Archive
2 April 2003
Vulnerabilities first published on this day (UTC), newest first.
91 results · Clear filters · Feed
-
Unscored —
Buffer overflow in Linux xinetd 2.1.8.9pre11-1 and earlier may allow remote attackers to execute arbitrary code via a l…
-
Unscored —CVE-2001-0748 Public exploit
Acme.Serve 1.7, as used in Cisco Secure ACS Unix and possibly other products, allows remote attackers to read arbitrary…
-
Unscored —CVE-2001-0873 Public exploit
uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileg…
-
Unscored —
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitr…
-
Unscored —CVE-2001-1036 Public exploit
GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filenam…
-
Unscored —CVE-2001-1303 Public exploit
The default configuration of SecuRemote for Check Point Firewall-1 allows remote attackers to obtain sensitive configur…
-
Unscored —CVE-2001-1106 Public exploit
The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program …
-
Unscored —CVE-2001-1291 Public exploit
The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provid…
-
Unscored —CVE-2001-1334 Public exploit
Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitra…
-
Unscored —CVE-2002-0946 Public exploit
Directory traversal vulnerability in SeaNox Devwex before 1.2002.0601 allows remote attackers to read arbitrary files v…
-
Unscored —CVE-2002-0658 Public exploit
OSSP mm library (libmm) before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via …
-
Unscored —
Macromedia JRun Administration Server allows remote attackers to bypass authentication on the login form via an extra s…
-
Unscored —CVE-2002-0813 Public exploit
Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote attackers to c…
-
High 7.8
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to oth…
KEV Mar 3, 2022 -
Unscored —
Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers t…
-
Unscored —CVE-2002-0542 Public exploit
mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is not in interactive mode…
-
Unscored —
LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service (CPU/memory exhaustion) v…
-
Unscored —
Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary cod…
-
Unscored —CVE-2002-0892 Public exploit
The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web …
-
Unscored —
Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary…
-
Unscored —
Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to exe…
-
Unscored —CVE-2002-0953 Public exploit
globals.php in PHP Address before 0.2f, with the PHP allow_url_fopen and register_globals variables enabled, allows rem…
-
Unscored —CVE-2002-0824 Public exploit
BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specifi…
-
Unscored —
Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local user…
-
Unscored —
Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large n…
-
Unscored —CVE-2002-0887 Public exploit
scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attac…
-
Unscored —CVE-2002-0553 Public exploit
Cross-site scripting vulnerability in SunShop 2.5 and earlier allows remote attackers to gain administrative privileges…
-
Unscored —CVE-2002-0995 Public exploit
login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login.php with the action para…
-
Unscored —
dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication and gain privileges b…
-
Unscored —CVE-2002-0300 Public exploit
gnujsp 1.0.0 and 1.0.1 allows remote attackers to list directories, read source code of certain scripts, and bypass acc…
-
Unscored —
Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allow…
-
Unscored —CVE-2002-0898 Public exploit
Opera 6.0.1 and 6.0.2 allows a remote web site to upload arbitrary files from the client system, without prompting the …
-
Unscored —CVE-2002-0431 Public exploit
XTux allows remote attackers to cause a denial of service (CPU consumption) via random inputs in the initial connection.
-
Unscored —CVE-2002-0454 Public exploit
Qpopper (aka in.qpopper or popper) 4.0.3 and earlier allows remote attackers to cause a denial of service (CPU consumpt…
-
Unscored —CVE-2002-0737 Public exploit
Sambar web server before 5.2 beta 1 allows remote attackers to obtain source code of server-side scripts, or cause a de…
-
Unscored —CVE-2002-0276 Public exploit
Buffer overflow in various decoders in Ettercap 0.6.3.1 and earlier, when running on networks with an MTU greater than …
-
Unscored —CVE-2002-0250 Public exploit
Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allo…
-
Unscored —CVE-2002-0539 Public exploit
Demarc PureSecure 1.05 allows remote attackers to gain administrative privileges via a SQL injection attack in a sessio…
-
Unscored —CVE-2002-0817 Public exploit
Format string vulnerability in super for Linux allows local users to gain root privileges via a long command line argum…
-
Unscored —CVE-2002-0676 Public exploit
SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remot…