Archive
March 2002
Vulnerabilities first published in this month (UTC), newest first.
570 results · Feed
-
Unscored —
IBM HACMP 4.4 allows remote attackers to cause a denial of service via a completed TCP connection to HACMP ports (e.g.,…
-
Unscored —
BisonFTP V4R1 allows local users to access directories outside of their home directory by uploading .bdl files, which c…
-
Unscored —
Buffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems allows remote attacke…
-
Unscored —CVE-2001-0877 EPSS 44%
Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service via…
-
Unscored —
Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when th…
-
Unscored —CVE-2001-0442 Public exploit
Buffer overflow in Mercury MTA POP3 server for NetWare 1.48 and earlier allows remote attackers to cause a denial of se…
-
Unscored —CVE-2001-0706 Public exploit
Maximum Rumpus FTP Server 2.0.3 dev and before allows an attacker to cause a denial of service (crash) via a mkdir comm…
-
Unscored —CVE-2001-0594 Public exploit
kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer over…
-
Unscored —CVE-2001-0740 Public exploit
3COM OfficeConnect 812 and 840 ADSL Router 4.2, running OCR812 router software 1.1.9 and earlier, allows remote attacke…
-
Unscored —
sgml-tools (aka sgmltools) before 1.0.9-15 creates temporary files with insecure permissions, which allows other users …
-
Unscored —
Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to pr…
-
Unscored —
iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory al…
-
Unscored —
sendmsg function in NetBSD 1.3 through 1.5 allows local users to cause a denial of service (kernel trap or panic) via a…
-
Unscored —
NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to cause a denial of service (crash) via a CD command to a direc…
-
Unscored —
Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service (crash) via a mkdir-only FTP PU…
-
Unscored —CVE-2001-0751 Public exploit
Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers (ISN), which all…
-
Unscored —
Format string vulnerability in ToolTalk database server rpc.ttdbserverd allows remote attackers to execute arbitrary co…
-
Medium —
Apache Tomcat Allows Source Disclosure
Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request which does not end with an HTTP protocol specification (i.e. HTTP/1.0).
-
Unscored —CVE-2001-0805 Public exploit
Directory traversal vulnerability in ttawebtop.cgi in Tarantella Enterprise 3.00 and 3.01 allows remote attackers to re…
-
Unscored —
SNMP service in Atmel 802.11b VNET-B Access Point 1.3 and earlier, as used in Netgear ME102 and Linksys WAP11, accepts …
-
Unscored —
TrendMicro ScanMail for Exchange 3.5 Evaluation allows a local attacker to recover the administrative credentials for S…
-
Unscored —
Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands vi…
-
Unscored —
ipfw in FreeBSD does not properly handle the use of "me" in its rules when point to point interfaces are used, which ca…
-
Unscored —CVE-2001-0546 EPSS 17%
Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote…
-
Unscored —CVE-2001-0646 Public exploit
Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 allows a remote attacker to perform a denial of service (hang) by creatin…
-
Unscored —CVE-2001-0540 EPSS 71%
Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (me…
-
Unscored —
Buffer overflow in line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to execute arbi…
-
Unscored —
Memory leak in the proxy service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows local attacke…
-
Unscored —CVE-2001-0365 Public exploit
Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft Viewer' and 'allow execut…
-
Unscored —
Citrix MetaFrame 1.8 Server with Service Pack 3, and XP Server Service Pack 1 and earlier, allows remote attackers to c…
-
Unscored —CVE-2001-0760 Public exploit
Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a malformed request to launch…
-
Unscored —
vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attac…
-
Unscored —
Netscape 4.7x allows remote attackers to obtain sensitive information such as the user's login, mailbox location and in…
-
Unscored —
Buffer overflow in WinZip 8.0 allows attackers to execute arbitrary commands via a long file name that is processed by …
-
Unscored —
Digital Creations Zope 2.3.2 and earlier allows a local attacker to gain additional privileges via the changing of ZCla…
-
Unscored —CVE-2001-0653 Public exploit
Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileg…
-
Unscored —CVE-2001-0719 EPSS 18%
Buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via a malformed…
-
Unscored —
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit "deny ip any any" rule…
-
Unscored —
dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-M…
-
Unscored —CVE-2001-0804 Public exploit
Directory traversal vulnerability in story.pl in Interactive Story 1.3 allows a remote attacker to read arbitrary files…