Archive
September 2004
Vulnerabilities first published in this month (UTC), newest first.
563 results · Feed
-
Unscored —
The web proxy component in Symantec Enterprise Firewall (SEF) 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociR…
-
Unscored —CVE-2002-0842 EPSS 15%
Format string vulnerability in certain third party modifications to mod_dav for logging bad gateway messages (e.g. Orac…
-
Unscored —
Buffer overflow in gxnsapi6.dll NSAPI plugin of the Connector Module for Sun ONE Application Server before 6.5 allows r…
-
Unscored —
Unknown vulnerability in rpc.passwd in the nfs.sw.nis subsystem of SGI IRIX 6.5.15 and earlier allows local users to ga…
-
Unscored —
Microsoft Windows 2000 allows local users to bypass the policy that prohibits reusing old passwords by changing the cur…
-
Unscored —
Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to execute arbitr…
-
Unscored —
The web management server for Red-M 1050 (Bluetooth Access Point) does not use session-based credentials to authenticat…
-
Unscored —CVE-2002-0692 EPSS 18%
Buffer overflow in SmartHTML Interpreter (shtml.dll) in Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allo…
-
Unscored —
Buffer overflow in the interpreter for Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small B…
-
Unscored —
Buffer overflow in the Database Console Command (DBCC) that handles user inputs in Microsoft SQL Server 7.0 and 2000, i…
-
Unscored —CVE-2002-1113 Public exploit
summary_graph_functions.php in Mantis 0.17.3 and earlier allows remote attackers to execute arbitrary PHP code by modif…
-
Unscored —
An undocumented SNMP read/write community string ('NoGaH$@!') in Avaya P330, P130, and M770-ATM Cajun products allows r…
-
Unscored —
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, adds an "HTTPS on Public Inbound (XML-Auto)(forward/in)" rule …
-
Unscored —
NetBSD 1.4 through 1.6 beta allows local users to cause a denial of service (kernel panic) via a series of calls to the…
-
Unscored —CVE-2002-1157 EPSS 11%
Cross-site scripting vulnerability in the mod_ssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wil…
-
Unscored —
HTML interface for Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.0.3(B) allows remote attackers to cause a denia…
-
Unscored —CVE-2002-1381 Public exploit
Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative use…
-
Unscored —
The camel component for Ximian Evolution 1.0.x and earlier does not verify certificates when it establishes a new SSL c…
-
Unscored —
Buffer overflow in the S/MIME Parsing capability in Microsoft Outlook Express 5.5 and 6.0 allows remote attackers to ex…
-
Unscored —
The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a …
-
Unscored —
xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth…
-
Unscored —
PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows local and remote attackers to …
-
Unscored —CVE-2002-1236 Public exploit
The remote management web server for Linksys BEFSR41 EtherFast Cable/DSL Router before firmware 1.42.7 allows remote at…
-
Unscored —
Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows rem…
-
Unscored —
Cisco Virtual Private Network (VPN) Client software 2.x.x and 3.x before 3.0.5 allows remote attackers to cause a denia…
-
Unscored —CVE-2002-1140 EPSS 14%
The Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and X…
-
Unscored —CVE-2002-1494 Public exploit
Cross-site scripting (XSS) vulnerabilities in Aestiva HTML/OS allows remote attackers to insert arbitrary HTML or scrip…
-
Unscored —
The SMB signing capability in the Server Message Block (SMB) protocol in Microsoft Windows 2000 and Windows XP allows a…
-
Unscored —CVE-2002-1468 Public exploit
Buffer overflow in errpt in AIX 4.3.3 allows local users to execute arbitrary code as root.
-
Unscored —CVE-2002-1364 Public exploit
Buffer overflow in the get_origin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOI…
-
Unscored —
Signed integer vulnerability in the COM_TABLE_DUMP package for MySQL 3.23.x before 3.23.54 allows remote attackers to c…
-
Unscored —CVE-2002-1447 Public exploit
Buffer overflow in the vpnclient program for UNIX VPN Client before 3.5.2 allows local users to gain administrative pri…
-
Unscored —
Bugzilla 2.16.x before 2.16.1 does not properly filter apostrophes from an email address during account creation, which…
-
Unscored —
Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, does not properly verify that certifi…
-
Unscored —
Heap-based buffer overflow in the wordwrap function in PHP after 4.1.2 and before 4.3.0 may allow attackers to cause a …
-
Unscored —
Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must…
-
Unscored —
Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.6(Rel), when configured with all tunnel mod…
-
Unscored —
Buffer overflow in the parsing mechanism for ISS Internet Scanner 6.2.1, when using the license banner HTTP check, allo…
-
Unscored —CVE-2002-1188 EPSS 12%
Internet Explorer 5.01 through 6.0 allows remote attackers to identify the path to the Temporary Internet Files folder …
-
Unscored —CVE-2002-1529 Public exploit
Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfContro…