Archive
25 June 2002
Vulnerabilities first published on this day (UTC), newest first.
39 results · Clear filters · Feed
-
Unscored —CVE-2001-0900 Public exploit
Directory traversal vulnerability in modules.php in Gallery before 1.2.3 allows remote attackers to read arbitrary file…
-
Unscored —
Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via …
-
Unscored —CVE-2001-0899 Public exploit
Network Tools 0.2 for PHP-Nuke allows remote attackers to execute commands on the server via shell metacharacters in th…
-
Unscored —
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary comma…
-
Unscored —
wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which …
-
Unscored —CVE-2001-0553 Public exploit
SSH Secure Shell 3.0.0 on Unix systems does not properly perform password authentication to the sshd2 daemon, which all…
-
Unscored —CVE-2001-0906 Public exploit
teTeX filter before 1.0.7 allows local users to gain privileges via a symlink attack on temporary files that are produc…
-
Unscored —
Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote at…
-
Unscored —CVE-2001-1199 Public exploit
Cross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g, when debug mode is enabled, allows remote …
-
Unscored —
Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remo…
-
Unscored —CVE-2001-1246 Public exploit
PHP 4.0.5 through 4.1.0 in safe mode does not properly cleanse the 5th parameter to the mail() function, which allows l…
-
Unscored —CVE-2001-1108 Public exploit
Directory traversal vulnerability in SnapStream PVS 1.2a allows remote attackers to read arbitrary files via a .. (dot …
-
Unscored —CVE-2001-1160 Public exploit
udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary comman…
-
Unscored —CVE-2001-1085 Public exploit
Lmail 2.7 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
-
Unscored —CVE-2001-1185 Public exploit
Some AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow a local user to overw…
-
Unscored —CVE-2001-1083 Public exploit
Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers…
-
Unscored —CVE-2001-1177 Public exploit
ml85p in Samsung ML-85G GDI printer driver before 0.2.0 allows local users to overwrite arbitrary files via a symlink a…
-
Unscored —
Sdbsearch.cgi in SuSE Linux 6.0-7.2 could allow remote attackers to execute arbitrary commands by uploading a keylist.t…
-
Unscored —CVE-2001-1002 Public exploit
The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure…
-
Unscored —
Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in …
-
Unscored —CVE-2002-0004 Public exploit
Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed executio…
-
Unscored —CVE-2002-0115 Public exploit
Snort 1.8.3 does not properly define the minimum ICMP header size, which allows remote attackers to cause a denial of s…
-
Unscored —CVE-2002-0209 Public exploit
Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing (SLB) and Cookie-Based Persistence features enabled…
-
Unscored —
cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of service, and possibly execu…
-
Unscored —CVE-2002-0143 Public exploit
Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary code via a l…
-
Unscored —
Internet Explorer 5.1 for Macintosh allows remote attackers to bypass security checks and invoke local AppleScripts wit…
-
Unscored —
The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly…
-
Unscored —CVE-2002-0002 Public exploit
Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows r…
-
Unscored —CVE-2002-0098 Public exploit
Buffer overflow in index.cgi administration interface for Boozt! Standard 0.9.8 allows local users to execute arbitrary…
-
Unscored —CVE-2002-0207 Public exploit
Buffer overflow in Real Networks RealPlayer 8.0 and earlier allows remote attackers to execute arbitrary code via a hea…
-
Unscored —CVE-2002-0043 Public exploit
sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail program, which could allow l…
-
Unscored —CVE-2002-0265 Public exploit
Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows loc…
-
Unscored —
Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetOb…
-
Unscored —CVE-2002-0211 Public exploit
Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable tempo…
-
Unscored —CVE-2002-0107 Public exploit
Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive inform…
-
Unscored —
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gai…
-
Unscored —CVE-2002-0117 Public exploit
Cross-site scripting vulnerability in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 and earlier allows remote attackers…
-
Unscored —CVE-2000-0976 Public exploit
Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY env…
-
Unscored —CVE-2000-1193 Public exploit
Performance Metrics Collector Daemon (PMCD) in Performance Copilot in IRIX 6.x allows remote attackers to cause a denia…