| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2003-0106 | 0.00 | — | 0.01 | Apr 2, 2003 | The HTTP proxy for Symantec Enterprise Firewall (SEF) 7.0 allows proxy users to bypass pattern matching for blocked URLs via requests that are URL-encoded with escapes, Unicode, or UTF-8. | |||
| CVE-2003-0141 | 0.00 | — | 0.03 | Apr 2, 2003 | The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other versions allows remote attackers to corrupt the heap and overwrite arbitrary memory via a PNG graphic file format containing compressed data using fixed trees… | |||
| CVE-2003-0152 | 0.00 | — | 0.02 | Apr 2, 2003 | Unknown vulnerability in bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www-data user. | |||
| CVE-2003-0153 | 0.03 | — | 0.06 | Apr 2, 2003 | bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3) multidiff.cgi. | |||
| CVE-2003-0154 | 0.03 | — | 0.05 | Apr 2, 2003 | Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi,… | |||
| CVE-2003-0155 | 0.00 | — | 0.02 | Apr 2, 2003 | bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page without authentication. | |||
| CVE-2003-0159 | 0.00 | — | 0.04 | Apr 2, 2003 | Heap-based buffer overflow in the NTLMSSP code for Ethereal 0.9.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code. | |||
| CVE-2003-0160 | 0.00 | — | 0.01 | Apr 2, 2003 | Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.2.11 allow remote attackers to inject arbitrary HTML code and steal information from a client's web browser. | |||
| CVE-2003-0161 | 0.06 | — | 0.38 | Apr 2, 2003 | The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control… | |||
| CVE-2003-0162 | 0.00 | — | 0.02 | Apr 2, 2003 | Ecartis 1.0.0 (formerly listar) before snapshot 20030227 allows remote attackers to reset passwords of other users and gain privileges by modifying hidden form fields in the HTML page. | |||
| CVE-2003-0165 | 0.03 | — | 0.02 | Apr 2, 2003 | Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display. | |||
| CVE-2003-0166 | 0.04 | — | 0.14 | Apr 2, 2003 | Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly other… | |||
| CVE-2003-0167 | 0.00 | — | 0.03 | Apr 2, 2003 | Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier, and Balsa 1.2.4 and earlier, allow a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a specially crafted mail folder, a different… | |||
| CVE-2003-0168 | 0.01 | — | 0.09 | Apr 2, 2003 | Buffer overflow in Apple QuickTime Player 5.x and 6.0 for Windows allows remote attackers to execute arbitrary code via a long QuickTime URL. | |||
| CVE-2003-0172 | 0.05 | — | 0.19 | Apr 2, 2003 | Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a crash and possibly execute arbitrary code via a long filename argument. | |||
| CVE-2003-0178 | 0.01 | — | 0.15 | Apr 2, 2003 | Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code via (1) the s_ViewName option in the PresetFields parameter for iNotes, (2) the Foldername option in the PresetFields parameter for… | |||
| CVE-2003-0179 | 0.01 | — | 0.08 | Apr 2, 2003 | Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the InitializeUsingNotesUserName method in the iNotes ActiveX control. | |||
| CVE-2003-0180 | 0.00 | — | 0.03 | Apr 2, 2003 | Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the h_PageUI form. | |||
| CVE-2003-0181 | 0.00 | — | 0.02 | Apr 2, 2003 | Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary Value Field POST request" as demonstrated using the s_Validation form with a long, unknown parameter name. | |||
| CVE-2002-1529 | 0.03 | — | 0.04 | Mar 31, 2003 | Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter. | |||
| CVE-2002-1530 | 0.03 | — | 0.06 | Mar 31, 2003 | The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to the userlist.asp program, which includes the passwords in a user editing form. | |||
| CVE-2002-1531 | 0.00 | — | 0.03 | Mar 31, 2003 | The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (crash) via an HTTP request without a Content-Length parameter. | |||
| CVE-2002-1532 | 0.00 | — | 0.03 | Mar 31, 2003 | The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (resource exhaustion) via a GET request without the terminating /r/n/r/n (CRLF) sequence, which causes the interface to wait for the sequence… | |||
| CVE-2002-1533 | 0.03 | — | 0.02 | Mar 31, 2003 | Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a). | |||
| CVE-2002-1534 | 0.00 | — | 0.02 | Mar 31, 2003 | Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share. | |||
| CVE-2002-1535 | 0.00 | — | 0.02 | Mar 31, 2003 | Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal network via a CONNECT request, which generates different error messages if the host is present. | |||
| CVE-2002-1536 | 0.00 | — | 0.03 | Mar 31, 2003 | Molly IRC bot 0.5 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $host variable for nslookup.pl, (2) the $to, $from, or $message variables in pop.pl, (3) the $words or $text variables in sms.pl, or (4) the $server or $printer variables… | |||
| CVE-2002-1537 | 0.00 | — | 0.02 | Mar 31, 2003 | admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form fields such as "u". | |||
| CVE-2002-1538 | 0.00 | — | 0.01 | Mar 31, 2003 | Acuma Acusend 4, and possibly earlier versions, allows remote authenticated users to read the reports of other users by inferring the full URL, whose name is easily predictable. | |||
| CVE-2002-1539 | 0.03 | — | 0.03 | Mar 31, 2003 | Buffer overflow in MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service via long (1) DELE or (2) UIDL arguments. | |||
| CVE-2002-1540 | 0.00 | — | 0.00 | Mar 31, 2003 | The client for Symantec Norton AntiVirus Corporate Edition 7.5.x before 7.5.1 Build 62 and 7.6.x before 7.6.1 Build 35a runs winhlp32 with raised privileges, which allows local users to gain privileges by using certain features of winhlp32. | |||
| CVE-2002-1541 | 0.00 | — | 0.02 | Mar 31, 2003 | BadBlue 1.7 allows remote attackers to bypass password protections for directories and files via an HTTP request containing an extra / (slash). | |||
| CVE-2002-1542 | 0.04 | — | 0.13 | Mar 31, 2003 | SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP datagram, possibly triggering a buffer overflow. | |||
| CVE-2002-1543 | 0.00 | — | 0.00 | Mar 31, 2003 | Buffer overflow in trek on NetBSD 1.5 through 1.5.3 allows local users to gain privileges via long keyboard input. | |||
| CVE-2002-1544 | 0.00 | — | 0.02 | Mar 31, 2003 | Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, (3) put, or (4) get. | |||
| CVE-2002-1545 | 0.00 | — | 0.01 | Mar 31, 2003 | CooolSoft Personal FTP Server 2.24 allows remote attackers to obtain the absolute pathname of the FTP root via a PWD command, which includes the full path in the response. | |||
| CVE-2002-1546 | 0.00 | — | 0.02 | Mar 31, 2003 | BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence. | |||
| CVE-2002-1547 | 0.00 | — | 0.04 | Mar 31, 2003 | Netscreen running ScreenOS 4.0.0r6 and earlier allows remote attackers to cause a denial of service via a malformed SSH packet to the Secure Command Shell (SCS) management interface, as demonstrated via certain CRC32 exploits, a different vulnerability than CVE-2001-0144. | |||
| CVE-2002-1548 | 0.00 | — | 0.00 | Mar 31, 2003 | Unknown vulnerability in autofs on AIX 4.3.0, when using executable maps, allows attackers to execute arbitrary commands as root, possibly related to "string handling around how the executable map is called." | |||
| CVE-2002-1549 | 0.04 | — | 0.11 | Mar 31, 2003 | Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request. | |||
| CVE-2002-1550 | 0.00 | — | 0.00 | Mar 31, 2003 | dump_smutil.sh in IBM AIX allows local users to overwrite arbitrary files via a symlink attack on temporary files. | |||
| CVE-2002-1551 | 0.00 | — | 0.00 | Mar 31, 2003 | Buffer overflow in nslookup in IBM AIX may allow attackers to cause a denial of service or execute arbitrary code. | |||
| CVE-2002-1552 | 0.00 | — | 0.01 | Mar 31, 2003 | Novell eDirectory (eDir) 8.6.2 and Netware 5.1 eDir 85.x allows users with expired passwords to gain inappropriate permissions when logging in from Remote Manager. | |||
| CVE-2002-1553 | 0.00 | — | 0.02 | Mar 31, 2003 | Cisco ONS15454 and ONS15327 running ONS before 3.4 allows remote attackers to modify the system configuration and delete files by establishing an FTP connection to the TCC, TCC+ or XTC using a username and password that does not exist. | |||
| CVE-2002-1554 | 0.00 | — | 0.00 | Mar 31, 2003 | Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could allow attackers to gain privileges by obtaining the passwords from the image database or a backup. | |||
| CVE-2002-1555 | 0.00 | — | 0.02 | Mar 31, 2003 | Cisco ONS15454 and ONS15327 running ONS before 3.4 uses a "public" SNMP community string that cannot be changed, which allows remote attackers to obtain sensitive information. | |||
| CVE-2002-1556 | 0.00 | — | 0.01 | Mar 31, 2003 | Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset) via an HTTP request to the TCC, TCC+ or XTC, in which the request contains an invalid CORBA Interoperable Object Reference (IOR). | |||
| CVE-2002-1557 | 0.00 | — | 0.01 | Mar 31, 2003 | Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset to TCC, TCC+, TCCi or XTC) via a malformed HTTP request that does not contain a leading / (slash) character. | |||
| CVE-2002-1558 | 0.00 | — | 0.03 | Mar 31, 2003 | Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote attackers to gain privileges by connecting to the account via Telnet. | |||
| CVE-2002-1559 | 0.04 | — | 0.09 | Mar 31, 2003 | Directory traversal vulnerability in ion-p.exe (aka ion-p) allows remote attackers to read arbitrary files via (1) C: (drive letter) or (2) .. (dot-dot) sequences in the page parameter. |
- CVE-2003-0106Apr 2, 2003risk 0.00cvss —epss 0.01
The HTTP proxy for Symantec Enterprise Firewall (SEF) 7.0 allows proxy users to bypass pattern matching for blocked URLs via requests that are URL-encoded with escapes, Unicode, or UTF-8.
- CVE-2003-0141Apr 2, 2003risk 0.00cvss —epss 0.03
The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other versions allows remote attackers to corrupt the heap and overwrite arbitrary memory via a PNG graphic file format containing compressed data using fixed trees…
- CVE-2003-0152Apr 2, 2003risk 0.00cvss —epss 0.02
Unknown vulnerability in bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www-data user.
- CVE-2003-0153Apr 2, 2003risk 0.03cvss —epss 0.06
bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3) multidiff.cgi.
- CVE-2003-0154Apr 2, 2003risk 0.03cvss —epss 0.05
Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi,…
- CVE-2003-0155Apr 2, 2003risk 0.00cvss —epss 0.02
bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page without authentication.
- CVE-2003-0159Apr 2, 2003risk 0.00cvss —epss 0.04
Heap-based buffer overflow in the NTLMSSP code for Ethereal 0.9.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.
- CVE-2003-0160Apr 2, 2003risk 0.00cvss —epss 0.01
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.2.11 allow remote attackers to inject arbitrary HTML code and steal information from a client's web browser.
- CVE-2003-0161Apr 2, 2003risk 0.06cvss —epss 0.38
The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control…
- CVE-2003-0162Apr 2, 2003risk 0.00cvss —epss 0.02
Ecartis 1.0.0 (formerly listar) before snapshot 20030227 allows remote attackers to reset passwords of other users and gain privileges by modifying hidden form fields in the HTML page.
- CVE-2003-0165Apr 2, 2003risk 0.03cvss —epss 0.02
Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display.
- CVE-2003-0166Apr 2, 2003risk 0.04cvss —epss 0.14
Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly other…
- CVE-2003-0167Apr 2, 2003risk 0.00cvss —epss 0.03
Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier, and Balsa 1.2.4 and earlier, allow a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a specially crafted mail folder, a different…
- CVE-2003-0168Apr 2, 2003risk 0.01cvss —epss 0.09
Buffer overflow in Apple QuickTime Player 5.x and 6.0 for Windows allows remote attackers to execute arbitrary code via a long QuickTime URL.
- CVE-2003-0172Apr 2, 2003risk 0.05cvss —epss 0.19
Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a crash and possibly execute arbitrary code via a long filename argument.
- CVE-2003-0178Apr 2, 2003risk 0.01cvss —epss 0.15
Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code via (1) the s_ViewName option in the PresetFields parameter for iNotes, (2) the Foldername option in the PresetFields parameter for…
- CVE-2003-0179Apr 2, 2003risk 0.01cvss —epss 0.08
Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the InitializeUsingNotesUserName method in the iNotes ActiveX control.
- CVE-2003-0180Apr 2, 2003risk 0.00cvss —epss 0.03
Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the h_PageUI form.
- CVE-2003-0181Apr 2, 2003risk 0.00cvss —epss 0.02
Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary Value Field POST request" as demonstrated using the s_Validation form with a long, unknown parameter name.
- CVE-2002-1529Mar 31, 2003risk 0.03cvss —epss 0.04
Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter.
- CVE-2002-1530Mar 31, 2003risk 0.03cvss —epss 0.06
The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to the userlist.asp program, which includes the passwords in a user editing form.
- CVE-2002-1531Mar 31, 2003risk 0.00cvss —epss 0.03
The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (crash) via an HTTP request without a Content-Length parameter.
- CVE-2002-1532Mar 31, 2003risk 0.00cvss —epss 0.03
The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (resource exhaustion) via a GET request without the terminating /r/n/r/n (CRLF) sequence, which causes the interface to wait for the sequence…
- CVE-2002-1533Mar 31, 2003risk 0.03cvss —epss 0.02
Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a).
- CVE-2002-1534Mar 31, 2003risk 0.00cvss —epss 0.02
Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share.
- CVE-2002-1535Mar 31, 2003risk 0.00cvss —epss 0.02
Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal network via a CONNECT request, which generates different error messages if the host is present.
- CVE-2002-1536Mar 31, 2003risk 0.00cvss —epss 0.03
Molly IRC bot 0.5 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $host variable for nslookup.pl, (2) the $to, $from, or $message variables in pop.pl, (3) the $words or $text variables in sms.pl, or (4) the $server or $printer variables…
- CVE-2002-1537Mar 31, 2003risk 0.00cvss —epss 0.02
admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form fields such as "u".
- CVE-2002-1538Mar 31, 2003risk 0.00cvss —epss 0.01
Acuma Acusend 4, and possibly earlier versions, allows remote authenticated users to read the reports of other users by inferring the full URL, whose name is easily predictable.
- CVE-2002-1539Mar 31, 2003risk 0.03cvss —epss 0.03
Buffer overflow in MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service via long (1) DELE or (2) UIDL arguments.
- CVE-2002-1540Mar 31, 2003risk 0.00cvss —epss 0.00
The client for Symantec Norton AntiVirus Corporate Edition 7.5.x before 7.5.1 Build 62 and 7.6.x before 7.6.1 Build 35a runs winhlp32 with raised privileges, which allows local users to gain privileges by using certain features of winhlp32.
- CVE-2002-1541Mar 31, 2003risk 0.00cvss —epss 0.02
BadBlue 1.7 allows remote attackers to bypass password protections for directories and files via an HTTP request containing an extra / (slash).
- CVE-2002-1542Mar 31, 2003risk 0.04cvss —epss 0.13
SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP datagram, possibly triggering a buffer overflow.
- CVE-2002-1543Mar 31, 2003risk 0.00cvss —epss 0.00
Buffer overflow in trek on NetBSD 1.5 through 1.5.3 allows local users to gain privileges via long keyboard input.
- CVE-2002-1544Mar 31, 2003risk 0.00cvss —epss 0.02
Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, (3) put, or (4) get.
- CVE-2002-1545Mar 31, 2003risk 0.00cvss —epss 0.01
CooolSoft Personal FTP Server 2.24 allows remote attackers to obtain the absolute pathname of the FTP root via a PWD command, which includes the full path in the response.
- CVE-2002-1546Mar 31, 2003risk 0.00cvss —epss 0.02
BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence.
- CVE-2002-1547Mar 31, 2003risk 0.00cvss —epss 0.04
Netscreen running ScreenOS 4.0.0r6 and earlier allows remote attackers to cause a denial of service via a malformed SSH packet to the Secure Command Shell (SCS) management interface, as demonstrated via certain CRC32 exploits, a different vulnerability than CVE-2001-0144.
- CVE-2002-1548Mar 31, 2003risk 0.00cvss —epss 0.00
Unknown vulnerability in autofs on AIX 4.3.0, when using executable maps, allows attackers to execute arbitrary commands as root, possibly related to "string handling around how the executable map is called."
- CVE-2002-1549Mar 31, 2003risk 0.04cvss —epss 0.11
Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.
- CVE-2002-1550Mar 31, 2003risk 0.00cvss —epss 0.00
dump_smutil.sh in IBM AIX allows local users to overwrite arbitrary files via a symlink attack on temporary files.
- CVE-2002-1551Mar 31, 2003risk 0.00cvss —epss 0.00
Buffer overflow in nslookup in IBM AIX may allow attackers to cause a denial of service or execute arbitrary code.
- CVE-2002-1552Mar 31, 2003risk 0.00cvss —epss 0.01
Novell eDirectory (eDir) 8.6.2 and Netware 5.1 eDir 85.x allows users with expired passwords to gain inappropriate permissions when logging in from Remote Manager.
- CVE-2002-1553Mar 31, 2003risk 0.00cvss —epss 0.02
Cisco ONS15454 and ONS15327 running ONS before 3.4 allows remote attackers to modify the system configuration and delete files by establishing an FTP connection to the TCC, TCC+ or XTC using a username and password that does not exist.
- CVE-2002-1554Mar 31, 2003risk 0.00cvss —epss 0.00
Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could allow attackers to gain privileges by obtaining the passwords from the image database or a backup.
- CVE-2002-1555Mar 31, 2003risk 0.00cvss —epss 0.02
Cisco ONS15454 and ONS15327 running ONS before 3.4 uses a "public" SNMP community string that cannot be changed, which allows remote attackers to obtain sensitive information.
- CVE-2002-1556Mar 31, 2003risk 0.00cvss —epss 0.01
Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset) via an HTTP request to the TCC, TCC+ or XTC, in which the request contains an invalid CORBA Interoperable Object Reference (IOR).
- CVE-2002-1557Mar 31, 2003risk 0.00cvss —epss 0.01
Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset to TCC, TCC+, TCCi or XTC) via a malformed HTTP request that does not contain a leading / (slash) character.
- CVE-2002-1558Mar 31, 2003risk 0.00cvss —epss 0.03
Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote attackers to gain privileges by connecting to the account via Telnet.
- CVE-2002-1559Mar 31, 2003risk 0.04cvss —epss 0.09
Directory traversal vulnerability in ion-p.exe (aka ion-p) allows remote attackers to read arbitrary files via (1) C: (drive letter) or (2) .. (dot-dot) sequences in the page parameter.