Skip to content
OpenAdvisories

Archive

9 March 2002

Vulnerabilities first published on this day (UTC), newest first.

← February 2002 2002 / March /9 April 2002 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 78
  8. 8 
  9. 9428
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15131
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 303
  31. 31 
All Critical High Medium Low Exploited only Public exploit

116 results · Clear filters · Feed

  • Unscored —
    CVE-2001-0722 Public exploit EPSS 28%

    Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript in an about: URL, …

  • Unscored —
    CVE-2001-0965 Public exploit

    glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument …

  • Unscored —
    CVE-2001-0875 Public exploit EPSS 28%

    Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name …

  • Unscored —
    CVE-2001-0538 Public exploit EPSS 53%

    Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2001-0830 Public exploit

    6tunnel 0.08 and earlier does not properly close sockets that were initiated by a client, which allows remote attackers…

  • Unscored —
    CVE-2001-0779 Public exploit EPSS 62%

    Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access …

  • Unscored —
    CVE-2001-0680 Public exploit

    Directory traversal vulnerability in ftpd in QPC QVT/Net 4.0 and AVT/Term 5.0 allows a remote attacker to traverse dire…

  • Unscored —
    CVE-2001-0595 Public exploit

    Buffer overflow in the kcsSUNWIOsolf.so library in Solaris 7 and 8 allows local attackers to execute arbitrary commands…

  • Unscored —
    CVE-2001-0833 Public exploit

    Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLE…

  • Unscored —
    CVE-2001-0265 Public exploit

    ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malfo…

  • Unscored —
    CVE-2001-0563 Public exploit

    ElectroSystems Engineering Inc. ElectroComm 2.0 and earlier allows a remote attacker to create a denial of service via …

  • Unscored —
    CVE-2001-0122 Public exploit

    Kernel leak in AfpaCache module of the Fast Response Cache Accelerator (FRCA) component of IBM HTTP Server 1.3.x and We…

  • Unscored —
    CVE-2001-0407 Public exploit

    Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privile…

  • Unscored —
    CVE-2001-0422 Public exploit

    Buffer overflow in Xsun in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME envir…

  • Unscored —
    CVE-2001-0574 Public exploit

    Directory traversal vulnerability in MP3Mystic prior to 1.04b3 allows a remote attacker to download arbitrary files via…

  • Unscored —
    CVE-2001-0663 Public exploit EPSS 32%

    Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of i…

  • Unscored —
    CVE-2001-0526 Public exploit

    Buffer overflow in the Xview library as used by mailtool in Solaris 8 and earlier allows a local attacker to gain privi…

  • Unscored —
    CVE-2001-0522 Public exploit EPSS 14%

    Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain priv…

  • Unscored —
    CVE-2001-0675 Public exploit

    Rit Research Labs The Bat! 1.51 for Windows allows a remote attacker to cause a denial of service by sending an email t…

  • Unscored —
    CVE-2001-0987 Public exploit

    Cross-site scripting vulnerability in CGIWrap before 3.7 allows remote attackers to execute arbitrary Javascript on oth…

  • Unscored —
    CVE-2001-0626 Public exploit

    O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root dire…

  • Unscored —
    CVE-2001-0615 Public exploit

    Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker …

  • Unscored —
    CVE-2001-0803 Public exploit EPSS 86%

    Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows rem…

  • Unscored —
    CVE-2001-0507 Public exploit

    IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges …

  • Unscored —
    CVE-2001-0506 Public exploit EPSS 69%

    Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes…

  • Unscored —
    CVE-2001-0664 Public exploit EPSS 18%

    Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain …

  • Unscored —
    CVE-2001-0593 Public exploit

    Anaconda Partners Clipper 3.3 and earlier allows a remote attacker to read arbitrary files via a '..' (dot dot) attack …

  • Unscored —
    CVE-2001-0876 Public exploit EPSS 49%

    Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute ar…

  • Unscored —
    CVE-2001-0442 Public exploit

    Buffer overflow in Mercury MTA POP3 server for NetWare 1.48 and earlier allows remote attackers to cause a denial of se…

  • Unscored —
    CVE-2001-0706 Public exploit

    Maximum Rumpus FTP Server 2.0.3 dev and before allows an attacker to cause a denial of service (crash) via a mkdir comm…

  • Unscored —
    CVE-2001-0594 Public exploit

    kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer over…

  • Unscored —
    CVE-2001-0740 Public exploit

    3COM OfficeConnect 812 and 840 ADSL Router 4.2, running OCR812 router software 1.1.9 and earlier, allows remote attacke…

  • Unscored —
    CVE-2001-0751 Public exploit

    Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers (ISN), which all…

  • Medium —
    CVE-2001-0590 Public exploit EPSS 11%

    Apache Tomcat Allows Source Disclosure

    Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request which does not end with an HTTP protocol specification (i.e. HTTP/1.0).

    org.apache.tomcat:tomcat-servlet-api Maven
  • Unscored —
    CVE-2001-0805 Public exploit

    Directory traversal vulnerability in ttawebtop.cgi in Tarantella Enterprise 3.00 and 3.01 allows remote attackers to re…

  • Unscored —
    CVE-2001-0236 Public exploit EPSS 72%

    Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands vi…

  • Unscored —
    CVE-2001-0646 Public exploit

    Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 allows a remote attacker to perform a denial of service (hang) by creatin…

  • Unscored —
    CVE-2001-0365 Public exploit

    Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft Viewer' and 'allow execut…

  • Unscored —
    CVE-2001-0760 Public exploit

    Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a malformed request to launch…

  • Unscored —
    CVE-2001-0653 Public exploit

    Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileg…