Archive
June 2002
Vulnerabilities first published in this month (UTC), newest first.
360 results · Feed
-
Unscored —
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gai…
-
Unscored —CVE-2002-0117 Public exploit
Cross-site scripting vulnerability in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 and earlier allows remote attackers…
-
Unscored —
The installation of Geeklog 1.3 creates an extra group_assignments record which is not properly deleted, which causes t…
-
Unscored —
Buffer overflow in ippRead function of CUPS before 1.1.14 may allow attackers to execute arbitrary code via long attrib…
-
Unscored —
Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via t…
-
Unscored —
Funk Software Proxy Host 3.x before 3.09A creates a Named Pipe that does not require authentication and is installed wi…
-
Unscored —CVE-2002-0025 EPSS 14%
Internet Explorer 5.01, 5.5 and 6.0 does not properly handle the Content-Type HTML header field, which allows remote at…
-
Unscored —CVE-2002-0021 EPSS 17%
Network Product Identification (PID) Checker in Microsoft Office v. X for Mac allows remote attackers to cause a denial…
-
Unscored —CVE-2002-0052 EPSS 22%
Internet Explorer 6.0 and earlier does not properly handle VBScript in certain domain security checks, which allows rem…
-
Unscored —
Geeklog 1.3 allows remote attackers to hijack user accounts, including the administrator account, by modifying the UID …
-
Unscored —
The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allo…
-
Unscored —
The administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through …
-
Unscored —CVE-2002-0070 EPSS 18%
Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute ar…
-
Unscored —
Buffer overflow in ISS BlackICE Defender 2.9 and earlier, BlackICE Agent 3.0 and 3.1, and RealSecure Server Sensor 6.0.…
-
Unscored —
retrieve_password.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows rem…
-
Unscored —CVE-2002-0027 EPSS 19%
Internet Explorer 5.5 and 6.0 allows remote attackers to read certain files and spoof the URL in the address bar by usi…
-
Unscored —
PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local user…
-
Unscored —
psyBNC 2.3 beta and earlier allows remote attackers to spoof encrypted, trusted messages by sending lines that begin wi…
-
Unscored —
GetRelativePath in ACD Incorporated CwpAPI 1.1 only verifies if the server root is somewhere within the path, which cou…
-
Unscored —CVE-2002-0022 EPSS 40%
Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5 and 6.0 allows remote…
-
Unscored —CVE-2002-0055 EPSS 38%
SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a d…
-
Unscored —CVE-2002-1056 EPSS 19%
Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that…
-
Unscored —
rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in p…
-
Unscored —
Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service (crash) by calling certain WIN3…
-
Unscored —
Visual Casel (Vcasel) does not properly prevent users from executing files, which allows local users to use a relative …
-
Unscored —
Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set …
-
Unscored —
Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user nam…
-
Unscored —CVE-2000-0976 Public exploit
Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY env…
-
Unscored —CVE-2000-1193 Public exploit
Performance Metrics Collector Daemon (PMCD) in Performance Copilot in IRIX 6.x allows remote attackers to cause a denia…
-
Unscored —
Twig webmail system does not properly set the "vhosts" variable if it is not configured on the site, which allows remot…
-
Unscored —
Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 …
-
Unscored —
The default configuration of LPRng print spooler in Red Hat Linux 7.0 through 7.3, Mandrake 8.1 and 8.2, and other oper…
-
Unscored —
Vulnerability in the server for nPULSE before 0.53p4.
-
Unscored —
Multiple vulnerabilities in phpMyChat before 0.14.5 exist in (1) input.php3, (2) handle_inputH.php3, or (3) index.lib.p…
-
Unscored —
Vulnerability in iPlanet Web Server 4 included in Virtualvault Operating System (VVOS) 4.0 running HP-UX 11.04 could al…
-
Unscored —CVE-2001-1354 Public exploit
NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, use…
-
Unscored —
NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, …
-
Unscored —
Vulnerability in phpWebSite before 0.7.9 related to running multiple instances in the same domain, which may allow atta…
-
Unscored —
Vulnerability in autodns.pl for AutoDNS before 0.0.4 related to domain names that are not fully qualified.
-
Unscored —
Vulnerabilities in phpMyChat before 0.14.4 allow local and possibly remote attackers to gain privileges by specifying a…