Archive
9 March 2002
Vulnerabilities first published on this day (UTC), newest first.
428 results · Feed
-
Unscored —CVE-2001-0503 EPSS 17%
Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service via …
-
Unscored —
Buffer overflow in w3m 0.2.1 and earlier allows a remote attacker to execute arbitrary code via a long base64 encoded M…
-
Unscored —
Lotus Domino 5.0.5 and 5.0.8, and possibly other versions, allows remote attackers to cause a denial of service (block …
-
Unscored —
Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permis…
-
Unscored —
The web management service on Cisco Content Service series 11000 switches (CSS) before WebNS 4.01B29s or WebNS 4.10B17s…
-
Unscored —
Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presen…
-
Unscored —
Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force g…
-
Unscored —CVE-2001-0846 EPSS 41%
Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web…
-
Unscored —CVE-2001-0559 Public exploit
crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification op…
-
Unscored —
Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN comman…
-
Unscored —CVE-2001-0504 EPSS 21%
Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incor…
-
Unscored —
Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL i…
-
Unscored —
htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an a…
-
Unscored —
Directory traversal vulnerability in NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to list arbitrary files and…
-
Unscored —
LogLine function in klogd in sysklogd 1.3 in various Linux distributions allows an attacker to cause a denial of servic…
-
Unscored —CVE-2001-0276 Public exploit
ext.dll in BadBlue 1.02.07 Personal Edition web server allows remote attackers to determine the physical path of the se…
-
Unscored —CVE-2001-0630 Public exploit
Directory traversal vulnerability in MIMAnet viewsrc.cgi 2.0 allows a remote attacker to read arbitrary files via a '..…
-
Unscored —
Becky! 2.00.05 and earlier can allow a remote attacker to gain additional privileges via a buffer overflow attack on lo…
-
Unscored —
Buffer overflow in IrDA driver providing infrared data exchange on Windows 2000 allows attackers who are physically clo…
-
Unscored —
VShell SSH gateway 1.0.1 and earlier has a default port forwarding rule of 0.0.0.0/0.0.0.0, which could allow local use…
-
Unscored —
Symantec LiveUpdate 1.5 stores proxy passwords in cleartext in a registry key, which could allow local users to obtain …
-
Unscored —
Buffer overflow in dsh in dqs 3.2.7 in SuSE Linux 7.0 and earlier, and possibly other operating systems, allows local u…
-
Unscored —
Directory traversal vulnerability in Rit Research Labs The Bat! 1.48f and earlier allows a remote attacker to create ar…
-
Unscored —
Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier …
-
Unscored —CVE-2001-0718 EPSS 11%
Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to…
-
Unscored —CVE-2001-0461 Public exploit
template.cgi in Free On-Line Dictionary of Computing (FOLDOC) allows remote attackers to read files and execute command…
-
Unscored —CVE-2001-0596 Public exploit
Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment…
-
Unscored —CVE-2001-0857 Public exploit
Cross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote attackers to gain acce…
-
Unscored —
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet fragments, which allows re…
-
Unscored —
Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitr…
-
Unscored —
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not handle the "fragment" keyword in a compiled ACL (Tu…
-
Unscored —
SMTP proxy in WatchGuard Firebox (2500 and 4500) 4.5 and 4.6 allows a remote attacker to bypass firewall filtering via …
-
Unscored —CVE-2001-0652 Public exploit
Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPA…
-
Unscored —
IIS 5.0 allows local users to cause a denial of service (hang) via by installing content that produces a certain invali…
-
Unscored —
Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address (IP address) that is provided by the cli…
-
Unscored —CVE-2001-0823 Public exploit
The pmpost program in Performance Co-Pilot (PCP) before 2.2.1-3 allows a local user to gain privileges via a symlink at…
-
Unscored —CVE-2001-0564 Public exploit
APC Web/SNMP Management Card prior to Firmware 310 only supports one telnet connection, which allows a remote attacker …
-
Unscored —
Cisco CBOS 2.3.0.053 sends output of the "sh nat" (aka "show nat") command to the terminal of the next user who attempt…
-
Unscored —CVE-2001-0543 EPSS 19%
Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (me…
-
Unscored —
Directory traversal vulnerability in Oracle JSP 1.0.x through 1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 can allow a remo…