CVE-2001-1074

Summary: CVE-2001-1074 affects Webmin 0.84 and earlier. The vulnerability arises because Webmin does not properly clear the HTTP_AUTHORIZATION environment variable when the web server restarts, causing authentication information to be exposed to all CGI programs and enabling local privilege escal...

CVE-2001-1147

CVE-2001-1147 affects util-linux’s /bin/login PAM handling prior to version 2.11, where a static pwent buffer could be rewritten across PAM calls. In non-default configurations (notably with pam_limits), this could leak one user’s credentials to another. The advisories (Mandrake, Red Hat) documen...

CVE-2001-1377

Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service crash via a Vendor-Length that is less than 2...

CVE-2001-1365

Vulnerability in IntraGnat before 1.4...

CVE-2001-1368

The CVE-2001-1368 entry concerns the iPlanet Web Server 4 included in Virtualvault Operating System (VVOS) 4.0 running HP-UX 11.04. The vulnerability could allow attackers to corrupt data. Connected sources confirm the affected product and environment, but the provided documents do not specify a ...

CVE-2001-1364

CVE-2001-1364 concerns AutoDNS prior to version 0.0.4, involving autodns.pl and domain names that are not fully qualified. Affected product: AutoDNS with the autodns.pl component; vulnerability described as related to handling of not-fully-qualified domain names. The CVSS v2 base score is 7.5 (HI...

CVE-2001-1362

Vulnerability in the server for nPULSE before 0.53p4...

CVE-2001-1354

The CVE-2001-1354 entry concerns the NetWin Authentication module (NWAuth) versions 2.0 and 3.0b, as implemented in SurgeFTP and DMail (and possibly other packages). The root cause is weak password hashing used by NWAuth, which could enable local users to decrypt stored passwords or to log in wit...

CVE-2001-1365

Technical details about CVE-2001-1365 are not publicly available in the provided documents. Monitor for updates.

CVE-2001-1355

Buffer overflows in NetWin Authentication Module NWAuth 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to 1 the -del command or 2 the -lookup command...

CVE-2001-1356

NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, which allows remote attackers to conduct brute force password guessing attacks against the administrator account on port 7021...

CVE-2001-1368

Vulnerability in iPlanet Web Server 4 included in Virtualvault Operating System VVOS 4.0 running HP-UX 11.04 could allow attackers to corrupt data...

CVE-2001-1376

CVE-2001-1376 describes a buffer overflow in the RADIUS digest calculation function across multiple implementations. The overflow occurs while concatenating the shared secret with the received packet during digest computation, enabling remote denial of service and, in some cases, arbitrary code e...

CVE-2001-1362

CVE-2001-1362 affects the nPULSE server prior to version 0.53p4. The available data in connected documents identifies the affected product and version (nPULSE before 0.53p4) and shows a CVSS v2 base score of 7.5 (Network attack vector, Low attack complexity, No authentication, Partial confidentia...

CVE-2001-1354

NetWin Authentication module NWAuth 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password...

CVE-2001-1360

Vulnerability in Scanner Access Now Easy SANE before 1.0.5, related to pnm and saned...

CVE-2001-1360

CVE-2001-1360 : Vulnerability in Scanner Access Now Easy (SANE) before 1.0.5 related to pnm and saned. The supplied documents do not provide further technical details, root cause, affected components beyond those, exploitation vectors, impact specifics, or a patch/remediation. No in-the-wild expl...

CVE-2001-1356

Affected software: NetWin SurgeFTP 2.0f and earlier. Vulnerability: passwords are encrypted with weak hashing, a fixed salt, and modulo 40 arithmetic, enabling remote attackers to perform brute‑force password guessing against the administrator account on port 7021. Impact: attacker could compromi...

CVE-2001-1361

The CVE-2001-1361 entry concerns The Web Information Gateway (TWIG) 2.7.1, described as potentially related to incorrect security rights and/or the generation of mailto links. Based on the connected documents, there are no additional technical specifics (no explicit root cause details, affected s...

CVE-2001-1357

Multiple vulnerabilities in phpMyChat before 0.14.5 exist in 1 input.php3, 2 handleinputH.php3, or 3 index.lib.php3 with unknown consequences, possibly related to user spoofing or improperly initialized variables...