CVE-2001-0891

Format string vulnerability in NQS daemon nqsdaemon in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to submit a batch job whose name contains formatting characters...

CVE-2001-0873

The CVE-2001-0873 issue affects Taylor UUCP’s uuxqt, where long command-line options are not properly filtered, enabling a local user to gain privileges by invoking uux with a malicious --config file. Public documents confirm the vulnerability primarily as a local-exploit in uuxqt, with Debian (u...

CVE-2001-1406

CVE-2001-1406 affects Bugzilla prior to 2.14. The vulnerability occurs when moving a bug between product groups, where the groupset flag is not updated, causing the bug to retain the old group’s (potentially less stringent) restrictions. This is a local issue with low public impact per the CVSS v...

CVE-2001-1372

CVE-2001-1372 affects Oracle 9i Application Server (AS) 1.0.2. It enables an attacker to disclose the server’s physical webroot path by requesting a non-existent .JSP file, because the default error message leaks the pathname. The vulnerability is a information disclosure issue, with CVSS-like co...

CVE-2002-0719

CVE-2002-0719 is a SQL injection vulnerability in Microsoft Content Management Server (MCMS) 2001, affecting the function that services MCMS image/file requests. It allows remote attackers to execute arbitrary commands via crafted resource requests. Exploitation details indicate network-based acc...

CVE-2001-1378

The CVE-2001-1378 issue affects fetchmailconf in fetchmail prior to 5.7.4, where a symlink attack on temporary files allows local users to overwrite files owned by other users. The root cause is improper handling of temporary files during configuration, enabling a local, non-privileged user to le...

CVE-2001-0763

CVE-2001-0763 affects Linux xinetd up to version 2.1.8.9pre11-1 and earlier. The issue is a buffer overflow in the ident handling path: a long ident response is not properly processed by the svc_logprint function, enabling a remote attacker to potentially execute arbitrary code. Debian’s DSA-063-...

CVE-2001-1106

Technical details about CVE-2001-1106 are not publicly available in the provided connected documents. Monitor for updates; the inputs contain base descriptions but no additional technical specifics are provided here.

CVE-2001-1028

CVE-2001-1028 describes a buffer overflow in the ultimate_source() function of the man package (versions 1.5 and earlier), enabling local privilege escalation. Connected documents confirm the root cause is a buffer overflow, with the Red Hat advisory RHSA-2001:072 noting local GID man exploits an...

CVE-2001-1303

The default configuration of SecuRemote for Check Point Firewall-1 allows remote attackers to obtain sensitive configuration information for the protected network without authentication...

CVE-2001-1327

pmake before 2.1.35 in Turbolinux 6.05 and earlier is installed with setuid root privileges, which could allow local users to gain privileges by exploiting vulnerabilities in pmake or programs that are used by pmake...

CVE-2001-1407

Bugzilla before 2.14 allows Bugzilla users to bypass group security checks by marking a bug as the duplicate of a restricted bug, which adds the user to the CC list of the restricted bug and allows the user to view the bug...

CVE-2001-1327

CVE-2001-1327 affects pmake prior to 2.1.35 installed on Turbolinux 6.05 and earlier. The issue arises because pmake is installed with setuid root privileges, enabling local users to gain privileges by exploiting vulnerabilities in pmake or programs used by pmake. The NVD lists a base CVSS2 score...

CVE-2001-1383

CVE-2001-1383 affects the initscript in setserial 2.17-4 and earlier, where it creates predictable temporary file names. This could allow local users to perform unauthorized operations on files. The Connected documents confirm the same description across CVE lists and NVD records, with no provide...

CVE-2001-1369

The CVE-2001-1369 issue affects pam-pgsql prior to 0.5.2. It allows remote attackers to bypass authentication or modify user records by injecting SQL into the user or password fields, thereby executing arbitrary SQL. Root cause is SQL injection in authentication-related input. The provided docume...

Leif Wright ad.cgi file Parameter Arbitrary Command Execution

The CGI 'ad.cgi' is installed. This CGI has a well known security flaw that lets an attacker execute arbitrary commands with the privileges of the http daemon usually root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

[INetCop Security Advisory #2002-0x82-013] Kebi Academy 2001 Web Solution Directory Traversing Vulnerability.

======================================== INetCop Security Advisory 2002-0x82-013 ======================================== Title: Kebi Academy 2001 Web Solution Directory Traversing Vulnerability. 0x01. Description Kebi Academy 2001 is web solution that is supplied to C Binary CGI in web. Fatal...

kebi.txt

======================================== INetCop Security Advisory 2002-0x82-013 ======================================== Title: Kebi Academy 2001 Web Solution Directory Traversing Vulnerability. 0x01. Description Kebi Academy 2001 is web solution that is supplied to C Binary CGI in web. Fatal...

HP-UX ftpd glob() Expansion STAT Buffer Overflow

The remote HPUX 11 FTP server is affected by a buffer overflow vulnerability. The overflow occurs when the STAT command is issued with an argument that expands into an oversized string after being processed by the 'glob' function. TRUSTED...

Cisco VPN Concentrator Invalid Login DoS (CSCdu82823)

The remote VPN concentrator has a bug in its implementation of telnetd. This vulnerability is documented as Cisco bug ID CSCdu82823. C Tenable Network Security, Inc. Thanks to Nicolas FISCHBACH [email protected] for his help Ref:...