3467 matches found
CVE-2001-0726
CVE-2001-0726 concerns Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server. The issue arises when OWA is used with Internet Explorer and fails to properly detect certain inline script in HTML emails, which can allow remote attackers to perform arbitrary actions on a user’s Exchange mailbox....
CVE-2001-1172
OmniSecure HTTProtect 1.1.1 is affected by a local privilege escalation: a superuser without omnish privileges can modify a protected file by creating a symbolic link to that file. Root cause is improper protection against symbolic link exploitation in HTTProtect, allowing bypass of protection me...
CVE-2001-0906
CVE-2001-0906 affects the teTeX filter before 1.0.7. Local users can gain privileges via a symlink attack on temporary files created when printing .dvi files with lpr. Root cause: insecure temporary file handling. Affected advisories reference the need for updated mktemp-based handling; Mandrake ...
CVE-2001-1252
CVE-2001-1252 affects Network Associates PGP Keyserver 7.0. Remote attackers can bypass authentication and reach the administrative web interface by directly requesting the CGI paths under keyserver/cgi-bin for the programs (console, cs, multi_config, directory). Root cause: authentication bypass...
CVE-2001-0888
The CVE-2001-0888 entry concerns Atmel Firmware 1.3 Wireless Access Point (WAP). The vulnerability arises in SNMP handling: sending a request with a non-"public" community string or an unknown OID can cause the WAP to deny subsequent SNMP requests, resulting in a denial of service. The provided s...
CVE-2001-0939
CVE-2001-0939 affects Lotus Domino 5.08 and earlier. A remote attacker can crash the service by sending a SunRPC NULL command to port 443, resulting in a denial of service. The connected documents do not specify a remediation (patch/workaround) within the provided details. The entry lists a CVSS ...
CVE-2001-1166
The CVE-2001-1166 entry concerns linprocfs on FreeBSD 4.3 and earlier that does not properly restrict access to kernel memory. The vulnerability enables a process with debugging rights on a privileged process to read restricted memory from that process. Affected component: linprocfs in FreeBSD; r...
CVE-2001-1215
PFinger 0.7.5–0.7.7 is affected by a format-string vulnerability in .plan files that allows remote code execution. The issue arises from format specifiers used in a .plan, enabling an attacker to execute arbitrary code on affected systems. Affected component: PFinger (versions 0.7.5–0.7.7). Root ...
CVE-2001-1072
CVE-2001-1072 affects Apache with mod_rewrite enabled on UNIX systems. The vulnerability arises when an attacker can insert extra / characters into the requested path, causing the RewriteRule’s regular expression to fail and allowing the path to bypass RewriteRules. The affected component is mod_...
CVE-2001-0872
Technical details for CVE-2001-0872 are not provided in the connected documents. The initial description notes OpenSSH 3.0.1 with UseLogin and LD_PRELOAD cleansing issue. Monitor for updates.
CVE-2001-1146
AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 is affected. The issue stems from creating temporary files with predictable names, enabling local users to perform a symlink attack to modify files. The description in the Connected documents confirms the root cause as predictable t...
CVE-2001-1236
The CVE-2001-1236 issue affects the myphpPagetool PHP script (versions up to 0.4.3-1). The vulnerability allows remote code execution by including files from remote web sites, triggered by an HTTP request that modifies the includedir variable. The available records corroborate this single vector ...
CVE-2001-1322
The CVE-2001-1322 issue concerns xinetd up to version 2.1.8 (and earlier) running with a default umask of 0, allowing local users to read or modify files created by processes started by xinetd that don’t set a safe umask. Public sources in the connected docs identify this as a local-privilege ris...
CVE-2001-1083
Icecast versions 1.3.7 and earlier (including 1.3.7 and other
CVE-2001-1193
The CVE-2001-1193 issue affects EFTP, specifically version 2.0.8.346, where the CWD (change working directory) command does not properly validate input, allowing authenticated local users to perform a directory traversal and read arbitrary directories/files on the server. This is a confirmed vuln...
CVE-2001-1116
CVE-2001-1116 affects Identix BioLogon 2.03 and earlier. On multi-monitor systems running Windows 98/ME, it does not lock secondary displays, allowing an attacker with physical access to bypass authentication via a secondary display. The available sources confirm the affected product/versions and...
CVE-2001-1162
Summary of CVE-2001-1162: A directory traversal flaw in the Samba SMB server permits remote overwriting of files via the NetBIOS name used for a log file. The vulnerability stems from the %m macro in smb.conf, allowing a path like ‘..’ to reference files outside the intended log location. Affecte...
CVE-2001-1342
Apache httpd before 1.3.20 on Windows and OS/2 is vulnerable to a denial-of-service via a crafted URI containing many slashes or other characters, which causes dereferencing of a NULL pointer in certain functions. The issue leads to a General Protection Fault in a child process when handling the ...
