Skip to content
OpenAdvisories

Archive

August 2002

Vulnerabilities first published in this month (UTC), newest first.

← July 2002 2002 / August September 2002 →
  1. 12
  2. 24
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 74
  8. 8 
  9. 9 
  10. 105
  11. 11 
  12. 12 
  13. 13 
  14. 144
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 208
  21. 21 
  22. 22 
  23. 2312
  24. 243
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 31162
All Critical High Medium Low Exploited only Public exploit

204 results · Feed

  • Unscored —
    CVE-2000-1206

    Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_a…

  • Unscored —
    CVE-2000-1214

    Buffer overflows in the (1) outpack or (2) buf variables of ping in iputils before 20001010, as distributed on Red Hat …

  • Unscored —
    CVE-2002-0723 Public exploit EPSS 15%

    Microsoft Internet Explorer 5.5 and 6.0 does not properly verify the domain of a frame within a browser window, which a…

  • Unscored —
    CVE-2002-0724 Public exploit EPSS 26%

    Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows att…

  • Unscored —
    CVE-2002-0983

    IRC client irssi in irssi-text before 0.8.4 allows remote attackers to cause a denial of service (crash) via an IRC cha…

  • Unscored —
    CVE-2002-0973

    Integer signedness error in several system calls for FreeBSD 4.6.1 RELEASE-p10 and earlier may allow attackers to acces…

  • Unscored —
    CVE-2002-0977 EPSS 11%

    Buffer overflow in Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to execute …

  • Unscored —
    CVE-2002-0834

    Buffer overflow in the ISIS dissector for Ethereal 0.9.5 and earlier allows remote attackers to cause a denial of servi…

  • Unscored —
    CVE-2002-0978

    Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to upload or download arbitrar…

  • Unscored —
    CVE-2002-0975 EPSS 13%

    Buffer overflow in Microsoft DirectX Files Viewer ActiveX control (xweb.ocx) 2.0.6.15 and earlier allows remote attacke…

  • Unscored —
    CVE-2002-0861 EPSS 16%

    Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via s…

  • Unscored —
    CVE-2002-0979

    The Java logging feature for the Java Virtual Machine in Internet Explorer writes output from functions such as System.…

  • Unscored —
    CVE-2002-0976 Public exploit EPSS 14%

    Internet Explorer 4.0 and later allows remote attackers to read arbitrary files via a web page that accesses a legacy X…

  • Unscored —
    CVE-2002-0972

    Buffer overflows in PostgreSQL 7.2 allow attackers to cause a denial of service and possibly execute arbitrary code via…

  • Unscored —
    CVE-2002-0982 Public exploit

    Microsoft SQL Server 2000 SP2, when configured as a distributor, allows attackers to execute arbitrary code via the @sc…

  • Unscored —
    CVE-2002-0971

    Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the …

  • Unscored —
    CVE-2002-0980 Public exploit EPSS 27%

    The Web Folder component for Internet Explorer 5.5 and 6.0 writes an error message to a known location in the temporary…

  • Unscored —
    CVE-2002-0721 Public exploit EPSS 46%

    Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated wit…

  • Unscored —
    CVE-2002-0725

    NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard…

  • Unscored —
    CVE-2002-0874 Public exploit

    Vulnerability in Interchange 4.8.6, 4.8.3, and other versions, when running in INET mode, allows remote attackers to re…

  • Unscored —
    CVE-2002-0654 Public exploit EPSS 59%

    Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the se…

    apache2 Debian
  • Unscored —
    CVE-2002-0858

    catsnmp in Oracle 9i and 8i is installed with a dbsnmp user with a default dbsnmp password, which allows attackers to p…

  • Unscored —
    CVE-2002-0093

    Buffer overflow in ipcs for HP Tru64 UNIX 4.0f through 5.1a may allow attackers to execute arbitrary code, a different …

  • Unscored —
    CVE-2002-0870

    The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability (CVE-2001-0622…

  • Unscored —
    CVE-2002-0857 EPSS 14%

    Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allo…

  • Unscored —
    CVE-2002-0852

    Buffer overflows in Cisco Virtual Private Network (VPN) Client 3.5.4 and earlier allows remote attackers to cause a den…

  • Unscored —
    CVE-2002-0854

    Buffer overflows in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the i4l package on SuSE 7.3, 8.0, and possibly…

  • Unscored —
    CVE-2002-0855 Public exploit

    Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users vi…

  • Unscored —
    CVE-2002-0632

    Vulnerability in SGI BDS (Bulk Data Service) BDSPro 2.4 and earlier allows clients to read arbitrary files on a BDS ser…

  • Unscored —
    CVE-2002-0812 Public exploit

    Information leak in Compaq WL310, and the Orinoco Residential Gateway access point it is based on, uses a system identi…

  • Unscored —
    CVE-2002-0849

    Linux-iSCSI iSCSI implementation installs the iscsi.conf file with world-readable permissions on some operating systems…

  • Unscored —
    CVE-2002-0660

    Buffer overflow in libpng 1.0.12-3.woody.2 and libpng3 1.2.1-1.1.woody.2 on Debian GNU/Linux 3.0, and other operating s…

  • Unscored —
    CVE-2002-0661 Public exploit EPSS 70%

    Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to …

    apache2 Debian
  • Unscored —
    CVE-2000-1209 Public exploit EPSS 87%

    The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3…

  • Unscored —
    CVE-2002-0827

    Vulnerability in pppd on UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to gain root privileges via (1) ppptalk …

  • Unscored —
    CVE-2002-0825

    Buffer overflow in the DNS SRV code for nss_ldap before nss_ldap-198 allows remote attackers to cause a denial of servi…

    libnss-ldap Debian
  • Unscored —
    CVE-2002-0832

    Internet Explorer 5, 5.6, and 6 allows remote attackers to bypass cookie privacy settings and store information across …

  • Unscored —
    CVE-2002-0833 Public exploit

    Buffer overflow in Eudora 5.1.1 and 5.0-J for Windows, and possibly other versions, allows remote attackers to execute …

  • Unscored —
    CVE-2002-0820

    FreeBSD kernel 4.6 and earlier closes the file descriptors 0, 1, and 2 after they have already been assigned to /dev/nu…

  • Unscored —
    CVE-2002-0822

    Ethereal 0.9.4 and earlier allows remote attackers to cause a denial of service and possibly excecute arbitrary code vi…