Skip to content
OpenAdvisories

Archive

August 2002

Vulnerabilities first published in this month (UTC), newest first.

  1. 12
  2. 24
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 74
  8. 8 
  9. 9 
  10. 105
  11. 11 
  12. 12 
  13. 13 
  14. 144
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 208
  21. 21 
  22. 22 
  23. 2312
  24. 243
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 31162

204 results · Feed

  • Unscored —
    CVE-2002-1071 Public exploit

    ZyXEL Prestige 642R allows remote attackers to cause a denial of service in the Telnet, FTP, and DHCP services (crash) …

  • Unscored —

    The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and earlier do not check cr…

  • Unscored —
    CVE-2002-1042 Public exploit

    Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise …

  • Unscored —

    Multiple buffer overflows in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allow remote attackers …

  • Unscored —

    Thomas Hauck Jana Server 1.4.6 and earlier allows remote attackers to cause a denial of service and possibly execute ar…

  • Unscored —
    CVE-2002-1027 Public exploit

    Cross-site scripting vulnerability in the default HTTP 500 error script (500error.jsp) for Macromedia Sitespring 1.2.0 …

  • Unscored —
    CVE-2002-1036 Public exploit

    Cross-site scripting vulnerability in search.pl for Fluid Dynamics Search Engine (FDSE) before 2.0.0.0055 allows remote…

  • Unscored —
    CVE-2002-1075 Public exploit

    Buffer overflow in Pegasus mail client 4.01 and earlier allows remote attackers to cause a denial of service (crash) an…

  • Unscored —
    CVE-2002-1009 Public exploit

    Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attacker…

  • Unscored —
    CVE-2002-1089 Public exploit

    rwcgi60 CGI program in Oracle Reports Server, by design, provides sensitive information such as the full pathname, whic…

  • Unscored —

    Buffer overflow in web server for Tivoli Management Framework (TMF) ManagedNode 3.6.x through 3.7.1 allows remote attac…

  • Unscored —
    CVE-2002-1008 Public exploit

    Cross-site scripting vulnerability in PowerBASIC urlcount.cgi, as included in Lil' HTTP web server, allows remote attac…

  • Unscored —
    CVE-2002-1033 Public exploit

    Directory traversal vulnerability in none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files …

  • Unscored —
    CVE-2002-1021 Public exploit

    BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a h…

  • Unscored —

    The VerifyLogin function in ezContents 1.41 and earlier does not properly halt program execution if a user fails to log…

  • Unscored —
    CVE-2002-1043 Public exploit

    Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) via a malformed Subject ("\t\t").

  • Unscored —

    Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to (1) cause a deni…

  • Unscored —

    The library feature for Adobe Content Server 3.0 does not verify if a customer has already checked out an eBook, which …

  • Unscored —

    Multiple SQL injection vulnerabilities in ezContents 1.41 and earlier allow remote attackers to conduct unauthorized ac…

  • Unscored —
    CVE-2002-1073 Public exploit

    Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via …

  • Unscored —

    The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook for an arbitrary length…

  • Unscored —

    Buffer overflow in Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) and possibly exe…

  • Unscored —

    Signedness error in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to execu…

  • Unscored —

    Buffer overflow in MyWebServer 1.02 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET r…

  • Unscored —

    ArGoSoft Mail Server 1.8.1.7 and earlier allows a webmail user to cause a denial of service (CPU consumption) by forwar…

  • Unscored —

    Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, does not restrict the number of unsuccessful login a…

  • Unscored —
    CVE-2002-1072 Public exploit

    ZyXEL Prestige 642R 2.50(FA.1) and Prestige 310 V3.25(M.01), allows remote attackers to cause a denial of service via a…

  • Unscored —

    Adobe eBook Reader 2.1 and 2.2 allows a user to copy eBooks to other systems by using the backup feature, capturing the…

  • Unscored —
    CVE-2002-1029 Public exploit

    Res Manager in Worldspan for Windows Gateway 4.1 allows remote attackers to cause a denial of service (crash) via a mal…

  • Unscored —
    CVE-2002-1001 Public exploit

    Buffer overflows in AnalogX Proxy before 4.12 allows remote attackers to cause a denial of service and possibly execute…

  • Unscored —
    CVE-2002-1034 Public exploit

    none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via an absolute pathname in the argum…

  • Unscored —

    Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to cause a denial of service…

  • Unscored —

    Unknown vulnerability in the WebSecure (DFSWeb) configuration utilities in AIX 4.x, possibly related to relative pathna…

  • Unscored —

    Lotus Domino R4 allows remote attackers to bypass access restrictions for files in the web root via an HTTP request app…

  • Unscored —

    Buffer overflow in web server for Tivoli Management Framework (TMF) Endpoint 3.6.x through 3.7.1, before Fixpack 2, all…

  • Unscored —
    CVE-1999-1569 Public exploit

    Quake 1 and NetQuake servers allow remote attackers to cause a denial of service (resource exhaustion or forced disconn…

  • Unscored —

    Buffer overflow in sar for OpenServer 5.0.5 allows local users to gain root privileges via a long -o parameter.

  • Unscored —
    CVE-2000-1204 EPSS 10%

    Vulnerability in the mod_vhost_alias virtual hosting module for Apache 1.3.9, 1.3.11 and 1.3.12 allows remote attackers…

  • Unscored —

    ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not d…

  • Unscored —
    CVE-2000-1205 EPSS 24%

    Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other w…