|
347551
|
5.0 |
MEDIUM
|
faqmanager
|
faqmanager.cgi
|
faqmanager.cgi in FAQManager 2.2.5 and earlier allows remote attackers to read arbitrary files by specifying the filename in the toc parameter with a trailing null character (%00).
|
NVD-CWE-Other
|
CVE-2002-2033
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347552
|
7.5 |
HIGH
|
john_hardin
|
procmail_email_sanitizer
|
The Email Sanitizer before 1.133 for Procmail allows remote attackers to bypass the mail filter and execute arbitrary code via crafted recursive multipart MIME attachments.
|
NVD-CWE-Other
|
CVE-2002-2034
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347553
|
7.5 |
HIGH
|
realityscape
|
mylogin_2000
|
SQL injection vulnerability in RealityScape MyLogin 2000 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Password in the login form.
|
NVD-CWE-Other
|
CVE-2002-2035
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347554
|
7.5 |
HIGH
|
sun
|
ray_server_software
|
Sun Ray Server Software (SRSS) 1.3, when Non-Smartcard Mobility (NSCM) is enabled, allows remote attackers to login as another user by running dtlogin from a system that supports the XDMCP client.
|
NVD-CWE-Other
|
CVE-2002-2036
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347555
|
5.0 |
MEDIUM
|
cisco
|
bams
pgw_2200
sc2200
vsc3000
vspt
|
The Cisco Media Gateway Controller (MGC) in (1) SC2200 7.4 and earlier, (2) VSC3000 9.1 and earlier, (3) PGW 2200 9.1 and earlier, (4) Billing and Management Server (BAMS) and (5) Voice Services Prov…
|
NVD-CWE-Other
|
CVE-2002-2037
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347556
|
3.6 |
LOW
|
bill_abt
|
next_generation_posix_threading
|
Next Generation POSIX Threading (NGPT) 1.9.0 uses a filesystem-based shared memory entry, which allows local users to cause a denial of service or in threaded processes or spoof files via unknown met…
|
NVD-CWE-Other
|
CVE-2002-2038
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347557
|
7.2 |
HIGH
|
qnx
|
rtos
|
The (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly drop privileges before executing the system command, which allows local users to…
|
NVD-CWE-Other
|
CVE-2002-2040
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347558
|
7.2 |
HIGH
|
qnx
|
rtos
|
ptrace in the QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows programs to attach to privileged processes, which could allow local users to execute arbitrary code by modifying running proce…
|
NVD-CWE-Other
|
CVE-2002-2042
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347559
|
7.5 |
HIGH
|
cyrus
|
sasl
|
SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and 1.5.27 allows remote attackers to execute arbitrary SQL commands and log in as arbitrary POP mail user…
|
NVD-CWE-Other
|
CVE-2002-2043
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347560
|
4.3 |
MEDIUM
|
xqus
|
x-stat
|
Cross-site scripting (XSS) vulnerability in x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a parameter to the phpinfo action.
|
NVD-CWE-Other
|
CVE-2002-2044
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347561
|
7.5 |
HIGH
|
xqus
|
x-news
|
x_news.php in X-News (x_news) 1.1 and earlier allows remote attackers to gain administrative privileges by stealing and replaying the md5_password cookie.
|
NVD-CWE-Other
|
CVE-2002-2046
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347562
|
10.0 |
HIGH
|
sketch
|
sketch
|
The file preview functionality in Sketch 0.6.12 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an encapsulated Postscript (EPS) file.
|
NVD-CWE-Other
|
CVE-2002-2047
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347563
|
7.5 |
HIGH
|
dug_song
|
dsniff
fragroute
fragrouter
|
configure for Dsniff 2.3, fragroute 1.2, and fragrouter 1.6, when downloaded from monkey.org on May 17, 2002, has been modified to contain a backdoor, which allows remote attackers to access the syst…
|
NVD-CWE-Other
|
CVE-2002-2049
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347564
|
2.1 |
LOW
|
modlogan
|
modlogan
|
Directory traversal vulnerability in processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a .. (dot dot) in t…
|
NVD-CWE-Other
|
CVE-2002-2050
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347565
|
2.1 |
LOW
|
modlogan
|
modlogan
|
The processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a symlink attack on files specified as hostnames in …
|
NVD-CWE-Other
|
CVE-2002-2051
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347566
|
5.0 |
MEDIUM
|
cisco
|
ios
|
Cisco 2611 router running IOS 12.1(6.5), possibly an interim release, allows remote attackers to cause a denial of service via port scans such as (1) scanning all ports on a single host and (2) scann…
|
NVD-CWE-Other
|
CVE-2002-2052
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347567
|
5.0 |
MEDIUM
|
cisco
|
ios
|
The design of the Hot Standby Routing Protocol (HSRP), as implemented on Cisco IOS 12.1, when using IRPAS, allows remote attackers to cause a denial of service (CPU consumption) via a router with the…
|
NVD-CWE-Other
|
CVE-2002-2053
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347568
|
4.6 |
MEDIUM
|
intel
|
d845bg_motherboard
d845hv_motherboard
d845pt_motherboard
d845wn_motherboard
|
BIOS D845BG, D845HV, D845PT and D845WN on Intel motherboards does not properly restrict access to configuration information when BIOS passwords are enabled, which could allow local users to change th…
|
NVD-CWE-Other
|
CVE-2002-2059
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347569
|
7.5 |
HIGH
|
twibright_labs
|
links
|
Buffer overflow in Links 2.0 pre4 allows remote attackers to crash client browsers and possibly execute arbitrary code via gamma tables in large 16-bit PNG images.
|
NVD-CWE-Other
|
CVE-2002-2060
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347570
|
7.5 |
HIGH
|
atguard
|
atguard_personal_firewall
|
AtGuard 3.2 allows remote attackers to bypass firwall filters and execute prohibited programs by changing the filenames to permitted filenames.
|
NVD-CWE-Other
|
CVE-2002-2063
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347571
|
7.5 |
HIGH
|
phpwebgallery
|
phpwebgallery
|
isadmin.php in PhpWebGallery 1.0 allows remote attackers to gain administrative access via by setting the photo_login cookie to pseudo.
|
NVD-CWE-Other
|
CVE-2002-2064
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347572
|
5.0 |
MEDIUM
|
webcalendar
|
webcalendar
|
WebCalendar 0.9.34 and earlier with 'browsing in includes directory' enabled allows remote attackers to read arbitrary include files with .inc extensions from the web root.
|
NVD-CWE-Other
|
CVE-2002-2065
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347573
|
5.0 |
MEDIUM
|
compaq
|
tru64
|
Compaq Tru64 4.0 d allows remote attackers to cause a denial of service in (1) telnet, (2) FTP, (3) ypbind, (4) rpc.lockd, (5) snmp, (6) ttdbserverd, and possibly other services via a TCP SYN scan, a…
|
NVD-CWE-Other
|
CVE-2002-2071
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347574
|
5.0 |
MEDIUM
|
sun
|
jre
|
java.security.AccessController in Sun Java Virtual Machine (JVM) in JRE 1.2.2 and 1.3.1 allows remote attackers to cause a denial of service (JVM crash) via a Java program that calls the doPrivileged…
|
NVD-CWE-Other
|
CVE-2002-2072
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347575
|
7.5 |
HIGH
|
erwin_lansing
|
mailidx
|
SQL injection vulnerability in Mailidx before 20020105 allows remote attackers to execute arbitrary SQL commands via the search web page.
|
NVD-CWE-Other
|
CVE-2002-2074
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347576
|
5.0 |
MEDIUM
|
mirabilis
|
icq
|
ICQ 2001a and 2002b allows remote attackers to cause a denial of service (memory consumption and hang) via a contact message with a large contacts number.
|
NVD-CWE-Other
|
CVE-2002-2075
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347577
|
5.0 |
MEDIUM
|
summit_computer_networks
|
lil_http
|
Directory traversal vulnerability in Lil' HTTP server 2.1 and 2.2 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request.
|
NVD-CWE-Other
|
CVE-2002-2076
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347578
|
7.5 |
HIGH
|
floosietek
|
ftgateoffice
ftgatepro
|
Heap-based buffer overflow in Floositek (1) FTGate Pro 1.05 and (2) FTGate Office 1.05 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long POP3 APOP US…
|
NVD-CWE-Other
|
CVE-2002-2078
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347579
|
5.0 |
MEDIUM
|
mosix_project
openmosix_project
|
mosix
openmosix
|
mosix-protocol-stack in Multicomputer Operating System for UnIX (MOSIX) 1.5.7 allows remote attackers to cause a denial of service via malformed packets.
|
NVD-CWE-Other
|
CVE-2002-2079
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347580
|
5.0 |
MEDIUM
|
floosietek
|
ftgatepro
|
Floositek FTGate PRO 1.05 allows remote attackers to cause a denial of service (memory and CPU consumption) via a large number of RCPT TO: messages during an SMTP session.
|
NVD-CWE-Other
|
CVE-2002-2080
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347581
|
5.0 |
MEDIUM
|
microsoft
|
site_server
site_server_commerce
|
cphost.dll in Microsoft Site Server 3.0 allows remote attackers to cause a denial of service (disk consumption) via an HTTP POST of a file with a long TargetURL parameter, which causes Site Server to…
|
NVD-CWE-Other
|
CVE-2002-2081
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347582
|
7.5 |
HIGH
|
floosietek
|
ftgateoffice
ftgatepro
|
FTGate and FTGate Pro 1.05 lock user mailboxes before authentication succeeds, which allows remote attackers to lock the mailboxes of other users.
|
NVD-CWE-Other
|
CVE-2002-2082
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347583
|
2.1 |
LOW
|
novell
|
netware
|
The Novell Netware client running on Windows 95 allows local users to bypass the login and open arbitrary files via the "What is this?" help feature, which can be launched from the Novell Netware log…
|
NVD-CWE-Other
|
CVE-2002-2083
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347584
|
5.0 |
MEDIUM
|
portix-php
|
portix-php
|
Directory traversal vulnerability in index.php of Portix 0.4.02 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) l and (2) topic parameters.
|
NVD-CWE-Other
|
CVE-2002-2084
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347585
|
5.0 |
MEDIUM
|
wwwebbb
|
wwwebbb_forum
|
Directory traversal vulnerability in page.cgi of WWWeBBB Forum 3.82 beta and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request.
|
NVD-CWE-Other
|
CVE-2002-2085
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347586
|
4.6 |
MEDIUM
|
borland_software
|
interbase
|
Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_drop, (2) gds_lock_mgr, or (3) gds_inet_server.
|
NVD-CWE-Other
|
CVE-2002-2087
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347587
|
10.0 |
HIGH
|
mosix_project
|
clump_os
|
The MOSIX Project clump/os 5.4 creates a default VNC account without a password, which allows remote attackers to gain root access.
|
NVD-CWE-Other
|
CVE-2002-2088
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347588
|
4.6 |
MEDIUM
|
sun
|
solaris
|
Buffer overflow in rcp in Solaris 9.0 allows local users to execute arbitrary code via a long command line argument.
|
NVD-CWE-Other
|
CVE-2002-2089
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347589
|
5.0 |
MEDIUM
|
caucho_technology
|
resin
|
Caucho Technology Resin server 2.1.1 to 2.1.2 allows remote attackers to obtain server's root path via requests for MS-DOS device names such as lpt9.xtp.
|
NVD-CWE-Other
|
CVE-2002-2090
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347590
|
7.5 |
HIGH
|
decfingerd
|
decfingerd
|
Format string vulnerability in Deception Finger Daemon, decfingerd, 0.7 may allow remote attackers to execute arbitrary code via the username of a finger request.
|
NVD-CWE-Other
|
CVE-2002-2091
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347591
|
5.0 |
MEDIUM
|
joe_testa
|
hellbent
|
Joe Testa hellbent 01 webserver allows attackers to read files that are specified in the hellbent.prefs file by creating a file with a similar name in the web root, as demonstrated using (1) index.we…
|
NVD-CWE-Other
|
CVE-2002-2095
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347592
|
7.5 |
HIGH
|
novell
|
netware
|
Buffer overflow in Novell Remote Manager module, httpstk.nlm, in NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary code via a long (1) username or (2) password.
|
NVD-CWE-Other
|
CVE-2002-2096
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347593
|
5.0 |
MEDIUM
|
microsoft
|
outlook
|
Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content.
|
NVD-CWE-Other
|
CVE-2002-2100
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347594
|
7.5 |
HIGH
|
microsoft
|
outlook
|
Microsoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when scripting is disabled, via an "about:" or "javascript:" URI in the href attribute of an "a" tag.
|
NVD-CWE-Other
|
CVE-2002-2101
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347595
|
5.0 |
MEDIUM
|
jcraft
|
jzlib
|
InfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of service (NullPointerException) via an invalid block of deflated data.
|
NVD-CWE-Other
|
CVE-2002-2102
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347596
|
5.0 |
MEDIUM
|
apache
|
http_server
|
Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double-reverse lookup fails, which allows remote attackers to hide…
|
NVD-CWE-Other
|
CVE-2002-2103
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347597
|
4.3 |
MEDIUM
|
veridis
|
openkeyserver
|
Cross-site scripting (XSS) vulnerability in the lookup script in Veridis OpenKeyServer (OKS) 1.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter.
|
NVD-CWE-Other
|
CVE-2002-2107
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347598
|
5.0 |
MEDIUM
|
sony
|
vaio_manual_cybersupport
|
Unknown vulnerability in the "VAIO Manual" software in certain Sony VAIO personal computers sold from November 2001 to January 2002, allows remote attackers to modify data via a web page or HTML e-ma…
|
NVD-CWE-Other
|
CVE-2002-2108
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347599
|
7.5 |
HIGH
|
matt_wright
|
formmail
|
Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized activities via (1) a blank referer, (2) a spoofed referer with a trusted domain/…
|
NVD-CWE-Other
|
CVE-2002-2109
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347600
|
5.0 |
MEDIUM
|
rca
|
digital_cable_modem
|
The RCA Digital Cable Modems DCM225 and DCM225E allow remote attackers to cause a denial of service (modem device reset) by connecting to port 80 on the 10.0.0.0/8 device.
|
NVD-CWE-Other
|
CVE-2002-2110
|
2008-09-6 05:32 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
