Archive
March 2002
Vulnerabilities first published in this month (UTC), newest first.
570 results · Feed
-
Unscored —CVE-2002-0162 Public exploit
LogWatch before 2.5 allows local users to execute arbitrary code via a symlink attack on the logwatch temporary directo…
-
Unscored —CVE-2002-0077 EPSS 11%
Microsoft Internet Explorer 5.01, 5.5 and 6.0 treats objects invoked on an HTML page with the codebase property as part…
-
Unscored —
rpcbind in SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, allows remote attackers to cause a denial of se…
-
Unscored —
ZyXEL Prestige 642R and 642R-I routers do not filter the routers' Telnet and FTP ports on the external WAN interface fr…
-
Unscored —
Buffer overflow in uucp utilities in UnixWare 7 allows local users to execute arbitrary code via long command line argu…
-
Unscored —CVE-2001-1212 Public exploit
Cross-site scripting vulnerability in catgy.cgi for Aktivate 1.03 allows remote attackers to execute arbitrary Javascri…
-
Unscored —
AdCycle 1.17 and earlier allow remote attackers to modify SQL queries, which are not properly sanitized before being pa…
-
Unscored —
RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which cou…
-
Unscored —CVE-2001-1092 Public exploit
msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink att…
-
Unscored —
Multiple buffer overflows in programs used by scoadmin and sysadmsh in SCO OpenServer 5.0.6a and earlier allow local us…
-
Unscored —CVE-2001-1133 Public exploit
Vulnerability in a system call in BSDI 3.0 and 3.1 allows local users to cause a denial of service (reboot) in the kern…
-
Unscored —
manual.php in Marcus S. Xenakis Unix Manual 1.0 allows remote attackers to execute arbitrary code via a URL that contai…
-
Unscored —CVE-2001-1104 Public exploit
SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions.
-
Unscored —
load_prefs.php and supporting include files in SquirrelMail 1.0.4 and earlier do not properly initialize certain PHP va…
-
Unscored —
Microsoft Internet Explorer for Unix 5.0SP1 allows local users to possibly cause a denial of service (crash) in CDE or …
-
Unscored —CVE-2001-1122 Public exploit
Windows NT 4.0 SP 6a allows a local user with write access to winnt/system32 to cause a denial of service (crash in lsa…
-
Unscored —
Citrix Independent Computing Architecture (ICA) Client for Windows 6.1 allows remote malicious web sites to execute arb…
-
Unscored —CVE-2001-1115 Public exploit
generate.cgi in SIX-webboard 2.01 and before allows remote attackers to read arbitrary files via a dot dot (..) in the …
-
Unscored —
Dynamically Loadable Kernel Module (dlkm) static kernel symbol table in HP-UX 11.11 is not properly configured, which a…
-
Unscored —CVE-2001-1196 Public exploit
Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a…
-
Unscored —
Vulnerability in MasqMail before 0.1.15 allows local users to gain privileges via piped aliases.
-
Unscored —
The libsecurity library in HP-UX 11.04 (VVOS) allows attackers to cause a denial of service.
-
Unscored —
Buffer overflow in PL/SQL Apache module in Oracle 9i Application Server allows remote attackers to execute arbitrary co…
-
Unscored —
Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks…
-
Unscored —
Format string vulnerability in DayDream BBS allows remote attackers to execute arbitrary code via format string specifi…
-
Unscored —
Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and maili…
-
Unscored —CVE-2001-1127 Public exploit
Buffer overflow in Progress database 8.3D and 9.1C could allow a local user to execute arbitrary code via (1) _proapsv,…
-
Unscored —
Directory traversal vulnerability in lastlines.cgi for Last Lines 2.0 allows remote attackers to read arbitrary files v…
-
Unscored —
EFTP 2.0.7.337 stores user passwords in plaintext in the eftp2users.dat file.
-
Critical 9.8
Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote…
-
Unscored —
Vulnerability in cgiWebupdate.exe in Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.5.2 through 3.5.4 al…
-
Unscored —
Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive informatio…
-
Unscored —
BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by appending a …
-
Unscored —CVE-2001-1086 Public exploit
XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth…
-
Unscored —
D-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point stores the administrative password in plaintext in the…
-
Unscored —
The web administration server for ELSA Lancom 1100 Office does not require authentication, which allows arbitrary remot…
-
Unscored —
IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which a…
-
Unscored —
Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when comp…
-
Unscored —CVE-2001-1107 Public exploit
SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain …
-
Unscored —
D-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point uses a default SNMP community string of 'public' which…