Archive
2 April 2003
Vulnerabilities first published on this day (UTC), newest first.
350 results · Feed
-
Unscored —
login in HP-UX 10.26 does not record failed login attempts in /var/adm/btmp, which could allow attackers to conduct bru…
-
Unscored —
Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 stores the backup agent user name and password in c…
-
Unscored —
Netscape 4.79 and earlier for MacOS allows an attacker with access to the browser to obtain passwords from form fields …
-
Unscored —
Buffer overflow in Linux xinetd 2.1.8.9pre11-1 and earlier may allow remote attackers to execute arbitrary code via a l…
-
Unscored —CVE-2001-0748 Public exploit
Acme.Serve 1.7, as used in Cisco Secure ACS Unix and possibly other products, allows remote attackers to read arbitrary…
-
Unscored —CVE-2001-0724 EPSS 12%
Internet Explorer 5.5 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless I…
-
Unscored —
Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 creates a hidden share named ARCSERVE$, which allow…
-
Unscored —CVE-2001-0873 Public exploit
uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileg…
-
Unscored —
Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user …
-
Unscored —
The "echo simulation" traffic analysis countermeasure in OpenSSH before 2.9.9p2 sends an additional echo packet after t…
-
Unscored —
MailSafe in Zone Labs ZoneAlarm 2.6 and earlier and ZoneAlarm Pro 2.6 and 2.4 does not block prohibited file types with…
-
Unscored —
rcs2log, as used in Emacs 20.4, xemacs 21.1.10 and other versions before 21.4, and possibly other packages, allows loca…
-
Unscored —
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitr…
-
Unscored —CVE-2001-1036 Public exploit
GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filenam…
-
Unscored —
Bugzilla before 2.14 allows Bugzilla users to bypass group security checks by marking a bug as the duplicate of a restr…
-
Unscored —CVE-2001-1303 Public exploit
The default configuration of SecuRemote for Check Point Firewall-1 allows remote attackers to obtain sensitive configur…
-
Unscored —
VMWare creates a temporary file vmware-log.USERNAME with insecure permissions, which allows local users to read or modi…
-
Unscored —
SmallHTTP 1.204 through 3.00 beta 8 allows remote attackers to cause a denial of service via multiple long URL requests.
-
Unscored —CVE-2001-1106 Public exploit
The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program …
-
Unscored —
More.groupware PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request …
-
Unscored —
tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other directories, whic…
-
Unscored —
Leon J Breedt pam-pgsql before 0.5.2 allows remote attackers to execute arbitrary SQL code and bypass authentication or…
-
Unscored —CVE-2001-1291 Public exploit
The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provid…
-
Unscored —CVE-2001-1334 Public exploit
Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitra…
-
Unscored —
expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to ga…
-
Unscored —
initscript in setserial 2.17-4 and earlier uses predictable temporary file names, which could allow local users to cond…
-
Unscored —
process_bug.cgi in Bugzilla before 2.14 does not set the "groupset" bit when a bug is moved between product groups, whi…
-
Unscored —
Oracle 9i Application Server 1.0.2 allows remote attackers to obtain the physical path of a file under the server root …
-
Unscored —
Buffer overflow in ultimate_source function of man 1.5 and earlier allows local users to gain privileges.
-
Unscored —
pmake before 2.1.35 in Turbolinux 6.05 and earlier is installed with setuid root privileges, which could allow local us…
-
Unscored —
fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdi…
-
Unscored —
The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may…
-
Unscored —
OpenSSH before 2.9.9, while using keypairs and multiple keys of different types in the ~/.ssh/authorized_keys2 file, ma…
-
Unscored —CVE-2001-1371 EPSS 12%
The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy a…
-
Unscored —
fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on te…
-
Unscored —
Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attack…
-
Unscored —
Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly c…
-
Unscored —
Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication fa…
-
Unscored —
An interaction between the Perl MD5 module (perl-Digest-MD5) and Perl could produce incorrect MD5 checksums for UTF-8 d…
-
Unscored —CVE-2002-0946 Public exploit
Directory traversal vulnerability in SeaNox Devwex before 1.2002.0601 allows remote attackers to read arbitrary files v…