Skip to content
OpenAdvisories

Archive

April 2003

Vulnerabilities first published in this month (UTC), newest first.

← March 2003 2003 / April May 2003 →
  1. 15
  2. 2350
  3. 34
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 82
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 1513
  16. 162
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 2614
  27. 27 
  28. 28 
  29. 296
  30. 301
All Critical High Medium Low Exploited only Public exploit

397 results · Feed

  • Unscored —
    CVE-2002-0569 EPSS 19%

    Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct…

  • Unscored —
    CVE-2002-0169

    The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which…

  • Unscored —
    CVE-2002-0300 Public exploit

    gnujsp 1.0.0 and 1.0.1 allows remote attackers to list directories, read source code of certain scripts, and bypass acc…

  • Unscored —
    CVE-2002-0163 Public exploit EPSS 15%

    Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allow…

  • Unscored —
    CVE-2002-0488

    Linux Directory Penguin traceroute.pl CGI script 1.0 allows remote attackers to execute arbitrary code via shell metach…

  • Unscored —
    CVE-2002-0267

    preferences.php in Simple Internet Publishing System (SIPS) before 0.3.1 allows remote attackers to gain administrative…

  • Unscored —
    CVE-2002-0898 Public exploit

    Opera 6.0.1 and 6.0.2 allows a remote web site to upload arbitrary files from the client system, without prompting the …

  • Unscored —
    CVE-2002-0431 Public exploit

    XTux allows remote attackers to cause a denial of service (CPU consumption) via random inputs in the initial connection.

  • Unscored —
    CVE-2002-0454 Public exploit

    Qpopper (aka in.qpopper or popper) 4.0.3 and earlier allows remote attackers to cause a denial of service (CPU consumpt…

  • Unscored —
    CVE-2002-0737 Public exploit

    Sambar web server before 5.2 beta 1 allows remote attackers to obtain source code of server-side scripts, or cause a de…

  • Unscored —
    CVE-2002-0276 Public exploit

    Buffer overflow in various decoders in Ettercap 0.6.3.1 and earlier, when running on networks with an MTU greater than …

  • High —
    CVE-2002-0493

    Apache Tomcat may be started without proper security settings

    Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, which could allow attackers to bypass intended restrictions.

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2002-0250 Public exploit

    Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allo…

  • Unscored —
    CVE-2002-0914

    Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU consumption) via a messag…

    courier Debian
  • Unscored —
    CVE-2002-0719 EPSS 10%

    SQL injection vulnerability in the function that services for Microsoft Content Management Server (MCMS) 2001 allows re…

  • Unscored —
    CVE-2002-0539 Public exploit

    Demarc PureSecure 1.05 allows remote attackers to gain administrative privileges via a SQL injection attack in a sessio…

  • Unscored —
    CVE-2002-0309

    SMTP proxy in Symantec Enterprise Firewall (SEF) 6.5.x includes the firewall's physical interface name and address in a…

  • Unscored —
    CVE-2002-0826 EPSS 12%

    Buffer overflow in WS_FTP FTP Server 3.1.1 allows remote authenticated users to execute arbitrary code via a long SITE …

  • Unscored —
    CVE-2002-0185

    mod_python version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via …

  • Medium —
    CVE-2002-0935

    Apache Tomcat DoS Via Requests Including Null Characters

    Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of requests to the server with null characters, which causes the working threads to hang.

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2002-0464

    Directory traversal vulnerability in Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify ar…

  • Unscored —
    CVE-2002-0817 Public exploit

    Format string vulnerability in super for Linux allows local users to gain root privileges via a long command line argum…

    super Debian
  • Unscored —
    CVE-2002-0619 EPSS 16%

    The Mail Merge Tool in Microsoft Word 2002 for Windows, when Microsoft Access is present on a system, allows remote att…

  • Unscored —
    CVE-2002-0573

    Format string vulnerability in RPC wall daemon (rpc.rwalld) for Solaris 2.5.1 through 8 allows remote attackers to exec…

  • Unscored —
    CVE-2002-0073 EPSS 60%

    The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have established an FTP sess…

  • Unscored —
    CVE-2002-0241

    NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of u…

  • Unscored —
    CVE-2002-0818

    wwwoffled in World Wide Web Offline Explorer (WWWOFFLE) allows remote attackers to cause a denial of service and possib…

  • Unscored —
    CVE-2002-0676 Public exploit

    SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remot…

  • Unscored —
    CVE-2002-0187 Public exploit EPSS 14%

    Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute a…

  • Unscored —
    CVE-2002-0964 Public exploit

    Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via mul…

  • Unscored —
    CVE-2002-0574

    Memory leak in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service (memory exhaustion) via ICM…

  • Unscored —
    CVE-2002-0424

    efingerd 1.61 and earlier, when configured without the -u option, executes .efingerd files as the efingerd user (typica…

  • Unscored —
    CVE-2002-0952

    Cisco ONS15454 optical transport platform running ONS 3.1.0 to 3.2.0 allows remote attackers to cause a denial of servi…

  • Unscored —
    CVE-2002-0891

    The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, al…

  • Unscored —
    CVE-2002-0366

    Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Se…

  • Unscored —
    CVE-2002-0484 Public exploit

    move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attac…

  • Unscored —
    CVE-2002-0810

    Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML …

  • Unscored —
    CVE-2002-0462

    bigsam_guestbook.php for Big Sam (Built-In Guestbook Stand-Alone Module) 1.1.08 and earlier allows remote attackers to …

  • Unscored —
    CVE-2002-0829

    Integer overflow in the Berkeley Fast File System (FFS) in FreeBSD 4.6.1 RELEASE-p4 and earlier allows local users to a…

  • Unscored —
    CVE-2002-0009

    show_bug.cgi in Bugzilla before 2.14.1 allows a user with "Bugs Access" privileges to see other products that are not a…