5673 matches found
CVE-2001-1250
vWebServer 1.2.0 allows remote attackers to cause a denial of service hang via a small number of long URL requests, possibly due to a buffer overflow...
CVE-2001-0398
The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attachment whose file name contains many spaces, which also causes the BAT! to misrepresent the attachment's type with a different icon...
CVE-2001-0164
Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed recipient field...
CVE-2001-0396
The CVE-2001-0396 entry concerns Lightwave ConsoleServer 3200, where the pre-login mode of the System Administrator interface exposes sensitive information (system status, configuration, users) to remote attackers. The vulnerability arises before authentication, enabling information disclosure wi...
CVE-2001-0460
Websweeper 4.0 is affected: it does not limit the length of certain HTTP headers, enabling a DoS via an extremely large Referrer header. OpenVAS entries corroborate a denial-of-service path by sending invalid HTTP requests, potentially crashing or destabilizing the server. The CVE details do not ...
CVE-2001-0448
The CVE-2001-0448 entry concerns the Web Configuration Server in 602Pro LAN SUITE. It is exploitable by remote attackers via an HTTP GET request to the aux directory (and possibly other directories with legacy DOS device names), causing a denial of service. The cited CVSS data indicates a network...
CVE-2001-0433
CVE-2001-0433 affects Savant 3.0 web server. A buffer overflow in the handling of the long Host HTTP header allows remote attackers to cause a denial of service and potentially execute arbitrary commands. Exploitation is described as remote and via crafted Host headers. No remediation details are...
CVE-2001-0484
CVE-2001-0484 : Tektronix PhaserLink 850 allows remote attackers to access configuration pages (_ncl_subjects.shtml, _ncl_items.shtml) without authentication, enabling modification of configuration information and causing a Denial of Service by accessing those pages. Affected software: PhaserLink...
CVE-2001-0017
The CVE-2001-0017 issue affects Windows NT 4.0 PPTP server, where a memory leak can be triggered by malformed PPTP data packets, leading to remote denial of service. The vulnerability is due to improper handling of PPTP packets in the Windows NT PPTP implementation, which can exhaust system resou...
CVE-2001-0035
CVE-2001-0035 concerns a buffer overflow in the kdc_reply_cipher function of KTH Kerberos IV. The vulnerability arises from processing a long authentication request, which can cause a denial of service and potentially allow arbitrary code execution. Documents confirm the affected component is KTH...
CVE-2001-0144
Technical details about CVE-2001-0144 are not provided in the connected documents. The Initial Description notes an SSH1 CRC-32 overflow issue, but no vendor/version/exploit data is supplied here. Monitor for updates and disclose when more info becomes public.
CVE-2000-0302
Microsoft Index Server WebHits ISAPI filter vulnerability (MS00-06) allows remote attackers to disclose ASP source by requesting null.htw with a crafted CiWebHitsFile argument (via %20). Connected OpenVAS entries describe the WebHits component’s information disclosure and path/file reading issues...
CVE-2001-0011
CVE-2001-0011 describes a buffer overflow in the nslookupComplain() routine of ISC BIND 4, enabling remote attackers to execute code with the BIND process’s privileges (typically root) and potentially gain full control of affected systems. Affected lines include BIND 4.x and certain 8.x versions ...
CVE-1999-0924
The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service...
CVE-2001-0151
CVE-2001-0151 affects Microsoft IIS 5.0, where a remote attacker can cause a denial of service by sending malformed WebDAV/PROPFIND requests. The underlying issue is a bug in WebDAV handling that allows the server to be made unavailable, with impact described as DoS and partial availability. Publ...
CVE-2001-0305
The CVE-2001-0305 issue affects the store.cgi CGI in Thinking Arts ES.One. It enables a directory traversal via .. in the StartID parameter, allowing remote attackers to read arbitraries files with the web server’s privileges. Multiple sources (NVD/NVD-derived entries, CVE lists, and Nessus plugi...
CVE-2001-0298
CVE-2001-0298 affects WebReflex 1.55 HTTPd. The vulnerability is a buffer overflow triggered by a long HTTP GET request, enabling remote denial of service and potentially arbitrary command execution. The available descriptions from NVD/CVE records confirm the issue but do not specify affected pla...
CVE-2001-0258
The CVE-2001-0258 issue affects the Easycom/Safecom Print Server PrintGuide server (firmware 404.590). The vulnerability is a remote denial of service caused by a large number of connections that send null characters, affecting availability (CVSS base metric shows Availability impact PARTIAL). Th...
CVE-2001-0200
HSWeb 2.0 HTTP server is affected by a path-disclosure vulnerability: remote attackers can obtain the server’s physical path by requesting the /cgi/ directory if directory browsing is enabled. This results in partial confidentiality impact. The available sources do not provide exploit details, af...