Archive
June 2002
Vulnerabilities first published in this month (UTC), newest first.
360 results · Feed
-
Unscored —
Network Associates PGP Keyserver 7.0 allows remote attackers to bypass authentication and access the administrative web…
-
Unscored —
linprocfs on FreeBSD 4.3 and earlier does not properly restrict access to kernel memory, which allows one process with …
-
Unscored —
PHP remote file inclusion vulnerability in Actionpoll PHP script before 1.1.2 allows remote attackers to execute arbitr…
-
Unscored —CVE-2001-1342 EPSS 30%
Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP…
-
Unscored —
OmniSecure HTTProtect 1.1.1 allows a superuser without omnish privileges to modify a protected file by creating a symbo…
-
Unscored —
cda in xmcd 3.0.2 and 2.6 in SuSE Linux allows local users to overwrite arbitrary files via a symlink attack.
-
Unscored —
Format string vulnerability in gpm-root in gpm 1.17.8 through 1.17.18 allows local users to gain root privileges.
-
Unscored —
GroupWise 5.5 and 6 running in live remote or smart caching mode allows remote attackers to read arbitrary users' mailb…
-
Unscored —
Directory traversal vulnerability in Doug Neal's HTTPD Daemon (DNHTTPD) before 0.4.1 allows remote attackers to view ar…
-
Unscored —
FreeBSD 4.3 does not properly clear shared signal handlers when executing a process, which allows local users to gain p…
-
Unscored —
Cross-site scripting vulnerability in Allaire JRun 3.0 and 2.3.3 allows a malicious webmaster to embed Javascript in a …
-
Unscored —
Zorbat Zorbstats PHP script before 0.9 allows remote attackers to include arbitrary files from remote web sites via an …
-
Unscored —
Format string vulnerability in PFinger 0.7.5 through 0.7.7 allows remote attackers to execute arbitrary code via format…
-
Unscored —
makewhatis in the man package before 1.5i2 allows an attacker in group man to overwrite arbitrary files via a man page …
-
Unscored —
xinetd 2.1.8 and earlier runs with a default umask of 0, which could allow local users to read or modify files that are…
-
Unscored —
TCP Wrappers (tcp_wrappers) in FreeBSD 4.1.1 through 4.3 with the PARANOID ACL option enabled does not properly check t…
-
Unscored —CVE-2001-1085 Public exploit
Lmail 2.7 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
-
Unscored —CVE-2001-1185 Public exploit
Some AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow a local user to overw…
-
Unscored —
myphpPagetool PHP script 0.4.3-1 and earlier allows remote attackers to execute arbitrary code by including files from …
-
Unscored —
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the metho…
-
Unscored —
ispell before 3.1.20 allows local users to overwrite files of other users via a symlink attack on a temporary file.
-
Unscored —
create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissi…
-
Unscored —CVE-2001-1083 Public exploit
Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers…
-
Unscored —CVE-2001-1177 Public exploit
ml85p in Samsung ML-85G GDI printer driver before 0.2.0 allows local users to overwrite arbitrary files via a symlink a…
-
Unscored —
Sdbsearch.cgi in SuSE Linux 6.0-7.2 could allow remote attackers to execute arbitrary commands by uploading a keylist.t…
-
Unscored —CVE-2001-1002 Public exploit
The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure…
-
Unscored —
Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in …
-
Unscored —
AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injectin…
-
Unscored —
Buffer overflow in wmcube-gdk for WMCube/GDK 0.98 allows local users to execute arbitrary code via long lines in the ob…
-
Unscored —
Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to…
-
Unscored —
admin.php in PHP-Nuke 5.2 and earlier, except 5.0RC1, does not check login credentials for upload operations, which all…
-
Unscored —
Vulnerability in the cache-limiting function of the unified name service daemon (nsd) in IRIX 6.5.4 through 6.5.11 allo…
-
Unscored —CVE-2002-0004 Public exploit
Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed executio…
-
Unscored —
CIPE VPN package before 1.3.0-3 allows remote attackers to cause a denial of service (crash) via a short malformed pack…
-
Unscored —CVE-2002-0115 Public exploit
Snort 1.8.3 does not properly define the minimum ICMP header size, which allows remote attackers to cause a denial of s…
-
Unscored —
Directory traversal vulnerability in Funsoft Dino's Webserver 1.2 and earlier allows remote attackers to read files or …
-
Unscored —
CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of se…
-
Unscored —CVE-2002-0209 Public exploit
Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing (SLB) and Cookie-Based Persistence features enabled…
-
Unscored —CVE-2002-0018 EPSS 16%
In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted doma…
-
Unscored —
Format string vulnerability in the administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6…