCoolType library as used in Adobe Acrobat acroread on Linux creates the AdobeFnt.lst file with world-writable permissions, which allows local users to modify the file and possibly modify acroread's behavior...

CVE-2001-1103

FTP Voyager ActiveX control before 8.0, when it is marked as safe for scripting the default or if allowed by the IObjectSafety interface, allows remote attackers to execute arbitrary commands...

CVE-2001-1029

CVE-2001-1029 : In FreeBSD 4.4 and earlier, libutil in OpenSSH does not drop privileges before verifying capabilities for reading copyright and welcome files, allowing local users to bypass capability checks and read arbitrary files by specifying alternate files. The description provides the vuln...

CVE-2001-1347

CVE-2001-1347 affects Windows 2000. The vulnerability arises when a local user sets a hardware breakpoint that is handled via global debug registers, which can cause other processes to terminate due to an exception and may allow hijacking of resources such as named pipes. The available sources de...

CVE-2001-0741

CVE-2001-0741 covers a vulnerability in Cisco’s Hot Standby Router Protocol (HSRP) where an attacker on the same LAN can spoof HSRP packets to disrupt traffic, causing a denial of service. The CERT CERT/CC advisory notes a workaround of using HSRP with IPsec; Cisco’s own entry confirms the vulner...

CVE-2001-0902

Microsoft IIS 5.0 is affected. The vulnerability allows remote attackers to spoof web log entries by sending HTTP requests containing hex-encoded newline or form-feed characters, enabling log pollution/improper logging. CVE-2001-0902 details indicate impact to log integrity (partial) and potentia...

CVE-2001-0485

Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute arbitrary commands via the -n option...

CVE-2001-1386

WFTPD 3.00 is affected. The vulnerability allows remote attackers to read arbitrary files by uploading a file that ends in a ".lnk" extension, bypassing WFTPD’s check for that extension. Root cause is the handling of specially crafted (link) files that bypass the extension filter. Impact stated i...

CVE-2003-0002: Undefined Security Weakness

Cross-site scripting vulnerability XSS in ManualLogin.asp script for Microsoft Content Management Server MCMS 2001 allows remote attackers to execute arbitrary script via the REASONTXT parameter...

Mandrake Linux Security Advisory : util-linux (MDKSA-2001:084)

Tarhon-Onu Victor found a problem in /bin/login's PAM implementation. It stored the value of a static pwent buffer across PAM calls, and when used with some PAM modules in non-default configurations ie. using pamlimits, it would overwrite the buffer and cause the user to get the credentials of...

Mandrake Linux Security Advisory : elm (MDKSA-2001:067)

A buffer overflow exists in the elm email client when handling very long message-ids. This would overwrite other header fields and could potentially cause further damage. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

Mandrake Linux Security Advisory : glibc (MDKSA-2001:095)

Flavio Veloso found an overflowable buffer problem in earlier versions of the glibc glob3 implementation. It may be possible to exploit some programs that pass input to the glibc glob function in a manner that can be modified by the user. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...