Archive
February 2002
Vulnerabilities first published in this month (UTC), newest first.
117 results · Feed
-
Unscored —
Legato Networker before 6.1 allows remote attackers to bypass access restrictions and gain privileges on the Networker …
-
Unscored —
RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM fi…
-
Unscored —
POP3Lite before 0.2.4 does not properly quote a . (dot) in an email message, which could allow a remote attacker to app…
-
Unscored —
Arkeia backup server 4.2.8-2 and earlier creates its database files with world-writable permissions, which could allow …
-
Unscored —
ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 uses insufficiently random data …
-
Unscored —
The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview i…
-
Unscored —
Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() f…
-
Unscored —
Buffer overflow in client for Half-Life 1.1.0.8 and earlier allows malicious remote servers to execute arbitrary code v…
-
Unscored —CVE-2001-0989 Public exploit
Buffer overflows in Pileup before 1.2 allows local users to gain root privileges via (1) long command line arguments, o…
-
Unscored —CVE-2001-0945 EPSS 20%
Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service …
-
Unscored —
Format string vulnerability in Network Solutions Rwhoisd 1.5.7.2 and earlier, when using syslog, allows remote attacker…
-
Unscored —
Internet Explorer 5.50.4134.0100 on Windows ME with "Prompt to allow cookies to be stored on your machine" enabled does…
-
Unscored —CVE-2001-0916 Public exploit
Buffer overflow in Berkeley parallel make (pmake) 2.1.33 and earlier allows a local user to gain root privileges via a …
-
Unscored —
SSIFilter in Allaire JRun 3.1, 3.0 and 2.3.3 allows remote attackers to obtain source code for Java server pages (.jsp)…
-
Unscored —CVE-2001-0933 Public exploit
Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls (LIST) command…
-
Unscored —
Directory traversal vulnerability in Nudester 1.10 and earlier allows remote attackers to read or write arbitrary files…
-
Unscored —CVE-2001-0931 Public exploit
Directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03 allows attackers to list or read arbitrary files an…
-
Unscored —
dbsnmp in Oracle 8.1.6 and 8.1.7 uses the ORACLE_HOME environment variable to find and execute the dbsnmp program, whic…
-
Unscored —
Directory traversal vulnerability in ACI 4d webserver allows remote attackers to read arbitrary files via a .. (dot dot…
-
Unscored —CVE-2001-0934 Public exploit
Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical path of the server root via the pwd comma…
-
Unscored —CVE-2001-0956 Public exploit
speechd 0.54 and earlier, with the Festival or rsynth speech synthesis package, allows attackers to execute arbitrary c…
-
Unscored —
Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to de…
-
Unscored —CVE-2001-0941 Public exploit
Buffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_…
-
Unscored —CVE-2001-0915 Public exploit
Format string vulnerability in Berkeley parallel make (pmake) 2.1.33 and earlier allows a local user to gain root privi…
-
Unscored —
Knox Arkeia server 4.2, and possibly other versions, installs its root user with a null password by default, which allo…
-
Unscored —CVE-2001-0991 Public exploit
Cross-site scripting vulnerability in Proxomitron Naoko-4 BetaFour and earlier allows remote attackers to execute arbit…
-
Unscored —
Buffer overflows in eManager plugin for Trend Micro InterScan VirusWall for NT 3.51 and 3.51J allow remote attackers to…
-
Unscored —
Internet Explorer 5.5 and 6 with the Q312461 (MS01-055) patch modifies the HTTP_USER_AGENT (UserAgent) information that…
-
Unscored —
Acme mini_httpd before 1.16 allows remote attackers to view sensitive files under the document root (such as .htpasswd)…
-
Unscored —
CITRIX Metaframe 1.8 logs the Client Address (IP address) that is provided by the client instead of obtaining it from t…
-
Unscored —
Buffer overflow in fbglyph.c in XFree86 before 4.2.0, related to glyph clipping for large origins, allows attackers to …
-
Unscored —
Linear key exchange process in High-bandwidth Digital Content Protection (HDCP) System allows remote attackers to acces…
-
Unscored —CVE-2001-0952 Public exploit
THQ Volition Red Faction Game allows remote attackers to cause a denial of service (hang) of a client or server via pac…
-
Unscored —
Directory traversal vulnerability in Livingston/Lucent RADIUS before 2.1.va.1 may allow attackers to read arbitrary fil…
-
Unscored —CVE-2001-1077 Public exploit
Buffer overflow in tt_printf function of rxvt 2.6.2 allows local users to gain privileges via a long (1) -T or (2) -nam…
-
Unscored —
Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code via format specifiers in…
-
Unscored —
The JetAdmin web interface for HP JetDirect does not set a password for the telnet interface when the admin password is…
-
Unscored —CVE-2001-1076 Public exploit
Buffer overflow in whodo in Solaris SunOS 5.5.1 through 5.8 allows local users to execute arbitrary code via a long (1)…
-
Unscored —CVE-2001-1009 Public exploit
Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwri…
-
Unscored —
Web-based configuration utility in Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap binds itself to port 80 …