Archive
August 2002
Vulnerabilities first published in this month (UTC), newest first.
204 results · Feed
-
Unscored —
iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-rese…
-
Unscored —
The Linux kernel before 2.2.19 does not have unregister calls for (1) CPUID and (2) MSR drivers, which could cause a Do…
-
Unscored —
Unknown vulnerability in sockfilter for Linux kernel before 2.2.19 related to "boundary cases," with unknown impact.
-
Unscored —
Unknown vulnerability in binfmt_misc in the Linux kernel before 2.2.19, related to user pages.
-
Unscored —
Unknown vulnerabilities in the UDP port allocation for Linux kernel before 2.2.19 could allow local users to cause a de…
-
Unscored —
Bugzilla before 2.14 does not properly escape untrusted parameters, which could allow remote attackers to conduct unaut…
-
Unscored —
iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow…
-
Unscored —
Bugzilla before 2.14 does not properly restrict access to confidential bugs, which could allow Bugzilla users to bypass…
-
Unscored —
The System V (SYS5) shared memory implementation for Linux kernel before 2.2.19 could allow attackers to modify recentl…
-
Unscored —
Bugzilla before 2.14 does not restrict access to sanitycheck.cgi, which allows local users to cause a denial of service…
-
Unscored —
Certain operations in Linux kernel before 2.2.19 on the x86 architecture copy the wrong number of bytes, which might al…
-
Unscored —
Bugzilla before 2.14 includes the username and password in URLs, which could allow attackers to gain privileges by read…
-
Unscored —
Multiple vulnerabilities in xinetd 2.3.0 and earlier, and additional variants until 2.3.3, may allow remote attackers t…
-
Unscored —
Masquerading code for Linux kernel before 2.2.19 does not fully check packet lengths in certain cases, which may lead t…
-
Unscored —
Signedness error in (1) getsockopt and (2) setsockopt for Linux kernel before 2.2.19 allows local users to cause a deni…
-
Unscored —
Unknown vulnerability in classifier code for Linux kernel before 2.2.19 could result in denial of service (hang).
-
Unscored —
Bugzilla before 2.14 stores user passwords in plaintext and sends password requests in an email message, which could al…
-
Unscored —
Unknown vulnerabilities in strnlen_user for Linux kernel before 2.2.19, with unknown impact.
-
Unscored —CVE-2001-1408 Public exploit
Directory traversal vulnerability in readmsg.php in WebMail 2.0.1 in Cobalt Qube 3 allows remote attackers to read arbi…
-
Unscored —
Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition,…
-
Unscored —
Directory traversal vulnerability in Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) allows remo…
-
Unscored —
domesticinstall.exe for nCipher MSCAPI CSP 5.50 and 5.54 does not use Operator Card Set protected keys when the user re…
-
Unscored —CVE-2002-0886 Public exploit
Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service (hang or memo…
-
Unscored —
Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allow remote attackers to cause a denial of service (crash) via malfo…
-
Unscored —
BlackICE Agent 3.1.eal does not always reactivate after a system standby, which could allow remote attackers and local …
-
Unscored —CVE-2002-0949 Public exploit
Telindus 1100 series ADSL router allows remote attackers to gain privileges to the device via a certain packet to UDP p…
-
Unscored —
Buffer overflows in IMAP Agent (imapd) for Novell NetMail (NIMS) 3.0.3 before 3.0.3A allows remote attackers to cause a…
-
Unscored —
The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the …
-
Unscored —CVE-2002-0919 Public exploit
CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via new…
-
Unscored —CVE-2002-0908 Public exploit
Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers t…
-
Unscored —CVE-2002-0928 Public exploit
Buffer overflow in the Pirch 98 IRC client allows remote attackers to cause a denial of service and possibly execute ar…
-
Unscored —CVE-2002-0894 Public exploit
NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service (crash) via (1) a request for a l…
-
Unscored —
CGIScript.net csNews.cgi allows remote attackers to obtain potentially sensitive information, such as the full server p…
-
Unscored —
SQL injection vulnerability in comment.php for GeekLog 1.3.5 and earlier allows remote attackers to obtain sensitive us…
-
Unscored —
Cisco IP Phone (VoIP) models 7910, 7940, and 7960 use a default administrative password, which allows attackers with ph…
-
Unscored —
3Com OfficeConnect Remote 812 ADSL Router, firmware 1.1.9 and 1.1.7, allows remote attackers to bypass port access rest…
-
Unscored —
Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service (reboot) vi…
-
Unscored —
The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of servi…
-
Unscored —
CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated…
-
Unscored —CVE-2002-0951 Public exploit
SQL injection vulnerability in Ruslan <Body>Builder allows remote attackers to gain administrative privileges via a "'-…