Skip to content
OpenAdvisories

Archive

March 2002

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 78
  8. 8 
  9. 9428
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15131
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 303
  31. 31 

570 results · Feed

  • Unscored —
    CVE-2001-1194 Public exploit

    Zyxel Prestige 681 and 1600 SDSL Routers allow remote attackers to cause a denial of service via malformed packets with…

  • Unscored —
    CVE-2001-1093 Public exploit

    Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute arbitrary code via a long comm…

  • Unscored —

    Directory traversal vulnerability in WhitSoft Development SlimFTPd 2.2 allows an attacker to read arbitrary files and d…

  • Unscored —
    CVE-2001-1163 Public exploit EPSS 11%

    Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT a…

  • Unscored —

    IBM DB2 7.0 allows a remote attacker to cause a denial of service (crash) via a single byte to (1) db2ccs.exe on port 6…

  • Unscored —

    Baltimore Technologies WEBsweeper 4.02, when used to manage URL blacklists, allows remote attackers to bypass blacklist…

  • Unscored —

    Hughes Technology Mini SQL 2.0.10 through 2.0.12 allows local users to cause a denial of service by creating a very lar…

  • Unscored —
    CVE-2001-1188 Public exploit

    mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote serve…

  • Unscored —

    The default PAM files included with passwd in Mandrake Linux 8.1 do not support MD5 passwords, which could result in a …

  • Unscored —

    The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the exist…

  • Unscored —
    CVE-2001-1209 Public exploit

    Directory traversal vulnerability in zml.cgi allows remote attackers to read arbitrary files via a .. (dot dot) in the …

  • Unscored —

    Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must…

  • Unscored —

    Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files v…

  • Unscored —

    EFTP 2.0.7.337 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a n…

  • Unscored —

    Xerox DocuPrint N40 Printers allow remote attackers to cause a denial of service via malformed data, such as that produ…

  • Unscored —

    Matrix CGI vault Last Lines 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the $…

  • Unscored —
    CVE-2001-1097 Public exploit

    Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a …

  • Unscored —

    Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service (reboot) via a network scan wi…

  • Unscored —

    Maelstrom GPL 3.0.1 allows local users to overwrite arbitrary files of other Maelstrom users via a symlink attack on th…

  • Unscored —
    CVE-2002-0142 Public exploit

    CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of service (crash…

  • Unscored —

    Buffer overflow in Michael Lamont Savant Web Server 3.0 allows remote attackers to cause a denial of service (crash) vi…

  • Unscored —

    Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plai…

  • Unscored —

    Directory traversal vulnerability in chuid 1.2 and earlier allows remote attackers to change the ownership of files out…

  • Unscored —
    CVE-2002-0132 Public exploit

    Buffer overflow in Chinput 3.0 allows local users to execute arbitrary code via a long HOME environment variable.

  • Unscored —

    Microsoft Internet Explorer 5.5 on Windows 98 allows remote web pages to cause a denial of service (hang) via extremely…

  • Unscored —

    Palm OS 3.5h and possibly other versions, as used in Handspring Visor and Xircom products, allows remote attackers to c…

  • Unscored —

    MDG Computer Services Web Server 4D/eCommerce 3.5.3 allows remote attackers to exploit directory traversal vulnerabilit…

  • Unscored —
    CVE-2002-0112 Public exploit

    Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL.

  • Unscored —

    CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via …

  • Unscored —

    Buffer overflows in Avirt Gateway Suite 4.2 allow remote attackers to cause a denial of service and possibly execute ar…

  • Unscored —

    chuid 1.2 and earlier does not properly verify the ownership of files that will be changed, which allows remote attacke…

  • Unscored —

    An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissi…

  • Unscored —

    Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain s…

  • Unscored —
    CVE-2002-0101 EPSS 12%

    Microsoft Internet Explorer 6.0 and earlier allows local users to cause a denial of service via an infinite loop for mo…

  • Unscored —

    Siemens 3568i WAP mobile phones allows remote attackers to cause a denial of service (crash) via an SMS message contain…

  • Unscored —

    EMC NetWorker (formerly Legato NetWorker) before 7.0 stores log files in the /nsr/logs/ directory with world-readable p…

  • Unscored —

    Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26, when configured to block traffic below port 1024, allows remote …

  • Unscored —
    CVE-2002-0137 Public exploit

    CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao config…

  • Unscored —

    Buffer overflow in ClanLib library 0.5 may allow local users to execute arbitrary code in games that use the library, s…

  • Unscored —

    Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other use…