Archive
March 2002
Vulnerabilities first published in this month (UTC), newest first.
570 results · Feed
-
Unscored —CVE-1999-0968 Public exploit
Buffer overflow in BNC IRC proxy allows remote attackers to gain privileges.
-
Unscored —
BMC Patrol allows remote attackers to gain access to an agent by spoofing frames.
-
Unscored —
Buffer overflow in Platinum Policy Compliance Manager (PCM) 7.0 allows remote attackers to execute arbitrary commands v…
-
Unscored —CVE-1999-1223 EPSS 23%
IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a l…
-
Unscored —
bigconf.conf in F5 BIG/ip 2.1.2 and earlier allows remote attackers to read arbitrary files by specifying the target fi…
-
Unscored —CVE-1999-1531 Public exploit
Buffer overflow in IBM HomePagePrint 1.0.7 for Windows98J allows a malicious Web site to execute arbitrary code on a vi…
-
Unscored —
Compaq Integration Maintenance Utility as used in Compaq Insight Manager agent before SmartStart 4.50 modifies the lega…
-
Unscored —
ifdhcpc-done script for configuring DHCP on Red Hat Linux 5 allows local users to append text to arbitrary files via a …
-
Unscored —
Office Shortcut Bar (OSB) in Windows 3.51 enables backup and restore permissions, which are inherited by programs such …
-
Unscored —
RPMMail before 1.4 allows remote attackers to execute commands via an e-mail message with shell metacharacters in the "…
-
Unscored —
Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute …
-
Unscored —
Buffer overflow in SysVInit in Red Hat Linux 5.1 and earlier allows local users to gain privileges.
-
Unscored —CVE-1999-1481 Public exploit
Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newli…
-
Unscored —
NukeNabber allows remote attackers to cause a denial of service by connecting to the NukeNabber port (1080) without sen…
-
Unscored —CVE-1999-1035 EPSS 17%
IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a malformed GET reques…
-
Unscored —
Symantec Norton Utilities 2.0 for Windows 95 marks the TUNEOCX.OCX ActiveX control as safe for scripting, which allows …
-
Unscored —CVE-1999-1472 EPSS 17%
Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small I…
-
Unscored —CVE-1999-1014 Public exploit
Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument.
-
Unscored —
wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during …
-
Unscored —CVE-1999-1243 Public exploit
SGI Desktop Permissions Tool in IRIX 6.0.1 and earlier allows local users to modify permissions for arbitrary files and…
-
Unscored —
Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privil…
-
Unscored —
Vulnerability in restore in SunOS 4.0.3 and earlier allows local users to gain privileges.
-
Unscored —
Vulnerability in LAT/Telnet Gateway (lattelnet) on Ultrix 4.1 and 4.2 allows attackers to gain root privileges.
-
Unscored —
Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote attackers to cause a denial…
-
Unscored —
Check Point Firewall-1 does not properly handle certain restricted keywords (e.g., Mail, auth, time) in user-defined ob…
-
Unscored —CVE-1999-1384 Public exploit
Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain r…
-
Unscored —
FTP installation script anon.ftp in AIX insecurely configures anonymous FTP, which allows remote attackers to execute a…
-
Unscored —
BuildDisk program on NeXT systems before 2.0 does not prompt users for the root password, which allows local users to g…
-
Unscored —
Vulnerability in login in AT&T System V Release 4 allows local users to gain privileges.
-
Unscored —
IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does …
-
Unscored —CVE-1999-1208 Public exploit
Buffer overflow in ping in AIX 4.2 and earlier allows local users to gain root privileges via a long command line argum…
-
Unscored —
Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address…
-
Unscored —
movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges.
-
Unscored —CVE-1999-1114 Public exploit
Buffer overflow in Korn Shell (ksh) suid_exec program on IRIX 6.x and earlier, and possibly other operating systems, al…
-
Unscored —
Sun SunOS 4.1 through 4.1.3 allows local attackers to gain root access via insecure permissions on files and directorie…
-
Unscored —
SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which a…
-
Unscored —
Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the "Listen to !nick <soundname> requests" option enab…
-
Unscored —
TIOCCONS in SunOS 4.1.1 does not properly check the permissions of a user who tries to redirect console output and inpu…
-
Unscored —
fte-console in the fte package before 0.46b-4.1 does not drop root privileges, which allows local users to gain root ac…
-
Unscored —
Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and…