CVE-2001-1407

Bugzilla before 2.14 allows Bugzilla users to bypass group security checks by marking a bug as the duplicate of a restricted bug, which adds the user to the CC list of the restricted bug and allows the user to view the bug...

CVE-2001-0763

CVE-2001-0763 affects Linux xinetd up to version 2.1.8.9pre11-1 and earlier. The issue is a buffer overflow in the ident handling path: a long ident response is not properly processed by the svc_logprint function, enabling a remote attacker to potentially execute arbitrary code. Debian’s DSA-063-...

CVE-2001-1407

Bugzilla before 2.14 is vulnerable: users can bypass group security by marking a bug as a duplicate of a restricted bug, which adds the user to the restricted bug’s CC list and lets them view it. Affected: Bugzilla ≤ 2.13 (pre-2.14). Root cause: bypass of group security checks via duplicate marki...

CVE-2001-1301

Technical details about CVE-2001-1301 are not publicly provided in the connected documents. The supplied materials only reiterate the generic symlink-attack description; monitor for updates.

CVE-2001-1301

rcs2log, as used in Emacs 20.4, xemacs 21.1.10 and other versions before 21.4, and possibly other packages, allows local users to modify files of other users via a symlink attack on a temporary file...

CVE-2001-1378

The CVE-2001-1378 issue affects fetchmailconf in fetchmail prior to 5.7.4, where a symlink attack on temporary files allows local users to overwrite files owned by other users. The root cause is improper handling of temporary files during configuration, enabling a local, non-privileged user to le...

CVE-2001-1385

The CVE-2001-1385 issue concerns the Apache module for PHP 4.0.0–4.0.4. When a virtual host is configured with engine = off, PHP can be disabled for other virtual hosts, causing Apache to serve PHP source code instead of executing it. This is a disclosure vulnerability affecting PHP/Apache deploy...

CVE-2001-0921

Technical details about CVE-2001-0921 are not publicly provided in the connected documents. The initial description describes a memory-sensitive form-field exposure in Netscape 4.79 on macOS; monitor for updates.

CVE-2001-0891

CVE-2001-0891 describes a format string vulnerability in the NQS daemon (nqsdaemon) of NQE 3.3.0.16 on CRAY UNICOS and SGI IRIX. A local user could gain root privileges by submitting a batch job with a name containing formatting characters (via qsub). The connected documents confirm the vulnerabi...

CVE-2001-1372

CVE-2001-1372 affects Oracle 9i Application Server (AS) 1.0.2. It enables an attacker to disclose the server’s physical webroot path by requesting a non-existent .JSP file, because the default error message leaks the pathname. The vulnerability is a information disclosure issue, with CVSS-like co...

CVE-2001-1251

The CVE-2001-1251 entry concerns SmallHTTP (versions 1.204 through 3.00 beta 8). The vulnerability allows remote attackers to cause a denial of service by sending multiple long URL requests, potentially affecting availability. Documentation in the connected records confirms the affected software ...

CVE-2001-1008

The CVE-2001-1008 entry concerns Java Plugin 1.4 for JRE 1.3, where signed applets can run even if the code-signing certificate is expired. This indicates a vulnerability in how the plugin handles expired certificates, allowing remote attackers to attempt unauthorized activity via an applet signe...

CVE-2001-1380

OpenSSH before 2.9.9, while using keypairs and multiple keys of different types in the /.ssh/authorizedkeys2 file, may not properly handle the "from" option associated with a key, which could allow remote attackers to login from unauthorized IP addresses...

CVE-2001-1106

Technical details about CVE-2001-1106 are not publicly available in the provided connected documents. Monitor for updates; the inputs contain base descriptions but no additional technical specifics are provided here.

CVE-2001-1380

Technical details for CVE-2001-1380 are not publicly available in the provided documents. No affected products, versions, or remediation are specified here. Please monitor for updates from authoritative sources.

CVE-2001-1382

OpenSSH prior to 2.9.9p2 is affected by an echo simulation traffic analysis countermeasure that sends an extra echo packet after password/Carriage Return. This could let a remote attacker determine that the countermeasure is being used. Upgrade to OpenSSH 2.9.9p2 or later (as indicated by the CVE...

CVE-2001-1374

Summary (concrete details from connected documents): The vulnerability is in the expect utility prior to version 5.32, where it searches for its libraries in /var/tmp before other directories. A local attacker could exploit this by placing a Trojan horse library that mkpasswd would load, potentia...

CVE-2001-1349

Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers...

CVE-2001-1359

CVE-2001-1359 affects Volution clients 1.0.7 and earlier. When LDAP authentication fails, these clients contact the CCD, enabling remote attackers operating a Trojan horse Volution server to fully control the client. No explicit exploit details or patch information are provided in the supplied do...

CVE-2001-0873

uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileges by calling uux and specifying an alternate configuration file with the --config option...