Archive
March 2002
Vulnerabilities first published in this month (UTC), newest first.
570 results · Feed
-
Unscored —CVE-2001-0852 Public exploit
TUX HTTP server 2.1.0-2 in Red Hat Linux allows remote attackers to cause a denial of service via a long Host: header.
-
Unscored —
Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode all…
-
Unscored —
A cross-site scripting vulnerability in Caucho Technology Resin before 1.2.4 allows a malicious webmaster to embed Java…
-
Unscored —
Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to r…
-
Unscored —
docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed…
-
Unscored —CVE-2001-0007 Public exploit
Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of service via a long URL request…
-
Unscored —
OpenSSH before 2.9.9, when running sftp using sftp-server and using restricted keypairs, allows remote authenticated us…
-
Unscored —
Buffer overflow in Vixie cron 3.0.1-56 and earlier could allow a local attacker to gain additional privileges via a lon…
-
Unscored —
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when l…
-
Unscored —
Buffer overflow in libi18n library in IBM AIX 5.1 and 4.3.x allows local users to gain root privileges via a long LANG …
-
Unscored —CVE-2001-0874 EPSS 22%
Internet Explorer 5.5 and 6.0 allow remote attackers to read certain files via HTML that passes information from a fram…
-
Unscored —CVE-2001-0545 EPSS 18%
IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service (crash) via a malformed reque…
-
Unscored —
pam_ldap authentication module in Solaris 8 allows remote attackers to bypass authentication via a NULL password.
-
Unscored —
Spearhead NetGAP 200 and 300 before build 78 allow a remote attacker to bypass file blocking and content inspection via…
-
Unscored —CVE-2001-0503 EPSS 17%
Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service via …
-
Unscored —
Buffer overflow in w3m 0.2.1 and earlier allows a remote attacker to execute arbitrary code via a long base64 encoded M…
-
Unscored —
Lotus Domino 5.0.5 and 5.0.8, and possibly other versions, allows remote attackers to cause a denial of service (block …
-
Unscored —
Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permis…
-
Unscored —
The web management service on Cisco Content Service series 11000 switches (CSS) before WebNS 4.01B29s or WebNS 4.10B17s…
-
Unscored —
Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presen…
-
Unscored —
Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force g…
-
Unscored —CVE-2001-0846 EPSS 41%
Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web…
-
Unscored —CVE-2001-0559 Public exploit
crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification op…
-
Unscored —
Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN comman…
-
Unscored —CVE-2001-0504 EPSS 21%
Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incor…
-
Unscored —
Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL i…
-
Unscored —
htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an a…
-
Unscored —
Directory traversal vulnerability in NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to list arbitrary files and…
-
Unscored —
LogLine function in klogd in sysklogd 1.3 in various Linux distributions allows an attacker to cause a denial of servic…
-
Unscored —CVE-2001-0276 Public exploit
ext.dll in BadBlue 1.02.07 Personal Edition web server allows remote attackers to determine the physical path of the se…
-
Unscored —CVE-2001-0630 Public exploit
Directory traversal vulnerability in MIMAnet viewsrc.cgi 2.0 allows a remote attacker to read arbitrary files via a '..…
-
Unscored —
Becky! 2.00.05 and earlier can allow a remote attacker to gain additional privileges via a buffer overflow attack on lo…
-
Unscored —
Buffer overflow in IrDA driver providing infrared data exchange on Windows 2000 allows attackers who are physically clo…
-
Unscored —
VShell SSH gateway 1.0.1 and earlier has a default port forwarding rule of 0.0.0.0/0.0.0.0, which could allow local use…
-
Unscored —
Symantec LiveUpdate 1.5 stores proxy passwords in cleartext in a registry key, which could allow local users to obtain …
-
Unscored —
Buffer overflow in dsh in dqs 3.2.7 in SuSE Linux 7.0 and earlier, and possibly other operating systems, allows local u…
-
Unscored —
Directory traversal vulnerability in Rit Research Labs The Bat! 1.48f and earlier allows a remote attacker to create ar…
-
Unscored —
Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier …
-
Unscored —CVE-2001-0718 EPSS 11%
Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to…
-
Unscored —CVE-2001-0461 Public exploit
template.cgi in Free On-Line Dictionary of Computing (FOLDOC) allows remote attackers to read files and execute command…