CVE-2001-1377

CVE-2001-1377 affects multiple RADIUS implementations that fail to validate the Vendor-Length of Vendor-Specific attributes, enabling a remote attacker to crash the server when Vendor-Length

CVE-2001-1355

Buffer overflows in NetWin Authentication Module NWAuth 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to 1 the -del command or 2 the -lookup command...

CVE-2001-1357

Multiple vulnerabilities in phpMyChat before 0.14.5 exist in 1 input.php3, 2 handleinputH.php3, or 3 index.lib.php3 with unknown consequences, possibly related to user spoofing or improperly initialized variables...

CVE-2001-1360

Vulnerability in Scanner Access Now Easy SANE before 1.0.5, related to pnm and saned...

CVE-2001-1362

Vulnerability in the server for nPULSE before 0.53p4...

CVE-2001-1364

Vulnerability in autodns.pl for AutoDNS before 0.0.4 related to domain names that are not fully qualified...

CVE-2001-1365

Vulnerability in IntraGnat before 1.4...

CVE-2001-1368

Vulnerability in iPlanet Web Server 4 included in Virtualvault Operating System VVOS 4.0 running HP-UX 11.04 could allow attackers to corrupt data...

CVE-2001-1377

Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service crash via a Vendor-Length that is less than 2...

CVE-2001-1362

CVE-2001-1362 affects the nPULSE server prior to version 0.53p4. The available data in connected documents identifies the affected product and version (nPULSE before 0.53p4) and shows a CVSS v2 base score of 7.5 (Network attack vector, Low attack complexity, No authentication, Partial confidentia...

CVE-2001-1376

CVE-2001-1376 describes a buffer overflow in the RADIUS digest calculation function across multiple implementations. The overflow occurs while concatenating the shared secret with the received packet during digest computation, enabling remote denial of service and, in some cases, arbitrary code e...

CVE-2001-1354

The CVE-2001-1354 entry concerns the NetWin Authentication module (NWAuth) versions 2.0 and 3.0b, as implemented in SurgeFTP and DMail (and possibly other packages). The root cause is weak password hashing used by NWAuth, which could enable local users to decrypt stored passwords or to log in wit...

CVE-2001-1354

NetWin Authentication module NWAuth 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password...

CVE-2001-1360

CVE-2001-1360 : Vulnerability in Scanner Access Now Easy (SANE) before 1.0.5 related to pnm and saned. The supplied documents do not provide further technical details, root cause, affected components beyond those, exploitation vectors, impact specifics, or a patch/remediation. No in-the-wild expl...

CVE-2001-1356

NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, which allows remote attackers to conduct brute force password guessing attacks against the administrator account on port 7021...

CVE-2001-1358

phpMyChat prior to version 0.14.4 is affected by a local privilege escalation (and potentially remote) via a crafted L (localization) parameter that allows an alternate library file to be loaded, enabling attackers to gain privileges. The description explicitly identifies the vulnerable component...

Solaris 8 dtspcd - Remote Heap Overflow (Metasploit)

Solaris 8 dtspcd - Remote Heap Overflow Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Linux lpd DVI Print Filter (dvips) Remote Command Execution

The remote lpd server calls dvips in insecure mode. An attacker may use this flaw to execute arbitrary commands remotely on this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11023; scriptversion "1.24"; scriptcvsdate"Date: 2019/03/06 18:38:55";...

CVE-2001-1353

ghostscript before 6.51 allows local users to read and write arbitrary files as the 'lp' user via the file operator, even with -dSAFER enabled...

CVE-2001-1353

Vulnerability (CVE-2001-1353) affects Ghostscript up to version 6.50, where the file operator can be exploited by a local user to read and write arbitrary files as the lp user, even when running with -dSAFER . The root cause is that the file operator integrity check does not prevent untrusted fil...