Latest CVE Feed
-
7.5
HIGHCVE-2002-1604
Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliv... Read more
- Published: Sep. 02, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-1605
Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable to (1) dxpause, (2) dxconsole, or (3) dtsession.... Read more
- Published: Sep. 02, 2002
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2002-1607
Buffer overflow in ypmatch in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code.... Read more
- Published: Aug. 31, 2002
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2002-1608
Buffer overflow in traceroute in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code.... Read more
- Published: Aug. 31, 2002
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2002-1611
Buffer overflow in quot in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.... Read more
- Published: Aug. 30, 2002
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2002-1610
Unknown vulnerability in ping in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to cause a denial of service.... Read more
- Published: Aug. 30, 2002
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2002-1606
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain privileges via (1) lpc, (2) lpd, (3) lpq, (4) lpr, or (5) lprm.... Read more
- Published: Aug. 30, 2002
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2002-1609
Buffer overflow in binmail in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.... Read more
- Published: Aug. 30, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-1353
LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst.... Read more
Affected Products : localweb2000- Published: Aug. 29, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-1451
Blazix before 1.2.2 allows remote attackers to read source code of JSP scripts or list restricted web directories via an HTTP request that ends in a (1) "+" or (2) "\" (backslash) character.... Read more
Affected Products : blazix- Published: Aug. 24, 2002
- Modified: Apr. 03, 2025
-
2.6
LOWCVE-2002-1444
The Google toolbar 1.1.60, when running on Internet Explorer 5.5 and 6.0, allows remote attackers to cause a denial of service (crash with an exception in oleaut32.dll) via malicious HTML, possibly related to small width and height parameters or an incorr... Read more
- Published: Aug. 15, 2002
- Modified: Apr. 03, 2025
-
4.3
MEDIUMCVE-2002-1453
Cross-site scripting (XSS) vulnerability in MyWebServer 1.0.2 allows remote attackers to insert script and HTML via a long request followed by the malicious script, which is echoed back to the user in an error message.... Read more
Affected Products : mywebserver- Published: Aug. 14, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-1452
Buffer overflow in the search capability for MyWebServer 1.0.2 allows remote attackers to execute arbitrary code via a long searchTarget parameter.... Read more
Affected Products : mywebserver- Published: Aug. 14, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-0419
Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easily conduct brute force attacks via responses from the server in which (2) in certain configurations, the server IP address is provided as... Read more
- Published: Aug. 12, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0732
Cross-site scripting vulnerability in MyGuestbook 1.0 allows remote attackers to execute arbitrary script or inject HTML via fields such as (1) user name or (2) comments.... Read more
Affected Products : myguestbook- Published: Aug. 12, 2002
- Modified: Apr. 03, 2025
-
7.1
HIGHCVE-2002-0813
Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote attackers to cause a denial of service (reset) or modify configuration via a long filename.... Read more
Affected Products : ios- Published: Aug. 12, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-0509
Transparent Network Substrate (TNS) Listener in Oracle 9i 9.0.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a single malformed TCP packet to port 1521.... Read more
Affected Products : oracle9i- Published: Aug. 12, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-0784
Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HTTP request with a ... (modified dot dot).... Read more
Affected Products : lidik_webserver- Published: Aug. 12, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-0417
Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the ALTERNATE_TEMPLATES parameter for various mmstdo*.cgi programs.... Read more
Affected Products : mailman_webmail- Published: Aug. 12, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0485
Norton Anti-Virus (NAV) allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headers are mixed upper and lower case, which is ignored by some mail clients.... Read more
Affected Products : norton_antivirus- Published: Aug. 12, 2002
- Modified: Apr. 03, 2025