|
270701
|
6.4 |
MEDIUM
|
hosting_controller
|
hosting_controller
|
Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. (dot dot) in the RootName parameter.
|
NVD-CWE-Other
|
CVE-2002-0772
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270702
|
10.0 |
HIGH
|
hosting_controller
|
hosting_controller
|
imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to imp_rootdir.asp and modifying parameters such as (1) ftp, (2) …
|
NVD-CWE-Other
|
CVE-2002-0773
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270703
|
10.0 |
HIGH
|
hosting_controller
|
hosting_controller
|
Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the password is not changed.
|
NVD-CWE-Other
|
CVE-2002-0774
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270704
|
5.0 |
MEDIUM
|
hosting_controller
|
hosting_controller
|
browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter.
|
NVD-CWE-Other
|
CVE-2002-0775
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270705
|
7.5 |
HIGH
|
hosting_controller
|
hosting_controller
|
getuserdesc.asp in Hosting Controller 2002 allows remote attackers to change the passwords of arbitrary users and gain privileges by modifying the username parameter, as addressed by the "UpdateUser"…
|
NVD-CWE-Other
|
CVE-2002-0776
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270706
|
10.0 |
HIGH
|
ipswitch
|
imail
|
Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary code via a long "bind DN" parameter.
|
NVD-CWE-Other
|
CVE-2002-0777
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270707
|
5.0 |
MEDIUM
|
novell
|
bordermanager
|
FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service (network connectivity loss) via a connection to port 21 with a large amount of random data.
|
NVD-CWE-Other
|
CVE-2002-0779
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270708
|
5.0 |
MEDIUM
|
novell
|
bordermanager
|
IP/IPX gateway for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a connection to port 8225 with a large amount of random data, which causes ipipxgw.nlm to AB…
|
NVD-CWE-Other
|
CVE-2002-0780
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270709
|
5.0 |
MEDIUM
|
novell
|
bordermanager
|
RTSP proxy for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a GET request to port 9090 followed by a series of carriage returns, which causes proxy.nlm to A…
|
NVD-CWE-Other
|
CVE-2002-0781
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270710
|
5.0 |
MEDIUM
|
novell
|
bordermanager
|
Novell BorderManager 3.5 with PAT (Port-Address Translate) enabled allows remote attackers to cause a denial of service by filling the connection table with a large number of connection requests to h…
|
NVD-CWE-Other
|
CVE-2002-0782
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270711
|
7.5 |
HIGH
|
opera_software
|
opera_web_browser
|
Opera 6.01, 6.0, and 5.12 allows remote attackers to execute arbitrary JavaScript in the security context of other sites by setting the location of a frame or iframe to a Javascript: URL.
|
NVD-CWE-Other
|
CVE-2002-0783
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270712
|
5.0 |
MEDIUM
|
lysias
|
lidik_webserver
|
Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HTTP request with a ... (modified dot dot).
|
NVD-CWE-Other
|
CVE-2002-0784
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270713
|
5.0 |
MEDIUM
|
aol
|
instant_messenger
|
AOL Instant Messenger (AIM) allows remote attackers to cause a denial of service (crash) via an "AddBuddy" link with the ScreenName parameter set to a large number of comma-separated values, possibly…
|
NVD-CWE-Other
|
CVE-2002-0785
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270714
|
5.0 |
MEDIUM
|
critical_path
|
injoin_directory_server
|
iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators to read arbitrary files by specifying the target file in the LOG parameter.
|
NVD-CWE-Other
|
CVE-2002-0786
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270715
|
7.5 |
HIGH
|
critical_path
|
injoin_directory_server
|
Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 allow remote attackers to execute script as the administrator via administrator UR…
|
NVD-CWE-Other
|
CVE-2002-0787
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270716
|
7.5 |
HIGH
|
mnogosearch
|
mnogosearch
|
Buffer overflow in search.cgi in mnoGoSearch 3.1.19 and earlier allows remote attackers to execute arbitrary code via a long query (q) parameter.
|
NVD-CWE-Other
|
CVE-2002-0789
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270717
|
5.0 |
MEDIUM
|
novell
|
netware
|
Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) via a connection to the server followed by a carriage return, and possibly other i…
|
NVD-CWE-Other
|
CVE-2002-0791
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270718
|
5.0 |
MEDIUM
|
cisco
|
webns
content_services_switch_11000
|
The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to cause a denial of service (soft reset) via (1) an HTTPS POST request, or (2) malformed XM…
|
NVD-CWE-Other
|
CVE-2002-0792
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270719
|
5.0 |
MEDIUM
|
freebsd
|
freebsd
|
The accept_filter mechanism in FreeBSD 4 through 4.5 does not properly remove entries from the incomplete listen queue when adding a syncache, which allows remote attackers to cause a denial of servi…
|
NVD-CWE-Other
|
CVE-2002-0794
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270720
|
2.1 |
LOW
|
freebsd
|
freebsd
|
The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attack on X Windows lock files.
|
NVD-CWE-Other
|
CVE-2002-0795
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270721
|
7.5 |
HIGH
|
youngzsoft
|
cmailserver
|
Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argument.
|
NVD-CWE-Other
|
CVE-2002-0799
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270722
|
5.0 |
MEDIUM
|
working_resources_inc.
|
badblue
|
BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at the end.
|
NVD-CWE-Other
|
CVE-2002-0800
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270723
|
10.0 |
HIGH
|
macromedia
|
jrun
|
Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a long HTTP host header field in a URL for a …
|
NVD-CWE-Other
|
CVE-2002-0801
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270724
|
7.5 |
HIGH
|
mozilla
|
bugzilla
|
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when configured to perform reverse DNS lookups, allows remote attackers to bypass IP restrictions by connecting from a system with a spoofed reve…
|
NVD-CWE-Other
|
CVE-2002-0804
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270725
|
4.6 |
MEDIUM
|
mozilla
|
bugzilla
|
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, (1) creates new directories with world-writable permissions, and (2) creates the params file with world-writable permissions, which allows local …
|
NVD-CWE-Other
|
CVE-2002-0805
|
2008-09-6 05:28 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270726
|
7.5 |
HIGH
|
yahoo
|
messenger
|
Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary script as other users via the addview parameter of a ymsgr URI.
|
NVD-CWE-Other
|
CVE-2002-0032
|
2008-09-6 05:27 |
2002-07-26 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270727
|
7.5 |
HIGH
|
ibm
|
lotus_domino_server
|
Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NSFDbReadObject) that directly accesses th…
|
NVD-CWE-Other
|
CVE-2002-0037
|
2008-09-6 05:27 |
2002-04-22 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270728
|
5.0 |
MEDIUM
|
sgi
|
irix
|
rpcbind in SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via malformed RPC packets with invalid lengths.
|
NVD-CWE-Other
|
CVE-2002-0039
|
2008-09-6 05:27 |
2002-03-28 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270729
|
2.1 |
LOW
|
sgi
|
irix
|
Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, which might allow the users to gain privile…
|
NVD-CWE-Other
|
CVE-2002-0040
|
2008-09-6 05:27 |
2002-03-28 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270730
|
5.0 |
MEDIUM
|
sgi
|
irix
|
Unknown vulnerability in Mail for SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, when running with the -R option, allows local and remote attackers to cause a core dump.
|
NVD-CWE-Other
|
CVE-2002-0041
|
2008-09-6 05:27 |
2002-04-22 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270731
|
2.1 |
LOW
|
sgi
|
irix
|
Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service (hang) by creating a file that is not properly processed by XFS.
|
NVD-CWE-Other
|
CVE-2002-0042
|
2008-09-6 05:27 |
2002-06-18 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270732
|
7.5 |
HIGH
|
nswc
|
cider_shadow
|
Multiple CGI scripts in CIDER SHADOW 1.5 and 1.6 allows remote attackers to execute arbitrary commands via certain form fields.
|
NVD-CWE-Other
|
CVE-2002-0091
|
2008-09-6 05:27 |
2002-03-15 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270733
|
7.5 |
HIGH
|
fraunhofer_fit
|
bscw
|
config_converters.py in BSCW (Basic Support for Cooperative Work) 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during f…
|
NVD-CWE-Other
|
CVE-2002-0094
|
2008-09-6 05:27 |
2002-03-25 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270734
|
7.5 |
HIGH
|
fraunhofer_fit
|
bscw
|
The default configuration of BSCW (Basic Support for Cooperative Work) 3.x and possibly version 4 enables user self registration, which could allow remote attackers to upload files and possibly join …
|
NVD-CWE-Other
|
CVE-2002-0095
|
2008-09-6 05:27 |
2002-03-25 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270735
|
7.2 |
HIGH
|
geeklog
|
geeklog
|
The installation of Geeklog 1.3 creates an extra group_assignments record which is not properly deleted, which causes the first newly created user to be added to the GroupAdmin and UserAdmin groups, …
|
NVD-CWE-Other
|
CVE-2002-0096
|
2008-09-6 05:27 |
2002-03-25 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270736
|
7.5 |
HIGH
|
yabb
|
yabb
|
Cross-site scripting vulnerability in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 and earlier allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded …
|
NVD-CWE-Other
|
CVE-2002-0117
|
2008-09-6 05:27 |
2002-03-25 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270737
|
7.5 |
HIGH
|
sambar
|
sambar_server
|
cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long argument.
|
NVD-CWE-Other
|
CVE-2002-0128
|
2008-09-6 05:27 |
2002-03-25 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270738
|
4.6 |
MEDIUM
|
eazel
|
nautilus
|
Nautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the .nautilus-metafile.xml metadata file.
|
NVD-CWE-Other
|
CVE-2002-0157
|
2008-09-6 05:27 |
2002-05-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270739
|
7.5 |
HIGH
|
xpilot
|
xpilot
|
Buffer overflow in xpilot-server for XPilot 4.5.0 and earlier allows remote attackers to execute arbitrary code.
|
NVD-CWE-Other
|
CVE-2002-0179
|
2008-09-6 05:27 |
2002-04-22 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270740
|
7.5 |
HIGH
|
apache
|
mod_python
|
mod_python version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous function…
|
NVD-CWE-Other
|
CVE-2002-0185
|
2008-09-6 05:27 |
2002-05-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270741
|
4.6 |
MEDIUM
|
cisco
|
tacacs\+
|
tac_plus Tacacs+ daemon F4.0.4.alpha, originally maintained by Cisco, creates files from the accounting directive with world-readable and writable permissions, which allows local users to access and …
|
NVD-CWE-Other
|
CVE-2002-0225
|
2008-09-6 05:27 |
2002-05-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270742
|
7.5 |
HIGH
|
castelle
|
faxpress
|
Castelle FaxPress, possibly 6.3 and other versions, when configured to use the Network print queue, allows attackers to obtain the username and password by submitting an incorrect login, which causes…
|
NVD-CWE-Other
|
CVE-2002-0235
|
2008-09-6 05:27 |
2002-05-29 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270743
|
7.5 |
HIGH
|
cisco
|
secure_access_control_server
|
NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services (NDS), which could allow those users to au…
|
NVD-CWE-Other
|
CVE-2002-0241
|
2008-09-6 05:27 |
2002-05-29 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270744
|
5.0 |
MEDIUM
|
cisco
|
ios
|
Cisco IOS 11.1CC through 12.2 with Cisco Express Forwarding (CEF) enabled includes portions of previous packets in the padding of a MAC level packet when the MAC packet's length is less than the IP l…
|
NVD-CWE-Other
|
CVE-2002-0339
|
2008-09-6 05:27 |
2002-06-25 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270745
|
4.6 |
MEDIUM
|
sgi
|
mediamail
|
MediaMail and MediaMail Pro in SGI IRIX 6.5.16 and earlier allows local users to force the program to dump core via certain arguments, which could allow the users to read sensitive data or gain privi…
|
NVD-CWE-Other
|
CVE-2002-0358
|
2008-09-6 05:27 |
2002-07-26 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270746
|
7.5 |
HIGH
|
aladdin_enterprises
|
ghostscript
|
ghostscript before 6.53 allows attackers to execute arbitrary commands by using .locksafe or .setsafe to reset the current pagedevice.
|
NVD-CWE-Other
|
CVE-2002-0363
|
2008-09-6 05:27 |
2002-05-29 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270747
|
5.0 |
MEDIUM
|
freebsd
netbsd
openbsd
|
freebsd
netbsd
openbsd
|
The TCP implementation in various BSD operating systems (tcp_input.c) does not properly block connections to broadcast addresses, which could allow remote attackers to bypass intended filters via pac…
|
NVD-CWE-Other
|
CVE-2002-0381
|
2008-09-6 05:27 |
2002-06-25 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270748
|
10.0 |
HIGH
|
red-m
|
1050ap_lan_acess_point
|
Red-M 1050 (Bluetooth Access Point) uses case insensitive passwords, which makes it easier for attackers to conduct a brute force guessing attack due to the smaller space of possible passwords.
|
NVD-CWE-Other
|
CVE-2002-0394
|
2008-09-6 05:27 |
2002-07-26 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270749
|
5.0 |
MEDIUM
|
menasoft
|
sphereserver
|
Menasoft SPHERE server 0.99x and 0.5x allows remote attackers to cause a denial of service by establishing a large number of connections to the server without providing login credentials, which preve…
|
NVD-CWE-Other
|
CVE-2002-0406
|
2008-09-6 05:27 |
2002-07-26 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270750
|
5.0 |
MEDIUM
|
aeromail
|
aeromail
|
send_message.php in AeroMail before 1.45 allows remote attackers to read arbitrary files on the server, instead of just uploaded files, via an attachment that modifies the filename to be uploaded.
|
NVD-CWE-Other
|
CVE-2002-0410
|
2008-09-6 05:27 |
2002-07-26 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
