|
270501
|
7.5 |
HIGH
|
oracle
|
oracle9i
|
Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users to execute arbitrary code via a long SERVICE_NAME parameter, which is not prop…
|
NVD-CWE-Other
|
CVE-2002-0965
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270502
|
7.5 |
HIGH
|
aci
|
4d_webserver
|
Buffer overflow in 4D web server 6.7.3 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request.
|
NVD-CWE-Other
|
CVE-2002-0966
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270503
|
7.5 |
HIGH
|
edonkey2000
|
edonkey_2000_client
|
Buffer overflow in eDonkey 2000 35.16.60 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long "ed2k:" URL.
|
NVD-CWE-Other
|
CVE-2002-0967
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270504
|
7.2 |
HIGH
|
hp
|
cifs-9000_server
|
Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier, based on the Sharity package, allows local users to gain root privileges via long (1) -U, (2) -D, (3) -P, (4) -S…
|
NVD-CWE-Other
|
CVE-2002-0991
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270505
|
2.1 |
LOW
|
hp
|
hp-ux
|
Unknown vulnerability in IPV6 functionality for DCE daemons (1) dced or (2) rpcd on HP-UX 11.11 allows attackers to cause a denial of service (crash) via an attack that modifies internal data.
|
NVD-CWE-Other
|
CVE-2002-0992
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270506
|
7.5 |
HIGH
|
sun
|
sun_pci_ii_driver
|
SunPCi II VNC uses a weak authentication scheme, which allows remote attackers to obtain the VNC password by sniffing the random byte challenge, which is used as the key for encrypted communications.
|
NVD-CWE-Other
|
CVE-2002-0994
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270507
|
7.5 |
HIGH
|
gianluca_baldo
|
phpauction
|
login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login.php with the action parameter set to "insert," which adds the provided username to the adminUsers table.
|
NVD-CWE-Other
|
CVE-2002-0995
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270508
|
7.5 |
HIGH
|
novell
|
netmail
netmail_xe
|
Multiple buffer overflows in Novell NetMail (NIMS) 3.0.3 before 3.0.3C allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) WebAdmin or (2) ModWeb.
|
NVD-CWE-Other
|
CVE-2002-0996
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270509
|
5.0 |
MEDIUM
|
novell
|
netmail
netmail_xe
|
Buffer overflows in IMAP Agent (imapd) for Novell NetMail (NIMS) 3.0.3 before 3.0.3A allows remote attackers to cause a denial of service.
|
NVD-CWE-Other
|
CVE-2002-0997
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270510
|
7.5 |
HIGH
|
analogx
|
simpleserver_shout
|
Buffer overflow in AnalogX SimpleServer:Shout 1.0 allows remote attackers to cause a denial of service and execute arbitrary code via a long request to TCP port 8001.
|
NVD-CWE-Other
|
CVE-2002-1000
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270511
|
7.5 |
HIGH
|
analogx
|
proxy
|
Buffer overflows in AnalogX Proxy before 4.12 allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long HTTP request to TCP port 6588 or (2) a SOCKS 4A r…
|
NVD-CWE-Other
|
CVE-2002-1001
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270512
|
5.0 |
MEDIUM
|
novell
|
emframe
|
Buffer overflow in Novell iManager (eMFrame 1.2.1) allows remote attackers to cause a denial of service (crash) via a long user name.
|
NVD-CWE-Other
|
CVE-2002-1002
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270513
|
7.5 |
HIGH
|
mywebserver
|
mywebserver
|
Buffer overflow in MyWebServer 1.02 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
|
NVD-CWE-Other
|
CVE-2002-1003
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270514
|
5.0 |
MEDIUM
|
argosoft
|
argosoft_mail_server
|
Directory traversal vulnerability in webmail feature of ArGoSoft Mail Server Plus or Pro 1.8.1.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in a URL.
|
NVD-CWE-Other
|
CVE-2002-1004
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270515
|
6.8 |
MEDIUM
|
bbc_education
|
betsie
|
Cross-site scripting (XSS) vulnerability in BBC Education Text to Speech Internet Enhancer (Betsie) 1.5.11 and earlier allows remote attackers to execute arbitrary web script via parserl.pl.
|
NVD-CWE-Other
|
CVE-2002-1006
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270516
|
7.5 |
HIGH
|
blackboard
|
blackboard
|
Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via (1) the course_id parameter in a link to login.pl, (2) the CTID parameter in ProcessInf…
|
NVD-CWE-Other
|
CVE-2002-1007
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270517
|
7.5 |
HIGH
|
summit_computer_networks
|
lil_http_server
|
Cross-site scripting vulnerability in PowerBASIC urlcount.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via a request to urlc…
|
NVD-CWE-Other
|
CVE-2002-1008
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270518
|
7.5 |
HIGH
|
summit_computer_networks
|
lil_http_server
|
Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the (1) "Name" or (2…
|
NVD-CWE-Other
|
CVE-2002-1009
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270519
|
7.5 |
HIGH
|
lotus
|
domino_r4
|
Lotus Domino R4 allows remote attackers to bypass access restrictions for files in the web root via an HTTP request appended with a "?" character, which is treated as a wildcard character and bypasse…
|
NVD-CWE-Other
|
CVE-2002-1010
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270520
|
7.5 |
HIGH
|
ibm
|
tivoli_management_framework
|
Buffer overflow in web server for Tivoli Management Framework (TMF) Endpoint 3.6.x through 3.7.1, before Fixpack 2, allows remote attackers to cause a denial of service or execute arbitrary code via …
|
NVD-CWE-Other
|
CVE-2002-1011
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270521
|
7.5 |
HIGH
|
ibm
|
tivoli_management_framework
|
Buffer overflow in web server for Tivoli Management Framework (TMF) ManagedNode 3.6.x through 3.7.1 allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET …
|
NVD-CWE-Other
|
CVE-2002-1012
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270522
|
7.2 |
HIGH
|
inktomi
|
media-ixt
traffic_edge
traffic_server
|
Buffer overflow in traffic_manager for Inktomi Traffic Server 4.0.18 through 5.2.2, Traffic Edge 1.1.2 and 1.5.0, and Media-IXT 3.0.4 allows local users to gain root privileges via a long -path argum…
|
NVD-CWE-Other
|
CVE-2002-1013
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270523
|
7.5 |
HIGH
|
realnetworks
|
realjukebox_2
realjukebox_2_plus
realone_player
|
Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini contains a long val…
|
NVD-CWE-Other
|
CVE-2002-1014
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270524
|
7.5 |
HIGH
|
realnetworks
|
realjukebox_2
realjukebox_2_plus
realone_player
|
RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary script in the Local computer zone by inserting the script into the skin.ini fil…
|
NVD-CWE-Other
|
CVE-2002-1015
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270525
|
4.6 |
MEDIUM
|
adobe
|
digital_editions
|
Adobe eBook Reader allows a user to bypass restrictions for copy, print, lend, and give operations by backing up key data files, performing the operations, and restoring the original data files.
|
NVD-CWE-Other
|
CVE-2002-1016
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270526
|
2.1 |
LOW
|
adobe
|
digital_editions
|
Adobe eBook Reader 2.1 and 2.2 allows a user to copy eBooks to other systems by using the backup feature, capturing the encryption Challenge, and using the appropriate hash function to generate the a…
|
NVD-CWE-Other
|
CVE-2002-1017
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270527
|
5.0 |
MEDIUM
|
working_resources_inc.
|
badblue
|
BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a hex-encoded null byte.
|
NVD-CWE-Other
|
CVE-2002-1021
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270528
|
7.5 |
HIGH
|
working_resources_inc.
|
badblue
|
BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges.
|
NVD-CWE-Other
|
CVE-2002-1022
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270529
|
5.0 |
MEDIUM
|
working_resources_inc.
|
badblue
|
BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET request without a URI.
|
NVD-CWE-Other
|
CVE-2002-1023
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270530
|
5.0 |
MEDIUM
|
macromedia
|
jrun
|
JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in an HTTP GET request, which causes the server to send the .JSP file unparsed.
|
NVD-CWE-Other
|
CVE-2002-1025
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270531
|
5.0 |
MEDIUM
|
macromedia
|
sitespring
|
Macromedia Sitespring 1.2.0 (277.1) using Sybase runtime engine 7.0.2.1480 allows remote attackers to cause a denial of service (crash) via a long malformed request to TCP port 2500, possibly trigger…
|
NVD-CWE-Other
|
CVE-2002-1026
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270532
|
7.5 |
HIGH
|
macromedia
|
sitespring
|
Cross-site scripting vulnerability in the default HTTP 500 error script (500error.jsp) for Macromedia Sitespring 1.2.0 (277.1) allows remote attackers to execute arbitrary web script via a link to 50…
|
NVD-CWE-Other
|
CVE-2002-1027
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270533
|
5.0 |
MEDIUM
|
oddsock
|
song_requester
|
Multiple buffer overflows in the CGI programs for Oddsock Song Requester WinAmp plugin 2.1 allow remote attackers to cause a denial of service (crash) via long arguments.
|
NVD-CWE-Other
|
CVE-2002-1028
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270534
|
5.0 |
MEDIUM
|
worldspan
|
res_manager
|
Res Manager in Worldspan for Windows Gateway 4.1 allows remote attackers to cause a denial of service (crash) via a malformed request to TCP port 17990.
|
NVD-CWE-Other
|
CVE-2002-1029
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270535
|
2.6 |
LOW
|
bea
|
weblogic_server
|
Race condition in Performance Pack in BEA WebLogic Server and Express 5.1.x, 6.0.x, 6.1.x and 7.0 allows remote attackers to cause a denial of service (crash) via a flood of data and connections.
|
NVD-CWE-Other
|
CVE-2002-1030
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270536
|
5.0 |
MEDIUM
|
key_focus
|
kf_web_server
|
KeyFocus (KF) web server 1.0.2 allows remote attackers to list directories and read restricted files via an HTTP request containing a %00 (null) character.
|
NVD-CWE-Other
|
CVE-2002-1031
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270537
|
7.5 |
HIGH
|
key_focus
|
kf_web_server
|
Buffer overflow in KeyFocus (KF) web server 1.0.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed HTTP header.
|
NVD-CWE-Other
|
CVE-2002-1032
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270538
|
5.0 |
MEDIUM
|
sun
|
i-runbook
|
Directory traversal vulnerability in none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via a "..:" sequence (dot-dot variant) in the argument.
|
NVD-CWE-Other
|
CVE-2002-1033
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270539
|
10.0 |
HIGH
|
sun
|
i-runbook
|
none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via an absolute pathname in the argument.
|
NVD-CWE-Other
|
CVE-2002-1034
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270540
|
5.0 |
MEDIUM
|
omnicron
|
omnihttpd
|
Omnicron OmniHTTPd 2.09 allows remote attackers to cause a denial of service (crash) via an HTTP request with a long, malformed HTTP 1version number.
|
NVD-CWE-Other
|
CVE-2002-1035
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270541
|
7.5 |
HIGH
|
zoltan_milosevic
|
fluid_dynamics_search_engine
|
Cross-site scripting vulnerability in search.pl for Fluid Dynamics Search Engine (FDSE) before 2.0.0.0055 allows remote attackers to execute web script via the (1) Rank or (2) Match parameters.
|
NVD-CWE-Other
|
CVE-2002-1036
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270542
|
5.0 |
MEDIUM
|
ibm
|
aix
|
Unknown vulnerability in the WebSecure (DFSWeb) configuration utilities in AIX 4.x, possibly related to relative pathnames.
|
NVD-CWE-Other
|
CVE-2002-1040
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270543
|
5.0 |
MEDIUM
|
netscape
sun
|
enterprise_server
iplanet_web_server
one_application_server
one_web_server
|
Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read a…
|
NVD-CWE-Other
|
CVE-2002-1042
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270544
|
5.0 |
MEDIUM
|
ultrafunk
|
popcorn
|
Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) via a malformed Subject ("\t\t").
|
NVD-CWE-Other
|
CVE-2002-1043
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270545
|
7.5 |
HIGH
|
ultrafunk
|
popcorn
|
Buffer overflow in Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Subject field.
|
NVD-CWE-Other
|
CVE-2002-1044
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270546
|
5.0 |
MEDIUM
|
ultrafunk
|
popcorn
|
Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) via a malformed Date field that is converted into a year greater than 2037.
|
NVD-CWE-Other
|
CVE-2002-1045
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270547
|
5.0 |
MEDIUM
|
watchguard
|
firebox
soho_firewall
|
Dynamic VPN Configuration Protocol service (DVCP) in Watchguard Firebox firmware 5.x.x allows remote attackers to cause a denial of service (crash) via a malformed packet containing tab characters to…
|
NVD-CWE-Other
|
CVE-2002-1046
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270548
|
7.5 |
HIGH
|
watchguard
|
soho_firewall
|
The FTP service in Watchguard Soho Firewall 5.0.35a allows remote attackers to gain privileges with a correct password but an incorrect user name.
|
NVD-CWE-Other
|
CVE-2002-1047
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270549
|
7.5 |
HIGH
|
hp
|
jetdirect
|
HP JetDirect printers allow remote attackers to obtain the administrative password for the (1) web and (2) telnet services via an SNMP request to the variable (.iso.3.6.1.4.1.11.2.3.9.4.2.1.3.9.1.1.0.
|
NVD-CWE-Other
|
CVE-2002-1048
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270550
|
5.0 |
MEDIUM
|
hylafax
|
hylafax
|
Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service (crash) via the TSI data element.
|
NVD-CWE-Other
|
CVE-2002-1049
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
