VYPR

CVEs

376,725 total · page 7433 of 7,535

AllCriticalHighKEV
  • CVE-2002-0093Sep 5, 2002
    Compaq
    Tru64
    risk 0.00cvss —epss 0.01

    Buffer overflow in ipcs for HP Tru64 UNIX 4.0f through 5.1a may allow attackers to execute arbitrary code, a different vulnerability than CVE-2001-0423.

  • CVE-2002-0632Sep 5, 2002
    Sgi
    BDSPro
    risk 0.00cvss —epss 0.01

    Vulnerability in SGI BDS (Bulk Data Service) BDSPro 2.4 and earlier allows clients to read arbitrary files on a BDS server.

  • CVE-2002-0654Sep 5, 2002
    Apache
    HTTP Server
    risk 0.08cvss —epss 0.59

    Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a request for a .var file, which leaks the pathname in the resulting error message, or (2) via an error message that occurs when a script (child…

  • CVE-2002-0679Sep 5, 2002
    IBM
    Aix
    risk 0.02cvss —epss 0.23

    Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the _TT_CREATE_FILE procedure.

  • CVE-2002-0720Sep 5, 2002
    Microsoft
    Windows 2000
    risk 0.00cvss —epss 0.02

    A handler routine for the Network Connection Manager (NCM) in Windows 2000 allows local users to gain privileges via a complex attack that causes the handler to run in the LocalSystem context with user-specified code.

  • CVE-2002-0721Sep 5, 2002
    Microsoft
    SQL Server
    risk 0.07cvss —epss 0.46

    Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, which could allow unprivileged users, and possibly remote attackers, to run stored procedures with administrator privileges via (1)…

  • CVE-2002-0725MedSep 5, 2002
    Microsoft
    Windows Nt
    risk 0.36cvss 5.5epss 0.01

    NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard link to the target file, which causes the link to be recorded in the audit trail instead of the target file.

  • CVE-2002-0851Sep 5, 2002
    Isdn4linux
    Isdn4linux
    risk 0.03cvss —epss 0.01

    Format string vulnerability in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the ISDN4Linux (i4l) package allows local users to gain root privileges via format strings in the device name command line argument, which is not properly handled in a call to syslog.

  • CVE-2002-0852Sep 5, 2002
    Cisco Systems, Inc.
    VPN Client
    risk 0.00cvss —epss 0.01

    Buffer overflows in Cisco Virtual Private Network (VPN) Client 3.5.4 and earlier allows remote attackers to cause a denial of service via (1) an Internet Key Exchange (IKE) with a large Security Parameter Index (SPI) payload, or (2) an IKE packet with a large number of valid…

  • CVE-2002-0853Sep 5, 2002
    Cisco Systems, Inc.
    VPN Client
    risk 0.00cvss —epss 0.02

    Cisco Virtual Private Network (VPN) Client 3.5.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a packet with a zero-length payload.

  • CVE-2002-0854Sep 5, 2002
    SUSE S.A.
    i4l
    risk 0.00cvss —epss 0.00

    Buffer overflows in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the i4l package on SuSE 7.3, 8.0, and possibly other operating systems, may allow local users to gain privileges.

  • CVE-2002-0855Sep 5, 2002
    GNU
    Mailman
    risk 0.03cvss —epss 0.06

    Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the (1) adminpw or (2) info parameters to the ml-name feature.

  • CVE-2002-0856Sep 5, 2002
    Oracle Corporation
    Oracle9i
    risk 0.00cvss —epss 0.03

    SQL*NET listener for Oracle Net Oracle9i 9.0.x and 9.2 allows remote attackers to cause a denial of service (crash) via certain debug requests that are not properly handled by the debugging feature.

  • CVE-2002-0857Sep 5, 2002
    Oracle Corporation
    Oracle Listener Control utility
    risk 0.01cvss —epss 0.14

    Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.

  • CVE-2002-0858Sep 5, 2002
    Oracle Corporation
    Oracle8i
    risk 0.00cvss —epss 0.02

    catsnmp in Oracle 9i and 8i is installed with a dbsnmp user with a default dbsnmp password, which allows attackers to perform restricted database operations and possibly gain other privileges.

  • CVE-2002-0859Sep 5, 2002
    Microsoft
    SQL Server
    risk 0.05cvss —epss 0.26

    Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.

  • CVE-2002-0870Sep 5, 2002
    Cisco Systems, Inc.
    Webns
    risk 0.00cvss —epss 0.01

    The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability (CVE-2001-0622) was incomplete, which still allows remote attackers to gain additional privileges by directly requesting the web management URL instead of navigating through…

  • CVE-2002-0871Sep 5, 2002
    Xinetd
    Xinetd
    risk 0.00cvss —epss 0.00

    xinetd 2.3.4 leaks file descriptors for the signal pipe to services that are launched by xinetd, which could allow those services to cause a denial of service via the pipe.

  • CVE-2002-0872Sep 5, 2002
    Xelerance
    L2tpd
    risk 0.00cvss —epss 0.02

    l2tpd 0.67 does not initialize the random number generator, which allows remote attackers to hijack sessions.

  • CVE-2002-0873Sep 5, 2002
    risk 0.00cvss —epss 0.01

    Vulnerability in l2tpd 0.67 allows remote attackers to overwrite the vendor field via a long value in an attribute/value pair, possibly via a buffer overflow.

  • CVE-2002-0874Sep 5, 2002
    Interchange Development Group
    Interchange
    risk 0.03cvss —epss 0.06

    Vulnerability in Interchange 4.8.6, 4.8.3, and other versions, when running in INET mode, allows remote attackers to read arbitrary files.

  • CVE-2002-0875Sep 5, 2002
    Sgi
    Fam
    risk 0.03cvss —epss 0.01

    Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.

  • CVE-2002-1604Sep 2, 2002
    Microfocus
    Tru64
    risk 0.01cvss —epss 0.15

    Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliver.

  • CVE-2002-1605Sep 2, 2002
    Microfocus
    Tru64
    risk 0.04cvss —epss 0.13

    Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable to (1) dxpause, (2) dxconsole, or (3) dtsession.

  • CVE-2002-1607Aug 31, 2002
    Microfocus
    Tru64
    risk 0.00cvss —epss 0.01

    Buffer overflow in ypmatch in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code.

  • CVE-2002-1608Aug 31, 2002
    Microfocus
    Tru64
    risk 0.00cvss —epss 0.01

    Buffer overflow in traceroute in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code.

  • CVE-2002-1606Aug 30, 2002
    Microfocus
    Tru64
    risk 0.00cvss —epss 0.01

    Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain privileges via (1) lpc, (2) lpd, (3) lpq, (4) lpr, or (5) lprm.

  • CVE-2002-1609Aug 30, 2002
    Microfocus
    Tru64
    risk 0.00cvss —epss 0.01

    Buffer overflow in binmail in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.

  • CVE-2002-1610Aug 30, 2002
    Microfocus
    Tru64
    risk 0.00cvss —epss 0.01

    Unknown vulnerability in ping in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to cause a denial of service.

  • CVE-2002-1611Aug 30, 2002
    Microfocus
    Tru64
    risk 0.00cvss —epss 0.01

    Buffer overflow in quot in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.

  • CVE-2002-1353Aug 29, 2002
    LocalWEB2000
    LocalWEB2000
    risk 0.00cvss —epss 0.01

    LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst.

  • CVE-2002-1451Aug 24, 2002
    Desiderata Software
    Blazix
    risk 0.04cvss —epss 0.08

    Blazix before 1.2.2 allows remote attackers to read source code of JSP scripts or list restricted web directories via an HTTP request that ends in a (1) "+" or (2) "\" (backslash) character.

  • CVE-2002-1444Aug 15, 2002
    Google
    Toolbar
    risk 0.04cvss —epss 0.14

    The Google toolbar 1.1.60, when running on Internet Explorer 5.5 and 6.0, allows remote attackers to cause a denial of service (crash with an exception in oleaut32.dll) via malicious HTML, possibly related to small width and height parameters or an incorrect call to the…

  • CVE-2002-1452Aug 14, 2002
    Mywebserver
    Mywebserver
    risk 0.03cvss —epss 0.05

    Buffer overflow in the search capability for MyWebServer 1.0.2 allows remote attackers to execute arbitrary code via a long searchTarget parameter.

  • CVE-2002-1453Aug 14, 2002
    Mywebserver
    Mywebserver
    risk 0.03cvss —epss 0.04

    Cross-site scripting (XSS) vulnerability in MyWebServer 1.0.2 allows remote attackers to insert script and HTML via a long request followed by the malicious script, which is echoed back to the user in an error message.

  • CVE-2000-1208Aug 12, 2002
    BSD
    BSD
    risk 0.00cvss —epss 0.00

    Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper syslog call that uses format strings from the checkremote() call.

  • CVE-2000-1209Aug 12, 2002
    Microsoft
    Data Engine
    risk 0.10cvss —epss 0.87

    The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6)…

  • CVE-2002-0391CriAug 12, 2002
    Sun Corporation
    Solaris
    risk 0.68cvss 9.8epss 0.58

    Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as…

  • CVE-2002-0411Aug 12, 2002
    Aeromail
    Aeromail
    risk 0.00cvss —epss 0.03

    Cross-site scripting vulnerability in message.php for AeroMail before 1.45 allows remote attackers to execute Javascript as an AeroMail user via an email message with the script in the Subject line.

  • CVE-2002-0412Aug 12, 2002
    Ntop
    Ntop
    risk 0.00cvss —epss 0.04

    Format string vulnerability in TraceEvent function for ntop before 2.1 allows remote attackers to execute arbitrary code by causing format strings to be injected into calls to the syslog function, via (1) an HTTP GET request, (2) a user name in HTTP authentication, or (3) a…

  • CVE-2002-0413Aug 12, 2002
    Rebb
    Rebb
    risk 0.04cvss —epss 0.07

    Cross-site scripting vulnerability in ReBB allows remote attackers to execute arbitrary Javascript and steal cookies via an IMG tag whose URL includes the malicious script.

  • CVE-2002-0414Aug 12, 2002
    Kame
    IPsec
    risk 0.00cvss —epss 0.01

    KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database (SPD), which could cause a Security Gateway (SG) that does not use Encapsulating Security Payload (ESP) to forward forged IPv4…

  • CVE-2002-0415Aug 12, 2002
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.01

    Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow local users to read files that are accessible to RealPlayer via a .. (dot dot) in an HTTP GET request to port 1275.

  • CVE-2002-0416Aug 12, 2002
    risk 0.00cvss —epss 0.06

    Buffer overflow in SH39 MailServer 1.21 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long command to the SMTP port.

  • CVE-2002-0417Aug 12, 2002
    Endymion
    Mailman Webmail
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the ALTERNATE_TEMPLATES parameter for various mmstdo*.cgi programs.

  • CVE-2002-0418Aug 12, 2002
    Endymion
    Sake Mail
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.36 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the param_name parameter.

  • CVE-2002-0419Aug 12, 2002
    Microsoft
    Internet Information Server
    risk 0.06cvss —epss 0.38

    Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easily conduct brute force attacks via responses from the server in which (2) in certain configurations, the server IP address is provided as the realm for Basic…

  • CVE-2002-0420Aug 12, 2002
    PureTLS
    PureTLS
    risk 0.00cvss —epss 0.02

    Vulnerability in PureTLS before 0.9b2 related to injection attacks, which could possibly allow remote attackers to corrupt or hijack user sessions.

  • CVE-2002-0421Aug 12, 2002
    Microsoft
    Windows Nt
    risk 0.02cvss —epss 0.20

    IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr password changing programs in the /iisadmpwd directory, including (1) aexp2.htr, (2) aexp2b.htr, (3) aexp3.htr , or (4) aexp4.htr.

  • CVE-2002-0422Aug 12, 2002
    Microsoft
    Internet Information Server
    risk 0.07cvss —epss 0.44

    IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (which may be obscured by NAT) via (1) a PROPFIND HTTP request with a blank Host header, which leaks the address in an HREF property in a 207 Multi-Status response,…