Archive
June 2002
Vulnerabilities first published in this month (UTC), newest first.
360 results · Feed
-
Unscored —
Memory leak in GuildFTPd Server 0.97 allows remote attackers to cause a denial of service via a request containing a nu…
-
Unscored —
Packaging error for expect 8.3.3 in Mandrake Linux 8.1 causes expect to search for its libraries in the /home/snailtalk…
-
Unscored —CVE-2001-0900 Public exploit
Directory traversal vulnerability in modules.php in Gallery before 1.2.3 allows remote attackers to read arbitrary file…
-
Unscored —
Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyrus SASL library (cy…
-
Unscored —
apmscript in Apmd in Red Hat 7.2 "Enigma" allows local users to create or change the modification dates of arbitrary fi…
-
Unscored —
Race condition in signal handling of procmail 3.20 and earlier, when running setuid, allows local users to cause a deni…
-
Unscored —CVE-2001-0508 EPSS 32%
Vulnerability in IIS 5.0 allows remote attackers to cause a denial of service (restart) via a long, invalid WebDAV requ…
-
Unscored —CVE-2001-0726 EPSS 16%
Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server, when used with Internet Explorer, does not properly detect c…
-
Unscored —
HP CIFS/9000 Server (SAMBA) A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program w…
-
Unscored —
OpenSSH 3.0.1 and earlier with UseLogin enabled does not properly cleanse critical environment variables such as LD_PRE…
-
Unscored —
slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash)…
-
Unscored —
Buffer overflow in GuildFTPd Server 0.97 allows remote attacker to execute arbitrary code via a long SITE command.
-
Unscored —
Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows rem…
-
Unscored —
Buffer overflow in glob function of glibc allows attackers to cause a denial of service (crash) and possibly execute ar…
-
Unscored —
Cisco IOS Firewall Feature set, aka Context Based Access Control (CBAC) or Cisco Secure Integrated Software, for IOS 11…
-
Unscored —
Atmel Firmware 1.3 Wireless Access Point (WAP) allows remote attackers to cause a denial of service via a SNMP request …
-
Unscored —
Buffer overflow in Frox transparent FTP proxy 0.6.6 and earlier, with the local caching method selected, allows remote …
-
Medium —
Apache Tomcat Reveals Path through Long URL
Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension.
-
Unscored —
Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via …
-
Unscored —
Format string vulnerability in auto nice daemon (AND) 1.0.4 and earlier allows a local user to possibly execute arbitra…
-
Unscored —
Vulnerabilities in CGI scripts in susehelp in SuSE 7.2 and 7.3 allow remote attackers to execute arbitrary commands by …
-
Unscored —CVE-2001-0899 Public exploit
Network Tools 0.2 for PHP-Nuke allows remote attackers to execute commands on the server via shell metacharacters in th…
-
Unscored —
Hypermail allows remote attackers to execute arbitrary commands on a server supporting SSI via an attachment with a .sh…
-
Unscored —
Exim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting t…
-
Unscored —
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary comma…
-
Unscored —
IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attack…
-
Unscored —
xSANE 0.81 and earlier allows local users to modify files of other xSANE users via a symlink attack on temporary files.
-
Unscored —
wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which …
-
Unscored —
Buffer overflow in tab expansion capability of the most program allows local or remote attackers to execute arbitrary c…
-
Unscored —
Inetd in OpenServer 5.0.5 allows remote attackers to cause a denial of service (crash) via a port scan, e.g. with nmap …
-
Unscored —
Vulnerability in Postfix SMTP server before 20010228-pl07, when configured to email the postmaster when SMTP errors cau…
-
Unscored —
Lotus Domino 5.08 and earlier allows remote attackers to cause a denial of service (crash) via a SunRPC NULL command to…
-
Unscored —
Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a serie…
-
Unscored —
Cross-site scripting vulnerability in Mailman email archiver before 2.08 allows attackers to obtain sensitive informati…
-
Unscored —CVE-2001-0553 Public exploit
SSH Secure Shell 3.0.0 on Unix systems does not properly perform password authentication to the sshd2 daemon, which all…
-
Unscored —CVE-2001-0727 EPSS 31%
Internet Explorer 6.0 allows remote attackers to execute arbitrary code by modifying the Content-Disposition and Conten…
-
Unscored —CVE-2001-0906 Public exploit
teTeX filter before 1.0.7 allows local users to gain privileges via a symlink attack on temporary files that are produc…
-
Unscored —
Directory traversal vulnerability in Cerberus FTP Server 1.5 and earlier allows remote attackers to read arbitrary file…
-
Unscored —
bctool in Jetico BestCrypt 0.7 and earlier trusts the user-supplied PATH to find and execute an fsck utility program, w…
-
Unscored —
Directory traversal vulnerability in EFTP 2.0.8.346 allows local users to read directories via a ... (modified dot dot)…