Archive
April 2003
Vulnerabilities first published in this month (UTC), newest first.
397 results · Feed
-
Unscored —
Instant Web Mail before 0.60 does not properly filter CR/LF sequences, which allows remote attackers to (1) execute arb…
-
Unscored —CVE-2002-0068 Public exploit
Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arb…
-
Unscored —
ghostscript before 6.53 allows attackers to execute arbitrary commands by using .locksafe or .setsafe to reset the curr…
-
Unscored —
Buffer overflow in ndcfg command for UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to execute arbitrary code vi…
-
Unscored —CVE-2002-0653 Public exploit
Off-by-one buffer overflow in the ssl_compat_directive function, as called by the rewrite_command hook for mod_ssl Apac…
-
Unscored —
Buffer overflow in Qpopper (popper) 4.0.4 and earlier allows local users to cause a denial of service and possibly exec…
-
Unscored —
Directory traversal vulnerability in sendform.cgi 1.44 and earlier allows remote attackers to read arbitrary files by s…
-
Unscored —CVE-2002-0184 Public exploit
Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local use…
-
Unscored —
Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote …
-
Unscored —
getuserdesc.asp in Hosting Controller 2002 allows remote attackers to change the passwords of arbitrary users and gain …
-
Unscored —
Buffer overflow in efingerd 1.5 and earlier, and possibly up to 1.61, allows remote attackers to cause a denial of serv…
-
Unscored —CVE-2002-0875 Public exploit
Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose acce…
-
Unscored —
Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS wit…
-
Unscored —CVE-2002-0741 Public exploit
psyBNC 2.3 allows remote attackers to cause a denial of service (CPU consumption and resource exhaustion) by sending a …
-
Unscored —
Nautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the .nautilus-metafi…
-
Unscored —
Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6.0.8.18.0 and earlier, as used in Oracle9iAS and othe…
-
Unscored —
Heap-based buffer overflow in the message decoding functionality for PGP Outlook Encryption Plug-In, as used in NAI PGP…
-
Unscored —
Buffer overflow in search.cgi in mnoGoSearch 3.1.19 and earlier allows remote attackers to execute arbitrary code via a…
-
High —
ZCatalog plug-in for Zope allows anonymous users to bypass access restrictions
ZCatalog plug-in index support capability for Zope 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes.
-
Unscored —
Buffer overflow in a legacy ActiveX control used to display specially formatted text in Microsoft Internet Explorer 5.0…
-
Unscored —CVE-2002-0695 EPSS 17%
Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through…
-
Unscored —
Cross-site scripting vulnerability in status.php3 for IMP 2.2.8 and HORDE 1.2.7 allows remote attackers to execute arbi…
-
Unscored —
Vulnerability in XFS filesystem reorganizer (fsr_xfs) in SGI IRIX 6.5.10 and earlier allows local users to gain root pr…
-
Unscored —
The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, as used by the TrustedCodeTool and possibly…
-
Unscored —
db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary code from remote servers…
-
Unscored —CVE-2002-0733 Public exploit
Cross-site scripting vulnerability in thttpd 2.20 and earlier allows remote attackers to execute arbitrary script via a…
-
Unscored —
The TCP implementation in various BSD operating systems (tcp_input.c) does not properly block connections to broadcast …
-
Unscored —
XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS reverse l…
-
Unscored —
Race condition in the recursive (1) directory deletion and (2) directory move in GNU File Utilities (fileutils) 4.1 and…
-
Unscored —
clchkspuser and clpasswdremote in AIX expose an encrypted password in the cspoc.log file, which could allow local users…
-
Unscored —
Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via…
-
Unscored —CVE-2002-0543 Public exploit
Directory traversal vulnerability in Aprelium Abyss Web Server (abyssws) before 1.0.0.2 allows remote attackers to read…
-
Unscored —CVE-2002-0777 EPSS 10%
Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary co…
-
Unscored —CVE-2002-0536 Public exploit
PHPGroupware 0.9.12 and earlier, when running with the magic_quotes_gpc feature disabled, allows remote attackers to co…
-
Unscored —
LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET reque…
-
Unscored —
The Windows Media Device Manager (WMDM) Service in Microsoft Windows Media Player 7.1 on Windows 2000 systems allows lo…
-
Unscored —
Kerberos 5 su (k5su) in FreeBSD 4.5 and earlier does not verify that a user is a member of the wheel group before grant…
-
Unscored —
Format string vulnerability in the allowuser code for the Stellar-X msntauth authentication module, as distributed in S…
-
Unscored —CVE-2002-0734 Public exploit
b2edit.showposts.php in B2 2.0.6pre2 and earlier does not properly load the b2config.php file in some configurations, w…
-
Unscored —CVE-2002-0364 EPSS 34%
Buffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to execute arbitrary cod…