Skip to content
OpenAdvisories

Archive

April 2003

Vulnerabilities first published in this month (UTC), newest first.

← March 2003 2003 / April May 2003 →
  1. 15
  2. 2350
  3. 34
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 82
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 1513
  16. 162
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 2614
  27. 27 
  28. 28 
  29. 296
  30. 301
All Critical High Medium Low Exploited only Public exploit

397 results · Feed

  • Unscored —
    CVE-2002-0703

    An interaction between the Perl MD5 module (perl-Digest-MD5) and Perl could produce incorrect MD5 checksums for UTF-8 d…

    perl Debian
  • Unscored —
    CVE-2002-0946 Public exploit

    Directory traversal vulnerability in SeaNox Devwex before 1.2002.0601 allows remote attackers to read arbitrary files v…

  • Unscored —
    CVE-2002-0658 Public exploit

    OSSP mm library (libmm) before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via …

    mm Debian
  • Unscored —
    CVE-2002-0847

    tinyproxy HTTP proxy 1.5.0, 1.4.3, and earlier allows remote attackers to execute arbitrary code via memory that is fre…

    tinyproxy Debian
  • Unscored —
    CVE-2002-0506

    Buffer overflow in newt.c of newt windowing library (libnewt) 0.50.33 and earlier may allow attackers to cause a denial…

  • Unscored —
    CVE-2002-0665 Public exploit EPSS 11%

    Macromedia JRun Administration Server allows remote attackers to bypass authentication on the login form via an extra s…

  • Unscored —
    CVE-2002-0845 EPSS 13%

    Buffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HT…

  • Unscored —
    CVE-2002-0945

    Buffer overflow in SeaNox Devwex allows remote attackers to cause a denial of service (crash) and possibly execute arbi…

  • Unscored —
    CVE-2002-0813 Public exploit

    Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote attackers to c…

  • Unscored —
    CVE-2002-0069

    Memory leak in SNMP in Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service.

  • High 7.8
    CVE-2002-0367 Exploited Public exploit

    smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to oth…

    KEV Mar 3, 2022
  • Unscored —
    CVE-2002-0859 Public exploit EPSS 26%

    Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers t…

  • Unscored —
    CVE-2002-0355

    netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the system, even if the use…

  • Unscored —
    CVE-2002-0816

    Buffer overflow in su in Tru64 Unix 5.x allows local users to gain root privileges via a long username and argument.

  • Unscored —
    CVE-2002-0542 Public exploit

    mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is not in interactive mode…

  • Unscored —
    CVE-2002-0292

    Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers t…

  • Unscored —
    CVE-2002-0808

    Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when performing a mass change, sets the groupset of all bugs to t…

  • Unscored —
    CVE-2002-0054 EPSS 22%

    SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not proper…

  • Unscored —
    CVE-2002-0505

    Memory leak in the Call Telephony Integration (CTI) Framework authentication for Cisco CallManager 3.0 and 3.1 before 3…

  • Unscored —
    CVE-2002-0339

    Cisco IOS 11.1CC through 12.2 with Cisco Express Forwarding (CEF) enabled includes portions of previous packets in the …

  • Unscored —
    CVE-2002-0532

    EMU Webmail allows local users to execute arbitrary programs via a .. (dot dot) in the HTTP Host header that points to …

  • Unscored —
    CVE-2002-0856

    SQL*NET listener for Oracle Net Oracle9i 9.0.x and 9.2 allows remote attackers to cause a denial of service (crash) via…

  • Unscored —
    CVE-2002-0768

    Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a maliciou…

  • Unscored —
    CVE-2002-0597 Public exploit EPSS 47%

    LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service (CPU/memory exhaustion) v…

  • Unscored —
    CVE-2002-0120

    Apple Palm Desktop 4.0b76 and 4.0b77 creates world-readable backup files and folders when a hotsync is performed, which…

  • Unscored —
    CVE-2002-0714

    FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP se…

    squid Debian
  • Unscored —
    CVE-2002-0404

    Vulnerability in GIOP dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (memory c…

  • Unscored —
    CVE-2002-0663

    Buffer overflow in HTTP Proxy for Symantec Norton Personal Internet Firewall 3.0.4.91 and Norton Internet Security 2001…

  • Unscored —
    CVE-2002-0785

    AOL Instant Messenger (AIM) allows remote attackers to cause a denial of service (crash) via an "AddBuddy" link with th…

  • Unscored —
    CVE-2002-0809

    Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, does not properly handle URL-encoded field names that are generat…

  • Unscored —
    CVE-2002-0033 Public exploit EPSS 23%

    Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary cod…

  • Unscored —
    CVE-2002-0213

    xkas in Xinet K-AShare 0.011.01 for IRIX allows local users to read arbitrary files via a symlink attack on the VOLICON…

  • Unscored —
    CVE-2002-0831

    The kqueue mechanism in FreeBSD 4.3 through 4.6 STABLE allows local users to cause a denial of service (kernel panic) v…

  • Unscored —
    CVE-2002-0766

    OpenBSD 2.9 through 3.1 allows local users to cause a denial of service (resource exhaustion) and gain root privileges …

  • Unscored —
    CVE-2002-0967

    Buffer overflow in eDonkey 2000 35.16.60 and earlier allows remote attackers to cause a denial of service (crash) and p…

  • Unscored —
    CVE-2002-0650 EPSS 18%

    The keep-alive mechanism for Microsoft SQL Server 2000 allows remote attackers to cause a denial of service (bandwidth …

  • Unscored —
    CVE-2002-0765

    sshd in OpenSSH 3.2.2, when using YP with netgroups and under certain conditions, may allow users to successfully authe…

    openssh Debian
  • Unscored —
    CVE-2002-0617 EPSS 11%

    The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creati…

  • Unscored —
    CVE-2002-0401

    SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) or execute arb…

  • Unscored —
    CVE-2002-0892 Public exploit

    The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web …