Skip to content
OpenAdvisories

Archive

March 2002

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 78
  8. 8 
  9. 9428
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15131
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 303
  31. 31 

570 results · Feed

  • Unscored —

    Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it eas…

  • Unscored —
    CVE-1999-1094 EPSS 18%

    Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long …

  • Unscored —
    CVE-1999-1414 Public exploit

    IBM Netfinity Remote Control allows local users to gain administrator privileges by starting programs from the process …

  • Unscored —

    Vulnerability in ftpd/kftpd in HP-UX 10.x and 9.x allows local and possibly remote users to gain root privileges.

  • Unscored —

    Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extr…

  • Unscored —

    A bug in Intel Pentium processor (MMX and Overdrive) allows local users to cause a denial of service (hang) in Intel-ba…

  • Unscored —

    The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an in…

  • Unscored —

    Linux kernel before 2.3.18 or 2.2.13pre15, with SLIP and PPP options, allows local unprivileged users to forge IP packe…

  • Unscored —

    Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the a…

  • Unscored —
    CVE-1999-1437 Public exploit

    ePerl 2.2.12 allows remote attackers to read arbitrary files and possibly execute certain commands by specifying a full…

  • Unscored —

    netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot when an option is …

  • Unscored —

    VMS 4.0 through 5.3 allows local users to gain privileges via the ANALYZE/PROCESS_DUMP dcl command.

  • Unscored —

    thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than on…

  • Unscored —

    Vulnerability in Advanced File System Utility (advfs) in Digital UNIX 4.0 through 4.0d allows local users to gain privi…

  • Unscored —

    Vulnerability in runtime linker program rld in SGI IRIX 6.x and earlier allows local users to gain privileges via setui…

  • Unscored —

    Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local users to gain privile…

  • Unscored —

    Microsoft Office 98, Macintosh Edition, does not properly initialize the disk space used by Office 98 files and effecti…

  • Unscored —

    SSH 1.2.25, 1.2.23, and other versions, when used in in CBC (Cipher Block Chaining) or CFB (Cipher Feedback 64 bits) mo…

  • Unscored —

    Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could …

  • Unscored —
    CVE-1999-1191 Public exploit

    Buffer overflow in chkey in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command lin…

  • Unscored —

    Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a …

  • Unscored —
    CVE-1999-1494 Public exploit

    colorview in Silicon Graphics IRIX 5.1, 5.2, and 6.0 allows local attackers to read arbitrary files via the -text argum…

  • Unscored —

    Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? ob…

  • Unscored —

    linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access…

  • Unscored —

    Sendmail before 8.6.7 allows local users to gain root access via a large value in the debug (-d) command line option.

  • Unscored —

    Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, whi…

  • Unscored —

    Sysinstall in FreeBSD 2.2.1 and earlier, when configuring anonymous FTP, creates the ftp user without a password and wi…

  • Unscored —

    Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3…

  • Unscored —

    Vulnerability in Glance programs in GlancePlus for HP-UX 10.20 and earlier allows local users to access arbitrary files…

  • Unscored —

    SSH 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root.

  • Unscored —

    gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a s…

  • Unscored —

    VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user acco…

  • Unscored —

    BisonWare FTP Server 4.1 and earlier allows remote attackers to cause a denial of service via a malformed PORT command …

  • Unscored —

    Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that wa…

  • Unscored —

    Vulnerability in the /etc/suid_exec program in HP Apollo Domain/OS sr10.2 and sr10.3 beta, related to the Korn Shell (k…

  • Unscored —

    Vulnerability in rexec daemon (rexecd) in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute a…

  • Unscored —

    The permissions for the /dev/audio device on Solaris 2.2 and earlier, and SunOS 4.1.x, allow any local user to read fro…

  • Unscored —

    mysqld in MySQL 3.21 creates log files with world-readable permissions, which allows local users to obtain passwords fo…

  • Unscored —

    Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing.

  • Unscored —

    dxconsole in DEC OSF/1 3.2C and earlier allows local users to read arbitrary files by specifying the file with the -fil…