Skip to content
OpenAdvisories

Archive

March 2002

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 78
  8. 8 
  9. 9428
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15131
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 303
  31. 31 

570 results · Feed

  • Unscored —
    CVE-2001-0122 Public exploit

    Kernel leak in AfpaCache module of the Fast Response Cache Accelerator (FRCA) component of IBM HTTP Server 1.3.x and We…

  • Unscored —
    CVE-2001-0407 Public exploit

    Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privile…

  • Unscored —

    Eudora 5.0.2 allows a remote attacker to read arbitrary files via an email with the path of the target file in the "Att…

  • Unscored —

    A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf funct…

  • Unscored —

    Guardian Digital WebTool in EnGarde Secure Linux 1.0.1 allows restarted services to inherit some environmental variable…

  • Unscored —
    CVE-2001-0422 Public exploit

    Buffer overflow in Xsun in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME envir…

  • Unscored —
    CVE-2001-0574 Public exploit

    Directory traversal vulnerability in MP3Mystic prior to 1.04b3 allows a remote attacker to download arbitrary files via…

  • Unscored —
    CVE-2001-0663 Public exploit EPSS 32%

    Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of i…

  • Unscored —

    HP Event Correlation Service (ecsd) as included with OpenView Network Node Manager 6.1 allows a remote attacker to gain…

  • Unscored —

    cookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to other user accounts by e…

  • Unscored —

    opendir.php script in PHP-Nuke allows remote attackers to read arbitrary files by specifying the filename as an argumen…

  • Unscored —
    CVE-2001-0526 Public exploit

    Buffer overflow in the Xview library as used by mailtool in Solaris 8 and earlier allows a local attacker to gain privi…

  • Unscored —

    Cisco 6400 Access Concentrator Node Route Processor 2 (NRP2) 12.1DC card does not properly disable access when a passwo…

  • Unscored —

    The FTP server on Cisco Content Service 11000 series switches (CSS) before WebNS 4.01B23s and WebNS 4.10B13s allows an …

  • Unscored —

    Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x includes a debug version of FNDPU…

  • Unscored —

    Buffer overflow in cb_reset in the System Service Processor (SSP) package of SunOS 5.8 allows a local user to execute a…

  • Unscored —
    CVE-2001-0522 Public exploit EPSS 14%

    Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain priv…

  • Unscored —

    Internet Explorer 5.1 for Macintosh on Mac OS X allows remote attackers to execute arbitrary commands by causing a BinH…

  • Unscored —
    CVE-2001-0541 EPSS 16%

    Buffer overflow in Microsoft Windows Media Player 7.1 and earlier allows remote attackers to execute arbitrary commands…

  • Unscored —
    CVE-2001-0018 EPSS 18%

    Windows 2000 domain controller in Windows 2000 Server, Advanced Server, or Datacenter Server allows remote attackers to…

  • Unscored —

    Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via an ICMP ECHO REQUEST (ping) with …

  • Unscored —
    CVE-2001-0675 Public exploit

    Rit Research Labs The Bat! 1.51 for Windows allows a remote attacker to cause a denial of service by sending an email t…

  • Unscored —

    NetBSD 1.5 and earlier and FreeBSD 4.3 and earlier allows a remote attacker to cause a denial of service by sending a l…

  • Unscored —
    CVE-2001-0987 Public exploit

    Cross-site scripting vulnerability in CGIWrap before 3.7 allows remote attackers to execute arbitrary Javascript on oth…

  • Unscored —

    SSH Communications Security sshd 2.4 for Windows allows remote attackers to create a denial of service via a large numb…

  • Unscored —
    CVE-2001-0723 EPSS 11%

    Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript, aka the "Second C…

  • Unscored —
    CVE-2001-0626 Public exploit

    O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root dire…

  • Unscored —

    Directory traversal vulnerability in SpoonFTP 1.1 allows local and sometimes remote attackers to access files outside o…

  • Unscored —
    CVE-2001-0615 Public exploit

    Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker …

  • Unscored —
    CVE-2001-0803 Public exploit EPSS 86%

    Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows rem…

  • Unscored —

    Oracle listener before Oracle 9i allows attackers to cause a denial of service by repeatedly sending the first portion …

  • Unscored —

    iPlanet (formerly Netscape) Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP …

  • Unscored —

    ZoneAlarm and ZoneAlarm Pro allows a local attacker to cause a denial of service by running a trojan to initialize a Zo…

  • Unscored —

    Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via a series of large ICMP ECHO REPLY…

  • Unscored —
    CVE-2001-0507 Public exploit

    IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges …

  • Unscored —
    CVE-2001-0506 Public exploit EPSS 69%

    Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes…

  • Unscored —
    CVE-2001-0664 Public exploit EPSS 18%

    Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain …

  • Unscored —
    CVE-2001-0593 Public exploit

    Anaconda Partners Clipper 3.3 and earlier allows a remote attacker to read arbitrary files via a '..' (dot dot) attack …

  • Unscored —

    lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named (1) grep or (…

  • Unscored —
    CVE-2001-0876 Public exploit EPSS 49%

    Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute ar…