Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1152.

Baltimore Technologies WEBsweeper 4.02, when used to manage URL blacklists, allows remote attackers to bypass blacklist restrictions and connect to unauthorized web servers by modifying the requested URL, including (1) a // (double slash), (2) a /SUBDIR/.. where the desired file is in the parentdir, (3) a /./, or (4) URL-encoded characters.


Provide references for further information: Can you share references or external links related to CVE-2001-1152?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.mimesweeper.com/support/technotes/notes/1043.asp'}, {'name': '20010905 Various problems in Baltimore WebSweeper URL filtering', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/212283'}, {'name': '3296', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3296'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1152?


Explain the CVE ID: What does the identifier CVE-2001-1153 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1153.

lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a long command line argument.


Provide references for further information: Can you share references or external links related to CVE-2001-1153?

{'name': 'CSSA-2001-SCO.15', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-08/0391.html'}, {'name': '3248', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3248'}, {'name': 'openunix-lpsystem-bo(7041)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7041.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1153?


Explain the CVE ID: What does the identifier CVE-2001-1154 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1154.

Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service (hang) using PHP IMAP clients.


Provide references for further information: Can you share references or external links related to CVE-2001-1154?

{'name': 'cyrus-imap-php-dos(7053)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7053'}, {'name': '20010830 Possible Denial of Service with PHP and Cyrus IMAP on BSDi 4.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/211056'}, {'name': '3260', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3260'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1154?


Explain the CVE ID: What does the identifier CVE-2001-1155 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1155.

TCP Wrappers (tcp_wrappers) in FreeBSD 4.1.1 through 4.3 with the PARANOID ACL option enabled does not properly check the result of a reverse DNS lookup, which could allow remote attackers to bypass intended access restrictions via DNS spoofing.


Provide references for further information: Can you share references or external links related to CVE-2001-1155?

{'name': '5454', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5454'}, {'name': 'FreeBSD-SA-01:56', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:56.tcp_wrappers.asc'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1155?


Explain the CVE ID: What does the identifier CVE-2001-1156 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1156.

TYPSoft FTP 0.95 allows remote attackers to cause a denial of service (CPU consumption) via a "../../*" argument to (1) STOR or (2) RETR.


Provide references for further information: Can you share references or external links related to CVE-2001-1156?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://membres.lycos.fr/typsoft/eng/history.html'}, {'name': '20011008 [ASGUARD-LABS] TYPSoft FTP Server v0.95 STOR/RETR Denial of Service Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/219167'}, {'name': '3409', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3409'}, {'name': 'typsoft-ftp-retr-stor-dos(7247)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7247.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1156?


Explain the CVE ID: What does the identifier CVE-2001-1157 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1157.

Baltimore Technologies WEBsweeper 4.0 and 4.02 does not properly filter Javascript from HTML pages, which could allow remote attackers to bypass the filtering via (1) an extra leading < and one or more characters before the SCRIPT tag, or (2) tags using Unicode.


Provide references for further information: Can you share references or external links related to CVE-2001-1157?

{'name': "20010812 Various problems in Baltimore's WEBSweeper Script filter ing", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/203821'}, {'name': '3172', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3172'}, {'name': '3173', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3173'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1157?


Explain the CVE ID: What does the identifier CVE-2001-1158 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1158.

Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to bypass intended restrictions with forged RDP (internal protocol) headers to UDP port 259 of arbitrary hosts.


Provide references for further information: Can you share references or external links related to CVE-2001-1158?

{'name': '2952', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2952'}, {'name': '20010709 Check Point FireWall-1 RDP Bypass Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0128.html'}, {'name': '20010712 RDP Bypass workaround for VPN-1/FireWall 4.1 SPx', 'tags': ['vendor-advisory', 'x_refsource_CHECKPOINT'], 'url': 'http://www.checkpoint.com/techsupport/alerts/rdp.html'}, {'name': 'VU#310295', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/310295'}, {'name': 'CA-2001-17', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2001-17.html'}, {'name': 'L-109', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/l-109.shtml'}, {'name': '20010709 Check Point response to RDP Bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/cgi-bin/archive.pl?id=1&start=2002-03-11&end=2002-03-17&mid=195647&threads=1'}, {'name': '1884', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1884'}, {'name': 'fw1-rdp-bypass(6815)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6815'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1158?


Explain the CVE ID: What does the identifier CVE-2001-1159 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1159.

load_prefs.php and supporting include files in SquirrelMail 1.0.4 and earlier do not properly initialize certain PHP variables, which allows remote attackers to (1) view sensitive files via the config_php and data_dir options, and (2) execute arbitrary code by using options_order.php to upload a message that could be interpreted as PHP.


Provide references for further information: Can you share references or external links related to CVE-2001-1159?

{'name': '20010702 (SRADV00010) Remote command execution vulnerabilities in SquirrelMail', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0029.html'}, {'name': '2968', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2968'}, {'name': 'squirrelmail-loadprefs-execute-code(6775)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/6775.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.squirrelmail.org/changelog.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1159?


Explain the CVE ID: What does the identifier CVE-2001-1160 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1160.

udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the category_file field.


Provide references for further information: Can you share references or external links related to CVE-2001-1160?

{'name': 'udirectory-remote-command-execution(6706)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6706'}, {'name': '2884', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2884'}, {'name': '20010618 udirectory from Microburst Technologies remote command execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/191829'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1160?


Explain the CVE ID: What does the identifier CVE-2001-1161 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1161.

Cross-site scripting (CSS) vulnerability in Lotus Domino 5.0.6 allows remote attackers to execute script on other web clients via a URL that ends in Javascript, which generates an error message that does not quote the resulting script.


Provide references for further information: Can you share references or external links related to CVE-2001-1161?

{'name': 'lotus-domino-css(6789)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/6789.php'}, {'name': '2962', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2962'}, {'name': '20010702 Re: Lotus Domino Server Cross-Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/194609'}, {'name': 'VU#642239', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/642239'}, {'name': '1887', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1887'}, {'name': '20010702 Lotus Domino Server Cross-Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/194465'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1161?


Explain the CVE ID: What does the identifier CVE-2001-1162 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1162.

Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files via a .. in a NETBIOS name, which is used as the name for a .log file.


Provide references for further information: Can you share references or external links related to CVE-2001-1162?

{'name': 'MDKSA-2001-062', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-062.php3'}, {'name': 'HPSBUX0107-157', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/3423'}, {'name': 'DSA-065', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-065'}, {'name': '2928', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2928'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://us1.samba.org/samba/whatsnew/macroexploit.html'}, {'name': 'CSSA-2001-024.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.calderasystems.com/support/security/advisories/CSSA-2001-024.0.txt'}, {'name': 'IMNX-2001-70-027-01', 'tags': ['vendor-advisory', 'x_refsource_IMMUNIX'], 'url': 'http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-027-01'}, {'name': 'RHSA-2001:086', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-086.html'}, {'name': 'samba-netbios-file-creation(6731)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6731'}, {'name': '20010623 smbd remote file creation vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/193027'}, {'name': 'CLA-2001:405', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000405'}, {'name': 'L-105', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/l-105.shtml'}, {'name': '20011002-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20011002-01-P'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1162?


Explain the CVE ID: What does the identifier CVE-2001-1163 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1163.

Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT argument to port 6500.


Provide references for further information: Can you share references or external links related to CVE-2001-1163?

{'name': '2885', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2885'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1163?


Explain the CVE ID: What does the identifier CVE-2001-1164 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1164.

Buffer overflow in uucp utilities in UnixWare 7 allows local users to execute arbitrary code via long command line arguments to (1) uucp, (2) uux, (3) bnuconvert, (4) uucico, (5) uuxcmd, or (6) uuxqt.


Provide references for further information: Can you share references or external links related to CVE-2001-1164?

{'name': 'CSSA-2001-SCO.4', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://stage.caldera.com/pub/security/unixware/CSSA-2001-SCO.4/CSSA-2001-SCO.4.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1164?


Explain the CVE ID: What does the identifier CVE-2001-1165 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1165.

Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting the information, e.g., with the Disengage tool.


Provide references for further information: Can you share references or external links related to CVE-2001-1165?

{'name': '3213', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3213'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securemac.com/fileguard.php#disengage'}, {'name': 'fileguard-weak-password-encryption(7018)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7018.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1165?


Explain the CVE ID: What does the identifier CVE-2001-1166 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1166.

linprocfs on FreeBSD 4.3 and earlier does not properly restrict access to kernel memory, which allows one process with debugging rights on a privileged process to read restricted memory from that process.


Provide references for further information: Can you share references or external links related to CVE-2001-1166?

{'name': 'FreeBSD-SA-01:55', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:55.procfs.asc'}, {'name': '1938', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1938'}, {'name': '3217', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3217'}, {'name': 'linprocfs-process-memory-leak(7017)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7017.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1166?


Explain the CVE ID: What does the identifier CVE-2001-1167 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1167.


Provide references for further information: Can you share references or external links related to CVE-2001-1167?


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1167?


Explain the CVE ID: What does the identifier CVE-2001-1168 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1168.

Directory traversal vulnerability in index.php in PhpMyExplorer before 1.2.1 allows remote attackers to read arbitrary files via a ..%2F (modified dot dot) in the chemin parameter.


Provide references for further information: Can you share references or external links related to CVE-2001-1168?

{'name': '20010829 eRisk Security Advisory:  PhpMyExplorer vulnerable to directory traversal.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-08/0408.html'}, {'name': '20010830 Re: eRisk Security Advisory:  PhpMyExplorer vulnerable to directory traversal.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-08/0418.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1168?


Explain the CVE ID: What does the identifier CVE-2001-1169 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1169.

keyinit in S/Key does not require authentication to initialize a one-time password sequence, which allows an attacker who has gained privileges to a user account to create new one-time passwords for use in other activities that may use S/Key authentication, such as sudo.


Provide references for further information: Can you share references or external links related to CVE-2001-1169?

{'name': '20010902 S/Key keyinit(1) authentication (lack thereof) + sudo(1)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-08/0441.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1169?


Explain the CVE ID: What does the identifier CVE-2001-1170 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1170.

AmTote International homebet program stores the homebet.log file in the homebet/ virtual directory, which allows remote attackers to steal account and PIN numbers.


Provide references for further information: Can you share references or external links related to CVE-2001-1170?

{'name': 'homebet-view-logfile(7186)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7186'}, {'name': '20010929 Vulnerability in Amtote International  homebet self service wagering system.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-09/0235.html'}, {'name': '3370', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3370'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1170?


Explain the CVE ID: What does the identifier CVE-2001-1171 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1171.

Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, which could allow local users to gain privileges or modify the firewall policy.


Provide references for further information: Can you share references or external links related to CVE-2001-1171?

{'name': '20010907 Bug in compile portion for older versions of CheckPoint Firewalls', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-09/0046.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1171?


Explain the CVE ID: What does the identifier CVE-2001-1172 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1172.

OmniSecure HTTProtect 1.1.1 allows a superuser without omnish privileges to modify a protected file by creating a symbolic link to that file.


Provide references for further information: Can you share references or external links related to CVE-2001-1172?

{'name': '20010719 [SNS Advisory No.37] HTTProtect allows attackers to change the protected file using a symlink', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0357.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.omnisecure.com/security-alert.html'}, {'name': '5452', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5452'}, {'name': 'httprotect-protected-file-symlink(6880)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6880'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1172?


Explain the CVE ID: What does the identifier CVE-2001-1173 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1173.

Vulnerability in MasqMail before 0.1.15 allows local users to gain privileges via piped aliases.


Provide references for further information: Can you share references or external links related to CVE-2001-1173?

{'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://innominate.org/oku/masqmail/ChangeLog-stable'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1173?


Explain the CVE ID: What does the identifier CVE-2001-1174 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1174.

Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header.


Provide references for further information: Can you share references or external links related to CVE-2001-1174?

{'name': '5451', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5451'}, {'name': 'RHSA-2001:091', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-091.html'}, {'name': 'elm-messageid-bo(6852)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6852'}, {'name': 'MDKSA-2001:067', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-067.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1174?


Explain the CVE ID: What does the identifier CVE-2001-1175 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1175.

vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing.


Provide references for further information: Can you share references or external links related to CVE-2001-1175?

{'name': 'vipw-world-readable-files(6851)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6851'}, {'name': '3036', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3036'}, {'name': 'RHSA-2001:132', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-132.html'}, {'name': 'RHSA-2001:095', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-095.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1175?


Explain the CVE ID: What does the identifier CVE-2001-1176 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1176.

Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection.


Provide references for further information: Can you share references or external links related to CVE-2001-1176?

{'name': '3021', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3021'}, {'name': 'fw1-management-format-string(6849)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6849'}, {'name': '1901', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1901'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.checkpoint.com/techsupport/alerts/format_strings.html'}, {'name': '20010712 VPN-1/FireWall-1 Format Strings Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0209.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1176?


Explain the CVE ID: What does the identifier CVE-2001-1177 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1177.

ml85p in Samsung ML-85G GDI printer driver before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.


Provide references for further information: Can you share references or external links related to CVE-2001-1177?

{'name': '3008', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3008'}, {'name': 'samsung-printer-temp-symlink(6845)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6845'}, {'name': '20010717 Samsung ML-85G Printer Linux Helper/Driver Binary Exploit (Mandrake: ghostscript package)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0284.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1177?


Explain the CVE ID: What does the identifier CVE-2001-1178 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1178.

Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable.


Provide references for further information: Can you share references or external links related to CVE-2001-1178?

{'name': '20010711 suid xman 3.1.6 overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0234.html'}, {'name': '3030', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3030'}, {'name': 'xfree86-xman-manpath-bo(6853)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6853'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1178?


Explain the CVE ID: What does the identifier CVE-2001-1179 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1179.

xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters.


Provide references for further information: Can you share references or external links related to CVE-2001-1179?

{'name': '20010717 xman (suid) exploit, made easier.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/197498'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1179?


Explain the CVE ID: What does the identifier CVE-2001-1180 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1180.

FreeBSD 4.3 does not properly clear shared signal handlers when executing a process, which allows local users to gain privileges by calling rfork with a shared signal handler, having the child process execute a setuid program, and sending a signal to the child.


Provide references for further information: Can you share references or external links related to CVE-2001-1180?

{'name': 'L-111', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/l-111.shtml'}, {'name': 'bsd-rfork-signal-handlers(6829)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6829'}, {'name': '1897', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1897'}, {'name': '20010710 FreeBSD 4.3 local root, yet Linux and *BSD much better than Windows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0179.html'}, {'name': 'FreeBSD-SA-01:42', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:42.signal.v1.1.asc'}, {'name': 'VU#943633', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/943633'}, {'name': '3007', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3007'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1180?


Explain the CVE ID: What does the identifier CVE-2001-1181 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1181.

Dynamically Loadable Kernel Module (dlkm) static kernel symbol table in HP-UX 11.11 is not properly configured, which allows local users to gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2001-1181?

{'name': 'oval:org.mitre.oval:def:5479', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5479'}, {'name': 'hpux-dlkm-gain-privileges(6861)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6861'}, {'name': 'L-115', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/l-115.shtml'}, {'name': 'HPSBUX0107-159', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/hp/2001-q3/0013.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1181?


Explain the CVE ID: What does the identifier CVE-2001-1182 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1182.

Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2001-1182?

{'name': 'oval:org.mitre.oval:def:5657', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5657'}, {'name': 'HPSBUX0107-160', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/hp/2001-q3/0014.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1182?


Explain the CVE ID: What does the identifier CVE-2001-1183 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1183.

PPTP implementation in Cisco IOS 12.1 and 12.2 allows remote attackers to cause a denial of service (crash) via a malformed packet.


Provide references for further information: Can you share references or external links related to CVE-2001-1183?

{'name': '802', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/802'}, {'name': 'VU#656315', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/656315'}, {'name': 'cisco-ios-pptp-dos(6835)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6835'}, {'name': '20010712 Cisco IOS PPTP Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/PPTP-vulnerability-pub.html'}, {'name': '3022', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3022'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1183?


Explain the CVE ID: What does the identifier CVE-2001-1184 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1184.

wrshdsp.exe in Denicomp Winsock RSHD/NT 2.21.00 and earlier allows remote attackers to cause a denial of service (CPU consumption) via (1) in 2.20.00 and earlier, an invalid port number such as a negative number, which causes a connection attempt to that port and all ports below 1024, and (2) in 2.21.00, a port number of 1024.


Provide references for further information: Can you share references or external links related to CVE-2001-1184?

{'name': '20011208 Winsock RSHD/NT 2.20.00 CPU overusage when invalid data is send', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/244580'}, {'name': '3659', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3659'}, {'name': '20011213 WRSHDNT 2.21.00 CPU overusage', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/245405'}, {'name': 'winsock-rshdnt-error-dos(7694)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7694.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.denicomp.com/rshdnt.htm'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1184?


Explain the CVE ID: What does the identifier CVE-2001-1185 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1185.

Some AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow a local user to overwrite memory of the new process and gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2001-1185?

{'name': 'bsd-aio-overwrite-memory(7693)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7693.php'}, {'name': '20011210 AIO vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/244583'}, {'name': '3661', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3661'}, {'name': '2001', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2001'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1185?


Explain the CVE ID: What does the identifier CVE-2001-1186 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1186.

Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than the size of the request, which prevents IIS from timing out the connection.


Provide references for further information: Can you share references or external links related to CVE-2001-1186?

{'name': '20011211 Microsoft IIS/5 bogus Content-length bug.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/244892'}, {'name': '20011212 Microsoft IIS/5.0 Content-Length DoS (proved)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/245100'}, {'name': '20011211 Microsoft IIS/5 bogus Content-length bug Memory attack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/244931'}, {'name': '3667', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3667'}, {'name': 'iis-false-content-length-dos(7691)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7691.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1186?


Explain the CVE ID: What does the identifier CVE-2001-1187 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1187.

csvform.pl 0.1 allows remote attackers to execute arbitrary commands via metacharacters in the file parameter.


Provide references for further information: Can you share references or external links related to CVE-2001-1187?

{'name': 'csvform-cgi-execute-commands(7692)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7692.php'}, {'name': '3668', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3668'}, {'name': '20011211 CSVForm (Perl CGI) Remote Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/244908'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1187?


Explain the CVE ID: What does the identifier CVE-2001-1188 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1188.

mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote servers by modifying the sendto, email, server, subject, and resulturl hidden form fields.


Provide references for further information: Can you share references or external links related to CVE-2001-1188?

{'name': '20011211 SPAMMERS DELIGHT: as feeble as feeble can be', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/244909'}, {'name': '3669', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3669'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1188?


Explain the CVE ID: What does the identifier CVE-2001-1189 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1189.

IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script.


Provide references for further information: Can you share references or external links related to CVE-2001-1189?

{'name': '3682', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3682'}, {'name': 'websphere-java-plaintext-passwords(7698)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7698.php'}, {'name': '20011213 IBM WebSphere on UNIX security alert !', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/245324'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1189?


Explain the CVE ID: What does the identifier CVE-2001-1190 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1190.

The default PAM files included with passwd in Mandrake Linux 8.1 do not support MD5 passwords, which could result in a lower level of password security than intended.


Provide references for further information: Can you share references or external links related to CVE-2001-1190?

{'name': 'linux-passwd-weak-encryption(7706)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7706.php'}, {'name': '3683', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3683'}, {'name': 'MDKSA-2001:091', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-091.php3'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1190?


Explain the CVE ID: What does the identifier CVE-2001-1191 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1191.

WebSeal in IBM Tivoli SecureWay Policy Director 3.8 allows remote attackers to cause a denial of service (crash) via a URL that ends in %2e.


Provide references for further information: Can you share references or external links related to CVE-2001-1191?

{'name': '20011211 Webseal 3.8', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/245283'}, {'name': '3685', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3685'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1191?


Explain the CVE ID: What does the identifier CVE-2001-1192 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1192.

Citrix Independent Computing Architecture (ICA) Client for Windows 6.1 allows remote malicious web sites to execute arbitrary code via a .ICA file, which is downloaded and automatically executed by the client.


Provide references for further information: Can you share references or external links related to CVE-2001-1192?

{'name': '20011213 Kikkert Security Advisory: Potentially serious security flaw in Citrix Client', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/245342'}, {'name': 'citrix-ica-gain-root(7697)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7697'}, {'name': '3688', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3688'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1192?


Explain the CVE ID: What does the identifier CVE-2001-1193 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1193.

Directory traversal vulnerability in EFTP 2.0.8.346 allows local users to read directories via a ... (modified dot dot) in the CWD command.


Provide references for further information: Can you share references or external links related to CVE-2001-1193?

{'name': '3691', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3691'}, {'name': '2003', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2003'}, {'name': 'eftp-dot-directory-traversal(7699)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7699'}, {'name': 'VU#413875', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/413875'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.eftp.org/releasehistory.html'}, {'name': '20011213 EFTP 2.0.8.346 directory content disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/245393'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1193?


Explain the CVE ID: What does the identifier CVE-2001-1194 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1194.

Zyxel Prestige 681 and 1600 SDSL Routers allow remote attackers to cause a denial of service via malformed packets with (1) an IP length less than actual packet size, or (2) fragmented packets whose size exceeds 64 kilobytes after reassembly.


Provide references for further information: Can you share references or external links related to CVE-2001-1194?

{'name': '20011218 Re: Zyxel Prestige 681 and 1600 (possibly other?) remote DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-12/0190.html'}, {'name': 'prestige-dsl-packet-length-dos(7704)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7704'}, {'name': '20011214 Zyxel Prestige 681 and 1600 (possibly other?) remote DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-12/0140.html'}, {'name': '3695', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3695'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1194?


Explain the CVE ID: What does the identifier CVE-2001-1195 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1195.

Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, which allows remote attackers to gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2001-1195?

{'name': '20011215 Novell Groupwise servlet gateway default username and password', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/245871'}, {'name': 'groupwise-servlet-manager-default(7701)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7701.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/searchtid.cgi?/10067329.htm'}, {'name': '3697', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3697'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1195?


Explain the CVE ID: What does the identifier CVE-2001-1196 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1196.

Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' (dot dot) in the argument.


Provide references for further information: Can you share references or external links related to CVE-2001-1196?

{'name': 'webmin-dot-directory-traversal(7711)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7711.php'}, {'name': '20011217 webmin 0.91 ../.. problem', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/245980'}, {'name': '3698', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3698'}, {'name': '20011218 Re: webmin 0.91 ../.. problem', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=webmin-l&m=100865390306103&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1196?


Explain the CVE ID: What does the identifier CVE-2001-1197 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1197.

klprfax_filter in KDE2 KDEUtils allows local users to overwrite arbitrary files via a symlink attack on the klprfax.filter temporary file.


Provide references for further information: Can you share references or external links related to CVE-2001-1197?

{'name': 'kdeutils-klprfax-symlink(7700)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7700'}, {'name': '20011214 klprfax_filter symlink vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/245500'}, {'name': '3694', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3694'}, {'name': '20011214 Re: klprfax_filter symlink vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100837486611350&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1197?


Explain the CVE ID: What does the identifier CVE-2001-1198 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1198.

RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by specifying the target file in the -L option.


Provide references for further information: Can you share references or external links related to CVE-2001-1198?

{'name': 'hp-rlpd-create-log(7729)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7729.php'}, {'name': '20011215 HP-UX setuid rlpdaemon induced to make illicit file writes', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/245690'}, {'name': '3701', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3701'}, {'name': 'oval:org.mitre.oval:def:5763', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5763'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1198?


Explain the CVE ID: What does the identifier CVE-2001-1199 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1199.

Cross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g, when debug mode is enabled, allows remote attackers to execute Javascript on other clients via the cart_id parameter.


Provide references for further information: Can you share references or external links related to CVE-2001-1199?

{'name': '20011217 Agoracgi v3.3e Cross Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/246044'}, {'name': 'agora-cgi-css(7708)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7708.php'}, {'name': '3702', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3702'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.agoracgi.com/security.html'}, {'name': '698', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/698'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1199?


Explain the CVE ID: What does the identifier CVE-2001-1200 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1200.

Microsoft Windows XP allows local users to bypass a locked screen and run certain programs that are associated with Hot Keys.


Provide references for further information: Can you share references or external links related to CVE-2001-1200?

{'name': 'winxp-hotkey-execute-programs(7713)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7713.php'}, {'name': '20011217 Hot keys permissions bypass under XP', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/246014'}, {'name': '3703', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3703'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1200?


Explain the CVE ID: What does the identifier CVE-2001-1201 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1201.

Buffer overflow in wmcube-gdk for WMCube/GDK 0.98 allows local users to execute arbitrary code via long lines in the object description file.


Provide references for further information: Can you share references or external links related to CVE-2001-1201?

{'name': '20011217 New Advisory + Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100863301405266&w=2'}, {'name': 'wmcubegdk-object-file-bo(7720)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7720.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ne.jp/asahi/linux/timecop/software/wmcube-gdk-0.98p2.tar.gz'}, {'name': '20011218 wmcube-gdk is vulnerable to a local exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/246273'}, {'name': '3706', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3706'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1201?


Explain the CVE ID: What does the identifier CVE-2001-1202 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1202.

Cross-site scripting vulnerability in DeleGate 7.7.0 and 7.7.1 does not quote scripting commands within a "403 Forbidden" error page, which allows remote attackers to execute arbitrary Javascript on other clients via a URL that generates an error.


Provide references for further information: Can you share references or external links related to CVE-2001-1202?

{'name': '3749', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3749'}, {'name': '20011228 DeleGate Cross Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100956050432351&w=2'}, {'name': 'delegate-proxy-css(7745)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7745.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1202?


Explain the CVE ID: What does the identifier CVE-2001-1203 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1203.

Format string vulnerability in gpm-root in gpm 1.17.8 through 1.17.18 allows local users to gain root privileges.


Provide references for further information: Can you share references or external links related to CVE-2001-1203?

{'name': 'linux-gpm-format-string(7748)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7748'}, {'name': 'DSA-095', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-095'}, {'name': '3750', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3750'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1203?


Explain the CVE ID: What does the identifier CVE-2001-1204 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1204.

Directory traversal vulnerability in phprocketaddin in Total PC Solutions PHP Rocket Add-in for FrontPage 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter.


Provide references for further information: Can you share references or external links related to CVE-2001-1204?

{'name': 'phprocket-directory-traversal(7749)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7749'}, {'name': '3751', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3751'}, {'name': '20011228 PHP Rocket Add-in (file transversal vulnerability)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/247559'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1204?


Explain the CVE ID: What does the identifier CVE-2001-1205 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1205.

Directory traversal vulnerability in lastlines.cgi for Last Lines 2.0 allows remote attackers to read arbitrary files via '..' sequences in the $error_log variable.


Provide references for further information: Can you share references or external links related to CVE-2001-1205?

{'name': '20011230 lastlines.cgi path traversal and command execution vulns', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100975978324723&w=2'}, {'name': '3754', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3754'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1205?


Explain the CVE ID: What does the identifier CVE-2001-1206 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1206.

Matrix CGI vault Last Lines 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the $error_log variable.


Provide references for further information: Can you share references or external links related to CVE-2001-1206?

{'name': '3755', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3755'}, {'name': '20011230 lastlines.cgi path traversal and command execution vulns', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100975978324723&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1206?


Explain the CVE ID: What does the identifier CVE-2001-1207 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1207.

Buffer overflows in DayDream BBS 2.9 through 2.13 allow remote attackers to possibly execute arbitrary code via the control codes (1) ~#MC, (2) ~#TF, or (3) ~#RA.


Provide references for further information: Can you share references or external links related to CVE-2001-1207?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cs.uku.fi/~hlyytine/daydream-2.11/ChangeLog'}, {'name': '3757', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3757'}, {'name': 'daydream-bbs-control-code-bo(7755)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7755.php'}, {'name': '20011230 DayDream BBS buffer overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/247708'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1207?


Explain the CVE ID: What does the identifier CVE-2001-1208 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1208.

Format string vulnerability in DayDream BBS allows remote attackers to execute arbitrary code via format string specifiers in a file containing a ~#RA control code.


Provide references for further information: Can you share references or external links related to CVE-2001-1208?

{'name': '20011231 Daydream BBS Format strings issue.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100977623710528&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1208?


Explain the CVE ID: What does the identifier CVE-2001-1209 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1209.

Directory traversal vulnerability in zml.cgi allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.


Provide references for further information: Can you share references or external links related to CVE-2001-1209?

{'name': 'zml-cgi-directory-traversal(7751)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7751.php'}, {'name': '20011231 [VulnWatch] blackshell2: zml.cgi remote exploit', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0086.html'}, {'name': '20011231 blackshell2: zml.cgi remote exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/bugtraq/2001/Dec/0306.html'}, {'name': '3759', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3759'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.jero.cc/zml/zml.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1209?


Explain the CVE ID: What does the identifier CVE-2001-1210 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1210.

Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must ship without SNMP access restrictions, which can allow remote attackers to read and write information to the MIB using arbitrary community strings.


Provide references for further information: Can you share references or external links related to CVE-2001-1210?

{'name': '20011230 Possible security problem with Cisco ubr900 series routers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-12/0297.html'}, {'name': '20020103 Security Problem in Cisco ubr900 Series Routers', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0002.html'}, {'name': 'cisco-docsis-default-strings(7806)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7806.php'}, {'name': '3758', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3758'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1210?


Explain the CVE ID: What does the identifier CVE-2001-1211 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1211.

Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same server via the (1) aliasadmin or (2) listadm1 CGI programs, which do not properly verify that an administrator is the administrator for the target domain.


Provide references for further information: Can you share references or external links related to CVE-2001-1211?

{'tags': ['x_refsource_MISC'], 'url': 'http://support.ipswitch.com/kb/IM-20011219-DM01.htm'}, {'name': '3766', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3766'}, {'tags': ['x_refsource_MISC'], 'url': 'http://support.ipswitch.com/kb/IM-20020301-DM02.htm'}, {'name': 'imail-admin-domain-change(7752)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7752.php'}, {'name': '20011231 IMail Web Service User Aliases / Mailing Lists Admin Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/247786'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1211?


Explain the CVE ID: What does the identifier CVE-2001-1212 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1212.

Cross-site scripting vulnerability in catgy.cgi for Aktivate 1.03 allows remote attackers to execute arbitrary Javascript via the desc parameter.


Provide references for further information: Can you share references or external links related to CVE-2001-1212?

{'name': 'aktivate-shopping-css(7717)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7717.php'}, {'name': '3714', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3714'}, {'name': '20011218 Aktivate Shopping System Cross Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/246274'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1212?


Explain the CVE ID: What does the identifier CVE-2001-1213 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1213.

The default configuration of DataWizard FtpXQ 2.0 and 2.1 includes a default username and password, which allows remote attackers to read and write arbitrary files in the root folder.


Provide references for further information: Can you share references or external links related to CVE-2001-1213?

{'name': '3716', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3716'}, {'name': '20011218 FTPXQ default install read/write capabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/246285'}, {'name': 'ftpxq-default-permissions(7715)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7715.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1213?


Explain the CVE ID: What does the identifier CVE-2001-1214 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1214.

manual.php in Marcus S. Xenakis Unix Manual 1.0 allows remote attackers to execute arbitrary code via a URL that contains shell metacharacters.


Provide references for further information: Can you share references or external links related to CVE-2001-1214?

{'name': 'unixmanual-php-command-execution(7719)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7719.php'}, {'name': 'VU#672419', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/672419'}, {'name': '3718', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3718'}, {'name': '20011215 *ALERT* "Unix Manual" PHP-Script allows arbitrary code execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/247332'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1214?


Explain the CVE ID: What does the identifier CVE-2001-1215 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1215.

Format string vulnerability in PFinger 0.7.5 through 0.7.7 allows remote attackers to execute arbitrary code via format string specifiers in a .plan file.


Provide references for further information: Can you share references or external links related to CVE-2001-1215?

{'name': 'pfinger-plan-format-string(7742)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7742.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.xelia.ch/unix/pfinger/ChangeLog'}, {'name': '3725', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3725'}, {'name': '20011220 [CERT-intexxia] pfinger Format String Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/246656'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1215?


Explain the CVE ID: What does the identifier CVE-2001-1216 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1216.

Buffer overflow in PL/SQL Apache module in Oracle 9i Application Server allows remote attackers to execute arbitrary code via a long request for a help page.


Provide references for further information: Can you share references or external links related to CVE-2001-1216?

{'name': 'VU#500203', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/500203'}, {'name': 'oracle-appserver-modplsql-bo(7727)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7727.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/modplsql.pdf'}, {'name': '3726', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3726'}, {'name': '20011221 Buffer Overflow in Oracle 9iAS (#NISR20122001)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/246663'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1216?


Explain the CVE ID: What does the identifier CVE-2001-1217 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1217.

Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive information via a double encoded URL with .. (dot dot) sequences.


Provide references for further information: Can you share references or external links related to CVE-2001-1217?

{'name': '3727', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3727'}, {'name': 'VU#758483', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/758483'}, {'name': 'oracle-appserver-modplsql-traversal(7728)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7728.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/modplsql.pdf'}, {'name': '20011221 Buffer Overflow in Oracle 9iAS (#NISR20122001)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/246663'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1217?


Explain the CVE ID: What does the identifier CVE-2001-1218 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1218.

Microsoft Internet Explorer for Unix 5.0SP1 allows local users to possibly cause a denial of service (crash) in CDE or the X server on Solaris 2.6 by rapidly scrolling Chinese characters or maximizing the window.


Provide references for further information: Can you share references or external links related to CVE-2001-1218?

{'name': '20011220 E5 (SP1) crash the X server on Solaris2.6 chinese edition', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/246611'}, {'name': '3729', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3729'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1218?


Explain the CVE ID: What does the identifier CVE-2001-1219 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1219.

Microsoft Internet Explorer 6.0 and earlier allows malicious website operators to cause a denial of service (client crash) via JavaScript that continually refreshes the window via self.location.


Provide references for further information: Can you share references or external links related to CVE-2001-1219?

{'name': '3730', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3730'}, {'name': '20011220 MSIE DoS Using javascript', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/246649'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1219?


Explain the CVE ID: What does the identifier CVE-2001-1220 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1220.

D-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point stores the administrative password in plaintext in the default Management Information Base (MIB), which allows remote attackers to gain administrative privileges.


Provide references for further information: Can you share references or external links related to CVE-2001-1220?

{'name': '20011221 D-Link DWL-1000AP can be compromised because of SNMP configuration', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/246849'}, {'name': 'dlink-ap-public-mib(7733)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7733.php'}, {'name': '3735', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3735'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1220?


Explain the CVE ID: What does the identifier CVE-2001-1221 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1221.

D-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point uses a default SNMP community string of 'public' which allows remote attackers to gain sensitive information.


Provide references for further information: Can you share references or external links related to CVE-2001-1221?

{'name': '20011221 D-Link DWL-1000AP can be compromised because of SNMP configuration', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/246849'}, {'name': '3736', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3736'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1221?


Explain the CVE ID: What does the identifier CVE-2001-1222 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1222.

Plesk Server Administrator (PSA) 1.0 allows remote attackers to obtain PHP source code via an HTTP request containing the target's IP address and a valid account name for the domain.


Provide references for further information: Can you share references or external links related to CVE-2001-1222?

{'name': '20011221 twlc advisory: plesk (psa) allows reading of .php files', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/246861'}, {'name': '3737', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3737'}, {'name': 'psa-php-reveal-source(7735)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7735.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1222?


Explain the CVE ID: What does the identifier CVE-2001-1223 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1223.

The web administration server for ELSA Lancom 1100 Office does not require authentication, which allows arbitrary remote attackers to gain administrative privileges by connecting to the server.


Provide references for further information: Can you share references or external links related to CVE-2001-1223?

{'name': '20011226 Phoenix Sistemi Security Advisory: ELSA Lancom 1100 Office Security Problems', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/247274'}, {'name': 'elsa-lancom-web-administration(7739)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7739.php'}, {'name': '3746', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3746'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1223?


Explain the CVE ID: What does the identifier CVE-2001-1224 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1224.

get_input in adrotate.pm for Les VanBrunt AdRotate Pro 2.0 allows remote attackers to modify the database and possibly execute arbitrary commands via a SQL code injection attack.


Provide references for further information: Can you share references or external links related to CVE-2001-1224?

{'name': '3739', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3739'}, {'name': 'adrotate-sql-execute-commands(7736)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7736.php'}, {'name': '20011223 GOBBLES CGI MARATHON #001', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/246994'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1224?


Explain the CVE ID: What does the identifier CVE-2001-1225 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1225.

Hughes Technology Mini SQL 2.0.10 through 2.0.12 allows local users to cause a denial of service by creating a very large array in a table, which causes miniSQL to crash when the table is queried.


Provide references for further information: Can you share references or external links related to CVE-2001-1225?

{'name': '20011226 msql DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/247222'}, {'name': 'msql-char-array-dos(7746)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7746.php'}, {'name': '3742', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3742'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1225?


Explain the CVE ID: What does the identifier CVE-2001-1226 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1226.

AdCycle 1.17 and earlier allow remote attackers to modify SQL queries, which are not properly sanitized before being passed to the MySQL database.


Provide references for further information: Can you share references or external links related to CVE-2001-1226?

{'name': '20011225 GOBBLES CGI MARATHON #002', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/247126'}, {'name': 'adcycle-modify-sql-query(7762)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7762.php'}, {'name': '3741', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3741'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1226?


Explain the CVE ID: What does the identifier CVE-2001-1227 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1227.

Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.


Provide references for further information: Can you share references or external links related to CVE-2001-1227?

{'name': 'MDKSA-2001:080', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-080.php3'}, {'name': 'RHSA-2001:115', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-115.html'}, {'name': '3425', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3425'}, {'name': 'zope-fmt-access-methods(7271)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7271'}, {'name': 'RHSA-2001:072', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-072.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1227?


Explain the CVE ID: What does the identifier CVE-2001-1228 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1228.

Buffer overflows in gzip 1.3x, 1.2.4, and other versions might allow attackers to execute code via a long file name, possibly remotely if gzip is run on an FTP server.


Provide references for further information: Can you share references or external links related to CVE-2001-1228?

{'name': '20011230 gzip bug w/ patch..', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/247717'}, {'name': 'NetBSD-SA2002-002', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-002.txt.asc'}, {'name': 'gzip-long-filename-bo(7882)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7882.php'}, {'name': '3712', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3712'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1228?


Explain the CVE ID: What does the identifier CVE-2001-1229 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1229.

Buffer overflows in (1) Icecast before 1.3.9 and (2) libshout before 1.0.4 allow remote attackers to cause a denial of service (crash) and execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2001-1229?

{'name': 'RHSA-2002:063', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-063.html'}, {'name': 'CLA-2001:387', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000387'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.xiph.org/archives/icecast/0074.html'}, {'name': '20010312 Icecast / Libshout remote vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98438880622976&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1229?


Explain the CVE ID: What does the identifier CVE-2001-1230 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1230.

Buffer overflows in Icecast before 1.3.10 allow remote attackers to cause a denial of service (crash) and execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2001-1230?

{'name': 'RHSA-2002:063', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-063.html'}, {'name': 'DSA-089', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-089'}, {'name': '20010313 More Icecast remote vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98455723123298&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1230?


Explain the CVE ID: What does the identifier CVE-2001-1231 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1231.

GroupWise 5.5 and 6 running in live remote or smart caching mode allows remote attackers to read arbitrary users' mailboxes by extracting usernames and passwords from sniffed network traffic, as addressed by the "Padlock" fix.


Provide references for further information: Can you share references or external links related to CVE-2001-1231?

{'name': '20010814 Fwd: Security Alert: Groupwise - Action Required', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/204672'}, {'name': '3189', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3189'}, {'name': 'novell-groupwise-admin-privileges(6998)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6998'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/padlock/details.htm'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1231?


Explain the CVE ID: What does the identifier CVE-2001-1232 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1232.

GroupWise WebAccess 5.5 with directory indexing enabled allows a remote attacker to view arbitrary directory contents via an HTTP request with a lowercase "get".


Provide references for further information: Can you share references or external links related to CVE-2001-1232?

{'name': 'netware-get-directory-listing(6988)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6988'}, {'name': '20010815 Groupwise Webaccess, NetWare web server, and Novell', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/204875'}, {'name': '3188', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3188'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1232?


Explain the CVE ID: What does the identifier CVE-2001-1233 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1233.

Netware Enterprise Web Server 5.1 running GroupWise WebAccess 5.5 with Novell Directory Services (NDS) enabled allows remote attackers to enumerate user names, group names and other system information by accessing ndsobj.nlm.


Provide references for further information: Can you share references or external links related to CVE-2001-1233?

{'name': '20010815 Groupwise Webaccess, NetWare web server, and Novell', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/204875'}, {'name': 'netware-nds-information-leak(6987)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6987'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1233?


Explain the CVE ID: What does the identifier CVE-2001-1234 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1234.

Bharat Mediratta Gallery PHP script before 1.2.1 allows remote attackers to execute arbitrary code by including files from remote web sites via an HTTP request that modifies the includedir variable.


Provide references for further information: Can you share references or external links related to CVE-2001-1234?

{'name': '20011002 results of semi-automatic source code audit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html'}, {'name': 'php-includedir-code-execution(7215)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7215.php'}, {'name': '3397', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3397'}, {'name': '1967', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1967'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://prdownloads.sourceforge.net/gallery/gallery-1.2.5.tar.gz'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1234?


Explain the CVE ID: What does the identifier CVE-2001-1235 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1235.

pSlash PHP script 0.7 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable.


Provide references for further information: Can you share references or external links related to CVE-2001-1235?

{'name': '20011002 results of semi-automatic source code audit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html'}, {'name': 'php-includedir-code-execution(7215)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7215.php'}, {'name': 'VU#847803', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/847803'}, {'name': '3395', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3395'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1235?


Explain the CVE ID: What does the identifier CVE-2001-1236 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1236.

myphpPagetool PHP script 0.4.3-1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable.


Provide references for further information: Can you share references or external links related to CVE-2001-1236?

{'name': '20011002 results of semi-automatic source code audit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html'}, {'name': 'php-includedir-code-execution(7215)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7215.php'}, {'name': 'VU#847803', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/847803'}, {'name': '3394', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3394'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1236?


Explain the CVE ID: What does the identifier CVE-2001-1237 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1237.

Phormation PHP script 0.9.1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the phormationdir variable.


Provide references for further information: Can you share references or external links related to CVE-2001-1237?

{'name': '20011002 results of semi-automatic source code audit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html'}, {'name': 'php-includedir-code-execution(7215)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7215.php'}, {'name': 'VU#847803', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/847803'}, {'name': '3393', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3393'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.peaceworks.ca/phormation/phormation-0.9.2.tar.gz'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1237?


Explain the CVE ID: What does the identifier CVE-2001-1238 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1238.

Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named (1) winlogon.exe, (2) csrss.exe, (3) smss.exe and (4) services.exe via the Process tab which could allow local users to install Trojan horses that cannot be stopped with the Task Manager.


Provide references for further information: Can you share references or external links related to CVE-2001-1238?

{'name': '20010716 W2k: Unkillable Applications', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/197195'}, {'name': '3033', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3033'}, {'name': 'win2k-taskmanager-unkillable-process(6919)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6919'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1238?


Explain the CVE ID: What does the identifier CVE-2001-1239 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1239.

PowerNet IX allows remote attackers to cause a denial of service via a port scan.


Provide references for further information: Can you share references or external links related to CVE-2001-1239?

{'name': '2992', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2992'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1239?


Explain the CVE ID: What does the identifier CVE-2001-1240 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1240.

The default configuration of sudo in Engarde Secure Linux 1.0.1 allows any user in the admin group to run certain commands that could be leveraged to gain full root access.


Provide references for further information: Can you share references or external links related to CVE-2001-1240?

{'name': 'ESA-20010711-02', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/other_advisory-1493.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1240?


Explain the CVE ID: What does the identifier CVE-2001-1241 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1241.

Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, which allows remote attackers to execute arbitrary commands by directing Un-CGI to a document that begins with "#!"  and the desired program name.


Provide references for further information: Can you share references or external links related to CVE-2001-1241?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.midwinter.com/~koreth/uncgi-changes.html'}, {'name': 'uncgi-unexecutable-cgi(6847)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/6847.php'}, {'name': '3057', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3057'}, {'name': '20010718 Re: [Khamba Staring <purrcat@edoropolis.org>] multiple', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0349.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.midwinter.com/~koreth/uncgi.html'}, {'name': '20010717 multiple vulnerabilities in un-cgi', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0287.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1241?


Explain the CVE ID: What does the identifier CVE-2001-1242 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1242.

Directory traversal vulnerability in Un-CGI 1.9 and earlier allows remote attackers to execute arbitrary code via a .. (dot dot) in an HTML form.


Provide references for further information: Can you share references or external links related to CVE-2001-1242?

{'name': '20010718 Re: [Khamba Staring <purrcat@edoropolis.org>] multiple vulnerabilities in un-cgi', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0349.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.midwinter.com/~koreth/uncgi-changes.html'}, {'name': 'uncgi-dot-directory-traversal(6846)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/6846.php'}, {'name': '3056', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3056'}, {'name': '20010717 multiple vulnerabilities in un-cgi', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0287.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2001-1242?


Explain the CVE ID: What does the identifier CVE-2001-1243 mean in the context of cybersecurity?