December 2002

28 results · Feed

• Unscored —
  CVE-2002-1386

  Buffer overflow in traceroute-nanog (aka traceroute-ng) may allow local users to execute arbitrary code via a long host…

  Dec 31, 2002
• Unscored —
  CVE-2002-1387

  The spray mode in traceroute-nanog (aka traceroute-ng) may allow local users to overwrite arbitrary memory locations vi…

  Dec 31, 2002
• Unscored —
  CVE-2002-1177

  Multiple buffer overflows in Winamp 3.0, when displaying an MP3 in the Media Library window, allows remote attackers to…

  Dec 20, 2002
• Unscored —
  CVE-2002-1368 Public exploit EPSS 15%

  Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) a…

  cups Debian
  Dec 20, 2002
• Unscored —
  CVE-2002-1383

  Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers to execut…

  cups Debian
  Dec 20, 2002
• Unscored —
  CVE-2002-1176

  Buffer overflow in Winamp 2.81 allows remote attackers to execute arbitrary code via a long Artist ID3v2 tag in an MP3 …

  Dec 20, 2002
• Unscored —
  CVE-2002-1358

  Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote a…

  Dec 17, 2002
• Unscored —
  CVE-2002-1359 Public exploit EPSS 80%

  Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attacker…

  Dec 17, 2002
• Unscored —
  CVE-2002-1378

  Multiple buffer overflows in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allow remote attackers to execute arbitrary code …

  Dec 17, 2002
• Unscored —
  CVE-2002-1258 EPSS 15%

  Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer …

  Dec 17, 2002
• Unscored —
  CVE-2002-1357

  Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, whi…

  Dec 17, 2002
• Unscored —
  CVE-2002-1360

  Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is…

  Dec 17, 2002
• Unscored —
  CVE-2002-1355

  Multiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a…

  Dec 17, 2002
• Unscored —
  CVE-2002-1376

  libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for cer…

  Dec 17, 2002
• Unscored —
  CVE-2002-1345

  Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to creat…

  Dec 17, 2002
• Unscored —
  CVE-2002-1356

  Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary …

  Dec 17, 2002
• Unscored —
  CVE-2002-1379

  OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads …

  Dec 17, 2002
• Unscored —
  CVE-2002-1339 EPSS 12%

  The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows…

  Dec 11, 2002
• Unscored —
  CVE-2002-1342

  Unknown vulnerability in smb2www 980804-16 and earlier allows remote attackers to execute arbitrary commands.

  smb2www Debian
  Dec 11, 2002
• Unscored —
  CVE-2002-1262 EPSS 12%

  Internet Explorer 5.5 and 6.0 does not perform complete security checks on external caching, which allows remote attack…

  Dec 11, 2002
• Unscored —
  CVE-2002-1341

  Cross-site scripting (XSS) vulnerability in read_body.php for SquirrelMail 1.2.10, 1.2.9, and earlier allows remote att…

  Dec 11, 2002
• Unscored —
  CVE-2002-1338 EPSS 23%

  The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified …

  Dec 11, 2002
• Unscored —
  CVE-2002-1347

  Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service a…

  cyrus-sasl2 Debian
  Dec 11, 2002
• Unscored —
  CVE-2002-1340 EPSS 12%

  The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attack…

  Dec 11, 2002
• Unscored —
  CVE-2002-1344

  Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the…

  wget Debian
  Dec 11, 2002
• Unscored —
  CVE-2002-1269

  Unknown vulnerability in NetInfo Manager application in Mac OS X 10.2.2 allows local users to access restricted parts o…

  Dec 3, 2002
• Unscored —
  CVE-2002-1335

  Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attac…

  w3m Debian
  Dec 3, 2002
• Unscored —
  CVE-2002-1334 Public exploit

  Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute ar…

  Dec 3, 2002