Archive
November 2002
Vulnerabilities first published in this month (UTC), newest first.
33 results · Feed
-
Unscored —
Multiple buffer overflows in RealOne and RealPlayer allow remote attackers to execute arbitrary code via (1) a Synchron…
-
Unscored —CVE-2002-1322 Public exploit
Rational ClearCase 4.1, 2002.05, and possibly other versions allows remote attackers to cause a denial of service (cras…
-
Unscored —
Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information …
-
Unscored —
Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as…
-
Unscored —
Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow (1) local and possibly …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attac…
-
Unscored —
Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia JRun 4.0 and earlier…
-
Unscored —
Netscape Communicator 4.x allows attackers to use a link to steal a user's preferences, including potentially sensitive…
-
Unscored —
importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary…
-
Unscored —
Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia ColdFusion 6.0 allow…
-
Unscored —
Qualcomm Eudora 5.1.1, 5.2, and possibly other versions stores email attachments in a predictable location, which allow…
-
Unscored —CVE-2002-1293 EPSS 15%
The Microsoft Java implementation, as used in Internet Explorer, provides a public load0() method for the CabCracker cl…
-
Unscored —
Unknown vulnerability in the rlogin KIO subsystem (rlogin.protocol) of KDE 2.x 2.1 and later, and KDE 3.x 3.0.4 and ear…
-
Unscored —CVE-2002-1286 EPSS 21%
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute s…
-
Unscored —CVE-2002-1291 EPSS 18%
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read arbitrary local files …
-
Unscored —
Buffer overflow in Novell iManager (eMFrame) before 1.5 allows remote attackers to cause a denial of service via an aut…
-
Unscored —
Multiple buffer overflows in conf.c for Masqmail 0.1.x before 0.1.17, and 0.2.x before 0.2.15, allow local users to gai…
-
Unscored —
An incomplete fix for a cross-site scripting (XSS) vulnerability in SquirrelMail 1.2.8 calls the strip_tags function on…
-
Unscored —
Unknown vulnerability in the telnet KIO subsystem (telnet.protocol) of KDE 2.x 2.1 and later allows local and remote at…
-
Unscored —CVE-2002-1292 EPSS 22%
The Microsoft Java virtual machine (VM) build 5.0.3805 and earlier, as used in Internet Explorer, allows remote attacke…
-
Unscored —
runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments.
-
Unscored —CVE-2002-1288 EPSS 17%
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to determine the current direc…
-
Unscored —CVE-2002-1289 EPSS 16%
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read restricted process mem…
-
Unscored —CVE-2002-1295 EPSS 15%
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service (…
-
Unscored —CVE-2002-1294 EPSS 15%
The Microsoft Java implementation, as used in Internet Explorer, can provide HTML object references to applets via Java…
-
Unscored —CVE-2002-1287 EPSS 20%
Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer, allows remote attackers…
-
Unscored —
Buffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME environment variable for t…
-
Unscored —CVE-2002-1290 EPSS 14%
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read and modify the content…
-
Unscored —
Unknown vulnerability in Cluster Interconnect for HP TruCluster Server 5.0A, 5.1, and 5.1A may allow local and remote a…
-
Unscored —CVE-2002-1275 Public exploit
Unknown vulnerability in html2ps HTML/PostScript converter 1.0, when used within LPRng, allows remote attackers to exec…
-
Unscored —CVE-2002-1238 Public exploit
Peter Sandvik's Simple Web Server 0.5.1 and earlier allows remote attackers to bypass access restrictions for files via…
-
Unscored —CVE-2002-0869 EPSS 24%
Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through …
-
Unscored —CVE-2002-1181 EPSS 39%
Multiple cross-site scripting (XSS) vulnerabilities in the administrative web pages for Microsoft Internet Information …