Archive
July 2002
Vulnerabilities first published in this month (UTC), newest first.
79 results · Feed
-
Unscored —CVE-2001-1384 Public exploit
ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running pt…
-
Unscored —
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows remote attackers to display restricted products and compon…
-
Unscored —
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and…
-
Unscored —
The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial …
-
Unscored —
Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrar…
-
Unscored —
OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on …
-
Unscored —
Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code …
-
Unscored —
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, may allow remote attackers to cause a denial of service or execut…
-
Unscored —
Cross-site scripting vulnerabilities in Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, could allow remote attack…
-
Unscored —
userhelper in the usermode package on Red Hat Linux executes non-setuid programs as root, which does not activate the s…
-
Unscored —
The PostgreSQL authentication modules (1) mod_auth_pgsql 0.9.5, and (2) mod_auth_pgsql_sys 0.9.4, allow remote attacker…
-
Unscored —
namerslv in AIX 4.3.3 core dumps when called with a very long argument, possibly as a result of a buffer overflow.
-
Unscored —
Buffer overflow in the progressive reader for libpng 1.2.x before 1.2.4, and 1.0.x before 1.0.14, allows attackers to c…
-
Unscored —CVE-2002-0769 Public exploit
The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass …
-
Unscored —CVE-2002-0786 Public exploit
iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators…
-
Unscored —
Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a lon…
-
Unscored —
Buffer overflow in uucp in AIX 4.3.3.
-
Unscored —CVE-2002-0787 Public exploit
Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 al…
-
Unscored —
Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HT…
-
Unscored —CVE-2002-0773 Public exploit
imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a …
-
Unscored —
SQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000…
-
Unscored —
Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MS…
-
Unscored —
IP/IPX gateway for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a connection…
-
Unscored —CVE-2002-0731 Public exploit
Cross-site scripting vulnerability in demonstration scripts for vqServer allows remote attackers to execute arbitrary s…
-
Unscored —CVE-2002-0771 Public exploit
Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal …
-
Unscored —
Vulnerability in template.dhcpo in AIX 4.3.3 related to an insecure linker argument.
-
Unscored —
CGIscript.net csMailto.cgi program exports feedback to a file that is accessible from the web document root, which coul…
-
Unscored —
(1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass…
-
Unscored —
Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.…
-
Unscored —CVE-2002-0770 Public exploit
Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory l…
-
Unscored —
CGIscript.net csMailto.cgi program allows remote attackers to read arbitrary files by specifying the target filename in…
-
Unscored —
Novell BorderManager 3.5 with PAT (Port-Address Translate) enabled allows remote attackers to cause a denial of service…
-
Unscored —
mail and mailx in AIX 4.3.3 core dump when called with a very long argument, an indication of a buffer overflow.
-
Unscored —
Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root …
-
Unscored —
Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) vi…
-
Unscored —CVE-2002-0732 Public exploit
Cross-site scripting vulnerability in MyGuestbook 1.0 allows remote attackers to execute arbitrary script or inject HTM…
-
Unscored —
The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to cause a d…
-
Unscored —
FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service (network conne…
-
Unscored —CVE-2002-0730 Public exploit
Cross-site scripting vulnerability in guestbook.pl for Philip Chinery's Guestbook 1.1 allows remote attackers to execut…
-
Unscored —
Cross-site scripting in PostCalendar 3.02 allows remote attackers to insert arbitrary HTML and script, and steal cookie…