Skip to content
OpenAdvisories

Archive

March 2002

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 78
  8. 8 
  9. 9428
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15131
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 303
  31. 31 

570 results · Feed

  • Unscored —

    Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding …

  • Unscored —

    Small HTTP server 2.03 allows remote attackers to cause a denial of service via a URL that contains an MS-DOS device na…

  • Unscored —
    CVE-2001-0685 Public exploit

    Thibault Godouet FCron prior to 1.1.1 allows a local user to corrupt another user's crontab file via a symlink attack o…

  • Unscored —

    Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly filter does not properly filter packet fra…

  • Unscored —

    AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection.

  • Unscored —
    CVE-2001-0764 Public exploit

    Buffer overflow in ntping in scotty 2.1.0 allows local users to execute arbitrary code via a long hostname as a command…

  • Unscored —

    Cisco IOS 12.1(2)T, 12.1(3)T allow remote attackers to cause a denial of service (reload) via a connection to TCP ports…

  • Unscored —
    CVE-2001-0697 Public exploit

    NetWin SurgeFTP prior to 1.1h allows a remote attacker to cause a denial of service (crash) via an 'ls ..' command.

  • Unscored —
    CVE-2001-0660 EPSS 22%

    Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user ema…

  • Unscored —
    CVE-2001-0558 Public exploit

    T. Hauck Jana Webserver 2.01 beta 1 and earlier allows a remote attacker to create a denial of service via a URL reques…

  • Unscored —
    CVE-2001-0527 Public exploit

    DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe sym…

  • Unscored —
    CVE-2001-0565 Public exploit

    Buffer overflow in mailx in Solaris 8 and earlier allows a local attacker to gain additional privileges via a long '-F'…

  • Unscored —

    Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additiona…

  • Unscored —

    A buffer overflow in Linux fetchmail before 5.8.6 allows remote attackers to execute arbitrary code via a large 'To:' f…

  • Unscored —

    Microsoft Word 2000 does not check AutoRecovery (.asd) files for macros, which allows a local attacker to execute arbit…

  • Unscored —

    ftpdownload in Computer Associates InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink a…

  • Unscored —

    Gordano NTMail 6.0.3c allows a remote attacker to create a denial of service via a long (>= 255 characters) URL request…

  • Unscored —

    FPF kernel module 1.0 allows a remote attacker to cause a denial of service via fragmented packets.

  • Unscored —

    Buffer overflow in mail included with SunOS 5.8 for x86 allows a local user to gain privileges via a long HOME environm…

  • Unscored —

    index2.php in Mambo Site Server 3.0.0 through 3.0.5 allows remote attackers to gain Mambo administrator privileges by s…

  • Unscored —

    Binary decoding feature of slrn 0.9 and earlier allows remote attackers to execute commands via shell scripts that are …

  • Unscored —
    CVE-2001-1010 Public exploit

    Directory traversal vulnerability in pagecount CGI script in Sambar Server before 5.0 beta 5 allows remote attackers to…

  • Unscored —

    edit_image.php in Vibechild Directory Manager before 0.91 allows remote attackers to execute arbitrary commands via she…

  • Unscored —

    PHPAdsNew PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that …

  • Unscored —

    Phorecast PHP script before 0.40 allows remote attackers to include arbitrary files from remote web sites via an HTTP r…

  • Unscored —
    CVE-2001-1080 Public exploit

    diagrpt in AIX 4.3.x and 5.1 uses the DIAGDATADIR environment variable to find and execute certain programs, which allo…

  • Unscored —
    CVE-2001-1075 Public exploit

    poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass authentication for relaying by cau…

  • Unscored —

    Cisco SN 5420 Storage Router 1.1(3) and earlier allows remote attackers to cause a denial of service (reboot) via a ser…

  • Unscored —

    rmuser utility in FreeBSD 4.2 and 4.3 creates a copy of the master.passwd file with world-readable permissions while up…

  • Unscored —

    IRC DCC helper in the ip_masq_irc IP masquerading module 2.2 allows remote attackers to bypass intended firewall restri…

  • Unscored —

    Buffer overflow in uidadmin in Caldera Open Unix 8.0.0 and UnixWare 7 allows local users to gain root privileges via a …

  • Unscored —

    AWOL PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets …

  • Unscored —
    CVE-2001-1067 Public exploit EPSS 16%

    Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary c…

  • Unscored —

    PGP Corporate Desktop before 7.1, Personal Security before 7.0.3, Freeware before 7.0.3, and E-Business Server before 7…

  • Unscored —

    Cisco SN 5420 Storage Router 1.1(3) and earlier allows local users to access a developer's shell without a password and…

  • Unscored —
    CVE-2002-0005 Public exploit EPSS 16%

    Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions allows remote attackers to execut…

  • Unscored —

    SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service…

  • Unscored —

    wwwboard allows a remote attacker to delete message board articles via a malformed argument.

  • Unscored —

    BMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service.

  • Unscored —
    CVE-1999-0815 EPSS 18%

    Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service (memory e…