Archive
9 March 2002
Vulnerabilities first published on this day (UTC), newest first.
428 results · Feed
-
Unscored —
Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service (crash) via a mkdir-only FTP PU…
-
Unscored —CVE-2001-0751 Public exploit
Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers (ISN), which all…
-
Unscored —
Format string vulnerability in ToolTalk database server rpc.ttdbserverd allows remote attackers to execute arbitrary co…
-
Medium —
Apache Tomcat Allows Source Disclosure
Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request which does not end with an HTTP protocol specification (i.e. HTTP/1.0).
-
Unscored —CVE-2001-0805 Public exploit
Directory traversal vulnerability in ttawebtop.cgi in Tarantella Enterprise 3.00 and 3.01 allows remote attackers to re…
-
Unscored —
SNMP service in Atmel 802.11b VNET-B Access Point 1.3 and earlier, as used in Netgear ME102 and Linksys WAP11, accepts …
-
Unscored —
TrendMicro ScanMail for Exchange 3.5 Evaluation allows a local attacker to recover the administrative credentials for S…
-
Unscored —
Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands vi…
-
Unscored —
ipfw in FreeBSD does not properly handle the use of "me" in its rules when point to point interfaces are used, which ca…
-
Unscored —CVE-2001-0546 EPSS 17%
Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote…
-
Unscored —CVE-2001-0646 Public exploit
Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 allows a remote attacker to perform a denial of service (hang) by creatin…
-
Unscored —CVE-2001-0540 EPSS 71%
Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (me…
-
Unscored —
Buffer overflow in line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to execute arbi…
-
Unscored —
Memory leak in the proxy service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows local attacke…
-
Unscored —CVE-2001-0365 Public exploit
Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft Viewer' and 'allow execut…
-
Unscored —
Citrix MetaFrame 1.8 Server with Service Pack 3, and XP Server Service Pack 1 and earlier, allows remote attackers to c…
-
Unscored —CVE-2001-0760 Public exploit
Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a malformed request to launch…
-
Unscored —
vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attac…
-
Unscored —
Netscape 4.7x allows remote attackers to obtain sensitive information such as the user's login, mailbox location and in…
-
Unscored —
Buffer overflow in WinZip 8.0 allows attackers to execute arbitrary commands via a long file name that is processed by …
-
Unscored —
Digital Creations Zope 2.3.2 and earlier allows a local attacker to gain additional privileges via the changing of ZCla…
-
Unscored —CVE-2001-0653 Public exploit
Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileg…
-
Unscored —CVE-2001-0719 EPSS 18%
Buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via a malformed…
-
Unscored —
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit "deny ip any any" rule…
-
Unscored —
dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-M…
-
Unscored —CVE-2001-0804 Public exploit
Directory traversal vulnerability in story.pl in Interactive Story 1.3 allows a remote attacker to read arbitrary files…
-
Unscored —CVE-2001-0852 Public exploit
TUX HTTP server 2.1.0-2 in Red Hat Linux allows remote attackers to cause a denial of service via a long Host: header.
-
Unscored —
Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode all…
-
Unscored —
A cross-site scripting vulnerability in Caucho Technology Resin before 1.2.4 allows a malicious webmaster to embed Java…
-
Unscored —
Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to r…
-
Unscored —
docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed…
-
Unscored —CVE-2001-0007 Public exploit
Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of service via a long URL request…
-
Unscored —
OpenSSH before 2.9.9, when running sftp using sftp-server and using restricted keypairs, allows remote authenticated us…
-
Unscored —
Buffer overflow in Vixie cron 3.0.1-56 and earlier could allow a local attacker to gain additional privileges via a lon…
-
Unscored —
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when l…
-
Unscored —
Buffer overflow in libi18n library in IBM AIX 5.1 and 4.3.x allows local users to gain root privileges via a long LANG …
-
Unscored —CVE-2001-0874 EPSS 22%
Internet Explorer 5.5 and 6.0 allow remote attackers to read certain files via HTML that passes information from a fram…
-
Unscored —CVE-2001-0545 EPSS 18%
IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service (crash) via a malformed reque…
-
Unscored —
pam_ldap authentication module in Solaris 8 allows remote attackers to bypass authentication via a NULL password.
-
Unscored —
Spearhead NetGAP 200 and 300 before build 78 allow a remote attacker to bypass file blocking and content inspection via…