Archive
September 2004
Vulnerabilities first published in this month (UTC), newest first.
125 results · Clear filters · Feed
-
Unscored —
Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26,…
-
Unscored —
Help and Support Center for Windows XP allows remote attackers to delete arbitrary files via a link to the hcp: protoco…
-
Unscored —
Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote a…
-
Unscored —
Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users …
-
Unscored —CVE-2002-0895 Public exploit
Buffer overflow in MatuFtpServer 1.1.3.0 (1.1.3) allows remote attackers to cause a denial of service and possibly exec…
-
Unscored —CVE-2002-0313 Public exploit
Buffer overflow in Essentia Web Server 2.1 allows remote attackers to cause a denial of service, and possibly execute a…
-
Unscored —CVE-2002-0158 Public exploit
Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color datab…
-
Unscored —CVE-2002-1113 Public exploit
summary_graph_functions.php in Mantis 0.17.3 and earlier allows remote attackers to execute arbitrary PHP code by modif…
-
Unscored —CVE-2002-1381 Public exploit
Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative use…
-
Unscored —
Buffer overflow in the S/MIME Parsing capability in Microsoft Outlook Express 5.5 and 6.0 allows remote attackers to ex…
-
Unscored —CVE-2002-1236 Public exploit
The remote management web server for Linksys BEFSR41 EtherFast Cable/DSL Router before firmware 1.42.7 allows remote at…
-
Unscored —CVE-2002-1494 Public exploit
Cross-site scripting (XSS) vulnerabilities in Aestiva HTML/OS allows remote attackers to insert arbitrary HTML or scrip…
-
Unscored —CVE-2002-1468 Public exploit
Buffer overflow in errpt in AIX 4.3.3 allows local users to execute arbitrary code as root.
-
Unscored —CVE-2002-1364 Public exploit
Buffer overflow in the get_origin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOI…
-
Unscored —CVE-2002-1447 Public exploit
Buffer overflow in the vpnclient program for UNIX VPN Client before 3.5.2 allows local users to gain administrative pri…
-
Unscored —CVE-2002-1529 Public exploit
Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfContro…
-
Unscored —CVE-2002-1414 Public exploit
Buffer overflow in qmailadmin allows local users to gain privileges via a long QMAILADMIN_TEMPLATEDIR environment varia…
-
Unscored —CVE-2002-1493 Public exploit
Cross-site scripting (XSS) vulnerability in Lycos HTMLGear guestbook allows remote attackers to inject arbitrary script…
-
Unscored —CVE-2002-1505 Public exploit
SQL injection vulnerability in board.php for WoltLab Burning Board (wBB) 2.0 RC 1 and earlier allows remote attackers t…
-
Unscored —
Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted addr…
-
Unscored —
Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET reque…
-
Unscored —
Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing …
-
Unscored —CVE-2002-1169 Public exploit
IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to cause a denial of s…
-
Unscored —
Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 t…
-
Unscored —CVE-2002-1405 Public exploit
CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTT…
-
Unscored —
Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute …
-
Unscored —CVE-2002-1248 Public exploit
Northern Solutions Xeneo Web Server 2.1.0.0, 2.0.759.6, and other versions before 2.1.5 allows remote attackers to caus…
-
Unscored —CVE-2002-1501 Public exploit
The MPS functionality in Enterasys SSR8000 (Smart Switch Router) before firmware 8.3.0.10 allows remote attackers to ca…
-
Unscored —CVE-2002-1250 Public exploit
Buffer overflow in Abuse 2.00 and earlier allows local users to gain root privileges via a long -net command line argum…
-
Unscored —CVE-2002-1307 Public exploit
Cross-site scripting vulnerability (XSS) in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML…
-
Unscored —CVE-2002-1178 Public exploit
Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execu…
-
Unscored —CVE-2002-1514 Public exploit
gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "…
-
Unscored —CVE-2002-1435 Public exploit
class.atkdateattribute.js.php in Achievo 0.7.0 through 0.9.1, except 0.8.2, allows remote attackers to execute arbitrar…
-
Unscored —CVE-2002-1349 Public exploit
Buffer overflow in pop3trap.exe for PC-cillin 2000, 2002, and 2003 allows local users to execute arbitrary code via a l…
-
Unscored —
overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers t…
-
Unscored —CVE-2002-1220 Public exploit
BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) vi…
-
Unscored —CVE-2002-1380 Public exploit
Linux kernel 2.2.x allows local users to cause a denial of service (crash) by using the mmap() function with a PROT_REA…
-
Unscored —CVE-2002-1135 Public exploit
modsecurity.php 1.10 and earlier, in phpWebSite 0.8.2 and earlier, allows remote attackers to execute arbitrary PHP sou…
-
Unscored —
Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a mod…