Archive
May 2002
Vulnerabilities first published in this month (UTC), newest first.
222 results · Feed
-
Unscored —
Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to cause a denial of service via a long HTTP request.
-
Unscored —
Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) b…
-
Unscored —
Buffer overflow in MIT Kerberos 5 (krb5) 1.2.2 and earlier allows remote attackers to cause a denial of service and pos…
-
Unscored —
Vulnerability in mkacct in HP-UX 11.04 running Virtualvault Operating System (VVOS) 4.0 and 4.5 allows attackers to ele…
-
Unscored —
wmtv 0.6.5 and earlier does not properly drop privileges, which allows local users to execute arbitrary commands via th…
-
Unscored —
Cross-site scripting vulnerability in Horde Internet Messaging Program (IMP) before 2.2.6 and 1.2.6 allows remote attac…
-
Unscored —
Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, which allows remote attackers to hijac…
-
Unscored —CVE-2001-1290 Public exploit
admin.cgi in Active Classifieds Free Edition 1.0, and possibly commercial versions, allows remote attackers to modify t…
-
Unscored —
Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames i…
-
Unscored —CVE-2001-1319 EPSS 33%
Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service (hang) via exceptional BER encodings f…
-
Unscored —
Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute …
-
Unscored —
Beck IPC GmbH IPC@CHIP TelnetD server generates different responses when given valid and invalid login names, which all…
-
Unscored —
mandb in the man-db package before 2.3.16-3 allows local users to overwrite arbitrary files via the command line option…
-
Unscored —CVE-2001-1346 Public exploit
Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files vi…
-
Unscored —
WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unatho…
-
Unscored —
Directory traversal vulnerability in Un-CGI 1.9 and earlier allows remote attackers to execute arbitrary code via a .. …
-
Unscored —
Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for ot…
-
Unscored —
Linux CUPS before 1.1.6 does not securely handle temporary files, possibly due to a symlink vulnerability that could al…
-
Unscored —
Opera 5.0 for Linux does not properly handle malformed HTTP headers, which allows remote attackers to cause a denial of…
-
Unscored —
Buffer overflow in web server of 3com HomeConnect Cable Modem External with USB (#3CR29223) allows remote attackers to …
-
Unscored —
iPlanet Directory Server 4.1.4 and earlier (LDAP) allows remote attackers to cause a denial of service (crash) and poss…
-
Unscored —CVE-2001-1274 Public exploit
Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and possibly gain privileges.
-
Unscored —
Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named (1) winlogon.exe,…
-
Unscored —
TWIG 2.6.2 and earlier allows remote attackers to perform unauthorized database operations via a SQL injection attack o…
-
Unscored —
Buffer overflows in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and poss…
-
Unscored —
Beck GmbH IPC@Chip TelnetD service supports only one connection and does not disconnect a user who does not complete th…
-
Unscored —
Windows 2000 and Windows NT allows local users to cause a denial of service (reboot) by executing a command at the comm…
-
Unscored —
GroupWise WebAccess 5.5 with directory indexing enabled allows a remote attacker to view arbitrary directory contents v…
-
Unscored —
Lotus Domino R5 before R5.0.7a allows remote attackers to cause a denial of service (crash) and possibly execute arbitr…
-
Unscored —CVE-2001-1289 Public exploit
Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection p…
-
Unscored —
IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, vi…
-
Unscored —
Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessi…
-
Unscored —
Format string vulnerabilities in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a de…
-
Unscored —
Buffer overflows in Teamware Office Enterprise Directory allows remote attackers to cause a denial of service (crash) a…
-
Unscored —
Avaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote attackers to gain admini…
-
Unscored —CVE-2001-1335 Public exploit
Directory traversal vulnerability in CesarFTP 0.98b and earlier allows remote authenticated users (such as anonymous) t…
-
Unscored —CVE-2001-1344 Public exploit
WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename tha…
-
Unscored —
Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial …
-
Unscored —
Teamware Office Enterprise Directory allows remote attackers to cause a denial of service (crash) and possibly execute …
-
Unscored —
Format string vulnerabilities in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (cr…