Archive
October 2002
Vulnerabilities first published in this month (UTC), newest first.
43 results · Feed
-
Unscored —
The administration module for Oracle Web Cache in Oracle9iAS (9i Application Suite) 9.0.2 allows remote attackers to ca…
-
Unscored —
Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to re…
-
Unscored —
IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data,…
-
Unscored —CVE-2002-1235 EPSS 15%
The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (kr…
-
Unscored —
A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian 2.2, and before 1.3.26…
-
Unscored —CVE-2002-1168 Public exploit
Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 al…
-
Unscored —CVE-2002-1167 Public exploit
Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 al…
-
Unscored —
GNU tar 1.13.19 and other versions before 1.13.25 allows remote attackers to overwrite arbitrary files via a symlink at…
-
Unscored —
Unknown vulnerability in NFS on Solaris 2.5.1 through Solaris 9 allows an NFS client to cause a denial of service by ki…
-
Unscored —
Directory traversal vulnerability in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1…
-
Unscored —
Buffer overflow in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote…
-
Unscored —
The Sabserv client component in Sabre Desktop Reservation Software 4.2 through 4.4 allows remote attackers to cause a d…
-
Unscored —
The xp_runwebtask stored procedure in the Web Tasks component of Microsoft SQL Server 7.0 and 2000, Microsoft Data Engi…
-
Unscored —
Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts (1) manuf and (2) dia…
-
Unscored —
Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier (claimed as buffer overflows in some sources) all…
-
Unscored —
Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote…
-
Unscored —
Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote at…
-
Unscored —
Unknown vulnerabilities in Heimdal before 0.5 with unknown impact, possibly in the (1) kadmind and (2) kdc servers, may…
-
Unscored —
Cisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers to gain access and pl…
-
Unscored —
IBM SecureWay Firewall before 4.2.2 performs extra processing before determining that a packet is invalid and dropping …
-
Unscored —
Buffer overflow in talkd on NetBSD 1.6 and earlier, and possibly other operating systems, may allow remote attackers to…
-
Unscored —
IBM AIX 4.3.3 and AIX 5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a flood of …
-
Unscored —CVE-2002-1192 Public exploit
Multiple buffer overflows in rogue on NetBSD 1.6 and earlier, FreeBSD 4.6, and possibly other operating systems, allows…
-
Unscored —
Unknown vulnerability in routed for HP Tru64 UNIX V4.0F through V5.1A allows local and remote attackers to read arbitra…
-
Unscored —
Buffer overflow in sar for SCO OpenServer 5.0.0 through 5.0.5 may allow local users to gain root privileges via a long …
-
Unscored —CVE-2002-0843 EPSS 21%
Buffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and Apache 2.x before 2.0…
-
Unscored —
Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Ed…
-
Unscored —
The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UI…
-
Unscored —CVE-2002-0370 EPSS 43%
Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or exe…
-
Unscored —
The Web Reports Server for SurfControl SuperScout WebFilter stores the "scwebusers" username and password file in a web…
-
Unscored —
UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator fu…
-
Unscored —
The Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to cause a denial of service (CPU c…
-
Unscored —CVE-2002-0708 Public exploit
Directory traversal vulnerability in the Web Reports Server for SurfControl SuperScout WebFilter allows remote attacker…
-
Unscored —CVE-2002-0709 Public exploit
SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote attackers to …
-
Unscored —CVE-2002-1165 Public exploit
Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 fr…
-
Unscored —CVE-2002-0838 Public exploit
Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and …
-
Unscored —
Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to …
-
Unscored —CVE-2002-0863 EPSS 22%
Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksu…
-
Unscored —
The Remote Desktop Sharing (RDS) Screen Saver Protection capability for Microsoft NetMeeting 3.01 through SP2 (4.4.3396…
-
Unscored —
Buffer overflows in Fetchmail 6.0.0 and earlier allow remote attackers to cause a denial of service (crash) or execute …