CVE List

Id CVE No. Status Description Phase Votes Comments Actions
2951  CVE-2001-0130  Entry  Buffer overflow in HTML parser of the Lotus R5 Domino Server before 5.06, and Domino Client before 5.05, allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed font size specifier.        View
2952  CVE-2001-0131  Candidate  htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack.  Modified (20010430-01)  ACCEPT(2) Baker, Cole | MODIFY(1) Frech | NOOP(3) Christey, Magdych, Wall  Frech> XF:linux-apache-symlink(5926) | Christey> XF:linux-apache-symlink | URL:http://xforce.iss.net/static/5926.php | Christey> http://archives.neohapsis.com/archives/vendor/2001-q1/0019.html | Christey> This item may have been re-introduced into the Apache source | code sometime during 2002; CVE-2002-1233 has been created for | that version, which affects Apache 1.3.27 and other versions. | Christey> As a further clarification, CVE-2002-1233 is *only* for the | Debian-specific regression error. | Christey> DEBIAN:DSA-195 | URL:http://www.debian.org/security/2002/dsa-195  View
2953  CVE-2001-0132  Candidate  Interscan VirusWall 3.6.x and earlier follows symbolic links when uninstalling the product, which allows local users to overwrite arbitrary files via a symlink attack.  Proposed (20010214)  MODIFY(1) Frech | NOOP(3) Christey, Cole, Wall  Christey> XF:interscan-viruswall-symlink | URL:http://xforce.iss.net/static/5947.php | Frech> XF:interscan-viruswall-symlink(5947)  View
2954  CVE-2001-0133  Candidate  The web administration interface for Interscan VirusWall 3.6.x and earlier does not use encryption, which could allow remote attackers to obtain the administrator password to sniff the administrator password via the setpasswd.cgi program or other HTTP GET requests that contain base64 encoded usernames and passwords.  Proposed (20010214)  MODIFY(1) Frech | NOOP(2) Cole, Wall  Frech> XF:interscan-viruswall-weak-authentication(5946)  View
2955  CVE-2001-0134  Candidate  Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to execute arbitrary commands via a long user name.  Proposed (20010214)  ACCEPT(2) Baker, Cole | MODIFY(1) Frech | NOOP(2) Christey, Wall  Frech> XF:compaq-web-management-bo(5935) | Christey> XF:compaq-web-management-bo | URL:http://xforce.iss.net/static/5935.php  View

Page 591 of 20943, showing 5 records out of 104715 total, starting on record 2951, ending on 2955

Actions