CVE-2001-0550

wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "" argument to commands such as CWD, which is not properly handled by the glob function ftpglob...

CVE-2001-1247

PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the web server UID by uploading a PHP script that uses the errorlog function to access the files...

CVE-2001-0981

HP CIFS/9000 Server SAMBA A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program without specifying the username of the user making the request, which could cause the server to change the password of a different user...

CVE-2001-1119

cda in xmcd 3.0.2 and 2.6 in SuSE Linux allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-1088

Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when the "Reply-To" address is different than the "From" address, which could allow an untrusted remote attacker to spoof...

CVE-2001-0929

Cisco IOS Firewall Feature set, aka Context Based Access Control CBAC or Cisco Secure Integrated Software, for IOS 11.2P through 12.2T does not properly check the IP protocol type, which could allow remote attackers to bypass access control lists...

CVE-2001-1234

Bharat Mediratta Gallery PHP script before 1.2.1 allows remote attackers to execute arbitrary code by including files from remote web sites via an HTTP request that modifies the includedir variable...

CVE-2001-1113

Buffer overflow in TrollFTPD 1.26 and earlier allows local users to execute arbitrary code by creating a series of deeply nested directories with long names, then running the ls -R recursive command...

CVE-2001-1246

CVE-2001-1246 affects PHP versions 4.0.5–4.1.0 running in safe mode. The fifth parameter to mail() is not properly sanitized, enabling local users and possibly remote attackers to execute arbitrary commands via shell metacharacters. Multiple connected documents (NVD/Nessus advisories) describe th...

CVE-2001-0508

CVE-2001-0508 relates to Microsoft IIS 5.0 WebDAV processing. A very long, invalid WebDAV request can trigger a memory access error, causing the IIS 5.0 process to terminate and restart (DoS). The issue is addressed by the MS01-044 patch from Microsoft. Affected platform noted in sources is IIS 5...

CVE-2001-0770

CVE-2001-0770 affects GuildFTPd Server 0.97, with a buffer overflow in the processing of long SITE commands. This allows a remote attacker to potentially execute arbitrary code or crash the service. OpenVAS/Nessus entries corroborate the denial-of-service risk and potential code execution, but no...

CVE-2001-1158

Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, acceptfw1rdp, which can allow remote attackers to bypass intended restrictions with forged RDP internal protocol headers to UDP port 259 of arbitrary hosts...

CVE-2001-1183

Cisco IOS PPTP vulnerability (CVE-2001-1183) affects PPTP implementation in Cisco IOS 12.1 and 12.2. A crafted/malformed PPTP packet can crash the router when PPTP is enabled, causing a denial of service. The issue can be triggered by sending to the PPTP control port (port 1723/tcp). Exploitation...

CVE-2001-0894

Postfix SMTP server (pre-20010228-pl07) is affected by a remote DoS: when configured to email the postmaster on SMTP errors, a storm of errors can cause the SMTP session log to grow, leading to memory exhaustion. Debian advisory DSA-093-1 and OpenVAS/NESL entries corroborate a remote DoS due to e...

CVE-2001-1201

CVE-2001-1201 : A buffer overflow in wmcube-gdk for WMCube/GDK 0.98 allows local users to execute arbitrary code via long lines in the object description file. Affected: wmcube-gdk component of WMCube/GDK 0.98. Root cause: unbounded input in object description handling leads to overflow. Impact: ...

CVE-2001-1180

CVE-2001-1180 affects FreeBSD 4.3. The vulnerability arises because the kernel does not properly clear shared signal handlers when a process execs, allowing a local attacker to gain root privileges by: calling rfork with a shared signal handler, having the child execute a setuid program, and sign...

CVE-2001-1002

The CVE-2001-1002 issue affects the DVI print filter (dvips) used by lpd on Red Hat Linux 7.0 and earlier. The default configuration does not run dvips in secure mode when dvips is executed by lpd, which could allow a remote attacker to gain privileges by printing a DVI file containing malicious ...

CVE-2001-1119

CVE-2001-1119 affects xmcd's cda (on SuSE Linux) in versions 3.0.2 and 2.6, where local users can overwrite arbitrary files via a symlink attack on insecure temporary files (in /tmp). The root cause is a symbolic link redirection vulnerability tied to setuid-enabled cda. Impact; local privilege e...

CVE-2001-1117

The affected product is LinkSys EtherFast BEFSR41 Cable/DSL routers running firmware prior to 1.39.3 Beta. The vulnerability allows a remote attacker to view administration and user passwords by connecting to the router and inspecting the HTML source of (1) index.htm and (2) Password.htm). Root c...

CVE-2001-1345

The CVE concerns bctool in Jetico BestCrypt 0.7 and earlier, which trusts a user-supplied PATH to locate and execute an fsck utility. This PATH manipulation allows local users to gain privileges by renaming or placing a Trojan horse program earlier in PATH. Affected component: bctool within Jetic...