|
314251
|
7.5 |
HIGH
|
cisco
|
webns
content_services_switch_11000
|
The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability (CVE-2001-0622) was incomplete, which still allows remote attackers to gain additional privile…
|
NVD-CWE-Other
|
CVE-2002-0870
|
2008-09-6 05:29 |
2002-09-5 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314252
|
5.0 |
MEDIUM
|
evolvable_corporation
|
shambala_server
|
Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request.
|
NVD-CWE-Other
|
CVE-2002-0876
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314253
|
5.0 |
MEDIUM
|
evolvable_corporation
|
shambala_server
|
Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) LIST (ls) or (2) GET commands.
|
NVD-CWE-Other
|
CVE-2002-0877
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314254
|
7.5 |
HIGH
|
logisense
|
dns_manager_system
hawk-i
|
SQL injection vulnerability in the login form for LogiSense software including (1) Hawk-i Billing, (2) Hawk-i ASP and (3) DNS Manager allows remote attackers to bypass authentication via SQL code in …
|
NVD-CWE-Other
|
CVE-2002-0878
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314255
|
5.0 |
MEDIUM
|
gafware
|
cfximage
|
showtemp.cfm for Gafware CFXImage 1.6.6 allows remote attackers to read arbitrary files via (1) a .. or (2) a C: style pathname in the FILE parameter.
|
NVD-CWE-Other
|
CVE-2002-0879
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314256
|
7.2 |
HIGH
|
compaq
|
proliant_bl_e-class_integrated_administrator_firmware
|
Vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10, allows authenticated users with Telnet, SSH, or console access to conduct unauthorized activities.
|
NVD-CWE-Other
|
CVE-2002-0883
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314257
|
5.0 |
MEDIUM
|
juniper
|
netscreen_screenos
|
The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers to cause a denial of service (crash) via a long user name.
|
NVD-CWE-Other
|
CVE-2002-0891
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314258
|
5.0 |
MEDIUM
|
new_atlanta_communications
|
servletexec_isapi
|
The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web root via a direct request to com.newatlanta.servletexec.JSP10Servlet without a f…
|
NVD-CWE-Other
|
CVE-2002-0892
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314259
|
5.0 |
MEDIUM
|
new_atlanta_communications
|
servletexec_isapi
|
Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files via a URL-encoded request to com.newatlanta.servletexec.JSP10Servlet containing "…
|
NVD-CWE-Other
|
CVE-2002-0893
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314260
|
5.0 |
MEDIUM
|
new_atlanta_communications
|
servletexec_isapi
|
NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service (crash) via (1) a request for a long .jsp file, or (2) a long URL sent directly to com.newatlanta.servletexec.JSP…
|
NVD-CWE-Other
|
CVE-2002-0894
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314261
|
7.5 |
HIGH
|
matu
|
matu_ftp
|
Buffer overflow in MatuFtpServer 1.1.3.0 (1.1.3) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PASS (password) command.
|
NVD-CWE-Other
|
CVE-2002-0895
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314262
|
5.0 |
MEDIUM
|
swatch
|
swatch
|
The throttle capability in Swatch may fail to report certain events if (1) the same type of event occurs after the throttle period, or (2) when multiple events matching the same "watchfor" expression…
|
NVD-CWE-Other
|
CVE-2002-0896
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314263
|
7.5 |
HIGH
|
intranet-server
|
localweb2000
|
LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that contains the "/./" directory.
|
NVD-CWE-Other
|
CVE-2002-0897
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314264
|
7.5 |
HIGH
|
blueface
|
falcon_web_server
|
Falcon web server 2.0.0.1021 and earlier allows remote attackers to bypass access restrictions for protected files via a URL whose directory portion ends in a . (dot).
|
NVD-CWE-Other
|
CVE-2002-0899
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314265
|
7.5 |
HIGH
|
mit
|
pgp_public_key_server
|
Buffer overflow in pks PGP public key web server before 0.9.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long search argument to the lookup…
|
NVD-CWE-Other
|
CVE-2002-0900
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314266
|
10.0 |
HIGH
|
amanda
|
amanda
|
Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow (1) remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certa…
|
NVD-CWE-Other
|
CVE-2002-0901
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314267
|
7.5 |
HIGH
|
phpbb_group
|
phpbb
|
Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a http:// and a double-quote (") in the [IMG] tag, which byp…
|
NVD-CWE-Other
|
CVE-2002-0902
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314268
|
7.5 |
HIGH
|
woltlab
|
burning_board
|
register.php for WoltLab Burning Board (wbboard) 1.1.1 uses a small number of random values for the "code" parameter that is provided to action.php to approve a new registration, along with predictab…
|
NVD-CWE-Other
|
CVE-2002-0903
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314269
|
7.2 |
HIGH
|
ibm
|
informix
|
Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR environment variable.
|
NVD-CWE-Other
|
CVE-2002-0905
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314270
|
7.5 |
HIGH
|
nullsoft
|
shoutcast_server
|
Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-".
|
NVD-CWE-Other
|
CVE-2002-0907
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314271
|
5.0 |
MEDIUM
|
cisco
|
ids_device_manager
|
Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTPS request.
|
NVD-CWE-Other
|
CVE-2002-0908
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314272
|
7.5 |
HIGH
|
debian
|
netstd
|
Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, as observed in the utilities (1) linux-ftpd, (2) pcnfsd, (3) tftp, (4) traceroute…
|
NVD-CWE-Other
|
CVE-2002-0910
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314273
|
7.2 |
HIGH
|
caldera
|
volution_manager
|
Caldera Volution Manager 1.1 stores the Directory Administrator password in cleartext in the slapd.conf file, which could allow local users to gain privileges.
|
NVD-CWE-Other
|
CVE-2002-0911
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314274
|
5.0 |
MEDIUM
|
debian
|
debian_linux
|
in.uucpd UUCP server in Debian GNU/Linux 2.2, and possibly other operating systems, does not properly terminate long strings, which allows remote attackers to cause a denial of service, possibly due …
|
NVD-CWE-Other
|
CVE-2002-0912
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314275
|
5.0 |
MEDIUM
|
double_precision_incorporated
|
courier_mta
|
Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU consumption) via a message with an extremely large or negative value for the year, which causes a tight l…
|
NVD-CWE-Other
|
CVE-2002-0914
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314276
|
2.1 |
LOW
|
harald_hoyer
|
autorun
xandros_desktop_os
|
autorun in Xandros based Linux distributions allows local users to read the first line of arbitrary files via the -c parameter, which causes autorun to print the first line of the file.
|
NVD-CWE-Other
|
CVE-2002-0915
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314277
|
7.5 |
HIGH
|
stellar-x_software
|
msntauth
|
Format string vulnerability in the allowuser code for the Stellar-X msntauth authentication module, as distributed in Squid 2.4.STABLE6 and earlier, allows remote attackers to execute arbitrary code …
|
NVD-CWE-Other
|
CVE-2002-0916
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314278
|
7.5 |
HIGH
|
cgiscript.net
|
cspassword
|
CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users.
|
NVD-CWE-Other
|
CVE-2002-0917
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314279
|
5.0 |
MEDIUM
|
cgiscript.net
|
cspassword
|
CGIScript.net csPassword.cgi leaks sensitive information such as the pathname of the server in debug messages that are presented when the script fails, which allows remote attackers to obtain the inf…
|
NVD-CWE-Other
|
CVE-2002-0918
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314280
|
7.5 |
HIGH
|
cgiscript.net
|
cspassword
|
CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newlines in the title field of the edit page.
|
NVD-CWE-Other
|
CVE-2002-0919
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314281
|
5.0 |
MEDIUM
|
cgiscript.net
|
csnews
|
CGIScript.net csNews.cgi allows remote attackers to obtain potentially sensitive information, such as the full server pathname and other configuration settings, via the viewnews command with an inval…
|
NVD-CWE-Other
|
CVE-2002-0921
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314282
|
5.0 |
MEDIUM
|
cgiscript.net
|
csnews
|
CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) default%2edb.style, or remote authenticated users to perform admi…
|
NVD-CWE-Other
|
CVE-2002-0922
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314283
|
7.5 |
HIGH
|
cgiscript.net
|
csnews
|
CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the (1) pheader or (2) pfooter parameters in the "Advanced Settings" capability.
|
NVD-CWE-Other
|
CVE-2002-0923
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314284
|
7.5 |
HIGH
|
matthew_mondor
|
mmftpd
mmmail
|
Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via (1) the USER command to mmpop3d for mmmail 0.0.13 and earlier, (2) the HELO command to mmsmtpd f…
|
NVD-CWE-Other
|
CVE-2002-0925
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314285
|
5.0 |
MEDIUM
|
wolfram_research
|
webmathematica
|
Directory traversal vulnerability in Wolfram Research webMathematica 1.0.0 and 1.0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the MSPStoreID parameter.
|
NVD-CWE-Other
|
CVE-2002-0926
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314286
|
7.5 |
HIGH
|
pirch
|
pirch_irc
|
Buffer overflow in the Pirch 98 IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hyperlink in a channel or private message.
|
NVD-CWE-Other
|
CVE-2002-0928
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314287
|
5.0 |
MEDIUM
|
novell
|
netware
|
Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service (reboot) via long DHCP requests.
|
NVD-CWE-Other
|
CVE-2002-0929
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314288
|
5.0 |
MEDIUM
|
novell
|
netware
|
Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 (NWFTPD) allows remote attackers to cause a denial of service (ABEND) via format strings in the USER command.
|
NVD-CWE-Other
|
CVE-2002-0930
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314289
|
7.5 |
HIGH
|
luis_bernardo
|
myhelpdesk
|
Cross-site scripting vulnerabilities in MyHelpDesk 20020509, and possibly other versions, allows remote attackers to execute script as other users via a (1) Title or (2) Description when a new ticket…
|
NVD-CWE-Other
|
CVE-2002-0931
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314290
|
6.4 |
MEDIUM
|
luis_bernardo
|
myhelpdesk
|
SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the "id" parameter for the op…
|
NVD-CWE-Other
|
CVE-2002-0932
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314291
|
7.5 |
HIGH
|
datalex
|
bookit_consumer
|
Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain privileges via Cross-site scripting or sniffing attacks.
|
NVD-CWE-Other
|
CVE-2002-0933
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314292
|
6.4 |
MEDIUM
|
jon_hedley
|
alienform2
|
Directory traversal vulnerability in Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) allows remote attackers to read or modify arbitrary files via an illegal character in the m…
|
NVD-CWE-Other
|
CVE-2002-0934
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314293
|
5.0 |
MEDIUM
|
macromedia
|
jrun
|
The Java Server Pages (JSP) engine in JRun allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null).
|
NVD-CWE-Other
|
CVE-2002-0937
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314294
|
7.5 |
HIGH
|
cisco
|
secure_access_control_server
|
Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote attackers to execute arbitrary script or HTML as other web users via the action argument in a link to setup.exe.
|
NVD-CWE-Other
|
CVE-2002-0938
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314295
|
4.6 |
MEDIUM
|
ncipher
|
nforce
nshield
|
The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, as used by the TrustedCodeTool and possibly other applications, may leak a passphrase when the user aborts an application t…
|
NVD-CWE-Other
|
CVE-2002-0941
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314296
|
7.5 |
HIGH
|
lumigent
|
log_explorer
|
Buffer overflows in Lugiment Log Explorer before 3.02 allow attackers with database permissions to execute arbitrary code via long arguments to the extended stored procedures (1) xp_logattach_StartPr…
|
NVD-CWE-Other
|
CVE-2002-0942
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314297
|
6.4 |
MEDIUM
|
metalinks
|
metacart2.sql
|
MetaCart2.sql stores the user database under the web document root without access controls, which allows remote attackers to obtain sensitive information such as passwords and credit card numbers via…
|
NVD-CWE-Other
|
CVE-2002-0943
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314298
|
7.5 |
HIGH
|
deepmetrix
|
livestats
|
Cross-site scripting vulnerability in DeepMetrix LiveStats 5.03 through 6.2.1 allows remote attackers to execute arbitrary script as the LiveStats user via the (1) user-agent or (2) referrer, which a…
|
NVD-CWE-Other
|
CVE-2002-0944
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314299
|
7.5 |
HIGH
|
seanox
|
devwex
|
Buffer overflow in SeaNox Devwex allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.
|
NVD-CWE-Other
|
CVE-2002-0945
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314300
|
5.0 |
MEDIUM
|
seanox
|
devwex
|
Directory traversal vulnerability in SeaNox Devwex before 1.2002.0601 allows remote attackers to read arbitrary files via ..\ (dot dot) sequences in an HTTP request.
|
NVD-CWE-Other
|
CVE-2002-0946
|
2008-09-6 05:29 |
2002-10-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
