Archive
April 2003
Vulnerabilities first published in this month (UTC), newest first.
397 results · Feed
-
Unscored —CVE-2002-0897 Public exploit
LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that…
-
Unscored —
Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a…
-
Unscored —
Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Serv…
-
Unscored —
Gaim 0.57 stores sensitive information in world-readable and group-writable files in the /tmp directory, which allows l…
-
Unscored —CVE-2002-0642 EPSS 48%
The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsof…
-
Unscored —
Caldera Volution Manager 1.1 stores the Directory Administrator password in cleartext in the slapd.conf file, which cou…
-
Unscored —CVE-2002-0071 EPSS 37%
Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 a…
-
Unscored —CVE-2002-0968 Public exploit
Buffer overflow in AnalogX SimpleServer:WWW 1.16 and earlier allows remote attackers to cause a denial of service (cras…
-
Unscored —
Smsd in SMS Server Tools (SMStools) before 1.4.8 allows remote attackers to execute arbitrary commands via shell metach…
-
Unscored —CVE-2002-0691 EPSS 14%
Microsoft Internet Explorer 5.01 and 5.5 allows remote attackers to execute scripts in the Local Computer zone via a UR…
-
Unscored —
KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly cons…
-
Unscored —
Buffer overflow in dlvr_audit for Caldera OpenServer 5.0.5 and 5.0.6 allows local users to gain root privileges.
-
Unscored —CVE-2002-0155 EPSS 24%
Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messe…
-
Unscored —
Format string vulnerability in Foundstone FScan 1.12 with banner grabbing enabled allows remote attackers to execute ar…
-
Unscored —
xinetd 2.3.4 leaks file descriptors for the signal pipe to services that are launched by xinetd, which could allow thos…
-
Unscored —
Buffer overflow in Flash OCX for Macromedia Flash 6 revision 23 (6,0,23,0) allows remote attackers to execute arbitrary…
-
Unscored —CVE-2002-0329 Public exploit
Cross-site scripting vulnerability in Snitz Forums 2000 3.3.03 and earlier allows remote attackers to execute arbitrary…
-
Unscored —CVE-2002-0618 EPSS 14%
The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code in the Lo…
-
Unscored —
Directory traversal vulnerability in emumail.cgi in EMU Webmail 4.5.x and 5.1.0 allows remote attackers to read arbitra…
-
Unscored —CVE-2002-0372 EPSS 14%
Microsoft Windows Media Player versions 6.4 and 7.1 and Media Player for Windows XP allow remote attackers to bypass In…
-
Unscored —
Cisco Aironet before 11.21 with Telnet enabled allows remote attackers to cause a denial of service (reboot) via a seri…
-
Unscored —
A handler routine for the Network Connection Manager (NCM) in Windows 2000 allows local users to gain privileges via a …
-
Unscored —
Buffer overflow in cpr for the eoe.sw.cpr SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may al…
-
Unscored —
MDG Computer Services Web Server 4D WS4D/eCommerce 3.0 and earlier, and possibly 3.5.3, allows remote attackers to caus…
-
Unscored —
bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, does not …
-
Unscored —
Buffer overflow in Winhlp32.exe allows remote attackers to execute arbitrary code via an HTML document that calls the H…
-
Unscored —
Buffer overflow in X11 dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (cr…
-
Unscored —
Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which all…
-
Unscored —
shadow package in SuSE 8.0 allows local users to destroy the /etc/passwd and /etc/shadow files or assign extra group pr…
-
Unscored —CVE-2002-0072 EPSS 63%
The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, …
-
Unscored —
Buffer overflow in VMware Authorization Service for VMware GSX Server 2.0.0 build-2050 allows remote authenticated user…
-
Unscored —
The Network Address Translation (NAT) capability for Netfilter ("iptables") 1.2.6a and earlier leaks translated IP addr…
-
Unscored —
Format string vulnerability in the logging function for the pam_ldap PAM LDAP module before version 144 allows attacker…
-
Unscored —
Buffer overflow in Netwin WebNews CGI program 1.1, Webnews.exe, allows remote attackers to execute arbitrary code via a…
-
Unscored —
Format string vulnerability in TraceEvent function for ntop before 2.1 allows remote attackers to execute arbitrary cod…
-
Unscored —
Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and poss…
-
Unscored —
The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS t…
-
Unscored —CVE-2002-0726 EPSS 17%
Buffer overflow in Microsoft Terminal Services Advanced Client (TSAC) ActiveX control allows remote attackers to execut…
-
Unscored —CVE-2002-1060 Public exploit
Cross-site scripting (XSS) vulnerability in Blue Coat Systems (formerly CacheFlow) CacheOS on Client Accelerator 4.1.06…
-
Unscored —
Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote authenticated users to list…