CVE-2001-0703

The CVE-2001-0703 entry concerns tradecli.dll in Arcadia Internet Store 1.0, where a remote attacker can cause a denial of service by issuing a URL request containing an MS-DOS device name in the template parameter. The vulnerability is described as a DoS with partial availability impact (per the...

ZyXEL Prestige 642R: Exposed Admin Services on WAN with Default Password

ZyXEL Prestige 642R: Exposed Admin Services on WAN with Default Password AFFECTED ZyXEL Prestige 642R and 642R-I V2.50AJ.4 V2.50AL.1 V2.50AL.2b2 seems to be latest public beta and probably all other earlier versions too. NOT AFFECTED ZyXEL Prestige 642M SUMMARY The ADSL routers P642R and P642R-I...

CVE-2001-1260

Avaya Argent Office uses weak encryption trivial encoding for passwords, which allows remote attackers to gain administrator privileges by sniffing and decrypting the sniffing the passwords during a system reboot...

CVE-2001-1289

Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service crash via a malformed connection packet that begins with several char-255 characters...

CVE-2001-0352

SNMP agents in 3Com AirConnect AP-4111 and Symbol 41X1 Access Point allow remote attackers to obtain the WEP encryption key by reading it from a MIB when the value should be write-only, via 1 dot11WEPDefaultKeyValue in the dot11WEPDefaultKeysTable of the IEEE 802.11b MIB, or 2 ap128bWepKeyValue i...

CVE-2001-0980

docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page...

CVE-2001-1144

Directory traversal vulnerability in McAfee ASaP VirusScan agent 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the HTTP request...

CVE-2001-1038

Cisco SN 5420 Storage Router 1.13 and earlier allows remote attackers to cause a denial of service reboot via a series of connections to TCP port 8023...

Microsoft IIS 4.0/5.0 - Device File Remote Denial of Service

source: https://www.securityfocus.com/bid/2977/info Microsoft IIS is prone to denial of service attacks by remote attackers. This can occur if the remote attack crafts a URL which tries to pass a script parameter that is a device name. The end result of exploiting this vulnerability is that the...

CVE-2001-1250

vWebServer 1.2.0 allows remote attackers to cause a denial of service hang via a small number of long URL requests, possibly due to a buffer overflow...

CVE-2001-0398

The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attachment whose file name contains many spaces, which also causes the BAT! to misrepresent the attachment's type with a different icon...

CVE-2001-0164

Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed recipient field...

CVE-2001-0396

The CVE-2001-0396 entry concerns Lightwave ConsoleServer 3200, where the pre-login mode of the System Administrator interface exposes sensitive information (system status, configuration, users) to remote attackers. The vulnerability arises before authentication, enabling information disclosure wi...

CVE-2001-0460

Websweeper 4.0 is affected: it does not limit the length of certain HTTP headers, enabling a DoS via an extremely large Referrer header. OpenVAS entries corroborate a denial-of-service path by sending invalid HTTP requests, potentially crashing or destabilizing the server. The CVE details do not ...

CVE-2001-0448

The CVE-2001-0448 entry concerns the Web Configuration Server in 602Pro LAN SUITE. It is exploitable by remote attackers via an HTTP GET request to the aux directory (and possibly other directories with legacy DOS device names), causing a denial of service. The cited CVSS data indicates a network...

CVE-2001-0433

CVE-2001-0433 affects Savant 3.0 web server. A buffer overflow in the handling of the long Host HTTP header allows remote attackers to cause a denial of service and potentially execute arbitrary commands. Exploitation is described as remote and via crafted Host headers. No remediation details are...

CVE-2001-0484

CVE-2001-0484 : Tektronix PhaserLink 850 allows remote attackers to access configuration pages (_ncl_subjects.shtml, _ncl_items.shtml) without authentication, enabling modification of configuration information and causing a Denial of Service by accessing those pages. Affected software: PhaserLink...

CVE-2001-0035

CVE-2001-0035 concerns a buffer overflow in the kdc_reply_cipher function of KTH Kerberos IV. The vulnerability arises from processing a long authentication request, which can cause a denial of service and potentially allow arbitrary code execution. Documents confirm the affected component is KTH...

CVE-2001-0017

The CVE-2001-0017 issue affects Windows NT 4.0 PPTP server, where a memory leak can be triggered by malformed PPTP data packets, leading to remote denial of service. The vulnerability is due to improper handling of PPTP packets in the Windows NT PPTP implementation, which can exhaust system resou...

CVE-2001-0144

Technical details about CVE-2001-0144 are not provided in the connected documents. The Initial Description notes an SSH1 CRC-32 overflow issue, but no vendor/version/exploit data is supplied here. Monitor for updates and disclose when more info becomes public.