Archive
9 March 2002
Vulnerabilities first published on this day (UTC), newest first.
428 results · Feed
-
Unscored —
Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript in an about: URL, …
-
Unscored —
Oracle listener in Oracle 8i on Solaris allows remote attackers to cause a denial of service via a malformed connection…
-
Unscored —
Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU cons…
-
Unscored —CVE-2001-0965 Public exploit
glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument …
-
Unscored —CVE-2001-0658 EPSS 14%
Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remot…
-
Unscored —
NetScreen ScreenOS prior to 2.5r6 on the NetScreen-10 and Netscreen-100 can allow a local attacker to bypass the DMZ 'd…
-
Unscored —
Watchguard Firebox II allows remote attackers to cause a denial of service by establishing multiple connections and sen…
-
Unscored —
Cisco devices IOS 12.0 and earlier allow a remote attacker to cause a crash, or bad route updates, via malformed BGP up…
-
Unscored —
2.4.3-12 kernel in Red Hat Linux 7.1 Korean installation program sets the setting default umask for init to 000, which …
-
Unscored —
The #sinclude directive in Embedded Perl (ePerl) 2.2.14 and earlier allows a remote attacker to execute arbitrary code …
-
Unscored —
Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name …
-
Unscored —
Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitra…
-
Unscored —CVE-2001-0662 EPSS 23%
RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a…
-
Unscored —
PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in…
-
Unscored —CVE-2001-0830 Public exploit
6tunnel 0.08 and earlier does not properly close sockets that were initiated by a client, which allows remote attackers…
-
Unscored —
BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and…
-
Unscored —
Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access …
-
Unscored —
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the "fragment" keyword in an outgoing ACL, …
-
Unscored —
Race condition in the UFS and EXT2FS file systems in FreeBSD 4.2 and earlier, and possibly other operating systems, mak…
-
Unscored —CVE-2001-0680 Public exploit
Directory traversal vulnerability in ftpd in QPC QVT/Net 4.0 and AVT/Term 5.0 allows a remote attacker to traverse dire…
-
Unscored —CVE-2001-0595 Public exploit
Buffer overflow in the kcsSUNWIOsolf.so library in Solaris 7 and 8 allows local attackers to execute arbitrary commands…
-
Unscored —CVE-2001-0833 Public exploit
Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLE…
-
Unscored —
Format string vulnerability in the C runtime functions in SQL Server 7.0 and 2000 allows attackers to cause a denial of…
-
Unscored —CVE-2001-0265 Public exploit
ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malfo…
-
Unscored —
The default configuration of the Dr. Watson program in Windows NT and Windows 2000 generates user.dmp crash dump files …
-
Unscored —CVE-2001-0563 Public exploit
ElectroSystems Engineering Inc. ElectroComm 2.0 and earlier allows a remote attacker to create a denial of service via …
-
Unscored —CVE-2001-0122 Public exploit
Kernel leak in AfpaCache module of the Fast Response Cache Accelerator (FRCA) component of IBM HTTP Server 1.3.x and We…
-
Unscored —CVE-2001-0407 Public exploit
Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privile…
-
Unscored —
Eudora 5.0.2 allows a remote attacker to read arbitrary files via an email with the path of the target file in the "Att…
-
Unscored —
A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf funct…
-
Unscored —
Guardian Digital WebTool in EnGarde Secure Linux 1.0.1 allows restarted services to inherit some environmental variable…
-
Unscored —CVE-2001-0422 Public exploit
Buffer overflow in Xsun in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME envir…
-
Unscored —CVE-2001-0574 Public exploit
Directory traversal vulnerability in MP3Mystic prior to 1.04b3 allows a remote attacker to download arbitrary files via…
-
Unscored —
Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of i…
-
Unscored —
HP Event Correlation Service (ecsd) as included with OpenView Network Node Manager 6.1 allows a remote attacker to gain…
-
Unscored —
cookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to other user accounts by e…
-
Unscored —
opendir.php script in PHP-Nuke allows remote attackers to read arbitrary files by specifying the filename as an argumen…
-
Unscored —CVE-2001-0526 Public exploit
Buffer overflow in the Xview library as used by mailtool in Solaris 8 and earlier allows a local attacker to gain privi…
-
Unscored —
Cisco 6400 Access Concentrator Node Route Processor 2 (NRP2) 12.1DC card does not properly disable access when a passwo…
-
Unscored —
The FTP server on Cisco Content Service 11000 series switches (CSS) before WebNS 4.01B23s and WebNS 4.10B13s allows an …