VYPR

CVEs

342,793 total · page 6758 of 6,856

AllCriticalHighKEV
  • CVE-2002-0746Aug 12, 2002
    IBM
    Aix
    risk 0.00cvss —epss 0.02

    Vulnerability in template.dhcpo in AIX 4.3.3 related to an insecure linker argument.

  • CVE-2002-0747Aug 12, 2002
    IBM
    Aix
    risk 0.03cvss —epss 0.06

    Buffer overflow in lsmcode in AIX 4.3.3.

  • CVE-2002-0748Aug 12, 2002
    Ni
    Labview
    risk 0.04cvss —epss 0.09

    LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request that ends in two newline characters, instead of the expected carriage return/newline combinations.

  • CVE-2002-0749Aug 12, 2002
    Cgiscript.net
    Csmailto
    risk 0.04cvss —epss 0.11

    CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the form-attachment field.

  • CVE-2002-0750Aug 12, 2002
    Cgiscript.net
    Csmailto
    risk 0.00cvss —epss 0.02

    CGIscript.net csMailto.cgi program allows remote attackers to read arbitrary files by specifying the target filename in the form-attachment field.

  • CVE-2002-0751Aug 12, 2002
    Cgiscript.net
    Csmailto
    risk 0.00cvss —epss 0.03

    CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a "spam proxy" and send mail to arbitrary users via modified (1) form-to, (2) form-from, and (3) form-results parameters.

  • CVE-2002-0752Aug 12, 2002
    Cgiscript.net
    Csmailto
    risk 0.00cvss —epss 0.02

    CGIscript.net csMailto.cgi program exports feedback to a file that is accessible from the web document root, which could allow remote attackers to obtain sensitive information by directly accessing the file.

  • CVE-2002-0753Aug 12, 2002
    Talentsoft
    Web\+ Server
    risk 0.00cvss —epss 0.06

    Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie.

  • CVE-2002-0754Aug 12, 2002
    Heimdal
    Heimdal
    risk 0.00cvss —epss 0.00

    Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them.

  • CVE-2002-0755Aug 12, 2002
    FreeBSD
    FreeBSD
    risk 0.00cvss —epss 0.00

    Kerberos 5 su (k5su) in FreeBSD 4.5 and earlier does not verify that a user is a member of the wheel group before granting superuser privileges, which could allow unauthorized users to execute commands as root.

  • CVE-2002-0756Aug 12, 2002
    Webmin
    Webmin
    risk 0.00cvss —epss 0.02

    Cross-site scripting vulnerability in the authentication page for (1) Webmin 0.96 and (2) Usermin 0.90 allows remote attackers to insert script into an error page and possibly steal cookies.

  • CVE-2002-0757Aug 12, 2002
    Webmin
    Webmin
    risk 0.00cvss —epss 0.02

    (1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass authentication and gain privileges via certain control characters in the authentication information, which can force Webmin or Usermin to accept arbitrary…

  • CVE-2002-0758Aug 12, 2002
    SUSE S.A.
    Sysconfig
    risk 0.00cvss —epss 0.02

    ifup-dhcp script in the sysconfig package for SuSE 8.0 allows remote attackers to execute arbitrary commands via spoofed DHCP responses, which are stored and executed in a file.

  • CVE-2002-0759Aug 12, 2002
    Bzip
    Bzip2
    risk 0.00cvss —epss 0.01

    bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, does not use the O_EXCL flag to create files during decompression and does not warn the user if an existing file would be overwritten, which could allow attackers to…

  • CVE-2002-0760Aug 12, 2002
    Bzip
    Bzip2
    risk 0.00cvss —epss 0.00

    Race condition in bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, decompresses files with world-readable permissions before setting the permissions to what is specified in the bzip2 archive, which could allow local…

  • CVE-2002-0761Aug 12, 2002
    Bzip
    Bzip2
    risk 0.00cvss —epss 0.00

    bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly systems, uses the permissions of symbolic links instead of the actual files when creating an archive, which could cause the files to be extracted with less restrictive permissions than intended.

  • CVE-2002-0762Aug 12, 2002
    SUSE S.A.
    shadow
    risk 0.00cvss —epss 0.00

    shadow package in SuSE 8.0 allows local users to destroy the /etc/passwd and /etc/shadow files or assign extra group privileges to some users by changing filesize limits before calling programs that modify the files.

  • CVE-2002-0763Aug 12, 2002
    Microfocus
    Virtualvault
    risk 0.00cvss —epss 0.02

    Vulnerability in administration server for HP VirtualVault 4.5 on HP-UX 11.04 allows remote web servers or privileged external processes to bypass access restrictions and establish connections to the server.

  • CVE-2002-0764Aug 12, 2002
    Phorum
    Phorum
    risk 0.06cvss —epss 0.38

    Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php that modifies the PHORUM[settings_dir] variable to point to a directory that contains a PHP file with the commands.

  • CVE-2002-0765Aug 12, 2002
    OpenBSD
    OpenSSH
    risk 0.00cvss —epss 0.01

    sshd in OpenSSH 3.2.2, when using YP with netgroups and under certain conditions, may allow users to successfully authenticate and log in with another user's password.

  • CVE-2002-0766Aug 12, 2002
    OpenBSD
    OpenBSD
    risk 0.00cvss —epss 0.01

    OpenBSD 2.9 through 3.1 allows local users to cause a denial of service (resource exhaustion) and gain root privileges by filling the kernel's file descriptor table and closing file descriptors 0, 1, or 2 before executing a privileged process, which is not properly handled when…

  • CVE-2002-0767Aug 12, 2002
    Richard Gooch
    Simpleinit
    risk 0.03cvss —epss 0.01

    simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a child process, which allows the child process to cause simpleinit to execute arbitrary programs with root privileges.

  • CVE-2002-0768Aug 12, 2002
    Luke Mewburn
    Lukemftp
    risk 0.00cvss —epss 0.02

    Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code via a long PASV command.

  • CVE-2002-0769Aug 12, 2002
    Cisco Systems, Inc.
    Ata 186
    risk 0.04cvss —epss 0.08

    The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass authentication via an HTTP POST request with a single byte, which allows the attackers to (1) obtain the password from the login screen, or (2) reconfigure the…

  • CVE-2002-0770Aug 12, 2002
    ID Software
    Quake Ii Server
    risk 0.03cvss —epss 0.06

    Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin commands via a client that does not expand "$" macros, which causes the server to expand the macros and leak the…

  • CVE-2002-0771Aug 12, 2002
    Viewvc
    Viewcvs
    risk 0.04cvss —epss 0.07

    Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the (1) cvsroot or (2) sortby parameters.

  • CVE-2002-0772Aug 12, 2002
    Hosting Controller
    Hosting Controller
    risk 0.04cvss —epss 0.09

    Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. (dot dot) in the RootName parameter.

  • CVE-2002-0773Aug 12, 2002
    Hosting Controller
    Hosting Controller
    risk 0.03cvss —epss 0.04

    imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to imp_rootdir.asp and modifying parameters such as (1) ftp, (2) owwwPath, and (3) oftpPath.

  • CVE-2002-0774Aug 12, 2002
    Hosting Controller
    Hosting Controller
    risk 0.00cvss —epss 0.03

    Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the password is not changed.

  • CVE-2002-0775Aug 12, 2002
    Hosting Controller
    Hosting Controller
    risk 0.04cvss —epss 0.08

    browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter.

  • CVE-2002-0776Aug 12, 2002
    Hosting Controller
    Hosting Controller
    risk 0.00cvss —epss 0.02

    getuserdesc.asp in Hosting Controller 2002 allows remote attackers to change the passwords of arbitrary users and gain privileges by modifying the username parameter, as addressed by the "UpdateUser" hot fix.

  • CVE-2002-0777Aug 12, 2002
    Ipswitch, Inc.
    Imail
    risk 0.01cvss —epss 0.10

    Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary code via a long "bind DN" parameter.

  • CVE-2002-0778Aug 12, 2002
    Cisco Systems, Inc.
    Content Engine
    risk 0.00cvss —epss 0.02

    The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP addresses while hiding the actual source IP.

  • CVE-2002-0779Aug 12, 2002
    Novell
    Bordermanager
    risk 0.00cvss —epss 0.02

    FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service (network connectivity loss) via a connection to port 21 with a large amount of random data.

  • CVE-2002-0780Aug 12, 2002
    Novell
    Bordermanager
    risk 0.00cvss —epss 0.02

    IP/IPX gateway for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a connection to port 8225 with a large amount of random data, which causes ipipxgw.nlm to ABEND.

  • CVE-2002-0781Aug 12, 2002
    Novell
    Bordermanager
    risk 0.00cvss —epss 0.02

    RTSP proxy for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a GET request to port 9090 followed by a series of carriage returns, which causes proxy.nlm to ABEND.

  • CVE-2002-0782Aug 12, 2002
    Novell
    Bordermanager
    risk 0.00cvss —epss 0.02

    Novell BorderManager 3.5 with PAT (Port-Address Translate) enabled allows remote attackers to cause a denial of service by filling the connection table with a large number of connection requests to hosts that do not have a specific route, which may be forwarded to the public…

  • CVE-2002-0783Aug 12, 2002
    Opera
    Opera
    risk 0.03cvss —epss 0.03

    Opera 6.01, 6.0, and 5.12 allows remote attackers to execute arbitrary JavaScript in the security context of other sites by setting the location of a frame or iframe to a Javascript: URL.

  • CVE-2002-0784Aug 12, 2002
    Lysias
    Lidik Webserver
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HTTP request with a ... (modified dot dot).

  • CVE-2002-0785Aug 12, 2002
    AOL
    Instant Messenger
    risk 0.00cvss —epss 0.04

    AOL Instant Messenger (AIM) allows remote attackers to cause a denial of service (crash) via an "AddBuddy" link with the ScreenName parameter set to a large number of comma-separated values, possibly triggering a buffer overflow.

  • CVE-2002-0786Aug 12, 2002
    Critical Path
    Injoin Directory Server
    risk 0.03cvss —epss 0.03

    iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators to read arbitrary files by specifying the target file in the LOG parameter.

  • CVE-2002-0787Aug 12, 2002
    Critical Path
    Injoin Directory Server
    risk 0.03cvss —epss 0.03

    Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 allow remote attackers to execute script as the administrator via administrator URLs with modified (1) LOCID or (2) OC parameters.

  • CVE-2002-0788MedAug 12, 2002
    PGP Corporation
    Corporate Desktop
    risk 0.36cvss 5.5epss 0.00

    An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files that cannot be wiped or deleted due to strong permissions, which could allow certain local users or attackers with…

  • CVE-2002-0789Aug 12, 2002
    Mnogosearch
    Mnogosearch
    risk 0.00cvss —epss 0.03

    Buffer overflow in search.cgi in mnoGoSearch 3.1.19 and earlier allows remote attackers to execute arbitrary code via a long query (q) parameter.

  • CVE-2002-0790Aug 12, 2002
    IBM
    Aix
    risk 0.00cvss —epss 0.00

    clchkspuser and clpasswdremote in AIX expose an encrypted password in the cspoc.log file, which could allow local users to gain privileges.

  • CVE-2002-0791Aug 12, 2002
    Novell
    Netware
    risk 0.00cvss —epss 0.02

    Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) via a connection to the server followed by a carriage return, and possibly other invalid commands with improper syntax or length.

  • CVE-2002-0792Aug 12, 2002
    Cisco Systems, Inc.
    Webns
    risk 0.00cvss —epss 0.03

    The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to cause a denial of service (soft reset) via (1) an HTTPS POST request, or (2) malformed XML data.

  • CVE-2002-0793MedAug 12, 2002
    QNX
    Rtos
    risk 0.39cvss 5.5epss 0.01

    Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrite arbitrary files via (1) the -f argument to the monitor utility, (2) the -d argument to dumper, (3) the -c argument to crttrap, or (4) using the Watcom sample…

  • CVE-2002-0794Aug 12, 2002
    FreeBSD
    FreeBSD
    risk 0.00cvss —epss 0.02

    The accept_filter mechanism in FreeBSD 4 through 4.5 does not properly remove entries from the incomplete listen queue when adding a syncache, which allows remote attackers to cause a denial of service (network service availability) via a large number of connection attempts,…

  • CVE-2002-0795Aug 12, 2002
    FreeBSD
    FreeBSD
    risk 0.00cvss —epss 0.00

    The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attack on X Windows lock files.