Archive
March 2002
Vulnerabilities first published in this month (UTC), newest first.
570 results · Feed
-
Unscored —
Vulnerability in passwd in SCO UNIX 4.0 and earlier allows attackers to cause a denial of service by preventing users f…
-
Unscored —
Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite…
-
Unscored —
WinProxy 2.0 and 2.0.1 allows remote attackers to cause a denial of service by sending an HTTP GET request without list…
-
Unscored —
The web-based folder display capability in Microsoft Internet Explorer 5.5 on Windows 98 allows local users to insert T…
-
Unscored —
strace allows local users to read arbitrary files via memory mapped file names.
-
Unscored —CVE-2000-0796 Public exploit
Buffer overflow in dmplay in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long command line option.
-
Unscored —
Buffer overflow in Webstar HTTP server allows remote attackers to cause a denial of service via a long GET request.
-
Unscored —CVE-2000-0027 Public exploit
IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack.
-
Unscored —
Trend Micro PC-Cillin does not restrict access to its internal proxy port, allowing remote attackers to conduct a denia…
-
Unscored —CVE-2000-0662 EPSS 21%
Internet Explorer 5.x and Microsoft Outlook allows remote attackers to read arbitrary files by redirecting the contents…
-
Unscored —
Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensi…
-
Unscored —
The file transfer mechanism in Danware NetOp 6.0 does not provide authentication, which allows remote attackers to acce…
-
Unscored —
Ipswitch Imail 6.0 allows remote attackers to cause a denial of service via a large number of connections in which a lo…
-
Unscored —
annclist.exe in webTV for Windows allows remote attackers to cause a denial of service by via a large, malformed UDP pa…
-
Unscored —CVE-2000-0180 Public exploit
Sojourn search engine allows remote attackers to read arbitrary files via a .. (dot dot) attack.
-
Unscored —
The web configuration server for NTMail V5 and V6 allows remote attackers to cause a denial of service via a series of …
-
Unscored —CVE-2000-0776 Public exploit
Mediahouse Statistics Server 5.02x allows remote attackers to execute arbitrary commands via a long HTTP GET request.
-
Unscored —
The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users a…
-
Unscored —
Fastream FUR HTTP server 1.0b allows remote attackers to cause a denial of service via a long GET request.
-
Unscored —CVE-2000-0739 Public exploit
Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote a…
-
Unscored —
A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious…
-
Unscored —CVE-2000-0570 Public exploit
FirstClass Internet Services server 5.770, and other versions before 6.1, allows remote attackers to cause a denial of …
-
Unscored —
Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary com…
-
Unscored —
ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large n…
-
Unscored —
The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access…
-
Unscored —
LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging message…
-
Unscored —
Top Layer AppSwitch 2500 allows remote attackers to cause a denial of service via malformed ICMP packets.
-
Unscored —
WinCOM LPD 1.00.90 allows remote attackers to cause a denial of service via a large number of LPD options to the LPD po…
-
Unscored —CVE-2000-0324 Public exploit
pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap.
-
Unscored —CVE-2000-0795 Public exploit
Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option.
-
Unscored —
Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbi…
-
Unscored —
Windows 2000 Telnet Server allows remote attackers to cause a denial of service by sending a continuous stream of binar…
-
Unscored —
SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current direc…
-
Unscored —CVE-2000-0740 Public exploit
Buffer overflow in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execut…
-
Unscored —
The Microsoft Outlook mail client identifies the physical path of the sender's machine within a winmail.dat attachment …
-
Unscored —CVE-2000-0741 Public exploit
Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attacke…
-
Unscored —
Directory traversal vulnerability in Winsock FTPd (WFTPD) 3.00 and 2.41 with the "Restrict to home directory" option en…
-
Unscored —CVE-2000-1196 Public exploit
PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read arbitrary files by specifyin…
-
Unscored —CVE-2000-1111 EPSS 13%
Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows r…
-
Unscored —CVE-2000-1200 EPSS 48%
Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformati…