3489 matches found
CVE-2001-1095
CVE-2001-1095 describes a buffer overflow in the uuq utility on AIX 4, allowing local users to execute arbitrary code by supplying a long -r parameter. The available records (NVD, CVE List) confirm the affected platform and the vulnerable component, but do not provide concrete patch/version detai...
CVE-2001-0887
CVE-2001-0887 affects xSANE 0.81 and earlier. The vulnerability allows local users to modify files of other xSANE users via a symlink attack on temporary files. The provided documents describe the issue but do not specify a remediation or fixed version; exploitation details are not included.
CVE-2001-1113
Buffer overflow in TrollFTPD 1.26 and earlier allows local users to execute arbitrary code by creating a series of deeply nested directories with long names, then running the ls -R recursive command...
CVE-2001-1231
CVE-2001-1231 affects Novell GroupWise 5.5 (Enhancement Pack SP1/SP2/SP3) and GroupWise 6 in Live Remote or Smart Caching mode. The underlying issue allows remote attackers to read arbitrary users’ mailboxes by sniffing client–server traffic and extracting usernames/passwords. Novell released the...
CVE-2001-1162
Summary of CVE-2001-1162: A directory traversal flaw in the Samba SMB server permits remote overwriting of files via the NetBIOS name used for a log file. The vulnerability stems from the %m macro in smb.conf, allowing a path like ‘..’ to reference files outside the intended log location. Affecte...
CVE-2001-1158
Affected software: Check Point VPN-1/FireWall-1 (version 4.0 and 4.1 per CERT) with the default macro accept_fw1_rdp in base.def. Vulnerability: A forged RDP header sent over UDP port 259 can bypass firewall restrictions, allowing traffic to arbitrary hosts. This is achieved by abusing RDP suppor...
CVE-2001-0869
Format string vulnerability in the default logging callback function saslsyslog in common.c in Cyrus SASL library cyrus-sasl may allow remote attackers to execute arbitrary commands...
CVE-2001-1161
Affected software: IBM Domino (Lotus Domino) 5.0.6. Vulnerable component: cross-site scripting due to improper sanitization when requesting a '.nsf' file or URL ending with Javascript; an attacker can craft a URL to execute script in the user’s browser. Impact: remote script execution in the brow...
CVE-2001-0726
Outlook Web Access OWA in Microsoft Exchange 5.5 Server, when used with Internet Explorer, does not properly detect certain inline script, which can allow remote attackers to perform arbitrary actions on a user's Exchange mailbox via an HTML e-mail message...
CVE-2001-0769
Memory leak in GuildFTPd Server 0.97 allows remote attackers to cause a denial of service via a request containing a null character...
CVE-2001-0895
Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the router's interface that contains a different MAC address for the router, which eventually causes the router to overwrite the MAC address in its ARP...
CVE-2001-0912
Packaging error for expect 8.3.3 in Mandrake Linux 8.1 causes expect to search for its libraries in the /home/snailtalk directory before other directories, which could allow a local user to gain root privileges...
CVE-2001-0929
Cisco IOS Firewall Feature set, aka Context Based Access Control CBAC or Cisco Secure Integrated Software, for IOS 11.2P through 12.2T does not properly check the IP protocol type, which could allow remote attackers to bypass access control lists...
CVE-2001-0939
Lotus Domino 5.08 and earlier allows remote attackers to cause a denial of service crash via a SunRPC NULL command to port 443...
CVE-2001-1027
Buffer overflow in WindowMaker aka wmaker 0.64 and earlier allows remote attackers to execute arbitrary code via a long window title...
CVE-2001-1032
admin.php in PHP-Nuke 5.2 and earlier, except 5.0RC1, does not check login credentials for upload operations, which allows remote attackers to copy and upload arbitrary files and read the PHP-Nuke configuration file by directly calling admin.php with an upload parameter and specifying the file to...
CVE-2001-1043
ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk link file that points to the target file...
CVE-2001-1083
Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers to cause a denial of service crash via a URL that ends in . dot, / forward slash, or \ backward slash...
CVE-2001-1088
Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when the "Reply-To" address is different than the "From" address, which could allow an untrusted remote attacker to spoof...