Archive
April 2003
Vulnerabilities first published in this month (UTC), newest first.
397 results · Feed
-
Unscored —CVE-2002-0575 Public exploit
Buffer overflow in OpenSSH before 2.9.9, and 3.x before 3.2.1, with Kerberos/AFS support and KerberosTgtPassing or AFST…
-
Unscored —CVE-2002-0147 EPSS 68%
Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote…
-
High —
Zope does not properly verify the access for objects with proxy roles
Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.
-
Unscored —
The decoder for Macromedia Shockwave Flash allows remote attackers to execute arbitrary code via a malformed SWF header…
-
Unscored —
FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0 rewrites an FTP server's "FTP PORT" responses in a way t…
-
Unscored —
The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attac…
-
Unscored —
csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup comma…
-
Unscored —
ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .db…
-
Unscored —CVE-2002-0150 EPSS 53%
Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety chec…
-
Unscored —CVE-2002-0987 Public exploit
X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp u…
-
Unscored —CVE-2002-0246 Public exploit
Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privi…
-
Unscored —CVE-2002-0623 EPSS 20%
Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 and 2002 allows remote attackers to execut…
-
Unscored —
The Notify daemon for Symantec Enterprise Firewall (SEF) 6.5.x drops large alerts when SNMP is used as the transport, w…
-
Unscored —
mIRC DCC server protocol allows remote attackers to gain sensitive information such as alternate IRC nicknames via a "1…
-
Unscored —
/dev/ipfilter on SGI IRIX 6.5 is installed by /dev/MAKEDEV with insecure default permissions (644), which could allow a…
-
Unscored —CVE-2002-0900 Public exploit
Buffer overflow in pks PGP public key web server before 0.9.5 allows remote attackers to cause a denial of service (cra…
-
Unscored —CVE-2002-0938 Public exploit
Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote attackers to execute arbitrary script or HTML a…
-
Unscored —
Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to view arbitrary files that contain the "{" char…
-
Unscored —CVE-2002-0149 EPSS 69%
Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote attackers to cause a denial o…
-
Unscored —
The PHP administration script in popper_mod 1.2.1 and earlier relies on Apache .htaccess authentication, which allows r…
-
Unscored —
startkde in KDE for Caldera OpenLinux 2.3 through 3.1.1 sets the LD_LIBRARY_PATH environment variable to include the cu…
-
Unscored —
setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does n…
-
Unscored —
Exim 3.34 and earlier may allow local users to gain privileges via a buffer overflow in long -C (configuration file) an…
-
Unscored —
The default configuration of Name Service Cache Daemon (nscd) in Caldera OpenLinux 3.1 and 3.1.1 uses cached PTR record…
-
Unscored —CVE-2002-0851 Public exploit
Format string vulnerability in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the ISDN4Linux (i4l) package allows…
-
Unscored —
Buffer overflow in SNMP daemon (snmpd) on SGI IRIX 6.5 through 6.5.15m allows remote attackers to execute arbitrary cod…
-
Unscored —CVE-2002-0330 Public exploit
Cross-site scripting vulnerability in codeparse.php of Open Bulletin Board (OpenBB) 1.0.0 allows remote attackers to ex…
-
Unscored —
CNet CatchUp before 1.3.1 allows attackers to execute arbitrary code via a .RVP file that creates a file with an arbitr…
-
Unscored —
The multibyte support in PostgreSQL 6.5.x with SQL_ASCII encoding consumes an extra character when processing a charact…
-
Unscored —CVE-2002-0190 EPSS 24%
Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code under fewer security re…
-
Unscored —
Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to …
-
Unscored —CVE-2002-0679 EPSS 23%
Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attack…
-
Unscored —CVE-2002-0860 EPSS 19%
The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 allows remote a…
-
Unscored —
An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS)…
-
Unscored —
Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service (hang) …
-
Unscored —
The legacy <script> data-island capability for XML in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote atta…
-
Unscored —
Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 200…
-
Unscored —
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows authenticated users with editing privileges to delete othe…
-
Unscored —CVE-2002-0406 Public exploit
Menasoft SPHERE server 0.99x and 0.5x allows remote attackers to cause a denial of service by establishing a large numb…
-
Unscored —
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but ca…