|
313751
|
5.0 |
MEDIUM
|
caucho_technology
|
resin
|
Resin 2.1.1 allows remote attackers to cause a denial of service (thread and connection consumption) via multiple URL requests containing the DOS 'CON' device name and a registered file extension suc…
|
NVD-CWE-Other
|
CVE-2002-1989
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313752
|
5.0 |
MEDIUM
|
caucho_technology
|
resin
|
Resin 2.0.5 through 2.1.2 allows remote attackers to reveal physical path information via a URL request for the example Java class file HelloServlet.
|
NVD-CWE-Other
|
CVE-2002-1990
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313753
|
5.0 |
MEDIUM
|
macromedia
|
coldfusion
coldfusion_professional
|
Buffer overflow in jrun.dll in ColdFusion MX, when used with IIS 4 or 5, allows remote attackers to cause a denial of service in IIS via (1) a long template file name or (2) a long HTTP header.
|
NVD-CWE-Other
|
CVE-2002-1992
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313754
|
10.0 |
HIGH
|
affordable_web_space_design
|
affordable_web_space_design_webbbs
|
webbbs_post.pl in WebBBS 4 and 5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the followup parameter.
|
NVD-CWE-Other
|
CVE-2002-1993
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313755
|
5.0 |
MEDIUM
|
gamecheats
|
advanced_web_server_professional
|
advserver.exe in Advanced Web Server (AdvServer) Professional 1.030000 allows remote attackers to cause a denial of service via multiple HTTP requests containing a single carriage return/line feed (C…
|
NVD-CWE-Other
|
CVE-2002-1994
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313756
|
4.3 |
MEDIUM
|
lebios
|
phptonuke.php
|
Cross-site scripting (XSS) vulnerability in phptonuke.php for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the filnavn parameter.
|
NVD-CWE-Other
|
CVE-2002-1995
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313757
|
2.6 |
LOW
|
postnuke_software_foundation
|
postnuke
|
Cross-site scripting (XSS) vulnerability in PostNuke 0.71 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name parameter in modules.php and (2) catid parameter …
|
NVD-CWE-Other
|
CVE-2002-1996
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313758
|
7.5 |
HIGH
|
sco
|
open_unix
unixware
|
Buffer overflow in rpc.cmsd in SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows remote attackers to execute arbitrary commands via a long parameter to rtable_create (procedure 21).
|
NVD-CWE-Other
|
CVE-2002-1998
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313759
|
5.0 |
MEDIUM
|
hp
|
praesidium_webproxy
|
HP Praesidium Webproxy 1.0 running on HP-UX 11.04 VVOS could allow remote attackers to cause Webproxy to forward requests to the internal network via crafted HTTP requests.
|
NVD-CWE-Other
|
CVE-2002-1999
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313760
|
2.1 |
LOW
|
compaq
|
acms
|
ACMS 4.3 and 4.4 in OpenVMS Alpha 7.2 and 7.3 does not properly use process privileges, which allows attackers to access data.
|
NVD-CWE-Other
|
CVE-2002-2000
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313761
|
5.0 |
MEDIUM
|
compaq
|
tru64
|
ypbind in Compaq Tru64 4.0F, 4.0G, 5.0A, 5.1 and 5.1A allows remote attackers to cause the process to core dump via certain network packets generated by nmap.
|
NVD-CWE-Other
|
CVE-2002-2003
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313762
|
5.0 |
MEDIUM
|
compaq
|
tru64
|
portmapper in Compaq Tru64 4.0G and 5.0A allows remote attackers to cause a denial of service via a flood of packets.
|
NVD-CWE-Other
|
CVE-2002-2004
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313763
|
5.0 |
MEDIUM
|
apache
|
tomcat
|
The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web root path, via erroneous HTTP requests for…
|
NVD-CWE-Other
|
CVE-2002-2007
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313764
|
4.3 |
MEDIUM
|
htdig
|
htdig
|
Cross-site scripting (XSS) vulnerability in htsearch.cgi in htdig (ht://Dig) 3.1.5, 3.1.6, and 3.2 allows remote attackers to inject arbitrary web script or HTML via the words parameter.
|
NVD-CWE-Other
|
CVE-2002-2010
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313765
|
4.3 |
MEDIUM
|
jon_howell
|
faq-o-matic
|
Cross-site scripting (XSS) vulnerability in the fom CGI program (fom.cgi) in Faq-O-Matic 2.711 and 2.712 allows remote attackers to inject arbitrary web script or HTML via the file parameter.
|
NVD-CWE-Other
|
CVE-2002-2011
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313766
|
5.0 |
MEDIUM
|
apache
|
http_server
|
Unknown vulnerability in Apache 1.3.19 running on HP Secure OS for Linux 1.0 allows remote attackers to cause "unexpected results" via an HTTP request.
|
NVD-CWE-Other
|
CVE-2002-2012
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313767
|
5.0 |
MEDIUM
|
mozilla
netscape
|
mozilla
communicator
navigator
|
Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.
|
NVD-CWE-Other
|
CVE-2002-2013
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313768
|
5.0 |
MEDIUM
|
ibm
|
lotus_domino
|
Lotus Domino 5.0.8 web server returns different error messages when a valid or invalid user is provided in HTTP requests, which allows remote attackers to determine valid user names and makes it easi…
|
NVD-CWE-Other
|
CVE-2002-2014
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313769
|
7.5 |
HIGH
|
postnuke_software_foundation
|
postnuke
|
PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and possibly execute code via the caselist parameter.
|
NVD-CWE-Other
|
CVE-2002-2015
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313770
|
7.2 |
HIGH
|
user-mode_linux
|
user-mode_linux
|
User-mode Linux (UML) 2.4.17-8 does not restrict access to kernel address space, which allows local users to execute arbitrary code.
|
NVD-CWE-Other
|
CVE-2002-2016
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313771
|
10.0 |
HIGH
|
sas
|
base
integration_technologies
|
sastcpd in SAS/Base 8.0 allows local users to execute arbitrary code by setting the authprog environment variable to reference a malicious program, which is then executed by sastcpd.
|
NVD-CWE-Other
|
CVE-2002-2017
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313772
|
7.2 |
HIGH
|
sas
|
base
integration_technologies
|
sastcpd in SAS/Base 8.0 might allow local users to gain privileges by setting the netencralg environment variable, which causes a segmentation fault.
|
NVD-CWE-Other
|
CVE-2002-2018
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313773
|
7.5 |
HIGH
|
netgear
|
rp114
|
Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26 uses a default administrator password and accepts admin logins on the external interface, which allows remote attackers to gain privileges if the…
|
NVD-CWE-Other
|
CVE-2002-2020
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313774
|
4.3 |
MEDIUM
|
woltlab
|
burning_board
|
Cross-site scripting (XSS) vulnerability in WoltLab Burning Board (wbboard) 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the message parameter.
|
NVD-CWE-Other
|
CVE-2002-2021
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313775
|
7.2 |
HIGH
|
kaffe
|
kaffe_openvm
|
Format string vulnerability in Kaffe OpenVM 1.0.6 and earlier allows local users to execute arbitrary code, when a java.lang.NoClassDefFoundError is thrown, via format specifiers in the forName attri…
|
NVD-CWE-Other
|
CVE-2002-2022
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313776
|
2.1 |
LOW
|
yamaguchi
|
shingo_beep2
|
The get_parameter_from_freqency_source function in beep2 1.0, 1.1 and 1.2, when installed setuid root, allows local users to read arbitrary files via unknown attack vectors.
|
NVD-CWE-Other
|
CVE-2002-2023
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313777
|
7.5 |
HIGH
|
browseftp
|
browseftp_client
|
Buffer overflow in BrowseFTP 1.62 client allows remote FTP servers to execute arbitrary code via a long FTP "220" message reply.
|
NVD-CWE-Other
|
CVE-2002-2026
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313778
|
7.5 |
HIGH
|
doow
|
doow
|
Database of Our Owlish Wisdom (DOOW) 0.1 through 0.2.1 does not properly verify user permissions, which allows remote attackers to perform unauthorized activities.
|
NVD-CWE-Other
|
CVE-2002-2027
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313779
|
7.5 |
HIGH
|
apache
|
http_server
|
PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and possibly execute arbitrary programs via an HTTP request for ph…
|
NVD-CWE-Other
|
CVE-2002-2029
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313780
|
7.5 |
HIGH
|
sqldata
|
sqldata_enterprise_server
|
Stack-based buffer overflow in SQLData Enterprise Server 3.0 allows remote attacker to execute arbitrary code and cause a denial of service via a long HTTP request.
|
NVD-CWE-Other
|
CVE-2002-2030
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313781
|
5.0 |
MEDIUM
|
faqmanager
|
faqmanager.cgi
|
faqmanager.cgi in FAQManager 2.2.5 and earlier allows remote attackers to read arbitrary files by specifying the filename in the toc parameter with a trailing null character (%00).
|
NVD-CWE-Other
|
CVE-2002-2033
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313782
|
7.5 |
HIGH
|
john_hardin
|
procmail_email_sanitizer
|
The Email Sanitizer before 1.133 for Procmail allows remote attackers to bypass the mail filter and execute arbitrary code via crafted recursive multipart MIME attachments.
|
NVD-CWE-Other
|
CVE-2002-2034
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313783
|
7.5 |
HIGH
|
realityscape
|
mylogin_2000
|
SQL injection vulnerability in RealityScape MyLogin 2000 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Password in the login form.
|
NVD-CWE-Other
|
CVE-2002-2035
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313784
|
7.5 |
HIGH
|
sun
|
ray_server_software
|
Sun Ray Server Software (SRSS) 1.3, when Non-Smartcard Mobility (NSCM) is enabled, allows remote attackers to login as another user by running dtlogin from a system that supports the XDMCP client.
|
NVD-CWE-Other
|
CVE-2002-2036
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313785
|
5.0 |
MEDIUM
|
cisco
|
bams
pgw_2200
sc2200
vsc3000
vspt
|
The Cisco Media Gateway Controller (MGC) in (1) SC2200 7.4 and earlier, (2) VSC3000 9.1 and earlier, (3) PGW 2200 9.1 and earlier, (4) Billing and Management Server (BAMS) and (5) Voice Services Prov…
|
NVD-CWE-Other
|
CVE-2002-2037
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313786
|
3.6 |
LOW
|
bill_abt
|
next_generation_posix_threading
|
Next Generation POSIX Threading (NGPT) 1.9.0 uses a filesystem-based shared memory entry, which allows local users to cause a denial of service or in threaded processes or spoof files via unknown met…
|
NVD-CWE-Other
|
CVE-2002-2038
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313787
|
7.2 |
HIGH
|
qnx
|
rtos
|
The (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly drop privileges before executing the system command, which allows local users to…
|
NVD-CWE-Other
|
CVE-2002-2040
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313788
|
7.2 |
HIGH
|
qnx
|
rtos
|
ptrace in the QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows programs to attach to privileged processes, which could allow local users to execute arbitrary code by modifying running proce…
|
NVD-CWE-Other
|
CVE-2002-2042
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313789
|
7.5 |
HIGH
|
cyrus
|
sasl
|
SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and 1.5.27 allows remote attackers to execute arbitrary SQL commands and log in as arbitrary POP mail user…
|
NVD-CWE-Other
|
CVE-2002-2043
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313790
|
4.3 |
MEDIUM
|
xqus
|
x-stat
|
Cross-site scripting (XSS) vulnerability in x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a parameter to the phpinfo action.
|
NVD-CWE-Other
|
CVE-2002-2044
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313791
|
7.5 |
HIGH
|
xqus
|
x-news
|
x_news.php in X-News (x_news) 1.1 and earlier allows remote attackers to gain administrative privileges by stealing and replaying the md5_password cookie.
|
NVD-CWE-Other
|
CVE-2002-2046
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313792
|
10.0 |
HIGH
|
sketch
|
sketch
|
The file preview functionality in Sketch 0.6.12 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an encapsulated Postscript (EPS) file.
|
NVD-CWE-Other
|
CVE-2002-2047
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313793
|
7.5 |
HIGH
|
dug_song
|
dsniff
fragroute
fragrouter
|
configure for Dsniff 2.3, fragroute 1.2, and fragrouter 1.6, when downloaded from monkey.org on May 17, 2002, has been modified to contain a backdoor, which allows remote attackers to access the syst…
|
NVD-CWE-Other
|
CVE-2002-2049
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313794
|
2.1 |
LOW
|
modlogan
|
modlogan
|
Directory traversal vulnerability in processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a .. (dot dot) in t…
|
NVD-CWE-Other
|
CVE-2002-2050
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313795
|
2.1 |
LOW
|
modlogan
|
modlogan
|
The processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a symlink attack on files specified as hostnames in …
|
NVD-CWE-Other
|
CVE-2002-2051
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313796
|
5.0 |
MEDIUM
|
cisco
|
ios
|
Cisco 2611 router running IOS 12.1(6.5), possibly an interim release, allows remote attackers to cause a denial of service via port scans such as (1) scanning all ports on a single host and (2) scann…
|
NVD-CWE-Other
|
CVE-2002-2052
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313797
|
5.0 |
MEDIUM
|
cisco
|
ios
|
The design of the Hot Standby Routing Protocol (HSRP), as implemented on Cisco IOS 12.1, when using IRPAS, allows remote attackers to cause a denial of service (CPU consumption) via a router with the…
|
NVD-CWE-Other
|
CVE-2002-2053
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313798
|
4.6 |
MEDIUM
|
intel
|
d845bg_motherboard
d845hv_motherboard
d845pt_motherboard
d845wn_motherboard
|
BIOS D845BG, D845HV, D845PT and D845WN on Intel motherboards does not properly restrict access to configuration information when BIOS passwords are enabled, which could allow local users to change th…
|
NVD-CWE-Other
|
CVE-2002-2059
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313799
|
7.5 |
HIGH
|
twibright_labs
|
links
|
Buffer overflow in Links 2.0 pre4 allows remote attackers to crash client browsers and possibly execute arbitrary code via gamma tables in large 16-bit PNG images.
|
NVD-CWE-Other
|
CVE-2002-2060
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313800
|
7.5 |
HIGH
|
atguard
|
atguard_personal_firewall
|
AtGuard 3.2 allows remote attackers to bypass firwall filters and execute prohibited programs by changing the filenames to permitted filenames.
|
NVD-CWE-Other
|
CVE-2002-2063
|
2008-09-6 05:32 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
