Archive
March 2002
Vulnerabilities first published in this month (UTC), newest first.
153 results · Clear filters · Feed
-
Unscored —CVE-2002-0162 Public exploit
LogWatch before 2.5 allows local users to execute arbitrary code via a symlink attack on the logwatch temporary directo…
-
Unscored —CVE-2001-1212 Public exploit
Cross-site scripting vulnerability in catgy.cgi for Aktivate 1.03 allows remote attackers to execute arbitrary Javascri…
-
Unscored —CVE-2001-1092 Public exploit
msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink att…
-
Unscored —CVE-2001-1133 Public exploit
Vulnerability in a system call in BSDI 3.0 and 3.1 allows local users to cause a denial of service (reboot) in the kern…
-
Unscored —CVE-2001-1104 Public exploit
SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions.
-
Unscored —CVE-2001-1122 Public exploit
Windows NT 4.0 SP 6a allows a local user with write access to winnt/system32 to cause a denial of service (crash in lsa…
-
Unscored —CVE-2001-1115 Public exploit
generate.cgi in SIX-webboard 2.01 and before allows remote attackers to read arbitrary files via a dot dot (..) in the …
-
Unscored —CVE-2001-1196 Public exploit
Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a…
-
Unscored —CVE-2001-1127 Public exploit
Buffer overflow in Progress database 8.3D and 9.1C could allow a local user to execute arbitrary code via (1) _proapsv,…
-
Unscored —CVE-2001-1086 Public exploit
XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth…
-
Unscored —CVE-2001-1107 Public exploit
SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain …
-
Unscored —CVE-2001-1142 Public exploit
ArGoSoft FTP Server 1.2.2.2 uses weak encryption for user passwords, which allows an attacker with access to the passwo…
-
Unscored —CVE-2001-1195 Public exploit
Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager,…
-
Unscored —CVE-2001-1178 Public exploit
Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable.
-
Unscored —
Directory traversal vulnerability in r.pl (aka r.cgi) of Randy Parker Power Up HTML 0.8033beta allows remote attackers …
-
Unscored —
Buffer overflow in EFTP 2.0.7.337 allows remote attackers to execute arbitrary code by uploading a .lnk file containing…
-
Unscored —CVE-2001-1202 Public exploit
Cross-site scripting vulnerability in DeleGate 7.7.0 and 7.7.1 does not quote scripting commands within a "403 Forbidde…
-
Unscored —CVE-2001-1170 Public exploit
AmTote International homebet program stores the homebet.log file in the homebet/ virtual directory, which allows remote…
-
Unscored —CVE-2001-1137 Public exploit
D-Link DI-704 Internet Gateway firmware earlier than V2.56b6 allows remote attackers to cause a denial of service (rebo…
-
Unscored —CVE-2001-1109 Public exploit
Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory contents via …
-
Unscored —CVE-2001-1165 Public exploit
Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain pri…
-
Unscored —CVE-2001-1156 Public exploit
TYPSoft FTP 0.95 allows remote attackers to cause a denial of service (CPU consumption) via a "../../*" argument to (1)…
-
Unscored —CVE-2001-1184 Public exploit
wrshdsp.exe in Denicomp Winsock RSHD/NT 2.21.00 and earlier allows remote attackers to cause a denial of service (CPU c…
-
Unscored —CVE-2001-1194 Public exploit
Zyxel Prestige 681 and 1600 SDSL Routers allow remote attackers to cause a denial of service via malformed packets with…
-
Unscored —CVE-2001-1093 Public exploit
Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute arbitrary code via a long comm…
-
Unscored —
Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT a…
-
Unscored —CVE-2001-1188 Public exploit
mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote serve…
-
Unscored —CVE-2001-1209 Public exploit
Directory traversal vulnerability in zml.cgi allows remote attackers to read arbitrary files via a .. (dot dot) in the …
-
Unscored —CVE-2001-1097 Public exploit
Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a …
-
Unscored —CVE-2002-0142 Public exploit
CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of service (crash…
-
Unscored —CVE-2002-0132 Public exploit
Buffer overflow in Chinput 3.0 allows local users to execute arbitrary code via a long HOME environment variable.
-
Unscored —CVE-2002-0112 Public exploit
Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL.
-
Unscored —CVE-2002-0137 Public exploit
CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao config…
-
Unscored —CVE-2002-0140 Public exploit
Domain Name Relay Daemon (dnrd) 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and pos…
-
Unscored —CVE-2002-0106 Public exploit
BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP f…
-
Unscored —CVE-2002-0135 Public exploit
Netopia Timbuktu Pro 6.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a series of con…
-
Unscored —CVE-2002-0118 Public exploit
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attack…
-
Unscored —
Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript in an about: URL, …
-
Unscored —CVE-2001-0965 Public exploit
glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument …
-
Unscored —
Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name …