Archive
February 2002
Vulnerabilities first published in this month (UTC), newest first.
117 results · Feed
-
Unscored —
Xcache 2.1 allows remote attackers to determine the absolute path of web server documents by requesting a URL that is n…
-
Unscored —
Vulnerability in screen before 3.9.10, related to a multi-attach error, allows local users to gain root privileges when…
-
Unscored —
Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MD…
-
Unscored —
Directory traversal vulnerability in Meteor FTP 1.0 allows remote attackers to read arbitrary files via (1) a .. (dot d…
-
Unscored —
HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could…
-
Unscored —
Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists …
-
Unscored —
Empris PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that set…
-
Unscored —
Directory traversal vulnerability in view_item CGI program in sglMerchant 1.0 allows remote attackers to read arbitrary…
-
Unscored —
login.gas.bat and other CGI scripts in Entrust getAccess allow remote attackers to execute Java programs, and possibly …
-
Unscored —
PHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix" variable when callin…
-
Unscored —CVE-2001-1000 Public exploit
rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to r…
-
Unscored —
Sage Software MAS 200 allows remote attackers to cause a denial of service by connecting to port 10000 and entering a s…
-
Unscored —
oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on…
-
Unscored —
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its pa…
-
Unscored —
CCCSoftware CCC PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request…
-
Unscored —
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a registr…
-
Unscored —
Trend Micro InterScan AppletTrap 2.0 does not properly filter URLs when they are modified in certain ways such as (1) u…
-
Unscored —
Transsoft Broker 5.9.5.0 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) fil…
-
Unscored —
Race condition in OpenBSD VFS allows local users to cause a denial of service (kernel panic) by (1) creating a pipe in …
-
Unscored —
The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to bypass access control (specified by…
-
Unscored —CVE-2001-1064 Public exploit
Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via mu…
-
Unscored —CVE-2001-1015 Public exploit
Buffer overflow in Snes9x 1.37, when installed setuid root, allows local users to gain root privileges via a long comma…
-
Unscored —
Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that gene…
-
Unscored —
eshop.pl in WebDiscount(e)shop allows remote attackers to execute arbitrary commands via shell metacharacters in the se…
-
Unscored —CVE-2001-1078 Public exploit
Format string vulnerability in flog function of eXtremail 1.1.9 and earlier allows remote attackers to gain root privil…
-
Unscored —CVE-2001-1044 Public exploit
Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does…
-
Unscored —
Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error.
-
Unscored —CVE-2001-1003 Public exploit
Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can re…
-
Unscored —
Lotus Domino web server 5.08 allows remote attackers to determine the internal IP address of the server when NAT is ena…
-
Unscored —CVE-2001-1045 Public exploit
Directory traversal vulnerability in basilix.php3 in Basilix Webmail 1.0.3beta and earlier allows remote attackers to r…
-
Unscored —
phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the st…
-
Unscored —
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a …
-
Unscored —
Cross-site scripting (CSS) vulnerability in gnut Gnutella client before 0.4.27 allows remote attackers to execute arbit…
-
Unscored —
Compaq TruCluster 1.5 allows remote attackers to cause a denial of service via a port scan from a system that does not …
-
Unscored —
The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to cause a denial of service (resource…
-
Unscored —
qpopper 4.01 with PAM based authentication on Red Hat systems generates different error messages when an invalid userna…
-
Unscored —
Dark Hart Portal (darkportal) PHP script allows remote attackers to include arbitrary files from remote web sites via a…