Archive
March 2002
Vulnerabilities first published in this month (UTC), newest first.
570 results · Feed
-
Unscored —
Buffer overflow in BlackMoon FTP Server 1.0 through 1.5 allows remote attackers to execute arbitrary code via a long ar…
-
Unscored —CVE-2002-0140 Public exploit
Domain Name Relay Daemon (dnrd) 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and pos…
-
Unscored —
efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which p…
-
Unscored —
Buffer overflow in efax 0.9 and earlier, when installed setuid root, allows local users to execute arbitrary code via a…
-
Unscored —
EMC NetWorker (formerly Legato NetWorker) before 7.0 stores passwords in plaintext in the daemon.log file, which allows…
-
Unscored —CVE-2002-0106 Public exploit
BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP f…
-
Unscored —
ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prevent a scr…
-
Unscored —
CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command.
-
Unscored —CVE-2002-0135 Public exploit
Netopia Timbuktu Pro 6.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a series of con…
-
Unscored —
Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system itself, whic…
-
Unscored —CVE-2002-0118 Public exploit
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attack…
-
Unscored —
AFTPD 5.4.4 allows remote attackers to gain sensitive information via a CD (CWD) ~ (tilde) command, which causes a core…
-
Unscored —
Oracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via (1) a request to TCP ports 1100, …
-
Unscored —
AOL AOLserver 3.4.2 Win32 allows remote attackers to bypass authentication and read password-protected files via a URL …
-
Unscored —
Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript in an about: URL, …
-
Unscored —
Oracle listener in Oracle 8i on Solaris allows remote attackers to cause a denial of service via a malformed connection…
-
Unscored —
Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU cons…
-
Unscored —CVE-2001-0965 Public exploit
glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument …
-
Unscored —CVE-2001-0658 EPSS 14%
Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remot…
-
Unscored —
NetScreen ScreenOS prior to 2.5r6 on the NetScreen-10 and Netscreen-100 can allow a local attacker to bypass the DMZ 'd…
-
Unscored —
Watchguard Firebox II allows remote attackers to cause a denial of service by establishing multiple connections and sen…
-
Unscored —
Cisco devices IOS 12.0 and earlier allow a remote attacker to cause a crash, or bad route updates, via malformed BGP up…
-
Unscored —
2.4.3-12 kernel in Red Hat Linux 7.1 Korean installation program sets the setting default umask for init to 000, which …
-
Unscored —
The #sinclude directive in Embedded Perl (ePerl) 2.2.14 and earlier allows a remote attacker to execute arbitrary code …
-
Unscored —
Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name …
-
Unscored —
Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitra…
-
Unscored —CVE-2001-0662 EPSS 23%
RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a…
-
Unscored —
PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in…
-
Unscored —CVE-2001-0830 Public exploit
6tunnel 0.08 and earlier does not properly close sockets that were initiated by a client, which allows remote attackers…
-
Unscored —
BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and…
-
Unscored —
Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access …
-
Unscored —
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the "fragment" keyword in an outgoing ACL, …
-
Unscored —
Race condition in the UFS and EXT2FS file systems in FreeBSD 4.2 and earlier, and possibly other operating systems, mak…
-
Unscored —CVE-2001-0680 Public exploit
Directory traversal vulnerability in ftpd in QPC QVT/Net 4.0 and AVT/Term 5.0 allows a remote attacker to traverse dire…
-
Unscored —CVE-2001-0595 Public exploit
Buffer overflow in the kcsSUNWIOsolf.so library in Solaris 7 and 8 allows local attackers to execute arbitrary commands…
-
Unscored —CVE-2001-0833 Public exploit
Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLE…
-
Unscored —
Format string vulnerability in the C runtime functions in SQL Server 7.0 and 2000 allows attackers to cause a denial of…
-
Unscored —CVE-2001-0265 Public exploit
ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malfo…
-
Unscored —
The default configuration of the Dr. Watson program in Windows NT and Windows 2000 generates user.dmp crash dump files …
-
Unscored —CVE-2001-0563 Public exploit
ElectroSystems Engineering Inc. ElectroComm 2.0 and earlier allows a remote attacker to create a denial of service via …