| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2002-0984 | 0.00 | — | 0.04 | Sep 24, 2002 | The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC allows remote attackers to execute arbitrary code if the user joins a channel whose topic includes EPIC4 code. | |||
| CVE-2002-0985 | 0.00 | — | 0.03 | Sep 24, 2002 | Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify command line arguments to the MTA (e.g. sendmail) in the 5th argument to mail(), altering MTA behavior and possibly executing commands. | |||
| CVE-2002-0986 | 0.00 | — | 0.03 | Sep 24, 2002 | The mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments, which could allow remote attackers to modify mail message content, including mail headers, and possibly use PHP as a "spam proxy." | |||
| CVE-2002-0987 | 0.03 | — | 0.01 | Sep 24, 2002 | X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges. | |||
| CVE-2002-0988 | 0.00 | — | 0.02 | Sep 24, 2002 | Buffer overflow in X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities. | |||
| CVE-2002-0989 | 0.00 | — | 0.03 | Sep 24, 2002 | The URL handler in the manual browser option for Gaim before 0.59.1 allows remote attackers to execute arbitrary script via shell metacharacters in a link. | |||
| CVE-2002-1120 | 0.08 | — | 0.67 | Sep 24, 2002 | Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request. | |||
| CVE-2002-1121 | 0.01 | — | 0.07 | Sep 24, 2002 | SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046… | |||
| CVE-2002-1122 | 0.00 | — | 0.03 | Sep 24, 2002 | Buffer overflow in the parsing mechanism for ISS Internet Scanner 6.2.1, when using the license banner HTTP check, allows remote attackers to execute arbitrary code via a long web server response. | |||
| CVE-2002-1123 | 0.09 | — | 0.78 | Sep 24, 2002 | Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the "Hello" overflow. | |||
| CVE-2002-1124 | 0.00 | — | 0.00 | Sep 24, 2002 | Multiple buffer overflows in purity 1-16 allow local users to gain privileges and modify high scores tables. | |||
| CVE-2002-1125 | 0.03 | — | 0.01 | Sep 24, 2002 | FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including (1) asmon, (2) ascpu, (3) bubblemon, (4) wmmon, and (5) wmnet2, leave open file descriptors for /dev/mem and /dev/kmem, which allows local users to read kernel memory. | |||
| CVE-2002-1126 | 0.00 | — | 0.02 | Sep 24, 2002 | Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs,… | |||
| CVE-2002-1612 | 0.00 | — | 0.01 | Sep 13, 2002 | Buffer overflow in mailcv in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges. | |||
| CVE-2002-1615 | 0.00 | — | 0.01 | Sep 13, 2002 | Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to execute arbitrary code via (1) msgchk or (2) .upd..loader. | |||
| CVE-2002-1613 | 0.00 | — | 0.01 | Sep 10, 2002 | Buffer overflow in ps in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges. | |||
| CVE-2002-1614 | 0.03 | — | 0.02 | Sep 9, 2002 | Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at. | |||
| CVE-2002-0093 | 0.00 | — | 0.01 | Sep 5, 2002 | Buffer overflow in ipcs for HP Tru64 UNIX 4.0f through 5.1a may allow attackers to execute arbitrary code, a different vulnerability than CVE-2001-0423. | |||
| CVE-2002-0632 | 0.00 | — | 0.01 | Sep 5, 2002 | Vulnerability in SGI BDS (Bulk Data Service) BDSPro 2.4 and earlier allows clients to read arbitrary files on a BDS server. | |||
| CVE-2002-0654 | 0.08 | — | 0.59 | Sep 5, 2002 | Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a request for a .var file, which leaks the pathname in the resulting error message, or (2) via an error message that occurs when a script (child… | |||
| CVE-2002-0679 | 0.02 | — | 0.23 | Sep 5, 2002 | Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the _TT_CREATE_FILE procedure. | |||
| CVE-2002-0720 | 0.00 | — | 0.02 | Sep 5, 2002 | A handler routine for the Network Connection Manager (NCM) in Windows 2000 allows local users to gain privileges via a complex attack that causes the handler to run in the LocalSystem context with user-specified code. | |||
| CVE-2002-0721 | 0.07 | — | 0.46 | Sep 5, 2002 | Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, which could allow unprivileged users, and possibly remote attackers, to run stored procedures with administrator privileges via (1)… | |||
| CVE-2002-0725 | Med | 0.36 | 5.5 | 0.01 | Sep 5, 2002 | NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard link to the target file, which causes the link to be recorded in the audit trail instead of the target file. | ||
| CVE-2002-0851 | 0.03 | — | 0.01 | Sep 5, 2002 | Format string vulnerability in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the ISDN4Linux (i4l) package allows local users to gain root privileges via format strings in the device name command line argument, which is not properly handled in a call to syslog. | |||
| CVE-2002-0852 | 0.00 | — | 0.01 | Sep 5, 2002 | Buffer overflows in Cisco Virtual Private Network (VPN) Client 3.5.4 and earlier allows remote attackers to cause a denial of service via (1) an Internet Key Exchange (IKE) with a large Security Parameter Index (SPI) payload, or (2) an IKE packet with a large number of valid… | |||
| CVE-2002-0853 | 0.00 | — | 0.02 | Sep 5, 2002 | Cisco Virtual Private Network (VPN) Client 3.5.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a packet with a zero-length payload. | |||
| CVE-2002-0854 | 0.00 | — | 0.00 | Sep 5, 2002 | Buffer overflows in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the i4l package on SuSE 7.3, 8.0, and possibly other operating systems, may allow local users to gain privileges. | |||
| CVE-2002-0855 | 0.03 | — | 0.06 | Sep 5, 2002 | Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the (1) adminpw or (2) info parameters to the ml-name feature. | |||
| CVE-2002-0856 | 0.00 | — | 0.03 | Sep 5, 2002 | SQL*NET listener for Oracle Net Oracle9i 9.0.x and 9.2 allows remote attackers to cause a denial of service (crash) via certain debug requests that are not properly handled by the debugging feature. | |||
| CVE-2002-0857 | 0.01 | — | 0.14 | Sep 5, 2002 | Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file. | |||
| CVE-2002-0858 | 0.00 | — | 0.02 | Sep 5, 2002 | catsnmp in Oracle 9i and 8i is installed with a dbsnmp user with a default dbsnmp password, which allows attackers to perform restricted database operations and possibly gain other privileges. | |||
| CVE-2002-0859 | 0.05 | — | 0.26 | Sep 5, 2002 | Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code. | |||
| CVE-2002-0870 | 0.00 | — | 0.01 | Sep 5, 2002 | The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability (CVE-2001-0622) was incomplete, which still allows remote attackers to gain additional privileges by directly requesting the web management URL instead of navigating through… | |||
| CVE-2002-0871 | 0.00 | — | 0.00 | Sep 5, 2002 | xinetd 2.3.4 leaks file descriptors for the signal pipe to services that are launched by xinetd, which could allow those services to cause a denial of service via the pipe. | |||
| CVE-2002-0872 | 0.00 | — | 0.02 | Sep 5, 2002 | l2tpd 0.67 does not initialize the random number generator, which allows remote attackers to hijack sessions. | |||
| CVE-2002-0873 | — | 0.00 | — | 0.01 | Sep 5, 2002 | Vulnerability in l2tpd 0.67 allows remote attackers to overwrite the vendor field via a long value in an attribute/value pair, possibly via a buffer overflow. | ||
| CVE-2002-0874 | 0.03 | — | 0.06 | Sep 5, 2002 | Vulnerability in Interchange 4.8.6, 4.8.3, and other versions, when running in INET mode, allows remote attackers to read arbitrary files. | |||
| CVE-2002-0875 | 0.03 | — | 0.01 | Sep 5, 2002 | Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group. | |||
| CVE-2002-1604 | 0.01 | — | 0.15 | Sep 2, 2002 | Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliver. | |||
| CVE-2002-1605 | 0.04 | — | 0.13 | Sep 2, 2002 | Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable to (1) dxpause, (2) dxconsole, or (3) dtsession. | |||
| CVE-2002-1607 | 0.00 | — | 0.01 | Aug 31, 2002 | Buffer overflow in ypmatch in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code. | |||
| CVE-2002-1608 | 0.00 | — | 0.01 | Aug 31, 2002 | Buffer overflow in traceroute in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code. | |||
| CVE-2002-1606 | 0.00 | — | 0.01 | Aug 30, 2002 | Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain privileges via (1) lpc, (2) lpd, (3) lpq, (4) lpr, or (5) lprm. | |||
| CVE-2002-1609 | 0.00 | — | 0.01 | Aug 30, 2002 | Buffer overflow in binmail in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges. | |||
| CVE-2002-1610 | 0.00 | — | 0.01 | Aug 30, 2002 | Unknown vulnerability in ping in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to cause a denial of service. | |||
| CVE-2002-1611 | 0.00 | — | 0.01 | Aug 30, 2002 | Buffer overflow in quot in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges. | |||
| CVE-2002-1353 | 0.00 | — | 0.01 | Aug 29, 2002 | LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst. | |||
| CVE-2002-1451 | 0.04 | — | 0.08 | Aug 24, 2002 | Blazix before 1.2.2 allows remote attackers to read source code of JSP scripts or list restricted web directories via an HTTP request that ends in a (1) "+" or (2) "\" (backslash) character. | |||
| CVE-2002-1444 | 0.04 | — | 0.14 | Aug 15, 2002 | The Google toolbar 1.1.60, when running on Internet Explorer 5.5 and 6.0, allows remote attackers to cause a denial of service (crash with an exception in oleaut32.dll) via malicious HTML, possibly related to small width and height parameters or an incorrect call to the… |
- CVE-2002-0984Sep 24, 2002risk 0.00cvss —epss 0.04
The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC allows remote attackers to execute arbitrary code if the user joins a channel whose topic includes EPIC4 code.
- CVE-2002-0985Sep 24, 2002risk 0.00cvss —epss 0.03
Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify command line arguments to the MTA (e.g. sendmail) in the 5th argument to mail(), altering MTA behavior and possibly executing commands.
- CVE-2002-0986Sep 24, 2002risk 0.00cvss —epss 0.03
The mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments, which could allow remote attackers to modify mail message content, including mail headers, and possibly use PHP as a "spam proxy."
- CVE-2002-0987Sep 24, 2002risk 0.03cvss —epss 0.01
X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges.
- CVE-2002-0988Sep 24, 2002risk 0.00cvss —epss 0.02
Buffer overflow in X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities.
- CVE-2002-0989Sep 24, 2002risk 0.00cvss —epss 0.03
The URL handler in the manual browser option for Gaim before 0.59.1 allows remote attackers to execute arbitrary script via shell metacharacters in a link.
- CVE-2002-1120Sep 24, 2002risk 0.08cvss —epss 0.67
Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
- CVE-2002-1121Sep 24, 2002risk 0.01cvss —epss 0.07
SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046…
- CVE-2002-1122Sep 24, 2002risk 0.00cvss —epss 0.03
Buffer overflow in the parsing mechanism for ISS Internet Scanner 6.2.1, when using the license banner HTTP check, allows remote attackers to execute arbitrary code via a long web server response.
- CVE-2002-1123Sep 24, 2002risk 0.09cvss —epss 0.78
Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the "Hello" overflow.
- CVE-2002-1124Sep 24, 2002risk 0.00cvss —epss 0.00
Multiple buffer overflows in purity 1-16 allow local users to gain privileges and modify high scores tables.
- CVE-2002-1125Sep 24, 2002risk 0.03cvss —epss 0.01
FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including (1) asmon, (2) ascpu, (3) bubblemon, (4) wmmon, and (5) wmnet2, leave open file descriptors for /dev/mem and /dev/kmem, which allows local users to read kernel memory.
- CVE-2002-1126Sep 24, 2002risk 0.00cvss —epss 0.02
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs,…
- CVE-2002-1612Sep 13, 2002risk 0.00cvss —epss 0.01
Buffer overflow in mailcv in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
- CVE-2002-1615Sep 13, 2002risk 0.00cvss —epss 0.01
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to execute arbitrary code via (1) msgchk or (2) .upd..loader.
- CVE-2002-1613Sep 10, 2002risk 0.00cvss —epss 0.01
Buffer overflow in ps in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
- CVE-2002-1614Sep 9, 2002risk 0.03cvss —epss 0.02
Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at.
- CVE-2002-0093Sep 5, 2002risk 0.00cvss —epss 0.01
Buffer overflow in ipcs for HP Tru64 UNIX 4.0f through 5.1a may allow attackers to execute arbitrary code, a different vulnerability than CVE-2001-0423.
- CVE-2002-0632Sep 5, 2002risk 0.00cvss —epss 0.01
Vulnerability in SGI BDS (Bulk Data Service) BDSPro 2.4 and earlier allows clients to read arbitrary files on a BDS server.
- CVE-2002-0654Sep 5, 2002risk 0.08cvss —epss 0.59
Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a request for a .var file, which leaks the pathname in the resulting error message, or (2) via an error message that occurs when a script (child…
- CVE-2002-0679Sep 5, 2002risk 0.02cvss —epss 0.23
Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the _TT_CREATE_FILE procedure.
- CVE-2002-0720Sep 5, 2002risk 0.00cvss —epss 0.02
A handler routine for the Network Connection Manager (NCM) in Windows 2000 allows local users to gain privileges via a complex attack that causes the handler to run in the LocalSystem context with user-specified code.
- CVE-2002-0721Sep 5, 2002risk 0.07cvss —epss 0.46
Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, which could allow unprivileged users, and possibly remote attackers, to run stored procedures with administrator privileges via (1)…
- risk 0.36cvss 5.5epss 0.01
NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard link to the target file, which causes the link to be recorded in the audit trail instead of the target file.
- CVE-2002-0851Sep 5, 2002risk 0.03cvss —epss 0.01
Format string vulnerability in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the ISDN4Linux (i4l) package allows local users to gain root privileges via format strings in the device name command line argument, which is not properly handled in a call to syslog.
- CVE-2002-0852Sep 5, 2002risk 0.00cvss —epss 0.01
Buffer overflows in Cisco Virtual Private Network (VPN) Client 3.5.4 and earlier allows remote attackers to cause a denial of service via (1) an Internet Key Exchange (IKE) with a large Security Parameter Index (SPI) payload, or (2) an IKE packet with a large number of valid…
- CVE-2002-0853Sep 5, 2002risk 0.00cvss —epss 0.02
Cisco Virtual Private Network (VPN) Client 3.5.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a packet with a zero-length payload.
- CVE-2002-0854Sep 5, 2002risk 0.00cvss —epss 0.00
Buffer overflows in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the i4l package on SuSE 7.3, 8.0, and possibly other operating systems, may allow local users to gain privileges.
- CVE-2002-0855Sep 5, 2002risk 0.03cvss —epss 0.06
Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the (1) adminpw or (2) info parameters to the ml-name feature.
- CVE-2002-0856Sep 5, 2002risk 0.00cvss —epss 0.03
SQL*NET listener for Oracle Net Oracle9i 9.0.x and 9.2 allows remote attackers to cause a denial of service (crash) via certain debug requests that are not properly handled by the debugging feature.
- CVE-2002-0857Sep 5, 2002risk 0.01cvss —epss 0.14
Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.
- CVE-2002-0858Sep 5, 2002risk 0.00cvss —epss 0.02
catsnmp in Oracle 9i and 8i is installed with a dbsnmp user with a default dbsnmp password, which allows attackers to perform restricted database operations and possibly gain other privileges.
- CVE-2002-0859Sep 5, 2002risk 0.05cvss —epss 0.26
Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.
- CVE-2002-0870Sep 5, 2002risk 0.00cvss —epss 0.01
The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability (CVE-2001-0622) was incomplete, which still allows remote attackers to gain additional privileges by directly requesting the web management URL instead of navigating through…
- CVE-2002-0871Sep 5, 2002risk 0.00cvss —epss 0.00
xinetd 2.3.4 leaks file descriptors for the signal pipe to services that are launched by xinetd, which could allow those services to cause a denial of service via the pipe.
- CVE-2002-0872Sep 5, 2002risk 0.00cvss —epss 0.02
l2tpd 0.67 does not initialize the random number generator, which allows remote attackers to hijack sessions.
- CVE-2002-0873Sep 5, 2002risk 0.00cvss —epss 0.01
Vulnerability in l2tpd 0.67 allows remote attackers to overwrite the vendor field via a long value in an attribute/value pair, possibly via a buffer overflow.
- CVE-2002-0874Sep 5, 2002risk 0.03cvss —epss 0.06
Vulnerability in Interchange 4.8.6, 4.8.3, and other versions, when running in INET mode, allows remote attackers to read arbitrary files.
- CVE-2002-0875Sep 5, 2002risk 0.03cvss —epss 0.01
Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.
- CVE-2002-1604Sep 2, 2002risk 0.01cvss —epss 0.15
Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliver.
- CVE-2002-1605Sep 2, 2002risk 0.04cvss —epss 0.13
Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable to (1) dxpause, (2) dxconsole, or (3) dtsession.
- CVE-2002-1607Aug 31, 2002risk 0.00cvss —epss 0.01
Buffer overflow in ypmatch in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code.
- CVE-2002-1608Aug 31, 2002risk 0.00cvss —epss 0.01
Buffer overflow in traceroute in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code.
- CVE-2002-1606Aug 30, 2002risk 0.00cvss —epss 0.01
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain privileges via (1) lpc, (2) lpd, (3) lpq, (4) lpr, or (5) lprm.
- CVE-2002-1609Aug 30, 2002risk 0.00cvss —epss 0.01
Buffer overflow in binmail in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
- CVE-2002-1610Aug 30, 2002risk 0.00cvss —epss 0.01
Unknown vulnerability in ping in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to cause a denial of service.
- CVE-2002-1611Aug 30, 2002risk 0.00cvss —epss 0.01
Buffer overflow in quot in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
- CVE-2002-1353Aug 29, 2002risk 0.00cvss —epss 0.01
LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst.
- CVE-2002-1451Aug 24, 2002risk 0.04cvss —epss 0.08
Blazix before 1.2.2 allows remote attackers to read source code of JSP scripts or list restricted web directories via an HTTP request that ends in a (1) "+" or (2) "\" (backslash) character.
- CVE-2002-1444Aug 15, 2002risk 0.04cvss —epss 0.14
The Google toolbar 1.1.60, when running on Internet Explorer 5.5 and 6.0, allows remote attackers to cause a denial of service (crash with an exception in oleaut32.dll) via malicious HTML, possibly related to small width and height parameters or an incorrect call to the…