Archive
June 2002
Vulnerabilities first published in this month (UTC), newest first.
360 results · Feed
-
Unscored —
cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of service, and possibly execu…
-
Unscored —
CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP serv…
-
Unscored —CVE-2002-0081 EPSS 24%
Buffer overflows in (1) php_mime_split in PHP 4.1.0, 4.1.1, and 4.0.6 and earlier, and (2) php3_mime_split in PHP 3.0.x…
-
High 7.8
Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files w…
-
Unscored —
Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a de…
-
Unscored —
Pi-Soft SpoonFTP 1.1 and earlier allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PO…
-
Unscored —
Buffer overflow in ICQ before 2001B Beta v5.18 Build #3659 allows remote attackers to execute arbitrary code via a Voic…
-
Unscored —
Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local users to gain privile…
-
Unscored —CVE-2002-0143 Public exploit
Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary code via a l…
-
Unscored —CVE-2002-0078 EPSS 22%
The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in th…
-
Unscored —CVE-2002-0026 EPSS 13%
Internet Explorer 5.5 and 6.0 allows remote attackers to bypass restrictions for executing scripts via an object that p…
-
Unscored —CVE-2002-0049 EPSS 13%
Microsoft Exchange Server 2000 System Attendant gives "Everyone" group privileges to the WinReg key, which could allow …
-
Unscored —CVE-2002-0020 EPSS 17%
Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via …
-
Unscored —
Buffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to gain privileges via lpd in the…
-
Unscored —
The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflate…
-
Unscored —
Internet Explorer 5.1 for Macintosh allows remote attackers to bypass security checks and invoke local AppleScripts wit…
-
Unscored —
The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly…
-
Unscored —CVE-2002-0152 EPSS 17%
Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (c…
-
Unscored —
Buffer overflow in licq 1.0.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly exe…
-
Unscored —
rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide su…
-
Unscored —CVE-2002-0002 Public exploit
Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows r…
-
Unscored —CVE-2002-0098 Public exploit
Buffer overflow in index.cgi administration interface for Boozt! Standard 0.9.8 allows local users to execute arbitrary…
-
Unscored —
GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attac…
-
Unscored —
Vulnerability in Imlib before 1.9.13 allows attackers to cause a denial of service (crash) and possibly execute arbitra…
-
Unscored —
Linux kernel, and possibly other operating systems, allows remote attackers to read portions of memory via a series of …
-
Unscored —CVE-2002-0207 Public exploit
Buffer overflow in Real Networks RealPlayer 8.0 and earlier allows remote attackers to execute arbitrary code via a hea…
-
Unscored —CVE-2002-0043 Public exploit
sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail program, which could allow l…
-
Unscored —CVE-2002-0265 Public exploit
Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows loc…
-
Unscored —
slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" actio…
-
Unscored —
Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute Javascript via an HTTP requ…
-
Unscored —
Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetOb…
-
Unscored —CVE-2002-0050 EPSS 13%
Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitra…
-
Unscored —
Funk Software Proxy Host 3.x is installed with insecure permissions for the registry and the file system.
-
Unscored —
libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strin…
-
Unscored —CVE-2002-0211 Public exploit
Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable tempo…
-
Unscored —
Buffer overflow in xpilot-server for XPilot 4.5.0 and earlier allows remote attackers to execute arbitrary code.
-
Unscored —
Buffer overflow in Multiple UNC Provider (MUP) in Microsoft Windows operating systems allows local users to cause a den…
-
Unscored —CVE-2002-0057 EPSS 23%
XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which …
-
Unscored —
IRC connection tracking helper module in the netfilter subsystem for Linux 2.4.18-pre9 and earlier does not properly se…
-
Unscored —CVE-2002-0107 Public exploit
Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive inform…