Archive
June 2002
Vulnerabilities first published in this month (UTC), newest first.
360 results · Feed
-
Unscored —
Marcus S. Xenakis directory.php script allows remote attackers to execute arbitrary commands via shell metacharacters i…
-
Unscored —CVE-2002-0608 Public exploit
Buffer overflow in Matu FTP client 1.74 allows remote FTP servers to execute arbitrary code via a long "220" banner.
-
Unscored —CVE-2002-0552 Public exploit
Multiple buffer overflows in Melange Chat server 2.02 allow remote or local attackers to cause a denial of service (cra…
-
Unscored —CVE-2002-0544 Public exploit
Aprelium Abyss Web Server (abyssws) before 1.0.3 stores the administrative console password in plaintext in the abyss.c…
-
Unscored —
Snapgear Lite+ firewall 1.5.3 and 1.5.4 allows remote attackers to cause a denial of service (crash) via a large number…
-
Unscored —
Dynamic Guestbook 3.0 allows remote attackers to execute arbitrary code via shell metacharacters in the gbdaten paramet…
-
Unscored —
Bitvise WinSSHD before 2002-03-16 allows remote attackers to cause a denial of service (resource exhaustion) via a larg…
-
Unscored —
Vulnerability in PureTLS before 0.9b2 related to injection attacks, which could possibly allow remote attackers to corr…
-
Unscored —
The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout pe…
-
Unscored —
htcgibin.exe in Lotus Domino server 5.0.9a and earlier allows remote attackers to determine the physical pathname for t…
-
Unscored —
Cross-site scripting vulnerability in Novell Web Search 2.0.1 allows remote attackers to execute arbitrary script as ot…
-
Unscored —
Buffer overflow in webpsvc.exe for Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code vi…
-
Unscored —
Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file con…
-
Unscored —
Gravity Storm Service Pack Manager 2000 creates a hidden share (SPM2000c$) mapped to the C drive, which may allow local…
-
Unscored —
Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript o…
-
High 7.5
Norton Anti-Virus (NAV) allows remote attackers to bypass content filtering via attachments whose Content-Type and Cont…
-
Unscored —CVE-2002-0031 Public exploit
Buffer overflows in Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary code via a yms…
-
Unscored —CVE-2002-0607 Public exploit
members.asp in Snitz Forums 2000 version 3.3.03 and earlier allows remote attackers to execute arbitrary code via a SQL…
-
Unscored —
Buffer overflow in Tivoli Storage Manager TSM (1) Server or Storage Agents 3.1 through 5.1, and (2) the TSM Client Acce…
-
Unscored —
Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easil…
-
Unscored —
Standalone Macromedia Flash Player 5.0 before 5,0,30,2 allows remote attackers to execute arbitrary programs via a .SWF…
-
Unscored —
Cross-site scripting vulnerability in functions-inc.asp for ASP-Nuke RC1 allows remote attackers to execute script as o…
-
Unscored —CVE-2002-0468 Public exploit
Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileg…
-
Unscored —
The default configuration of Foundry Networks EdgeIron 4802F allows remote attackers to modify sensitive information vi…
-
Unscored —
IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (whi…
-
Unscored —CVE-2002-0535 Public exploit
Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other …
-
Unscored —
Watchguard SOHO firewall 5.0.35 unpredictably disables certain IP restrictions for customized services that were set be…
-
Unscored —
AOL Instant Messenger (AIM) allows remote attackers to steal files that are being transferred to other clients by conne…
-
Unscored —CVE-2002-0421 EPSS 20%
IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr p…
-
Unscored —
Foundry Networks ServerIron switches do not decode URIs when applying "url-map" rules, which could make it easier for a…
-
Unscored —
Snapgear Lite+ firewall 1.5.4 and 1.5.3 allows remote attackers to cause a denial of service (crash) via a large number…
-
Unscored —CVE-2002-0504 Public exploit
Cross-site scripting vulnerability in Citrix NFuse 1.6 and earlier does not quote results from the getLastError method,…
-
Unscored —
Vulnerability in (1) inews or (2) rnews for INN 2.2.3 and earlier, related to insecure open() calls.
-
Unscored —CVE-2002-0525 Public exploit
Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote maliciou…
-
Unscored —
Directory traversal vulnerability in PCI Netsupport Manager before version 7, when running web extensions, allows remot…
-
Unscored —CVE-2002-0612 Public exploit
FileSeek.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) head or (2) foot…
-
Unscored —
IPFilter 3.4.25 and earlier sets a different TTL when a port is being filtered than when it is not being filtered, whic…
-
Unscored —CVE-2002-0588 Public exploit
PVote before 1.9 does not authenticate users for restricted operations, which allows remote attackers to add or delete …
-
Unscored —
Etnus TotalView 5.0.0-4 installs certain files with UID 5039 and GID 59, which could allow local users with that UID or…
-
Unscored —
ghostscript before 6.51 allows local users to read and write arbitrary files as the 'lp' user via the file operator, ev…