CVE-2001-1027

The CVE-2001-1027 entry describes a buffer overflow in the WindowMaker (wmaker) window title handling code, affecting at least 0.64 and earlier. Exploitation could occur remotely by sending a long window title, enabling arbitrary code execution. OpenVAS/Debian Mandrake advisories confirm remote i...

CVE-2001-0912

CVE-2001-0912 affects Mandrake Linux 8.1 in the expect package (8.3.3). A packaging flaw causes expect to search libraries in /home/snailtalk before other directories, enabling a local user to gain root privileges. Mandrake issued MDKSA-2001:087 to address this.

CVE-2001-0888

The CVE-2001-0888 entry concerns Atmel Firmware 1.3 Wireless Access Point (WAP). The vulnerability arises in SNMP handling: sending a request with a non-"public" community string or an unknown OID can cause the WAP to deny subsequent SNMP requests, resulting in a denial of service. The provided s...

CVE-2001-1030

Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists ACLs when the httpdaccelhost and httpaccelwithproxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning...

CVE-2001-1199

Agora CGI Cross Site Scripting (CVE-2001-1199) affects Agora versions 3.0a–4.0g due to improper input validation in the cart_id parameter when debug mode is on, enabling remote attackers to execute JavaScript in other clients. The vulnerability is documented in multiple sources (e.g., OpenVAS des...

CVE-2001-1252

Network Associates PGP Keyserver 7.0 allows remote attackers to bypass authentication and access the administrative web interface via URLs that directly access cgi-bin instead of keyserver/cgi-bin for the programs 1 console, 2 cs, 3 multiconfig and 4 directory...

CVE-2001-0797

A buffer overflow vulnerability exists in the System V derived /bin/login program across various operating systems, including Solaris/SunOS, HP-UX, AIX, IRIX, and Unixware . The root cause is the improper handling of a large number of extraneous arguments or environment variables . This allows re...

CVE-2001-0797

Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin...

CVE-2001-0886

Buffer overflow in glob function of glibc allows attackers to cause a denial of service crash and possibly execute arbitrary code via a glob pattern that ends in a brace "" character...

CVE-2001-1084

Cross-site scripting vulnerability in Allaire JRun 3.0 and 2.3.3 allows a malicious webmaster to embed Javascript in a request for a .JSP, .shtml, .jsp10, .jrun, or .thtml file that does not exist, which causes the Javascript to be inserted into an error message...

CVE-2001-0940

Technical details about CVE-2001-0940 are not publicly available in the provided documents; monitor for updates.

CVE-2001-1046

CVE-2001-1046 affects qpopper (aka qpop or popper) 4.0–4.0.2, where a buffer overflow can be triggered by a long username, enabling a remote attacker to gain privileges. OpenVAS details extend this: remote qpopper servers running 4.0.3 or 4.0.4 are vulnerable when configured to process a user’s ~...

CVE-2001-1099

The CVE-2001-1099 entry describes a vulnerability in Norton AntiVirus for Microsoft Exchange 2000 (2.x) where the default configuration can leak the recipient’s INBOX file path. An attacker who sends an email with a malicious attachment can trigger a rejection notice that reveals the path, enabli...

CVE-2001-1022

CVE-2001-1022 relates to a format-string vulnerability in the groff family: the pic component of groff (and jgroff before 1.15) could bypass the -S option and execute arbitrary commands via format-string specifiers in the plot command. Affected: groff 1.16.1 and other versions; jgroff before 1.15...

CVE-2001-1141

CVE-2001-1141: OpenSSL/SSLeay PRNG weakness before 0.9.6b allows attackers to use outputs from small PRNG requests to infer internal state, enabling future-prediction of random numbers. Affected versions include OpenSSL up to 0.9.6b; impact stated as potential exposure of cryptographic material. ...

CVE-2001-1252

CVE-2001-1252 affects Network Associates PGP Keyserver 7.0. Remote attackers can bypass authentication and reach the administrative web interface by directly requesting the CGI paths under keyserver/cgi-bin for the programs (console, cs, multi_config, directory). Root cause: authentication bypass...

CVE-2001-1072

CVE-2001-1072 affects Apache with mod_rewrite enabled on UNIX systems. The vulnerability arises when an attacker can insert extra / characters into the requested path, causing the RewriteRule’s regular expression to fail and allowing the path to bypass RewriteRules. The affected component is mod_...

CVE-2001-1185

CVE-2001-1185 affects FreeBSD 4.4. Some AIO operations may be delayed until after an execve call, allowing a local user to overwrite memory of the new process and gain privileges. The provided documents do not include exploitation details or remediation/fix information.

CVE-2001-1342

Apache httpd before 1.3.20 on Windows and OS/2 is vulnerable to a denial-of-service via a crafted URI containing many slashes or other characters, which causes dereferencing of a NULL pointer in certain functions. The issue leads to a General Protection Fault in a child process when handling the ...

CVE-2001-0899

CVE-2001-0899 concerns the PHP-Nuke Network Tools Add-On. The connected sources confirm that the vulnerability arises in Network Tools 0.2 for PHP-Nuke, where the remote attacker can execute commands on the server via shell metacharacters placed in the $hostinput variable. This leads to arbitrary...