Archive
June 2005
Vulnerabilities first published in this month (UTC), newest first.
651 results · Feed
-
Unscored —
SGI IRIX 6.5 through 6.5.17 creates temporary desktop files with world-writable permissions, which allows local users t…
-
Unscored —
Perlbot 1.9.2 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $text variable …
-
Unscored —
Magic Notebook 1.0b and 1.1b allows remote attackers to cause a denial of service (crash) via an invalid username durin…
-
Unscored —CVE-2002-1814 Public exploit
Buffer overflow in efstools in Bonobo, when installed setuid, allows local users to execute arbitrary code via long com…
-
Unscored —
Charities.cron 1.0.2 through 1.6.0 allows local users to write to arbitrary files via a symlink attack on temporary fil…
-
Unscored —
Buffer overflow in RadioBird WebServer 4 Everyone 1.28 allows remote attackers to cause a denial of service (crash) via…
-
Unscored —
Pirch and RusPirch, when auto-log is enabled, allows remote attackers to cause a denial of service (crash) via a nickna…
-
Unscored —CVE-2002-1905 Public exploit
Buffer overflow in the web server of Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service …
-
Unscored —CVE-2002-1983 Public exploit
The timer implementation in QNX RTOS 6.1.0 allows local users to cause a denial of service (hang) and possibly execute …
-
Unscored —CVE-2002-1826 Public exploit
grsecurity 1.9.4 for Linux kernel 2.4.18 allows local users to bypass read-only permissions by using mmap to directly m…
-
Unscored —
NETGEAR FVS318 running firmware 1.1 stores the username and password in a readable format when a backup of the configur…
-
Unscored —
ROX Filer 1.1.9 and 1.2 is installed with world writable permissions, which allows local users to write to arbitrary fi…
-
Unscored —CVE-2002-1886 Public exploit
TightAuction 3.0 stores config.inc under the web document root with insufficient access control, which allows remote at…
-
Unscored —
Buffer overflow in the HttpGetRequest function in Zeroo HTTP server 1.5 allows remote attackers to execute arbitrary co…
-
Unscored —
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 2.0.1 leaks sensitive information during boot-up, which all…
-
Unscored —
Directory traversal vulnerability in Simple Web Server (SWS) 0.0.4 through 0.1.0 allows remote attackers to read arbitr…
-
Unscored —CVE-2002-1829 Public exploit
Cross-site scripting (XSS) vulnerability in codeparse.php in Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attac…
-
Unscored —
Buffer overflow in WS_FTP Pro 7.5 allows remote attackers to execute code on a client system via unknown attack vectors.
-
Unscored —CVE-2002-1828 Public exploit
Savant Webserver 3.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request with a negati…
-
Unscored —
Directory traversal vulnerability in source.php in Aquonics File Manager 1.5 allows remote attackers to read arbitrary …
-
Unscored —CVE-2002-1898 Public exploit
Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Meunity Community System 1.1 allows remote attackers to inject arbitrary we…
-
Unscored —
Unknown vulnerability in the "ipopts decode" functionality in Firestorm IDS 0.4.0 through 0.4.2 allows remote attackers…
-
Unscored —
ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mod…
-
Unscored —
The FTP service in Zaurus PDAs SL-5000D and SL-5500 does not require authentication, which allows remote attackers to a…
-
Unscored —
Sybase Enterprise Application Server 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB…
-
Unscored —
Heap-based buffer overflow in the goim handler of AOL Instant Messenger (AIM) 4.4 through 4.8.2616 allows remote attack…
-
Unscored —CVE-2002-1986 Public exploit
Perception LiteServe 2.0 through 2.0.1 allows remote attackers to obtain the source code of CGI scripts via an HTTP req…
-
Unscored —CVE-2002-1804 Public exploit
Cross-site scripting (XSS) vulnerability in NPDS 4.8 allows remote attackers to inject arbitrary web script or HTML via…
-
Unscored —CVE-2002-1887 Public exploit
PHP remote file inclusion vulnerability in customize.php for phpMyNewsletter 0.6.10 allows remote attackers to execute …
-
Unscored —CVE-2002-1885 Public exploit
PHP remote file inclusion vulnerability in showhits.php3 for PowerPhlogger (PPhlogger) 2.0.9 through 2.2.2 allows remot…
-
Unscored —CVE-2002-1785 Public exploit
Cross-site scripting (XSS) vulnerability in Zeus Administration Server in Zeus Web Server 4.0 through 4.1r2 allows remo…
-
Unscored —CVE-2002-1830 Public exploit
Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to bypass authentication and access modifier options via…
-
Unscored —
pkgadd in Sun Solaris 2.5.1 through 8 installs files setuid/setgid root if the pkgmap file contains a "?" (question mar…
-
Unscored —
register.php in Ultimate PHP Board (UPB) 1.0 and 1.0b uses an administrative account Admin with a capital "A," but allo…
-
Unscored —
Format string vulnerability in PerlRTE_example1.pl in WASD 7.1, 7.2.0 through 7.2.3, and 8.0.0 allows remote attackers …
-
Unscored —
SQL injection vulnerability in shopadmin.asp in VP-ASP 4.0 allows remote attackers to execute arbitrary SQL commands an…
-
Unscored —
phpRank 1.8 stores the administrative password in plaintext on the server and in the "ap" cookie, which allows remote a…
-
Unscored —CVE-2002-1891 Public exploit
Buffer overflow in IRCIT 0.3.1 IRC client allows remote attackers to execute arbitrary code via a long invite request.
-
Unscored —CVE-2002-1873 EPSS 14%
Microsoft Exchange 2000, when used with Microsoft Remote Procedure Call (MSRPC), allows remote attackers to cause a den…