Archive
March 2002
Vulnerabilities first published in this month (UTC), newest first.
570 results · Feed
-
Unscored —CVE-2001-0596 Public exploit
Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment…
-
Unscored —CVE-2001-0857 Public exploit
Cross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote attackers to gain acce…
-
Unscored —
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet fragments, which allows re…
-
Unscored —
Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitr…
-
Unscored —
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not handle the "fragment" keyword in a compiled ACL (Tu…
-
Unscored —
SMTP proxy in WatchGuard Firebox (2500 and 4500) 4.5 and 4.6 allows a remote attacker to bypass firewall filtering via …
-
Unscored —CVE-2001-0652 Public exploit
Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPA…
-
Unscored —
IIS 5.0 allows local users to cause a denial of service (hang) via by installing content that produces a certain invali…
-
Unscored —
Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address (IP address) that is provided by the cli…
-
Unscored —CVE-2001-0823 Public exploit
The pmpost program in Performance Co-Pilot (PCP) before 2.2.1-3 allows a local user to gain privileges via a symlink at…
-
Unscored —CVE-2001-0564 Public exploit
APC Web/SNMP Management Card prior to Firmware 310 only supports one telnet connection, which allows a remote attacker …
-
Unscored —
Cisco CBOS 2.3.0.053 sends output of the "sh nat" (aka "show nat") command to the terminal of the next user who attempt…
-
Unscored —CVE-2001-0543 EPSS 19%
Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (me…
-
Unscored —
Directory traversal vulnerability in Oracle JSP 1.0.x through 1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 can allow a remo…
-
Unscored —CVE-2001-0787 Public exploit
LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lowering privileges, …
-
Unscored —CVE-2001-0641 Public exploit
Buffer overflow in man program in various distributions of Linux allows local user to execute arbitrary code as group m…
-
Unscored —CVE-2001-0701 Public exploit
Buffer overflow in ptexec in the Sun Validation Test Suite 4.3 and earlier allows a local user to gain privileges via a…
-
Unscored —CVE-2001-0784 Public exploit
Directory traversal vulnerability in Icecast 1.3.10 and earlier allows remote attackers to read arbitrary files via a m…
-
Unscored —
Remote manager service in Website Pro 3.0.37 allows remote attackers to cause a denial of service via a series of malfo…
-
Unscored —
lpstat in IRIX 6.5.13f and earlier allows local users to gain root privileges by specifying a Trojan Horse nettype shar…
-
Unscored —
SGI IRIX 6.5 through 6.5.12f and possibly earlier versions, and FreeBSD 3.0, allows remote attackers to cause a denial …
-
Unscored —CVE-2001-0616 Public exploit
Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to create a denial of service via a U…
-
Unscored —CVE-2001-0386 Public exploit
AnalogX SimpleServer:WWW 1.08 allows remote attackers to cause a denial of service via an HTTP request to the /aux dire…
-
Unscored —CVE-2001-0730 EPSS 12%
split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via …
-
Unscored —
Omnicron Technologies OmniHTTPD Professional 2.08 and earlier allows a remote attacker to create a denial of service vi…
-
Unscored —CVE-2001-0665 EPSS 12%
Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and…
-
Unscored —
Buffer overflow in Compaq Management Agents before 5.2, included in Compaq Web-enabled Management Software, allows loca…
-
Unscored —
Cayman 3220-H DSL Router 1.0 allows remote attacker to cause a denial of service (crash) via a series of SYN or TCP con…
-
Unscored —
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 and earlier allows remote attackers to cause a denial of ser…
-
Unscored —
Tripwire 1.3.1, 2.2.1 and 2.3.0 allows local users to overwrite arbitrary files and possible gain privileges via a symb…
-
Unscored —CVE-2001-0463 Public exploit
Directory traversal vulnerability in cal_make.pl in PerlCal allows remote attackers to read arbitrary files via a .. (d…
-
Unscored —
Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET r…
-
High 7.3CVE-2001-0667 EPSS 15%
Internet Explorer 6 and earlier, when used with the Telnet client in Services for Unix (SFU) 2.0, allows remote attacke…
-
Unscored —
Directory traversal vulnerability in PHProjekt 2.1 and earlier allows a remote attacker to conduct unauthorized activit…
-
Unscored —
Buffer overflow in kdc_reply_cipher of libkrb (Kerberos 4 authentication library) in NetBSD 1.5 and FreeBSD 4.2 and ear…
-
Unscored —
Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the "Rumpus User Database" file in the p…
-
Unscored —
Red Hat Linux 7.1 sets insecure permissions on swap files created during installation, which can allow a local attacker…
-
Unscored —
OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' …
-
Unscored —
saposcol in SAP R/3 Web Application Server Demo before 1.5 trusts the PATH environmental variable to find and execute t…
-
Unscored —
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbi…