Archive
September 2004
Vulnerabilities first published in this month (UTC), newest first.
563 results · Feed
-
Unscored —
securetar, as used in AMaViS shell script 0.2.1 and earlier, allows users to cause a denial of service (CPU consumption…
-
Unscored —
Novell eDirectory (eDir) 8.6.2 and Netware 5.1 eDir 85.x allows users with expired passwords to gain inappropriate perm…
-
High 7.5
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and …
-
Unscored —CVE-2002-1501 Public exploit
The MPS functionality in Enterasys SSR8000 (Smart Switch Router) before firmware 8.3.0.10 allows remote attackers to ca…
-
Unscored —
Alcatel OmniSwitch 7700/7800 switches running AOS 5.1.1 contains a back door telnet server that was intended for develo…
-
Unscored —
Integer signedness error in select() on OpenBSD 3.1 and earlier allows local users to overwrite arbitrary kernel memory…
-
Unscored —
Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code …
-
Unscored —
mICQ 0.4.9 and earlier allows remote attackers to cause a denial of service (crash) via malformed ICQ message types wit…
-
Unscored —
The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, allows remo…
-
Unscored —
The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a denial of se…
-
Unscored —CVE-2002-1250 Public exploit
Buffer overflow in Abuse 2.00 and earlier allows local users to gain root privileges via a long -net command line argum…
-
Unscored —
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that…
-
Unscored —
Directory traversal vulnerability in munpack in mpack 1.5 and earlier allows remote attackers to create new files in th…
-
Unscored —
rpcbind in SGI IRIX, when using the -w command line switch, allows local users to overwrite arbitrary files via a symli…
-
Unscored —CVE-2002-1141 EPSS 14%
An input validation error in the Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Micro…
-
Unscored —
The default configuration of Cisco Unity 2.x and 3.x does not block international operator calls in the predefined rest…
-
Unscored —
The daemon for GeneWeb before 4.09 does not properly handle requested paths, which allows remote attackers to read arbi…
-
Unscored —CVE-2002-1307 Public exploit
Cross-site scripting vulnerability (XSS) in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML…
-
Unscored —
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via she…
-
Unscored —
The cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 through 3.0.3 does not properly initialize the d…
-
Unscored —
Mac OS X 10.2.2 allows local users to read files that only allow write access via the map_fd() Mach system call.
-
Unscored —CVE-2002-1178 Public exploit
Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execu…
-
Unscored —CVE-2002-1514 Public exploit
gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "…
-
Unscored —
bugzilla_email_append.pl in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, allows remote attackers to execute…
-
Unscored —
Mac OS X 10.2.2 allows local users to gain privileges by mounting a disk image file that was created on another system,…
-
Unscored —
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite a…
-
Unscored —
Cisco VPN 3000 Concentrator 3.6(Rel) and earlier, and 2.x.x, when configured to use internal authentication with group …
-
Unscored —CVE-2002-1435 Public exploit
class.atkdateattribute.js.php in Achievo 0.7.0 through 0.9.1, except 0.8.2, allows remote attackers to execute arbitrar…
-
Unscored —
Web Server 4D (WS4D) 3.6 stores passwords in plaintext in the Ws4d.4DD file, which allows attackers to gain privileges.
-
Unscored —CVE-2002-1182 EPSS 36%
IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (crash) via malformed WebDAV requests that cause a…
-
Unscored —CVE-2002-1349 Public exploit
Buffer overflow in pop3trap.exe for PC-cillin 2000, 2002, and 2003 allows local users to execute arbitrary code via a l…
-
Unscored —
overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers t…
-
Unscored —CVE-2002-1220 Public exploit
BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) vi…
-
Unscored —
Mac OS X 10.2.2 allows local users to gain privileges via a mounted ISO 9600 CD, aka "User Privilege Elevation via Moun…
-
Unscored —
filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length…
-
Unscored —
Buffer overflow in Window Maker (wmaker) 0.80.0 and earlier may allow remote attackers to execute arbitrary code via a …
-
Unscored —
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.2, allows restricted administrators to obtain certificate passwor…
-
Unscored —CVE-2002-1380 Public exploit
Linux kernel 2.2.x allows local users to cause a denial of service (crash) by using the mmap() function with a PROT_REA…
-
Unscored —
Buffer overflow in trek on NetBSD 1.5 through 1.5.3 allows local users to gain privileges via long keyboard input.
-
Unscored —
TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to by…