CVE-2001-0769

The CVE-2001-0769 entries describe a memory leak in GuildFTPd Server 0.97 that can be triggered by a remote attacker sending a request containing a null character, causing a denial of service. The connected documents provide the vulnerability’s existence and impact but do not specify exploit deta...

CVE-2001-1118

A module in Roxen 2.0 before 2.0.92, and 2.1 before 2.1.264, does not properly decode UTF-8, Mac and ISO-2202 encoded URLs, which could allow a remote attacker to execute arbitrary commands or view arbitrary files via an encoded URL...

CVE-2001-1116

CVE-2001-1116 affects Identix BioLogon 2.03 and earlier. On multi-monitor systems running Windows 98/ME, it does not lock secondary displays, allowing an attacker with physical access to bypass authentication via a secondary display. The available sources confirm the affected product/versions and...

CVE-2001-1083

Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers to cause a denial of service crash via a URL that ends in . dot, / forward slash, or \ backward slash...

CVE-2001-1300

Directory traversal vulnerability in Dynu FTP server 1.05 and earlier allows remote attackers to read arbitrary files via a .. in the CD CWD command...

CVE-2001-0727

Summary of CVE-2001-0727 (File Execution Vulnerability) : Internet Explorer 6.0 on Windows is affected by a vulnerability in MIME header handling (Content-Disposition and Content-Type). An attacker can cause code execution by modifying headers to disguise downloaded content as safe, potentially t...

CVE-2001-0508

CVE-2001-0508 relates to Microsoft IIS 5.0 WebDAV processing. A very long, invalid WebDAV request can trigger a memory access error, causing the IIS 5.0 process to terminate and restart (DoS). The issue is addressed by the MS01-044 patch from Microsoft. Affected platform noted in sources is IIS 5...

CVE-2001-1153

The vulnerability CVE-2001-1153 affects OpenUnix 8.0.0, specifically the lpsystem component. A local user can trigger a denial of service and potentially execute arbitrary code by supplying a long command line argument. The published score (CVSSv2) is 7.2 (HIGH) with local access, low attack comp...

CVE-2001-1177

ml85p in Samsung ML-85G GDI printer driver before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2001-1203

The CVE corresponds to a local root vulnerability in the gpm package (gpm-root) where a format string flaw in gpm 1.17.8–1.17.18 allows local privilege escalation. Debian and OpenVAS entries describe the issue as requiring an update to gpm (DSA-095-1); Nessus notes this as a Debian local root adv...

CVE-2001-0901

Hypermail allows remote attackers to execute arbitrary commands on a server supporting SSI via an attachment with a .shtml extension, which is archived on the server and can then be executed by requesting the URL for the attachment...

CVE-2001-1355

Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail and SurgeFTP (and possibly other packages), could allow attackers to execute arbitrary code via long arguments to the -del or -lookup commands. The vulnerability is a result of unsafe handling of l...

CVE-2001-1356

Affected software: NetWin SurgeFTP 2.0f and earlier. Vulnerability: passwords are encrypted with weak hashing, a fixed salt, and modulo 40 arithmetic, enabling remote attackers to perform brute‑force password guessing against the administrator account on port 7021. Impact: attacker could compromi...

CVE-2001-1357

CVE-2001-1357 affects phpMyChat prior to 0.14.5. Vulnerabilities are in three PHP files: input.php3, handle_inputH.php3, and index.lib.php3. The description notes unknown consequences with possible user spoofing or improperly initialized variables; no concrete impact or exploit details are provid...

CVE-2001-1361

The CVE-2001-1361 entry concerns The Web Information Gateway (TWIG) 2.7.1, described as potentially related to incorrect security rights and/or the generation of mailto links. Based on the connected documents, there are no additional technical specifics (no explicit root cause details, affected s...

CVE-2001-1363

Summary: CVE-2001-1363 affects phpWebSite

CVE-2001-1364

CVE-2001-1364 concerns AutoDNS prior to version 0.0.4, involving autodns.pl and domain names that are not fully qualified. Affected product: AutoDNS with the autodns.pl component; vulnerability described as related to handling of not-fully-qualified domain names. The CVSS v2 base score is 7.5 (HI...

CVE-2001-1365

Technical details about CVE-2001-1365 are not publicly available in the provided documents. Monitor for updates.

CVE-2001-1366

The vulnerability CVE-2001-1366 concerns netscript prior to 1.6.3, where parsing of dynamic variables could let remote attackers alter program behavior or access sensitive information. The description and linked references confirm the affected component and potential impact but do not provide exp...

CVE-2001-1368

The CVE-2001-1368 entry concerns the iPlanet Web Server 4 included in Virtualvault Operating System (VVOS) 4.0 running HP-UX 11.04. The vulnerability could allow attackers to corrupt data. Connected sources confirm the affected product and environment, but the provided documents do not specify a ...