|
275951
|
10.0 |
HIGH
|
martin_bauer
|
gbook
|
index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by setting the login parameter to true.
|
NVD-CWE-Other
|
CVE-2002-1560
|
2008-09-6 05:30 |
2003-03-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275952
|
10.0 |
HIGH
|
mailreader.com
|
mailreader.com
|
compose.cgi in Mailreader.com 2.3.30 and 2.3.31, when using Sendmail as the Mail Transfer Agent, allows remote attackers to execute arbitrary commands via shell metacharacters in the RealEmail config…
|
NVD-CWE-Other
|
CVE-2002-1582
|
2008-09-6 05:30 |
2004-12-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275953
|
7.2 |
HIGH
|
ibm
|
db2_universal_database
|
Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a long username that is read from a file descriptor argument.
|
NVD-CWE-Other
|
CVE-2002-1583
|
2008-09-6 05:30 |
2004-09-28 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275954
|
2.1 |
LOW
|
mozilla
|
bugzilla
|
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows authenticated users with editing privileges to delete other users by directly calling the editusers.cgi script with the "del" option.
|
NVD-CWE-Other
|
CVE-2002-0806
|
2008-09-6 05:29 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275955
|
7.5 |
HIGH
|
mozilla
|
bugzilla
|
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when performing a mass change, sets the groupset of all bugs to the groupset of the first bug, which could inadvertently cause insecure groupset …
|
NVD-CWE-Other
|
CVE-2002-0808
|
2008-09-6 05:29 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275956
|
7.5 |
HIGH
|
mozilla
|
bugzilla
|
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, does not properly handle URL-encoded field names that are generated by some browsers, which could cause certain fields to appear to be unset, whi…
|
NVD-CWE-Other
|
CVE-2002-0809
|
2008-09-6 05:29 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275957
|
5.0 |
MEDIUM
|
mozilla
|
bugzilla
|
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML output, which could leak sensitive information, including plaintext passwords, i…
|
NVD-CWE-Other
|
CVE-2002-0810
|
2008-09-6 05:29 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275958
|
7.5 |
HIGH
|
padl_software
|
nss_ldap
|
Buffer overflow in the DNS SRV code for nss_ldap before nss_ldap-198 allows remote attackers to cause a denial of service and possibly execute arbitrary code.
|
NVD-CWE-Other
|
CVE-2002-0825
|
2008-09-6 05:29 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275959
|
7.2 |
HIGH
|
caldera
|
unixware
openunix
|
Vulnerability in pppd on UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to gain root privileges via (1) ppptalk or (2) ppp, a different vulnerability than CVE-2002-0824.
|
NVD-CWE-Other
|
CVE-2002-0827
|
2008-09-6 05:29 |
2002-08-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275960
|
5.0 |
MEDIUM
|
caldera
redhat
hp
|
openlinux_server
openlinux_workstation
pre-execution_environment
secure_os
|
Preboot eXecution Environment (PXE) server allows remote attackers to cause a denial of service (crash) via certain DHCP packets from Voice-Over-IP (VOIP) phones.
|
NVD-CWE-Other
|
CVE-2002-0835
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275961
|
7.2 |
HIGH
|
isdn4linux
|
isdn4linux
|
Format string vulnerability in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the ISDN4Linux (i4l) package allows local users to gain root privileges via format strings in the device name comma…
|
NVD-CWE-Other
|
CVE-2002-0851
|
2008-09-6 05:29 |
2002-09-5 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275962
|
7.5 |
HIGH
|
gnu
|
mailman
|
Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the (1) adminpw or (2) info parame…
|
NVD-CWE-Other
|
CVE-2002-0855
|
2008-09-6 05:29 |
2002-09-5 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275963
|
7.5 |
HIGH
|
cisco
|
webns
content_services_switch_11000
|
The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability (CVE-2001-0622) was incomplete, which still allows remote attackers to gain additional privile…
|
NVD-CWE-Other
|
CVE-2002-0870
|
2008-09-6 05:29 |
2002-09-5 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275964
|
5.0 |
MEDIUM
|
evolvable_corporation
|
shambala_server
|
Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request.
|
NVD-CWE-Other
|
CVE-2002-0876
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275965
|
5.0 |
MEDIUM
|
evolvable_corporation
|
shambala_server
|
Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) LIST (ls) or (2) GET commands.
|
NVD-CWE-Other
|
CVE-2002-0877
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275966
|
7.5 |
HIGH
|
logisense
|
dns_manager_system
hawk-i
|
SQL injection vulnerability in the login form for LogiSense software including (1) Hawk-i Billing, (2) Hawk-i ASP and (3) DNS Manager allows remote attackers to bypass authentication via SQL code in …
|
NVD-CWE-Other
|
CVE-2002-0878
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275967
|
5.0 |
MEDIUM
|
gafware
|
cfximage
|
showtemp.cfm for Gafware CFXImage 1.6.6 allows remote attackers to read arbitrary files via (1) a .. or (2) a C: style pathname in the FILE parameter.
|
NVD-CWE-Other
|
CVE-2002-0879
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275968
|
7.2 |
HIGH
|
compaq
|
proliant_bl_e-class_integrated_administrator_firmware
|
Vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10, allows authenticated users with Telnet, SSH, or console access to conduct unauthorized activities.
|
NVD-CWE-Other
|
CVE-2002-0883
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275969
|
5.0 |
MEDIUM
|
juniper
|
netscreen_screenos
|
The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers to cause a denial of service (crash) via a long user name.
|
NVD-CWE-Other
|
CVE-2002-0891
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275970
|
5.0 |
MEDIUM
|
new_atlanta_communications
|
servletexec_isapi
|
The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web root via a direct request to com.newatlanta.servletexec.JSP10Servlet without a f…
|
NVD-CWE-Other
|
CVE-2002-0892
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275971
|
5.0 |
MEDIUM
|
new_atlanta_communications
|
servletexec_isapi
|
Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files via a URL-encoded request to com.newatlanta.servletexec.JSP10Servlet containing "…
|
NVD-CWE-Other
|
CVE-2002-0893
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275972
|
5.0 |
MEDIUM
|
new_atlanta_communications
|
servletexec_isapi
|
NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service (crash) via (1) a request for a long .jsp file, or (2) a long URL sent directly to com.newatlanta.servletexec.JSP…
|
NVD-CWE-Other
|
CVE-2002-0894
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275973
|
7.5 |
HIGH
|
matu
|
matu_ftp
|
Buffer overflow in MatuFtpServer 1.1.3.0 (1.1.3) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PASS (password) command.
|
NVD-CWE-Other
|
CVE-2002-0895
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275974
|
5.0 |
MEDIUM
|
swatch
|
swatch
|
The throttle capability in Swatch may fail to report certain events if (1) the same type of event occurs after the throttle period, or (2) when multiple events matching the same "watchfor" expression…
|
NVD-CWE-Other
|
CVE-2002-0896
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275975
|
7.5 |
HIGH
|
intranet-server
|
localweb2000
|
LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that contains the "/./" directory.
|
NVD-CWE-Other
|
CVE-2002-0897
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275976
|
7.5 |
HIGH
|
blueface
|
falcon_web_server
|
Falcon web server 2.0.0.1021 and earlier allows remote attackers to bypass access restrictions for protected files via a URL whose directory portion ends in a . (dot).
|
NVD-CWE-Other
|
CVE-2002-0899
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275977
|
7.5 |
HIGH
|
mit
|
pgp_public_key_server
|
Buffer overflow in pks PGP public key web server before 0.9.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long search argument to the lookup…
|
NVD-CWE-Other
|
CVE-2002-0900
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275978
|
10.0 |
HIGH
|
amanda
|
amanda
|
Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow (1) remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certa…
|
NVD-CWE-Other
|
CVE-2002-0901
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275979
|
7.5 |
HIGH
|
phpbb_group
|
phpbb
|
Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a http:// and a double-quote (") in the [IMG] tag, which byp…
|
NVD-CWE-Other
|
CVE-2002-0902
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275980
|
7.5 |
HIGH
|
woltlab
|
burning_board
|
register.php for WoltLab Burning Board (wbboard) 1.1.1 uses a small number of random values for the "code" parameter that is provided to action.php to approve a new registration, along with predictab…
|
NVD-CWE-Other
|
CVE-2002-0903
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275981
|
7.2 |
HIGH
|
ibm
|
informix
|
Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR environment variable.
|
NVD-CWE-Other
|
CVE-2002-0905
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275982
|
7.5 |
HIGH
|
nullsoft
|
shoutcast_server
|
Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-".
|
NVD-CWE-Other
|
CVE-2002-0907
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275983
|
5.0 |
MEDIUM
|
cisco
|
ids_device_manager
|
Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTPS request.
|
NVD-CWE-Other
|
CVE-2002-0908
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275984
|
7.5 |
HIGH
|
debian
|
netstd
|
Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, as observed in the utilities (1) linux-ftpd, (2) pcnfsd, (3) tftp, (4) traceroute…
|
NVD-CWE-Other
|
CVE-2002-0910
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275985
|
7.2 |
HIGH
|
caldera
|
volution_manager
|
Caldera Volution Manager 1.1 stores the Directory Administrator password in cleartext in the slapd.conf file, which could allow local users to gain privileges.
|
NVD-CWE-Other
|
CVE-2002-0911
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275986
|
5.0 |
MEDIUM
|
debian
|
debian_linux
|
in.uucpd UUCP server in Debian GNU/Linux 2.2, and possibly other operating systems, does not properly terminate long strings, which allows remote attackers to cause a denial of service, possibly due …
|
NVD-CWE-Other
|
CVE-2002-0912
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275987
|
5.0 |
MEDIUM
|
double_precision_incorporated
|
courier_mta
|
Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU consumption) via a message with an extremely large or negative value for the year, which causes a tight l…
|
NVD-CWE-Other
|
CVE-2002-0914
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275988
|
2.1 |
LOW
|
harald_hoyer
|
autorun
xandros_desktop_os
|
autorun in Xandros based Linux distributions allows local users to read the first line of arbitrary files via the -c parameter, which causes autorun to print the first line of the file.
|
NVD-CWE-Other
|
CVE-2002-0915
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275989
|
7.5 |
HIGH
|
stellar-x_software
|
msntauth
|
Format string vulnerability in the allowuser code for the Stellar-X msntauth authentication module, as distributed in Squid 2.4.STABLE6 and earlier, allows remote attackers to execute arbitrary code …
|
NVD-CWE-Other
|
CVE-2002-0916
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275990
|
7.5 |
HIGH
|
cgiscript.net
|
cspassword
|
CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users.
|
NVD-CWE-Other
|
CVE-2002-0917
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275991
|
5.0 |
MEDIUM
|
cgiscript.net
|
cspassword
|
CGIScript.net csPassword.cgi leaks sensitive information such as the pathname of the server in debug messages that are presented when the script fails, which allows remote attackers to obtain the inf…
|
NVD-CWE-Other
|
CVE-2002-0918
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275992
|
7.5 |
HIGH
|
cgiscript.net
|
cspassword
|
CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newlines in the title field of the edit page.
|
NVD-CWE-Other
|
CVE-2002-0919
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275993
|
5.0 |
MEDIUM
|
cgiscript.net
|
csnews
|
CGIScript.net csNews.cgi allows remote attackers to obtain potentially sensitive information, such as the full server pathname and other configuration settings, via the viewnews command with an inval…
|
NVD-CWE-Other
|
CVE-2002-0921
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275994
|
5.0 |
MEDIUM
|
cgiscript.net
|
csnews
|
CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) default%2edb.style, or remote authenticated users to perform admi…
|
NVD-CWE-Other
|
CVE-2002-0922
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275995
|
7.5 |
HIGH
|
cgiscript.net
|
csnews
|
CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the (1) pheader or (2) pfooter parameters in the "Advanced Settings" capability.
|
NVD-CWE-Other
|
CVE-2002-0923
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275996
|
7.5 |
HIGH
|
matthew_mondor
|
mmftpd
mmmail
|
Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via (1) the USER command to mmpop3d for mmmail 0.0.13 and earlier, (2) the HELO command to mmsmtpd f…
|
NVD-CWE-Other
|
CVE-2002-0925
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275997
|
5.0 |
MEDIUM
|
wolfram_research
|
webmathematica
|
Directory traversal vulnerability in Wolfram Research webMathematica 1.0.0 and 1.0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the MSPStoreID parameter.
|
NVD-CWE-Other
|
CVE-2002-0926
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275998
|
7.5 |
HIGH
|
pirch
|
pirch_irc
|
Buffer overflow in the Pirch 98 IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hyperlink in a channel or private message.
|
NVD-CWE-Other
|
CVE-2002-0928
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275999
|
5.0 |
MEDIUM
|
novell
|
netware
|
Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service (reboot) via long DHCP requests.
|
NVD-CWE-Other
|
CVE-2002-0929
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276000
|
5.0 |
MEDIUM
|
novell
|
netware
|
Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 (NWFTPD) allows remote attackers to cause a denial of service (ABEND) via format strings in the USER command.
|
NVD-CWE-Other
|
CVE-2002-0930
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
