CVE-2001-0918

This CVE concerns vulnerabilities in CGI scripts in susehelp in SuSE 7.2 and 7.3 that allow remote command execution due to insecure file handling. Affected are the susehelp CGI scripts; the underlying issue is not opening files securely, enabling unauthorized command execution. The provided docu...

CVE-2001-1240

The CVE-2001-1240 entry concerns Engarde Secure Linux 1.0.1 where the default sudo configuration allows any user in the admin group to execute certain commands that could yield full root access. The documents confirm the affected component is the sudo configuration on Engarde Secure Linux 1.0.1 a...

CVE-2001-1227

CVE-2001-1227 affects Zope up to version prior to 2.2.4. The vulnerability arises when partially trusted users can bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags. Publicly available details in connected advisories confirm the root ...

CVE-2001-1180

CVE-2001-1180 affects FreeBSD 4.3. The vulnerability arises because the kernel does not properly clear shared signal handlers when a process execs, allowing a local attacker to gain root privileges by: calling rfork with a shared signal handler, having the child execute a setuid program, and sign...

CVE-2001-1297

CVE-2001-1297 describes a PHP remote file inclusion in the ActionPoll PHP script before 1.1.2. An attacker can supply a URL in the includedir parameter to execute arbitrary PHP code on the server. The documents provide the vulnerability details and affected version, but do not include remediation...

CVE-2001-1277

makewhatis in the man package before 1.5i2 allows an attacker in group man to overwrite arbitrary files via a man page whose name contains shell metacharacters...

CVE-2001-1174

The CVE-2001-1174 issue affects the Elm email client (Elm 2.5.5 and earlier). The root cause is a buffer overflow when handling very long Message-ID headers, allowing remote attackers to potentially execute arbitrary code. Mandrake/MKSA advisory MDKSA-2001:067 notes that the overflow could overwr...

CVE-2001-1236

The CVE-2001-1236 issue affects the myphpPagetool PHP script (versions up to 0.4.3-1). The vulnerability allows remote code execution by including files from remote web sites, triggered by an HTTP request that modifies the includedir variable. The available records corroborate this single vector ...

CVE-2001-0872

Technical details for CVE-2001-0872 are not provided in the connected documents. The initial description notes OpenSSH 3.0.1 with UseLogin and LD_PRELOAD cleansing issue. Monitor for updates.

CVE-2001-1246

CVE-2001-1246 affects PHP versions 4.0.5–4.1.0 running in safe mode. The fifth parameter to mail() is not properly sanitized, enabling local users and possibly remote attackers to execute arbitrary commands via shell metacharacters. Multiple connected documents (NVD/Nessus advisories) describe th...

CVE-2001-0550

wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "" argument to commands such as CWD, which is not properly handled by the glob function ftpglob...

CVE-2001-0946

apmscript in Apmd in Red Hat 7.2 "Enigma" allows local users to create or change the modification dates of arbitrary files via a symlink attack on the LOWPOWER temporary file, which could be used to cause a denial of service, e.g. by creating /etc/nologin and disabling logins...

CVE-2001-0906

CVE-2001-0906 affects the teTeX filter before 1.0.7. Local users can gain privileges via a symlink attack on temporary files created when printing .dvi files with lpr. Root cause: insecure temporary file handling. Affected advisories reference the need for updated mktemp-based handling; Mandrake ...

CVE-2001-1113

TrollFTPD 1.26 and earlier is affected by a buffer overflow vulnerability that allows local users to execute arbitrary code by creating a series of deeply nested directories with long names and then running a recursive (ls -R) command. The vulnerability is due to overly long path handling and occ...

CVE-2001-1234

CVE-2001-1234 affects Bharat Mediratta’s Gallery PHP script (versions before 1.2.1). A remote file inclusion flaw in the includedir parameter allows an attacker to include arbitrary remote files, enabling remote code execution with the web server’s privileges. The issue is documented by a Nessus ...

CVE-2001-1108

CVE-2001-1108 refers to a directory traversal vulnerability in SnapStream PVS 1.2a, where remote attackers could read arbitrary files by injecting a .. sequence in the requested URL. OpenVAS entries describe exploiting by prepending ../../ to file names, potentially exposing files like ssd.ini th...

CVE-2001-1027

The CVE-2001-1027 entry describes a buffer overflow in the WindowMaker (wmaker) window title handling code, affecting at least 0.64 and earlier. Exploitation could occur remotely by sending a long window title, enabling arbitrary code execution. OpenVAS/Debian Mandrake advisories confirm remote i...

CVE-2001-0912

CVE-2001-0912 affects Mandrake Linux 8.1 in the expect package (8.3.3). A packaging flaw causes expect to search libraries in /home/snailtalk before other directories, enabling a local user to gain root privileges. Mandrake issued MDKSA-2001:087 to address this.

CVE-2001-0888

The CVE-2001-0888 entry concerns Atmel Firmware 1.3 Wireless Access Point (WAP). The vulnerability arises in SNMP handling: sending a request with a non-"public" community string or an unknown OID can cause the WAP to deny subsequent SNMP requests, resulting in a denial of service. The provided s...

CVE-2001-1030

Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists ACLs when the httpdaccelhost and httpaccelwithproxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning...