Archive
2 April 2003
Vulnerabilities first published on this day (UTC), newest first.
91 results · Clear filters · Feed
-
Unscored —
Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute a…
-
Unscored —CVE-2002-0964 Public exploit
Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via mul…
-
Unscored —CVE-2002-0484 Public exploit
move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attac…
-
Unscored —CVE-2002-0006 Public exploit
XChat 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allows remote attackers to execute arbitr…
-
Unscored —
Blahz-DNS 0.2 and earlier allows remote attackers to bypass authentication and modify configuration by directly request…
-
Unscored —CVE-2002-0451 Public exploit
filemanager_forms.php in PHProjekt 3.1 and 3.1a allows remote attackers to execute arbitrary PHP code by specifying the…
-
Unscored —CVE-2002-0095 Public exploit
The default configuration of BSCW (Basic Support for Cooperative Work) 3.x and possibly version 4 enables user self reg…
-
Unscored —
SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the T…
-
Unscored —CVE-2002-0575 Public exploit
Buffer overflow in OpenSSH before 2.9.9, and 3.x before 3.2.1, with Kerberos/AFS support and KerberosTgtPassing or AFST…
-
Unscored —
csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup comma…
-
Unscored —CVE-2002-0987 Public exploit
X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp u…
-
Unscored —CVE-2002-0246 Public exploit
Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privi…
-
Unscored —CVE-2002-0900 Public exploit
Buffer overflow in pks PGP public key web server before 0.9.5 allows remote attackers to cause a denial of service (cra…
-
Unscored —CVE-2002-0938 Public exploit
Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote attackers to execute arbitrary script or HTML a…
-
Unscored —
Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to view arbitrary files that contain the "{" char…
-
Unscored —CVE-2002-0851 Public exploit
Format string vulnerability in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the ISDN4Linux (i4l) package allows…
-
Unscored —CVE-2002-0330 Public exploit
Cross-site scripting vulnerability in codeparse.php of Open Bulletin Board (OpenBB) 1.0.0 allows remote attackers to ex…
-
Unscored —
The legacy <script> data-island capability for XML in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote atta…
-
Unscored —
Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 200…
-
Unscored —CVE-2002-0406 Public exploit
Menasoft SPHERE server 0.99x and 0.5x allows remote attackers to cause a denial of service by establishing a large numb…
-
Unscored —CVE-2002-0068 Public exploit
Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arb…
-
Unscored —CVE-2002-0653 Public exploit
Off-by-one buffer overflow in the ssl_compat_directive function, as called by the rewrite_command hook for mod_ssl Apac…
-
Unscored —CVE-2002-0184 Public exploit
Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local use…
-
Unscored —CVE-2002-0875 Public exploit
Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose acce…
-
Unscored —CVE-2002-0741 Public exploit
psyBNC 2.3 allows remote attackers to cause a denial of service (CPU consumption and resource exhaustion) by sending a …
-
Unscored —
Buffer overflow in a legacy ActiveX control used to display specially formatted text in Microsoft Internet Explorer 5.0…
-
Unscored —CVE-2002-0733 Public exploit
Cross-site scripting vulnerability in thttpd 2.20 and earlier allows remote attackers to execute arbitrary script via a…
-
Unscored —
Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via…
-
Unscored —CVE-2002-0543 Public exploit
Directory traversal vulnerability in Aprelium Abyss Web Server (abyssws) before 1.0.0.2 allows remote attackers to read…
-
Unscored —CVE-2002-0536 Public exploit
PHPGroupware 0.9.12 and earlier, when running with the magic_quotes_gpc feature disabled, allows remote attackers to co…
-
Unscored —
LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET reque…
-
Unscored —CVE-2002-0734 Public exploit
b2edit.showposts.php in B2 2.0.6pre2 and earlier does not properly load the b2config.php file in some configurations, w…
-
Unscored —CVE-2002-0897 Public exploit
LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that…
-
Unscored —
Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Serv…
-
Unscored —CVE-2002-0968 Public exploit
Buffer overflow in AnalogX SimpleServer:WWW 1.16 and earlier allows remote attackers to cause a denial of service (cras…
-
Unscored —CVE-2002-0329 Public exploit
Cross-site scripting vulnerability in Snitz Forums 2000 3.3.03 and earlier allows remote attackers to execute arbitrary…
-
Unscored —
Buffer overflow in Winhlp32.exe allows remote attackers to execute arbitrary code via an HTML document that calls the H…
-
Unscored —
Buffer overflow in VMware Authorization Service for VMware GSX Server 2.0.0 build-2050 allows remote authenticated user…
-
Unscored —
Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and poss…
-
Unscored —CVE-2002-1060 Public exploit
Cross-site scripting (XSS) vulnerability in Blue Coat Systems (formerly CacheFlow) CacheOS on Client Accelerator 4.1.06…