|
348051
|
4.6 |
MEDIUM
|
etnus
|
totalview
|
Etnus TotalView 5.0.0-4 installs certain files with UID 5039 and GID 59, which could allow local users with that UID or GID to modify the files and gain privileges as other TotalView users.
|
NVD-CWE-Other
|
CVE-2002-0498
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348052
|
2.1 |
LOW
|
linux
|
linux_kernel
|
The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappr…
|
NVD-CWE-Other
|
CVE-2002-0499
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348053
|
7.2 |
HIGH
|
posadis
|
posadis
|
Format string vulnerability in log_print() function of Posadis DNS server before version m5pre2 allows local users and possibly remote attackers to execute arbitrary code via format strings that are …
|
NVD-CWE-Other
|
CVE-2002-0501
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348054
|
5.0 |
MEDIUM
|
citrix
|
nfuse
|
Directory traversal vulnerability in boilerplate.asp for Citrix NFuse 1.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the NFuse_Template parameter.
|
NVD-CWE-Other
|
CVE-2002-0503
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348055
|
7.5 |
HIGH
|
citrix
|
nfuse
|
Cross-site scripting vulnerability in Citrix NFuse 1.6 and earlier does not quote results from the getLastError method, which allows remote attackers to execute script in other clients via the NFuse_…
|
NVD-CWE-Other
|
CVE-2002-0504
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348056
|
5.0 |
MEDIUM
|
cisco
|
call_manager
|
Memory leak in the Call Telephony Integration (CTI) Framework authentication for Cisco CallManager 3.0 and 3.1 before 3.1(3) allows remote attackers to cause a denial of service (crash and reload) vi…
|
NVD-CWE-Other
|
CVE-2002-0505
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348057
|
7.2 |
HIGH
|
redhat
|
linux
|
Buffer overflow in newt.c of newt windowing library (libnewt) 0.50.33 and earlier may allow attackers to cause a denial of service or execute arbitrary code in setuid programs that use libnewt.
|
NVD-CWE-Other
|
CVE-2002-0506
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348058
|
10.0 |
HIGH
|
wwwisis
|
wwwisis
|
wwwisis 3.45 and earlier allows remote attackers to execute arbitrary commands and read files via the parameters (1) prolog or (2) epilog.
|
NVD-CWE-Other
|
CVE-2002-0508
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348059
|
5.0 |
MEDIUM
|
oracle
|
oracle9i
|
Transparent Network Substrate (TNS) Listener in Oracle 9i 9.0.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a single malformed TCP packet to port 1521.
|
NVD-CWE-Other
|
CVE-2002-0509
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348060
|
5.0 |
MEDIUM
|
linux
|
linux_kernel
|
The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine that a target system is running Li…
|
NVD-CWE-Other
|
CVE-2002-0510
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348061
|
7.5 |
HIGH
|
nscd
|
nscd
|
The default configuration of Name Service Cache Daemon (nscd) in Caldera OpenLinux 3.1 and 3.1.1 uses cached PTR records instead of consulting the authoritative DNS server for the A record, which cou…
|
NVD-CWE-Other
|
CVE-2002-0511
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348062
|
4.6 |
MEDIUM
|
caldera
|
openlinux_server
openlinux_workstation
|
startkde in KDE for Caldera OpenLinux 2.3 through 3.1.1 sets the LD_LIBRARY_PATH environment variable to include the current working directory, which could allow local users to gain privileges of oth…
|
NVD-CWE-Other
|
CVE-2002-0512
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348063
|
10.0 |
HIGH
|
squirrelmail
|
squirrelmail
|
SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the THEME variable in a cookie.
|
NVD-CWE-Other
|
CVE-2002-0516
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348064
|
7.2 |
HIGH
|
caldera
|
unixware
openunix
|
Buffer overflow in X11 library (libX11) on Caldera Open UNIX 8.0.0, UnixWare 7.1.1, and possibly other operating systems, allows local users to gain root privileges via a long -xrm argument to progra…
|
NVD-CWE-Other
|
CVE-2002-0517
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348065
|
5.0 |
MEDIUM
|
freebsd
|
freebsd
|
The SYN cache (syncache) and SYN cookie (syncookie) mechanism in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service (crash) (1) via a SYN packet that is accepted using synco…
|
NVD-CWE-Other
|
CVE-2002-0518
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348066
|
7.5 |
HIGH
|
asp-nuke
|
asp-nuke
|
Cross-site scripting vulnerability in functions-inc.asp for ASP-Nuke RC1 allows remote attackers to execute script as other ASP-Nuke users by embedding it within an IMG tag.
|
NVD-CWE-Other
|
CVE-2002-0520
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348067
|
5.1 |
MEDIUM
|
asp-nuke
|
asp-nuke
|
Cross-site scripting vulnerabilities in ASP-Nuke RC2 and earlier allow remote attackers to execute script or gain privileges as other ASP-Nuke users via script in (1) the name parameter in downloads.…
|
NVD-CWE-Other
|
CVE-2002-0521
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348068
|
7.5 |
HIGH
|
asp-nuke
|
asp-nuke
|
ASP-Nuke RC2 and earlier allows remote attackers to bypass authentication and gain privileges by modifying the "pseudo" cookie.
|
NVD-CWE-Other
|
CVE-2002-0522
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348069
|
5.0 |
MEDIUM
|
asp-nuke
|
asp-nuke
|
ASP-Nuke RC2 and earlier allows remote attackers to list all logged-in users by submitting an invalid "pseudo" cookie.
|
NVD-CWE-Other
|
CVE-2002-0523
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348070
|
5.0 |
MEDIUM
|
asp-nuke
|
asp-nuke
|
ASP-Nuke RC2 and earlier allows remote attackers to determine the absolute path of the server by (1) calling database-inc.asp with incorrect cookies, or (2) calling Post.asp with certain arguments, w…
|
NVD-CWE-Other
|
CVE-2002-0524
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348071
|
10.0 |
HIGH
|
isc
|
inn
|
Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gain privileges via format string specifiers in NTTP responses.
|
NVD-CWE-Other
|
CVE-2002-0525
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348072
|
5.0 |
MEDIUM
|
watchguard
|
soho_firewall
|
Watchguard SOHO firewall before 5.0.35 allows remote attackers to cause a denial of service (crash and reboot) when SOHO forwards a packet with bad IP options.
|
NVD-CWE-Other
|
CVE-2002-0527
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348073
|
10.0 |
HIGH
|
watchguard
|
soho_firewall
|
Watchguard SOHO firewall 5.0.35 unpredictably disables certain IP restrictions for customized services that were set before the administrator upgrades to 5.0.35, which could allow remote attackers to…
|
NVD-CWE-Other
|
CVE-2002-0528
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348074
|
6.2 |
MEDIUM
|
hp
|
photosmart_print_driver
|
HP Photosmart printer driver for Mac OS X installs the hp_imaging_connectivity program and the hp_imaging_connectivity.app directory with world-writable permissions, which allows local users to gain …
|
NVD-CWE-Other
|
CVE-2002-0529
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348075
|
5.0 |
MEDIUM
|
emumail
|
emumail
emumail_red_hat_linux
emumail_unix
|
Directory traversal vulnerability in emumail.cgi in EMU Webmail 4.5.x and 5.1.0 allows remote attackers to read arbitrary files or list arbitrary directories via a .. (dot dot) in the type parameter.
|
NVD-CWE-Other
|
CVE-2002-0531
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348076
|
7.2 |
HIGH
|
emumail
|
emumail
emumail_red_hat_linux
emumail_unix
|
EMU Webmail allows local users to execute arbitrary programs via a .. (dot dot) in the HTTP Host header that points to a Trojan horse configuration file that contains a pageroot specifier that contai…
|
NVD-CWE-Other
|
CVE-2002-0532
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348077
|
5.0 |
MEDIUM
|
postboard
|
postboard
|
PostBoard 2.0.1 and earlier with BBcode allows remote attackers to cause a denial of service (CPU consumption) and corrupt the database via null \0 characters within [code] tags.
|
NVD-CWE-Other
|
CVE-2002-0534
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348078
|
7.5 |
HIGH
|
phpgroupware
|
phpgroupware
|
PHPGroupware 0.9.12 and earlier, when running with the magic_quotes_gpc feature disabled, allows remote attackers to compromise the database via a SQL injection attack.
|
NVD-CWE-Other
|
CVE-2002-0536
|
2008-09-6 05:28 |
2002-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348079
|
10.0 |
HIGH
|
stepweb
|
sws
|
The admin.html file in StepWeb Search Engine (SWS) 2.5 stores passwords in links to manager.pl, which allows remote attackers who can access the admin.html file to gain administrative privileges to S…
|
NVD-CWE-Other
|
CVE-2002-0537
|
2008-09-6 05:28 |
2002-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348080
|
10.0 |
HIGH
|
demarc_security
|
puresecure
|
Demarc PureSecure 1.05 allows remote attackers to gain administrative privileges via a SQL injection attack in a session ID that is stored in the s_key cookie.
|
NVD-CWE-Other
|
CVE-2002-0539
|
2008-09-6 05:28 |
2002-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348081
|
7.5 |
HIGH
|
nortel
|
cvx_1800_multi-service_access_switch
|
Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and modify the CVX configuration.
|
NVD-CWE-Other
|
CVE-2002-0540
|
2008-09-6 05:28 |
2002-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348082
|
7.5 |
HIGH
|
ibm
|
tivoli_storage_manager
|
Buffer overflow in Tivoli Storage Manager TSM (1) Server or Storage Agents 3.1 through 5.1, and (2) the TSM Client Acceptor Service 4.2 and 5.1, allows remote attackers to cause a denial of service (…
|
NVD-CWE-Other
|
CVE-2002-0541
|
2008-09-6 05:28 |
2002-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348083
|
5.0 |
MEDIUM
|
aprelium_technologies
|
abyss_web_server
|
Directory traversal vulnerability in Aprelium Abyss Web Server (abyssws) before 1.0.0.2 allows remote attackers to read files outside the web root, including the abyss.conf file, via URL-encoded .. (…
|
NVD-CWE-Other
|
CVE-2002-0543
|
2008-09-6 05:28 |
2002-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348084
|
7.2 |
HIGH
|
aprelium_technologies
|
abyss_web_server
|
Aprelium Abyss Web Server (abyssws) before 1.0.3 stores the administrative console password in plaintext in the abyss.conf file, which allows local users with access to the file to gain privileges.
|
NVD-CWE-Other
|
CVE-2002-0544
|
2008-09-6 05:28 |
2002-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348085
|
5.0 |
MEDIUM
|
cisco
|
aironet_ap340
aironet_ap350
|
Cisco Aironet before 11.21 with Telnet enabled allows remote attackers to cause a denial of service (reboot) via a series of login attempts with invalid usernames and passwords.
|
NVD-CWE-Other
|
CVE-2002-0545
|
2008-09-6 05:28 |
2002-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348086
|
7.5 |
HIGH
|
nullsoft
|
winamp
|
Cross-site scripting vulnerability in the mini-browser for Winamp 2.78 and 2.79 allows remote attackers to execute script via an ID3v1 or ID3v2 tag in an MP3 file.
|
NVD-CWE-Other
|
CVE-2002-0546
|
2008-09-6 05:28 |
2002-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348087
|
7.5 |
HIGH
|
nullsoft
|
winamp
|
Buffer overflow in the mini-browser for Winamp 2.79 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the title field o…
|
NVD-CWE-Other
|
CVE-2002-0547
|
2008-09-6 05:28 |
2002-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348088
|
7.5 |
HIGH
|
anthill
|
anthill
|
Anthill allows remote attackers to bypass authentication and file bug reports by directly accessing the postbug.php program instead of enterbug.php.
|
NVD-CWE-Other
|
CVE-2002-0548
|
2008-09-6 05:28 |
2002-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348089
|
7.5 |
HIGH
|
anthill
|
anthill
|
Cross-site scripting vulnerabilities in Anthill allow remote attackers to execute script as other Anthill users.
|
NVD-CWE-Other
|
CVE-2002-0549
|
2008-09-6 05:28 |
2002-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348090
|
7.5 |
HIGH
|
gcf
|
dynamic_guestbook
|
Dynamic Guestbook 3.0 allows remote attackers to execute arbitrary code via shell metacharacters in the gbdaten parameter.
|
NVD-CWE-Other
|
CVE-2002-0550
|
2008-09-6 05:28 |
2002-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348091
|
7.5 |
HIGH
|
gcf
|
dynamic_guestbook
|
Cross-site scripting vulnerability in Dynamic Guestbook 3.0 allows remote attackers to execute code in clients who access guestbook pages via the parameters (1) name, (2) mail, or (3) kommentar.
|
NVD-CWE-Other
|
CVE-2002-0551
|
2008-09-6 05:28 |
2002-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348092
|
7.5 |
HIGH
|
melange
|
melange_chat_system
|
Multiple buffer overflows in Melange Chat server 2.02 allow remote or local attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a long argument in the /yell com…
|
NVD-CWE-Other
|
CVE-2002-0552
|
2008-09-6 05:28 |
2002-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348093
|
7.5 |
HIGH
|
turnkey_solutions
|
sunshop_shopping_cart
|
Cross-site scripting vulnerability in SunShop 2.5 and earlier allows remote attackers to gain administrative privileges to SunShop by injecting the script into fields during new customer registration.
|
NVD-CWE-Other
|
CVE-2002-0553
|
2008-09-6 05:28 |
2002-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348094
|
7.5 |
HIGH
|
ibm
|
informix_web_datablade
|
webdriver in IBM Informix Web DataBlade 4.12 allows remote attackers to bypass user access levels or read arbitrary files via a SQL injection attack in an HTTP request.
|
NVD-CWE-Other
|
CVE-2002-0554
|
2008-09-6 05:28 |
2002-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348095
|
7.5 |
HIGH
|
ibm
|
informix_web_datablade
|
IBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which could allow remote attackers to execute SQL code in a web form even when the developer has attempted …
|
NVD-CWE-Other
|
CVE-2002-0555
|
2008-09-6 05:28 |
2002-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348096
|
5.0 |
MEDIUM
|
deep_forest_software
|
quik-serv_webserver
|
Directory traversal vulnerability in Quik-Serv HTTP server 1.1B allows remote attackers to read arbitrary files via a .. (dot dot) in a URL.
|
NVD-CWE-Other
|
CVE-2002-0556
|
2008-09-6 05:28 |
2002-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348097
|
7.5 |
HIGH
|
openbsd
|
openbsd
|
Vulnerability in OpenBSD 3.0, when using YP with netgroups in the password database, causes (1) rexec or (2) rsh to run another user's shell, or (3) atrun to change to a different user's directory, p…
|
NVD-CWE-Other
|
CVE-2002-0557
|
2008-09-6 05:28 |
2002-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348098
|
5.0 |
MEDIUM
|
typsoft
|
typsoft_ftp_server
|
Directory traversal vulnerability in TYPSoft FTP server 0.97.1 and earlier allows a remote authenticated user (possibly anonymous) to list arbitrary directories via a .. in a LIST (ls) command ending…
|
NVD-CWE-Other
|
CVE-2002-0558
|
2008-09-6 05:28 |
2002-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348099
|
7.5 |
HIGH
|
oracle
|
oracle9i
|
Oracle Oracle9i database server 9.0.1.x allows local users to access restricted data via a SQL query using ANSI outer join syntax.
|
NVD-CWE-Other
|
CVE-2002-0571
|
2008-09-6 05:28 |
2002-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348100
|
5.0 |
MEDIUM
|
allaire
|
coldfusion_server
|
ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP request that contains an MS-DOS device name such as NUL, whi…
|
NVD-CWE-Other
|
CVE-2002-0576
|
2008-09-6 05:28 |
2002-06-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
