Archive
September 2004
Vulnerabilities first published in this month (UTC), newest first.
563 results · Feed
-
Unscored —
The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a …
-
Unscored —
The system root folder of Microsoft Windows 2000 has default permissions of Everyone group with Full access (Everyone:F…
-
Unscored —
The client for Symantec Norton AntiVirus Corporate Edition 7.5.x before 7.5.1 Build 62 and 7.6.x before 7.6.1 Build 35a…
-
Unscored —
Netscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and execute arbitrary code…
-
Unscored —
SquirrelMail 1.2.7 and earlier allows remote attackers to determine the absolute pathname of the options.php script via…
-
Unscored —CVE-2002-1257 EPSS 15%
Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by …
-
Unscored —
Konqueror in KDE 3.0 through 3.0.2 does not properly detect the "secure" flag in an HTTP cookie, which could cause Konq…
-
Unscored —
Buffer overflow in XML parser in wsabi.dll of Winamp 3 (1.0.0.488) allows remote attackers to execute arbitrary code vi…
-
Unscored —
jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when…
-
Unscored —
Netscreen running ScreenOS 4.0.0r6 and earlier allows remote attackers to cause a denial of service via a malformed SSH…
-
Unscored —
The error checking routine used for the C_Verify call on a symmetric verification key in the nCipher PKCS#11 library 1.…
-
Unscored —
The Compressed Folders feature in Microsoft Windows 98 with Plus! Pack, Windows Me, and Windows XP does not properly ch…
-
Unscored —
Heap-based buffer overflow in Netscape and Mozilla allows remote attackers to execute arbitrary code via a jar: URL tha…
-
Unscored —CVE-2002-1135 Public exploit
modsecurity.php 1.10 and earlier, in phpWebSite 0.8.2 and earlier, allows remote attackers to execute arbitrary PHP sou…
-
Unscored —
Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments i…
-
Unscored —
Acuma Acusend 4, and possibly earlier versions, allows remote authenticated users to read the reports of other users by…
-
Unscored —CVE-2002-1219 EPSS 12%
Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attacke…
-
Unscored —
Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, allows local users to use a utility p…
-
Unscored —
Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permission…
-
Unscored —
Buffer overflow in setlocale in libc on NetBSD 1.4.x through 1.6, and possibly other operating systems, when called wit…
-
Unscored —
The handle_var_requests function in snmp_agent.c for the SNMP daemon in the Net-SNMP (formerly ucd-snmp) package 5.0.1 …
-
Unscored —
The "View Bugs" page (view_all_bug_page.php) in Mantis 0.17.4a and earlier includes summaries of private bugs for users…
-
Unscored —
Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a mod…
-
Unscored —
Unknown vulnerability in autofs on AIX 4.3.0, when using executable maps, allows attackers to execute arbitrary command…
-
Unscored —
TNS Listener in Oracle Net Services for Oracle 9i 9.2.x and 9.0.x, and Oracle 8i 8.1.x, allows remote attackers to caus…
-
Unscored —
TinySSL 1.02 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows …
-
Unscored —CVE-2002-1417 EPSS 17%
Directory traversal vulnerability in Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Bus…
-
Unscored —
Buffer overflow in the ixj telephony card driver in Linux before 2.4.20 has unknown impact and attack vectors.
-
Unscored —
editproducts.cgi in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, when the "usebuggroups" feature is enabled…
-
Unscored —
Buffer overflow in log2mail before 0.2.5.1 allows remote attackers to execute arbitrary code via a long log message.
-
Unscored —
Heap-based buffer overflow in Null HTTP Server 0.5.0 and earlier allows remote attackers to execute arbitrary code via …
-
Unscored —
Maped in LuxMan 0.41 uses the user-provided search path to find and execute the gzip program, which allows local users …
-
Unscored —
tkmail before 4.0beta9-8.1 allows local users to create or overwrite files as users via a symlink attack on temporary f…
-
Unscored —CVE-2002-1186 EPSS 19%
Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL…
-
Unscored —CVE-2002-1497 Public exploit
Cross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and earlier allows remote attackers to insert arbitr…
-
Unscored —
BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid ex…
-
Unscored —CVE-2002-1513 Public exploit
The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via…
-
Unscored —
The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from…
-
Unscored —
Format string vulnerability in Pablo FTP Server 1.5, 1.3, and possibly other versions, allows remote attackers to cause…
-
Unscored —
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.1, allows restricted administrators to obtain user passwords that…