June 2002

360 results · Feed

• Unscored —
  CVE-2001-1235

  pSlash PHP script 0.7 and earlier allows remote attackers to execute arbitrary code by including files from remote web …

  Jun 25, 2002
• Unscored —
  CVE-2001-1118

  A module in Roxen 2.0 before 2.0.92, and 2.1 before 2.1.264, does not properly decode UTF-8, Mac and ISO-2202 encoded U…

  Jun 25, 2002
• Unscored —
  CVE-2001-1113

  Buffer overflow in TrollFTPD 1.26 and earlier allows local users to execute arbitrary code by creating a series of deep…

  Jun 25, 2002
• Unscored —
  CVE-2001-1030

  Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host …

  Jun 25, 2002
• Unscored —
  CVE-2001-1022 Public exploit EPSS 11%

  Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote at…

  Jun 25, 2002
• Unscored —
  CVE-2001-1146

  AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 creates temporary files with predictable names, which …

  Jun 25, 2002
• Unscored —
  CVE-2001-1240

  The default configuration of sudo in Engarde Secure Linux 1.0.1 allows any user in the admin group to run certain comma…

  Jun 25, 2002
• Unscored —
  CVE-2001-1071

  Cisco IOS 12.2 and earlier running Cisco Discovery Protocol (CDP) allows remote attackers to cause a denial of service …

  Jun 25, 2002
• Unscored —
  CVE-2001-1132

  Mailman 2.0.x before 2.0.6 allows remote attackers to gain access to list administrative pages when there is an empty s…

  Jun 25, 2002
• Unscored —
  CVE-2001-1199 Public exploit

  Cross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g, when debug mode is enabled, allows remote …

  Jun 25, 2002
• Unscored —
  CVE-2001-1147

  The PAM implementation in /bin/login of the util-linux package before 2.11 causes a password entry to be rewritten acro…

  Jun 25, 2002
• Unscored —
  CVE-2001-1149

  Panda Antivirus Platinum before 6.23.00 allows a remore attacker to cause a denial of service (crash) when a user selec…

  Jun 25, 2002
• Unscored —
  CVE-2001-1074

  Webmin 0.84 and earlier does not properly clear the HTTP_AUTHORIZATION environment variable when the web server is rest…

  Jun 25, 2002
• Unscored —
  CVE-2001-1144

  Directory traversal vulnerability in McAfee ASaP VirusScan agent 1.0 allows remote attackers to read arbitrary files vi…

  Jun 25, 2002
• Unscored —
  CVE-2001-1234

  Bharat Mediratta Gallery PHP script before 1.2.1 allows remote attackers to execute arbitrary code by including files f…

  Jun 25, 2002
• Unscored —
  CVE-2001-1072

  Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra …

  Jun 25, 2002
• Unscored —
  CVE-2001-1175

  vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it e…

  Jun 25, 2002
• Unscored —
  CVE-2001-1027

  Buffer overflow in WindowMaker (aka wmaker) 0.64 and earlier allows remote attackers to execute arbitrary code via a lo…

  Jun 25, 2002
• Unscored —
  CVE-2001-1095

  Buffer overflow in uuq in AIX 4 could allow local users to execute arbitrary code via a long -r parameter.

  Jun 25, 2002
• Unscored —
  CVE-2001-1162 Public exploit EPSS 12%

  Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remo…

  Jun 25, 2002
• Unscored —
  CVE-2001-1116

  Identix BioLogon 2.03 and earlier does not lock secondary displays on a multi-monitor system running Windows 98 or ME, …

  Jun 25, 2002
• Unscored —
  CVE-2001-1096

  Buffer overflows in muxatmd in AIX 4 allows an attacker to cause a core dump and possibly execute code.

  Jun 25, 2002
• Unscored —
  CVE-2001-1174

  Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header.

  Jun 25, 2002
• Unscored —
  CVE-2001-1247

  PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the web server UID by uplo…

  Jun 25, 2002
• Unscored —
  CVE-2001-1117

  LinkSys EtherFast BEFSR41 Cable/DSL routers running firmware before 1.39.3 Beta allows a remote attacker to view admini…

  Jun 25, 2002
• Unscored —
  CVE-2001-1043

  ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) …

  Jun 25, 2002
• Unscored —
  CVE-2001-1246 Public exploit

  PHP 4.0.5 through 4.1.0 in safe mode does not properly cleanse the 5th parameter to the mail() function, which allows l…

  Jun 25, 2002
• Unscored —
  CVE-2001-1062

  Buffer overflow in mana in OpenServer 5.0.6a and earlier allows local users to execute arbitrary code.

  Jun 25, 2002
• Unscored —
  CVE-2001-1153

  lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a lo…

  Jun 25, 2002
• Unscored —
  CVE-2001-1099

  The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the r…

  Jun 25, 2002
• Unscored —
  CVE-2001-1161

  Cross-site scripting (CSS) vulnerability in Lotus Domino 5.0.6 allows remote attackers to execute script on other web c…

  Jun 25, 2002
• Unscored —
  CVE-2001-1141

  The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of sma…

  Jun 25, 2002
• Unscored —
  CVE-2001-1108 Public exploit

  Directory traversal vulnerability in SnapStream PVS 1.2a allows remote attackers to read arbitrary files via a .. (dot …

  Jun 25, 2002
• Unscored —
  CVE-2001-1089

  libnss-pgsql in nss-pgsql 0.9.0 and earlier allows remote attackers to execute arbitrary SQL queries by inserting SQL c…

  Jun 25, 2002
• Unscored —
  CVE-2001-1046

  Buffer overflow in qpopper (aka qpop or popper) 4.0 through 4.0.2 allows remote attackers to gain privileges via a long…

  Jun 25, 2002
• Unscored —
  CVE-2001-1160 Public exploit

  udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary comman…

  Jun 25, 2002
• Unscored —
  CVE-2001-1100

  sendmessage.cgi in W3Mail 1.0.2, and possibly other CGI programs, allows remote attackers to execute arbitrary commands…

  Jun 25, 2002
• Unscored —
  CVE-2001-1237

  Phormation PHP script 0.9.1 and earlier allows remote attackers to execute arbitrary code by including files from remot…

  Jun 25, 2002
• Unscored —
  CVE-2001-1183

  PPTP implementation in Cisco IOS 12.1 and 12.2 allows remote attackers to cause a denial of service (crash) via a malfo…

  Jun 25, 2002
• Unscored —
  CVE-2001-1158

  Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to…

  Jun 25, 2002