|
352451
|
5.0 |
MEDIUM
|
zyxel
|
prestige
|
ZyXEL Prestige 642R 2.50(FA.1) and Prestige 310 V3.25(M.01), allows remote attackers to cause a denial of service via an oversized, fragmented "jolt" style ICMP packet.
|
NVD-CWE-Other
|
CVE-2002-1072
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352452
|
7.5 |
HIGH
|
atrium_software
|
mercur_mailserver
|
Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via a long password.
|
NVD-CWE-Other
|
CVE-2002-1073
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352453
|
7.5 |
HIGH
|
david_harris
|
pegasus_mail
|
Buffer overflow in Pegasus mail client 4.01 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) To or (2) From headers.
|
NVD-CWE-Other
|
CVE-2002-1075
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352454
|
7.5 |
HIGH
|
ipswitch
|
imail
|
Buffer overflow in the Web Messaging daemon for Ipswitch IMail before 7.12 allows remote attackers to execute arbitrary code via a long HTTP GET request for HTTP/1.0.
|
NVD-CWE-Other
|
CVE-2002-1076
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352455
|
5.0 |
MEDIUM
|
ipswitch
|
imail
|
IPSwitch IMail Web Calendaring service (iwebcal) allows remote attackers to cause a denial of service (crash) via an HTTP POST request without a Content-Length field.
|
NVD-CWE-Other
|
CVE-2002-1077
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352456
|
5.0 |
MEDIUM
|
aprelium_technologies
|
abyss_web_server
|
Abyss Web Server 1.0.3 allows remote attackers to list directory contents via an HTTP GET request that ends in a large number of / (slash) characters.
|
NVD-CWE-Other
|
CVE-2002-1078
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352457
|
5.0 |
MEDIUM
|
aprelium_technologies
|
abyss_web_server
|
Directory traversal vulnerability in Abyss Web Server 1.0.3 allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in an HTTP GET request.
|
NVD-CWE-Other
|
CVE-2002-1079
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352458
|
7.5 |
HIGH
|
aprelium_technologies
|
abyss_web_server
|
The Administration console for Abyss Web Server 1.0.3 before Patch 2 allows remote attackers to gain privileges and modify server configuration via direct requests to CHL files such as (1) srvstatus.…
|
NVD-CWE-Other
|
CVE-2002-1080
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352459
|
5.0 |
MEDIUM
|
aprelium_technologies
|
abyss_web_server
|
The Administration console for Abyss Web Server 1.0.3 allows remote attackers to read files without providing login credentials via an HTTP request to a target file that ends in a "+" character.
|
NVD-CWE-Other
|
CVE-2002-1081
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352460
|
5.0 |
MEDIUM
|
visualshapers
|
ezcontents
|
The Image Upload capability for ezContents 1.40 and earlier allows remote attackers to cause ezContents to perform operations on local files as if they were uploaded.
|
NVD-CWE-Other
|
CVE-2002-1082
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352461
|
5.0 |
MEDIUM
|
visualshapers
|
ezcontents
|
Directory traversal vulnerabilities in ezContents 1.41 and earlier allow remote attackers to cause ezContents to (1) create directories using the Maintain Images:Add New:Create Subdirectory item, or …
|
NVD-CWE-Other
|
CVE-2002-1083
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352462
|
6.4 |
MEDIUM
|
visualshapers
|
ezcontents
|
The VerifyLogin function in ezContents 1.41 and earlier does not properly halt program execution if a user fails to log in properly, which allows remote attackers to modify and view restricted inform…
|
NVD-CWE-Other
|
CVE-2002-1084
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352463
|
7.5 |
HIGH
|
visualshapers
|
ezcontents
|
Multiple cross-site scripting vulnerabilities in ezContents 1.41 and earlier allow remote attackers to execute script and steal cookies via the diary and other capabilities.
|
NVD-CWE-Other
|
CVE-2002-1085
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352464
|
7.5 |
HIGH
|
visualshapers
|
ezcontents
|
Multiple SQL injection vulnerabilities in ezContents 1.41 and earlier allow remote attackers to conduct unauthorized activities.
|
NVD-CWE-Other
|
CVE-2002-1086
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352465
|
5.0 |
MEDIUM
|
visualshapers
|
ezcontents
|
The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allows remote attackers to create or delete directories and upl…
|
NVD-CWE-Other
|
CVE-2002-1087
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352466
|
7.5 |
HIGH
|
novell
|
groupwise
|
Buffer overflow in Novell GroupWise 6.0.1 Support Pack 1 allows remote attackers to execute arbitrary code via a long RCPT TO command.
|
NVD-CWE-Other
|
CVE-2002-1088
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352467
|
5.0 |
MEDIUM
|
oracle
|
application_server
reports
|
rwcgi60 CGI program in Oracle Reports Server, by design, provides sensitive information such as the full pathname, which could enable remote attackers to use the information in additional attacks.
|
NVD-CWE-Other
|
CVE-2002-1089
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352468
|
7.5 |
HIGH
|
libesmtp
|
libesmtp
|
Buffer overflow in read_smtp_response of protocol.c in libesmtp before 0.8.11 allows a remote SMTP server to (1) execute arbitrary code via a certain response or (2) cause a denial of service via lon…
|
NVD-CWE-Other
|
CVE-2002-1090
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352469
|
7.2 |
HIGH
|
purity
|
purity
|
Multiple buffer overflows in purity 1-16 allow local users to gain privileges and modify high scores tables.
|
NVD-CWE-Other
|
CVE-2002-1124
|
2008-09-6 05:29 |
2002-09-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352470
|
7.2 |
HIGH
|
digital
|
osf_1
|
Buffer overflow in uucp in Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long source (-s) command line parameter.
|
NVD-CWE-Other
|
CVE-2002-1127
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352471
|
7.5 |
HIGH
|
squirrelmail
|
squirrelmail
|
Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) addressbook.php, (2) options.php, (3) search.php, or (4) he…
|
NVD-CWE-Other
|
CVE-2002-1131
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352472
|
5.0 |
MEDIUM
|
squirrelmail
|
squirrelmail
|
SquirrelMail 1.2.7 and earlier allows remote attackers to determine the absolute pathname of the options.php script via a malformed optpage file argument, which generates an error message when the fi…
|
NVD-CWE-Other
|
CVE-2002-1132
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352473
|
5.0 |
MEDIUM
|
stephen_turner
|
analog
|
anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to cause a denial of service (disk consumption) by using the comm…
|
NVD-CWE-Other
|
CVE-2002-1154
|
2008-09-6 05:29 |
2002-10-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352474
|
7.5 |
HIGH
|
mod_ssl
|
mod_ssl
|
Cross-site scripting vulnerability in the mod_ssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wildcard DNS is enabled, allows remote attackers to execute script as other web sit…
|
NVD-CWE-Other
|
CVE-2002-1157
|
2008-09-6 05:29 |
2002-11-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352475
|
7.5 |
HIGH
|
checkpoint
|
check_point_vpn
firewall-1
next_generation
|
Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1 allows clients to bypass the "authentication timeout" by modifying the to_expire or expire values in the client's users.C configuration file.
|
NVD-CWE-Other
|
CVE-2002-0428
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352476
|
5.0 |
MEDIUM
|
dave_lawrence
|
xtux
|
XTux allows remote attackers to cause a denial of service (CPU consumption) via random inputs in the initial connection.
|
NVD-CWE-Other
|
CVE-2002-0431
|
2008-09-6 05:28 |
2002-07-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352477
|
10.0 |
HIGH
|
citadel
|
ux
|
Buffer overflow in (1) lprintf and (2) cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attacks …
|
NVD-CWE-Other
|
CVE-2002-0432
|
2008-09-6 05:28 |
2002-07-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352478
|
5.0 |
MEDIUM
|
pi3
|
pi3web
|
Pi3Web 2.0.0 allows remote attackers to view restricted files via an HTTP request containing a "*" (wildcard or asterisk) character.
|
NVD-CWE-Other
|
CVE-2002-0433
|
2008-09-6 05:28 |
2002-07-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352479
|
10.0 |
HIGH
|
marcus_s._xenakis
|
directory.php
|
Marcus S. Xenakis directory.php script allows remote attackers to execute arbitrary commands via shell metacharacters in the dir parameter.
|
NVD-CWE-Other
|
CVE-2002-0434
|
2008-09-6 05:28 |
2002-07-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352480
|
1.2 |
LOW
|
gnu
|
fileutils
|
Race condition in the recursive (1) directory deletion and (2) directory move in GNU File Utilities (fileutils) 4.1 and earlier allows local users to delete directories as the user running fileutils …
|
NVD-CWE-Other
|
CVE-2002-0435
|
2008-09-6 05:28 |
2002-07-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352481
|
10.0 |
HIGH
|
stefan_frings
|
sms_server_tools
|
Smsd in SMS Server Tools (SMStools) before 1.4.8 allows remote attackers to execute arbitrary commands via shell metacharacters (backquotes) in message text, as described with the term "string format…
|
NVD-CWE-Other
|
CVE-2002-0437
|
2008-09-6 05:28 |
2002-07-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352482
|
7.5 |
HIGH
|
caupo.net
|
cauposhop
|
Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal credit card numbers or delete items by …
|
NVD-CWE-Other
|
CVE-2002-0439
|
2008-09-6 05:28 |
2002-07-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352483
|
5.0 |
MEDIUM
|
jerrett_taylor
|
php_imglist
|
Directory traversal vulnerability in imlist.php for Php Imglist allows remote attackers to read arbitrary code via a .. (dot dot) in the cwd parameter.
|
NVD-CWE-Other
|
CVE-2002-0441
|
2008-09-6 05:28 |
2002-07-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352484
|
7.2 |
HIGH
|
caldera
|
openserver
|
Buffer overflow in dlvr_audit for Caldera OpenServer 5.0.5 and 5.0.6 allows local users to gain root privileges.
|
NVD-CWE-Other
|
CVE-2002-0442
|
2008-09-6 05:28 |
2002-07-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352485
|
7.5 |
HIGH
|
microsoft
|
windows_2000_terminal_services
|
Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL shar…
|
NVD-CWE-Other
|
CVE-2002-0444
|
2008-09-6 05:28 |
2002-07-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352486
|
5.0 |
MEDIUM
|
php_firstpost
|
php_firstpost
|
article.php in PHP FirstPost 0.1 allows allows remote attackers to obtain the full pathname of the server via an invalid post number in the post parameter, which leaks the pathname in an error messag…
|
NVD-CWE-Other
|
CVE-2002-0445
|
2008-09-6 05:28 |
2002-07-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352487
|
5.0 |
MEDIUM
|
black_tie_project
|
black_tie_project
|
categorie.php3 in Black Tie Project (BTP) 0.4b through 0.5b allows remote attackers to determine the absolute path of the web server via an invalid category ID (cid) parameter, which leaks the pathna…
|
NVD-CWE-Other
|
CVE-2002-0446
|
2008-09-6 05:28 |
2002-07-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352488
|
5.0 |
MEDIUM
|
xerver
|
xerver
|
Directory traversal vulnerability in Xerver Free Web Server 2.10 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in an HTTP GET request.
|
NVD-CWE-Other
|
CVE-2002-0447
|
2008-09-6 05:28 |
2002-07-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352489
|
5.0 |
MEDIUM
|
xerver
|
xerver
|
Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request that contains many "C:/" sequences.
|
NVD-CWE-Other
|
CVE-2002-0448
|
2008-09-6 05:28 |
2002-07-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352490
|
7.5 |
HIGH
|
phpprojekt
|
phpprojekt
|
filemanager_forms.php in PHProjekt 3.1 and 3.1a allows remote attackers to execute arbitrary PHP code by specifying the URL to the code in the lib_path parameter.
|
NVD-CWE-Other
|
CVE-2002-0451
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352491
|
7.5 |
HIGH
|
foundrynet
|
serveriron
|
Foundry Networks ServerIron switches do not decode URIs when applying "url-map" rules, which could make it easier for attackers to cause the switch to forward traffic to a different server than inten…
|
NVD-CWE-Other
|
CVE-2002-0452
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352492
|
7.5 |
HIGH
|
oblix
|
netpoint
|
The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout period, which makes it easier for remote attackers to conduct brute force password…
|
NVD-CWE-Other
|
CVE-2002-0453
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352493
|
5.0 |
MEDIUM
|
qualcomm
|
qpopper
|
Qpopper (aka in.qpopper or popper) 4.0.3 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a very large string, which causes an infinite loop.
|
NVD-CWE-Other
|
CVE-2002-0454
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352494
|
5.0 |
MEDIUM
|
incredimail
|
incredimail
|
IncrediMail stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from d…
|
NVD-CWE-Other
|
CVE-2002-0455
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352495
|
7.6 |
HIGH
|
bg_guestbook
|
bg_guestbook
|
Cross-site scripting vulnerability in signgbook.php for BG GuestBook 1.0 allows remote attackers to execute arbitrary Javascript via encoded tags such as <, >, and & in fields such as (1) n…
|
NVD-CWE-Other
|
CVE-2002-0457
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352496
|
7.6 |
HIGH
|
linux-sottises
|
news-tnk
|
Cross-site scripting vulnerability in News-TNK 1.2.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter.
|
NVD-CWE-Other
|
CVE-2002-0458
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352497
|
7.6 |
HIGH
|
linux-sottises
|
board-tnk
news-tnk
|
Cross-site scripting vulnerability in Board-TNK 1.3.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter.
|
NVD-CWE-Other
|
CVE-2002-0459
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352498
|
5.0 |
MEDIUM
|
bitvise
|
winsshd
|
Bitvise WinSSHD before 2002-03-16 allows remote attackers to cause a denial of service (resource exhaustion) via a large number of incomplete connections that are not properly terminated, which are n…
|
NVD-CWE-Other
|
CVE-2002-0460
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352499
|
6.4 |
MEDIUM
|
big_sam
|
big_sam
|
bigsam_guestbook.php for Big Sam (Built-In Guestbook Stand-Alone Module) 1.1.08 and earlier allows remote attackers to cause a denial of service (CPU consumption) or obtain the absolute path of the w…
|
NVD-CWE-Other
|
CVE-2002-0462
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
352500
|
5.0 |
MEDIUM
|
arsc_really_simple_chat
|
arsc_really_simple_chat
|
home.php in ARSC (Really Simple Chat) 1.0.1 and earlier allows remote attackers to determine the full pathname of the web server via an invalid language in the arsc_language parameter, which leaks th…
|
NVD-CWE-Other
|
CVE-2002-0463
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
