Skip to content
OpenAdvisories

Archive

9 March 2002

Vulnerabilities first published on this day (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 78
  8. 8 
  9. 9428
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15131
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 303
  31. 31 

428 results · Feed

  • Unscored —
    CVE-2001-0787 Public exploit

    LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lowering privileges, …

  • Unscored —
    CVE-2001-0641 Public exploit

    Buffer overflow in man program in various distributions of Linux allows local user to execute arbitrary code as group m…

  • Unscored —
    CVE-2001-0701 Public exploit

    Buffer overflow in ptexec in the Sun Validation Test Suite 4.3 and earlier allows a local user to gain privileges via a…

  • Unscored —
    CVE-2001-0784 Public exploit

    Directory traversal vulnerability in Icecast 1.3.10 and earlier allows remote attackers to read arbitrary files via a m…

  • Unscored —

    Remote manager service in Website Pro 3.0.37 allows remote attackers to cause a denial of service via a series of malfo…

  • Unscored —

    lpstat in IRIX 6.5.13f and earlier allows local users to gain root privileges by specifying a Trojan Horse nettype shar…

  • Unscored —

    SGI IRIX 6.5 through 6.5.12f and possibly earlier versions, and FreeBSD 3.0, allows remote attackers to cause a denial …

  • Unscored —
    CVE-2001-0616 Public exploit

    Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to create a denial of service via a U…

  • Unscored —
    CVE-2001-0386 Public exploit

    AnalogX SimpleServer:WWW 1.08 allows remote attackers to cause a denial of service via an HTTP request to the /aux dire…

  • Unscored —
    CVE-2001-0730 EPSS 12%

    split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via …

  • Unscored —

    Omnicron Technologies OmniHTTPD Professional 2.08 and earlier allows a remote attacker to create a denial of service vi…

  • Unscored —
    CVE-2001-0665 EPSS 12%

    Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and…

  • Unscored —

    Buffer overflow in Compaq Management Agents before 5.2, included in Compaq Web-enabled Management Software, allows loca…

  • Unscored —

    Cayman 3220-H DSL Router 1.0 allows remote attacker to cause a denial of service (crash) via a series of SYN or TCP con…

  • Unscored —

    Cisco 12000 with IOS 12.0 and line cards based on Engine 2 and earlier allows remote attackers to cause a denial of ser…

  • Unscored —

    Tripwire 1.3.1, 2.2.1 and 2.3.0 allows local users to overwrite arbitrary files and possible gain privileges via a symb…

  • Unscored —
    CVE-2001-0463 Public exploit

    Directory traversal vulnerability in cal_make.pl in PerlCal allows remote attackers to read arbitrary files via a .. (d…

  • Unscored —
    CVE-2001-0836 Public exploit EPSS 15%

    Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET r…

  • High 7.3
    CVE-2001-0667 EPSS 15%

    Internet Explorer 6 and earlier, when used with the Telnet client in Services for Unix (SFU) 2.0, allows remote attacke…

  • Unscored —

    Directory traversal vulnerability in PHProjekt 2.1 and earlier allows a remote attacker to conduct unauthorized activit…

  • Unscored —

    Buffer overflow in kdc_reply_cipher of libkrb (Kerberos 4 authentication library) in NetBSD 1.5 and FreeBSD 4.2 and ear…

  • Unscored —

    Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the "Rumpus User Database" file in the p…

  • Unscored —

    Red Hat Linux 7.1 sets insecure permissions on swap files created during installation, which can allow a local attacker…

  • Unscored —

    OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' …

  • Unscored —

    saposcol in SAP R/3 Web Application Server Demo before 1.5 trusts the PATH environmental variable to find and execute t…

  • Unscored —
    CVE-2001-0554 Public exploit EPSS 39%

    Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbi…

  • Unscored —

    Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding …

  • Unscored —

    Small HTTP server 2.03 allows remote attackers to cause a denial of service via a URL that contains an MS-DOS device na…

  • Unscored —
    CVE-2001-0685 Public exploit

    Thibault Godouet FCron prior to 1.1.1 allows a local user to corrupt another user's crontab file via a symlink attack o…

  • Unscored —

    Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly filter does not properly filter packet fra…

  • Unscored —

    AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection.

  • Unscored —
    CVE-2001-0764 Public exploit

    Buffer overflow in ntping in scotty 2.1.0 allows local users to execute arbitrary code via a long hostname as a command…

  • Unscored —

    Cisco IOS 12.1(2)T, 12.1(3)T allow remote attackers to cause a denial of service (reload) via a connection to TCP ports…

  • Unscored —
    CVE-2001-0697 Public exploit

    NetWin SurgeFTP prior to 1.1h allows a remote attacker to cause a denial of service (crash) via an 'ls ..' command.

  • Unscored —
    CVE-2001-0660 EPSS 22%

    Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user ema…

  • Unscored —
    CVE-2001-0558 Public exploit

    T. Hauck Jana Webserver 2.01 beta 1 and earlier allows a remote attacker to create a denial of service via a URL reques…

  • Unscored —
    CVE-2001-0527 Public exploit

    DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe sym…

  • Unscored —
    CVE-2001-0565 Public exploit

    Buffer overflow in mailx in Solaris 8 and earlier allows a local attacker to gain additional privileges via a long '-F'…

  • Unscored —

    Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additiona…

  • Unscored —

    A buffer overflow in Linux fetchmail before 5.8.6 allows remote attackers to execute arbitrary code via a large 'To:' f…