Archive
April 2003
Vulnerabilities first published in this month (UTC), newest first.
397 results · Feed
-
Unscored —CVE-2002-0727 EPSS 19%
The Host function in Microsoft Office Web Components (OWC) 2000 and 2002 is exposed in components that are marked as sa…
-
Unscored —
l2tpd 0.67 does not initialize the random number generator, which allows remote attackers to hijack sessions.
-
Unscored —
Race condition in bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating …
-
Unscored —
Unknown vulnerability in nveventd in NetVisualyzer on SGI IRIX 6.5 through 6.5.16 allows local users to write arbitrary…
-
Unscored —
MHonArc 2.5.2 and earlier does not properly filter Javascript from archived e-mail messages, which could allow remote a…
-
Unscored —
Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5s…
-
Unscored —
Network File System (NFS) in FreeBSD 4.6.1 RELEASE-p7 and earlier, NetBSD 1.5.3 and earlier, and possibly other operati…
-
Unscored —CVE-2002-0076 EPSS 27%
Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute command…
-
Critical 9.8CVE-2002-0391 EPSS 58%
Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based o…
-
Unscored —CVE-2002-0622 EPSS 19%
The Office Web Components (OWC) package installer for Microsoft Commerce Server 2000 allows remote attackers to execute…
-
Unscored —
Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client sy…
-
Unscored —
Information leak in doeditvotes.cgi in Bugzilla before 2.14.1 may allow remote attackers to more easily conduct attacks…
-
Unscored —CVE-2002-0006 Public exploit
XChat 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allows remote attackers to execute arbitr…
-
Medium —
Zope Server vulnerable to DoS via header injection
The "through the web code" capability for Zope 2.0 through 2.5.1 b1 allows untrusted users to shut down the Zope server via certain headers.
-
Unscored —
IRISconsole 2.0 may allow users to log into the icadmin account with an incorrect password in some circumstances, which…
-
Unscored —
ISS RealSecure Network Sensor 5.x through 6.5 allows remote attackers to cause a denial of service (crash) via malforme…
-
Unscored —CVE-2002-0369 EPSS 27%
Buffer overflow in ASP.NET Worker Process allows remote attackers to cause a denial of service (restart) and possibly e…
-
Unscored —
Cisco Virtual Private Network (VPN) Client 3.5.4 and earlier allows remote attackers to cause a denial of service (CPU …
-
Unscored —CVE-2002-0621 EPSS 17%
Buffer overflow in the Office Web Components (OWC) package installer used by Microsoft Commerce Server 2000 allows remo…
-
Unscored —
nsd on SGI IRIX before 6.5.11 allows local users to overwrite arbitrary files and gain root privileges via a symlink at…
-
Unscored —
Blahz-DNS 0.2 and earlier allows remote attackers to bypass authentication and modify configuration by directly request…
-
Unscored —CVE-2002-0075 EPSS 37%
Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to ex…
-
Unscored —CVE-2002-0451 Public exploit
filemanager_forms.php in PHProjekt 3.1 and 3.1a allows remote attackers to execute arbitrary PHP code by specifying the…
-
Unscored —
DNS dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (CPU consumption) via a mal…
-
Unscored —
ktrace in BSD-based operating systems allows the owner of a process with special privileges to trace the process after …
-
Unscored —
SayText function in Kismet 2.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharac…
-
Unscored —
The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC allows remote attackers…
-
Unscored —
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, (1) creates new directories with world-writable permissions, and …
-
Unscored —
MediaMail and MediaMail Pro in SGI IRIX 6.5.16 and earlier allows local users to force the program to dump core via cer…
-
Unscored —
Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is specified in squid.conf, which…
-
Unscored —
Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary script as other users via the addv…
-
Unscored —
Buffer overflow in X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities.
-
Unscored —CVE-2002-0722 EPSS 13%
Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to misrepresent the source of a file in the File…
-
Unscored —CVE-2002-0095 Public exploit
The default configuration of BSCW (Basic Support for Cooperative Work) 3.x and possibly version 4 enables user self reg…
-
Unscored —
home.php in ARSC (Really Simple Chat) 1.0.1 and earlier allows remote attackers to determine the full pathname of the w…
-
Unscored —
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when configured to perform reverse DNS lookups, allows remote att…
-
Unscored —
bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly systems, uses the permissions of s…
-
Unscored —
xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC functio…
-
Unscored —
Vulnerability in l2tpd 0.67 allows remote attackers to overwrite the vendor field via a long value in an attribute/valu…
-
Unscored —
SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the T…