CVE-2001-1456
https://notcve.org/view.php?id=CVE-2001-1456
Buffer overflow in the (1) smap/smapd and (2) CSMAP daemons for Gauntlet Firewall 5.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted mail message. • ftp://patches.sgi.com/support/free/security/advisories/20011104-01-I http://www.cert.org/advisories/CA-2001-25.html http://www.kb.cert.org/vuls/id/206723 http://www.securityfocus.com/bid/3290 https://exchange.xforce.ibmcloud.com/vulnerabilities/7088 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2001-1320 – Network Associates PGP KeyServer 7 - LDAP Buffer Overflow
https://notcve.org/view.php?id=CVE-2001-1320
Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via exceptional BER encodings (possibly buffer overflows), as demonstrated by the PROTOS LDAPv3 test suite. • https://www.exploit-db.com/exploits/16823 http://ciac.llnl.gov/ciac/bulletins/l-116.shtml http://www.cert.org/advisories/CA-2001-18.html http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3 http://www.kb.cert.org/vuls/id/765256 http://www.kb.cert.org/vuls/id/JPLA-4WESNK http://www.securityfocus.com/bid/3046 https://exchange.xforce.ibmcloud.com/vulnerabilities/6900 •
CVE-2001-0265 – PGP 5.x/6.x/7.0 - ASCII Armor Parser Arbitrary File Creation
https://notcve.org/view.php?id=CVE-2001-0265
ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored file. • https://www.exploit-db.com/exploits/20738 http://www.atstake.com/research/advisories/2001/a040901-1.txt http://www.osvdb.org/1782 http://www.securityfocus.com/bid/2556 https://exchange.xforce.ibmcloud.com/vulnerabilities/6643 •
CVE-2001-0435
https://notcve.org/view.php?id=CVE-2001-0435
The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the passphrases of other share holders as they authenticate. • http://marc.info/?l=bugtraq&m=98691775527457&w=2 •
CVE-2001-0381
https://notcve.org/view.php?id=CVE-2001-0381
The OpenPGP PGP standard allows an attacker to determine the private signature key via a cryptanalytic attack in which the attacker alters the encrypted private key file and captures a single message signed with the signature key. • ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-017.0.txt http://archives.neohapsis.com/archives/bugtraq/2001-03/0252.html http://archives.neohapsis.com/archives/bugtraq/2001-03/0274.html http://archives.neohapsis.com/archives/bugtraq/2001-03/0311.html http://www.osvdb.org/11966 http://www.redhat.com/support/errata/RHSA-2001-063.html http://www.securityfocus.com/bid/2673 https://exchange.xforce.ibmcloud.com/vulnerabilities/6558 •