Archive
April 2003
Vulnerabilities first published in this month (UTC), newest first.
105 results · Clear filters · Feed
-
Unscored —
dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication and gain privileges b…
-
Unscored —CVE-2002-0300 Public exploit
gnujsp 1.0.0 and 1.0.1 allows remote attackers to list directories, read source code of certain scripts, and bypass acc…
-
Unscored —
Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allow…
-
Unscored —CVE-2002-0898 Public exploit
Opera 6.0.1 and 6.0.2 allows a remote web site to upload arbitrary files from the client system, without prompting the …
-
Unscored —CVE-2002-0431 Public exploit
XTux allows remote attackers to cause a denial of service (CPU consumption) via random inputs in the initial connection.
-
Unscored —CVE-2002-0454 Public exploit
Qpopper (aka in.qpopper or popper) 4.0.3 and earlier allows remote attackers to cause a denial of service (CPU consumpt…
-
Unscored —CVE-2002-0737 Public exploit
Sambar web server before 5.2 beta 1 allows remote attackers to obtain source code of server-side scripts, or cause a de…
-
Unscored —CVE-2002-0276 Public exploit
Buffer overflow in various decoders in Ettercap 0.6.3.1 and earlier, when running on networks with an MTU greater than …
-
Unscored —CVE-2002-0250 Public exploit
Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allo…
-
Unscored —CVE-2002-0539 Public exploit
Demarc PureSecure 1.05 allows remote attackers to gain administrative privileges via a SQL injection attack in a sessio…
-
Unscored —CVE-2002-0817 Public exploit
Format string vulnerability in super for Linux allows local users to gain root privileges via a long command line argum…
-
Unscored —CVE-2002-0676 Public exploit
SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remot…
-
Unscored —
Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute a…
-
Unscored —CVE-2002-0964 Public exploit
Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via mul…
-
Unscored —CVE-2002-0484 Public exploit
move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attac…
-
Unscored —CVE-2002-0006 Public exploit
XChat 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allows remote attackers to execute arbitr…
-
Unscored —
Blahz-DNS 0.2 and earlier allows remote attackers to bypass authentication and modify configuration by directly request…
-
Unscored —CVE-2002-0451 Public exploit
filemanager_forms.php in PHProjekt 3.1 and 3.1a allows remote attackers to execute arbitrary PHP code by specifying the…
-
Unscored —CVE-2002-0095 Public exploit
The default configuration of BSCW (Basic Support for Cooperative Work) 3.x and possibly version 4 enables user self reg…
-
Unscored —
SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the T…
-
Unscored —CVE-2002-0575 Public exploit
Buffer overflow in OpenSSH before 2.9.9, and 3.x before 3.2.1, with Kerberos/AFS support and KerberosTgtPassing or AFST…
-
Unscored —
csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup comma…
-
Unscored —CVE-2002-0987 Public exploit
X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp u…
-
Unscored —CVE-2002-0246 Public exploit
Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privi…
-
Unscored —CVE-2002-0900 Public exploit
Buffer overflow in pks PGP public key web server before 0.9.5 allows remote attackers to cause a denial of service (cra…
-
Unscored —CVE-2002-0938 Public exploit
Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote attackers to execute arbitrary script or HTML a…
-
Unscored —
Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to view arbitrary files that contain the "{" char…
-
Unscored —CVE-2002-0851 Public exploit
Format string vulnerability in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the ISDN4Linux (i4l) package allows…
-
Unscored —CVE-2002-0330 Public exploit
Cross-site scripting vulnerability in codeparse.php of Open Bulletin Board (OpenBB) 1.0.0 allows remote attackers to ex…
-
Unscored —
The legacy <script> data-island capability for XML in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote atta…
-
Unscored —
Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 200…
-
Unscored —CVE-2002-0406 Public exploit
Menasoft SPHERE server 0.99x and 0.5x allows remote attackers to cause a denial of service by establishing a large numb…
-
Unscored —CVE-2002-0068 Public exploit
Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arb…
-
Unscored —CVE-2002-0653 Public exploit
Off-by-one buffer overflow in the ssl_compat_directive function, as called by the rewrite_command hook for mod_ssl Apac…
-
Unscored —CVE-2002-0184 Public exploit
Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local use…
-
Unscored —CVE-2002-0875 Public exploit
Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose acce…
-
Unscored —CVE-2002-0741 Public exploit
psyBNC 2.3 allows remote attackers to cause a denial of service (CPU consumption and resource exhaustion) by sending a …
-
Unscored —
Buffer overflow in a legacy ActiveX control used to display specially formatted text in Microsoft Internet Explorer 5.0…
-
Unscored —CVE-2002-0733 Public exploit
Cross-site scripting vulnerability in thttpd 2.20 and earlier allows remote attackers to execute arbitrary script via a…
-
Unscored —
Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via…