Overview 1,872 matches · 18 in Waratek scope · 1 protected · 5 exploited · 0 CISA KEV · 600 public PoC · 25 EPSS ≥ 0.5
1,872matches
18in Waratek scope1.0%
1protected0.1%
5exploited0.3%
0CISA KEV0.0%
600public PoC32.1%
25EPSS ≥ 0.51.3%
Protected by Waratek
1
0.1%
Rule in development
0
0.0%
Mitigation candidate
7
0.4%
No exploit published
10
0.5%
Outside Waratek scope
9
0.5%
Not applicable
1,845
98.6%
Withdrawn CVE
0
0.0%
blocked by ARMR today
1
0.1%
partly blocked
0
0.0%
not blocked
1,871
99.9%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
5
0.3%
Working exploit published
599
32.0%
Proof of concept only
0
0.0%
Forecast only
4
0.2%
No public exploit
1,264
67.5%
split by
peak 706 / year
19891
Not applicable1
Medium1
not blocked1
No public exploit1
19902
Not applicable2
Medium2
not blocked2
Working exploit published1
No public exploit1
19914
Not applicable4
Medium4
not blocked4
No public exploit4
19920
19933
Not applicable3
Medium3
not blocked3
No public exploit3
199410
Not applicable10
Medium10
not blocked10
Working exploit published2
No public exploit8
19956
Not applicable6
Medium6
not blocked6
Working exploit published2
No public exploit4
199621
Not applicable21
Medium21
not blocked21
Working exploit published5
No public exploit16
199789
Not applicable89
Medium89
not blocked89
Working exploit published18
No public exploit71
199885
Not applicable85
Medium85
not blocked85
Working exploit published11
No public exploit74
1999357
Outside Waratek scope1
Not applicable356
Medium357
not blocked357
Working exploit published119
No public exploit238
2000467
Mitigation candidate4
No exploit published3
Not applicable460
Medium467
not blocked467
Exploited2
Working exploit published195
No public exploit270
2001706
Mitigation candidate2
No exploit published4
Outside Waratek scope7
Not applicable693
Medium706
not blocked706
Exploited3
Working exploit published219
Forecast only2
No public exploit482
2002121
Protected by Waratek1
Mitigation candidate1
No exploit published3
Outside Waratek scope1
Not applicable115
Medium121
blocked by ARMR today1
not blocked120
Working exploit published27
Forecast only2
No public exploit92
1990199219941996199820002002
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2002-0309 | Medium | 2002-05-31 | Not applicable | No public exploit | SMTP proxy in Symantec Enterprise Firewall (SEF) 6.5.x includes the firewall's physical interface name and address in an SMTP protocol exchange when NAT translation is made to an address other than the firewall, which could allow remote attackers to determine certain firewall configuration information. |
| CVE-2002-0305 | Medium | 2002-05-31 | Not applicable | No public exploit | Zero One Tech (ZOT) P100s print server does not properly disable the SNMP service or change the default password, which could leave the server open to attack without the administrator's knowledge. |
| CVE-2002-0304 | Medium | 2002-05-31 | Not applicable | No public exploit | Lil HTTP Server 2.1 allows remote attackers to read password-protected files via a /./ in the HTTP request. |
| CVE-2002-0303 | Medium | 2002-05-31 | Not applicable | No public exploit | GroupWise 6, when using LDAP authentication and when Post Office has a blank username and password, allows attackers to gain privileges of other users by logging in without a password. |
| CVE-2002-0302 | Medium | 2002-05-31 | Not applicable | No public exploit | The Notify daemon for Symantec Enterprise Firewall (SEF) 6.5.x drops large alerts when SNMP is used as the transport, which could prevent some alerts from being sent in the event of an attack. |
| CVE-2002-0301 | Medium | 2002-05-31 | Not applicable | No public exploit | Citrix NFuse 1.6 allows remote attackers to bypass authentication and obtain sensitive information by directly calling launch.asp with invalid NFUSE_USER and NFUSE_PASSWORD parameters. |
| CVE-2002-0300 | Medium | 2002-05-31 | Not applicable | Working exploit published | gnujsp 1.0.0 and 1.0.1 allows remote attackers to list directories, read source code of certain scripts, and bypass access restrictions by directly requesting the target file from the gnujsp servlet, which does not work around a limitation of JServ and does not process the requested file. |
| CVE-2002-0298 | Medium | 2002-05-31 | Not applicable | No public exploit | ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) via certain HTTP GET requests containing (1) a %2e%2e (encoded dot-dot), (2) several /../ (dot dot) sequences, (3) a missing URI, or (4) several ../ in a URI that does not begin with a / (slash) character. |
| CVE-2002-0297 | Medium | 2002-05-31 | Not applicable | No public exploit | Buffer overflow in ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL in an HTTP request. |
| CVE-2002-0295 | Medium | 2002-05-31 | Not applicable | No public exploit | Alcatel OmniPCX 4400 installs files with world-writable permissions, which allows local users to reconfigure the system and possibly gain privileges. |
| CVE-2002-0293 | Medium | 2002-05-31 | Not applicable | No public exploit | FTP service in Alcatel OmniPCX 4400 allows the "halt" user to gain root privileges by modifying root's .profile file. |
| CVE-2002-0291 | Medium | 2002-05-31 | Not applicable | No public exploit | Dino's Webserver 1.2 allows remote attackers to cause a denial of service (CPU consumption) and possibly execute arbitrary code via several large HTTP requests within a short time. |
| CVE-2002-0289 | Medium | 2002-05-31 | Not applicable | Working exploit published | Buffer overflow in Phusion web server 1.0 allows remote attackers to cause a denial of service and execute arbitrary code via a long HTTP request. |
| CVE-2002-0288 | Medium | 2002-05-31 | Not applicable | Working exploit published | Directory traversal vulnerability in Phusion web server 1.0 allows remote attackers to read arbitrary files via a ... (triple dot dot) in the HTTP request. |
| CVE-2002-0283 | Medium | 2002-05-31 | Not applicable | No public exploit | Windows XP with port 445 open allows remote attackers to cause a denial of service (CPU consumption) via a flood of TCP SYN packets containing possibly malformed data. |
| CVE-2002-0282 | Medium | 2002-05-31 | Not applicable | No public exploit | DCP-Portal 3.7 through 4.5 allows remote attackers to obtain the physical path of the server via (1) a direct request to add_user.php, or via an invalid new_language parameter in (2) contents.php, (3) categories.php, or (4) files.php, which leaks the path in an error message. |
| CVE-2002-0281 | Medium | 2002-05-31 | Not applicable | No public exploit | Cross-site scripting vulnerability in DCP-Portal 4.2 and earlier allows remote attackers to gain privileges of other portal users by providing Javascript in the job information field to user_update.php. |
| CVE-2002-0279 | Medium | 2002-05-31 | Not applicable | No public exploit | The kernel in HP-UX 11.11 does not properly provide arguments for setrlimit, which could allow local attackers to cause a denial of service (kernel panic) and possibly gain privileges. |
| CVE-2002-0275 | Medium | 2002-05-31 | Not applicable | No public exploit | Falcon web server 2.0.0.1020 and earlier allows remote attackers to bypass authentication and read restricted files via an extra / (slash) in the requested URL. |
| CVE-2002-0274 | Medium | 2002-05-31 | Not applicable | No public exploit | Exim 3.34 and earlier may allow local users to gain privileges via a buffer overflow in long -C (configuration file) and other command line arguments. |
| CVE-2002-0273 | Medium | 2002-05-31 | Not applicable | No public exploit | Buffer overflow in CWMail.exe in NetWin before 2.8a allows remote authenticated users to execute arbitrary code via a long item parameter. |
| CVE-2002-0375 | Medium | 2002-05-29 | Not applicable | Working exploit published | Cross-site scripting vulnerability in sgdynamo.exe for Sgdynamo allows remote attackers to execute arbitrary Javascript via a URL with the script in the HTNAME parameter. |
| CVE-2002-0270 | Medium | 2002-05-29 | Not applicable | No public exploit | Opera, when configured with the "Determine action by MIME type" option disabled, interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote attackers to execute arbitrary script in documents that the user does not expect, possibly through web applications that use a text/plain type to prevent cross-site scripting attacks. |
| CVE-2002-0266 | Medium | 2002-05-29 | Not applicable | Working exploit published | Thunderstone Texis CGI script allows remote attackers to obtain the full path of the web root via a request for a nonexistent file, which generates an error message that includes the full pathname. |
| CVE-2002-0265 | Medium | 2002-05-29 | Not applicable | Working exploit published | Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows local users to gain privileges by modifying the file. |
| CVE-2002-0262 | Medium | 2002-05-29 | Not applicable | No public exploit | Directory traversal vulnerability in netget for Sybex E-Trainer web server allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. |
| CVE-2002-0259 | Medium | 2002-05-29 | Not applicable | No public exploit | InstantServers MiniPortal 1.1.5 and earlier stores sensitive login and account data in plaintext in (1) .pwd files in the miniportal/apache directory, or (2) mplog.txt, which could allow local users to gain privileges. |
| CVE-2002-0256 | Medium | 2002-05-29 | Not applicable | Working exploit published | The telnet port in Arescom NetDSL 1000 router allows remote attackers to cause a denial of service via a series of connections with long strings, which causes a large number of login failures and causes the telnet service to stop. |
| CVE-2002-0254 | Medium | 2002-05-29 | Not applicable | No public exploit | ICQ 2001b Build 3659 allows remote attackers to cause a denial of service (crash) via a malformed picture that contains large height and width values, which causes the crash when viewed in Userdetails. |
| CVE-2002-0253 | Medium | 2002-05-29 | Not applicable | No public exploit | PHP, when not configured with the "display_errors = Off" setting in php.ini, allows remote attackers to obtain the physical path for an include file via a trailing slash in a request to a directly accessible PHP program, which modifies the base path, causes the include directive to fail, and produces an error message that contains the path. |
| CVE-2002-0249 | Medium | 2002-05-29 | Not applicable | No public exploit | PHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote attackers to obtain the physical path of the php.exe via a request with malformed arguments such as /123, which leaks the pathname in the error message. |
| CVE-2002-0240 | Medium | 2002-05-29 | Not applicable | No public exploit | PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message. |
| CVE-2002-0233 | Medium | 2002-05-29 | Not applicable | No public exploit | Directory traversal vulnerability in eshare Expressions 4 Web server allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request. |
| CVE-2002-0232 | Medium | 2002-05-29 | Not applicable | No public exploit | Directory traversal vulnerability in Multi Router Traffic Grapher (MRTG) allows remote attackers to read portions of arbitrary files via a .. (dot dot) in the cfg parameter for (1) 14all.cgi, (2) 14all-1.1.cgi, (3) traffic.cgi, or (4) mrtg.cgi. |
| CVE-2002-0191 | Medium | 2002-05-29 | Not applicable | Working exploit published | Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to view arbitrary files that contain the "{" character via script containing the cssText property of the stylesheet object, aka "Local Information Disclosure through HTML Object" vulnerability. |
| CVE-2002-0169 | Medium | 2002-05-29 | Not applicable | No public exploit | The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which could allow users to overwrite files outside of the current directory from an untrusted document by using a full pathname as an element identifier. |
| CVE-2001-1340 | Medium | 2002-05-21 | Not applicable | No public exploit | Beck GmbH IPC@Chip TelnetD service supports only one connection and does not disconnect a user who does not complete the login process, which allows remote attackers to lock out the administrator account by connecting to the service. |
| CVE-2001-1334 | Medium | 2002-05-19 | Not applicable | Working exploit published | Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrary files by creating a block and specifying the target file as the source URL. |
| CVE-2002-1280 | Medium | 2002-05-17 | Not applicable | No public exploit | Memory leak in RealSecure Event Collector 6.5 allows attackers to cause a denial of service (memory consumption and crash). |
| CVE-2002-0230 | Medium | 2002-05-16 | Not applicable | Working exploit published | Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascript on other clients via the cmd parameter, which causes the script to be inserted into an error message. |
| CVE-2002-0228 | Medium | 2002-05-16 | Not applicable | No public exploit | Microsoft MSN Messenger allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information such as display names and web site navigation, and possibly more when the user is connected to certain Microsoft sites (or DNS-spoofed sites). |
| CVE-2002-0227 | Medium | 2002-05-16 | Not applicable | Working exploit published | KICQ 2.0.0b1 allows remote attackers to cause a denial of service (crash) via a malformed message. |
| CVE-2002-0225 | Medium | 2002-05-16 | Not applicable | No public exploit | tac_plus Tacacs+ daemon F4.0.4.alpha, originally maintained by Cisco, creates files from the accounting directive with world-readable and writable permissions, which allows local users to access and modify sensitive files. |
| CVE-2002-0224 | Medium | 2002-05-16 | Not applicable | No public exploit | The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through SQL 2000 0.0 allows remote attackers to cause a denial of service (crash or hang) via malformed (random) input. |
| CVE-2002-0221 | Medium | 2002-05-16 | Not applicable | No public exploit | Etype Eserv 2.97 allows remote attackers to cause a denial of service (resource exhaustion) via a large number of PASV commands that consume ports 1024 through 5000, which prevents the server from accepting valid PASV. |
| CVE-2002-0216 | Medium | 2002-05-16 | Not applicable | No public exploit | userinfo.php in XOOPS 1.0 RC1 allows remote attackers to obtain sensitive information via a SQL injection attack in the "uid" parameter. |
| CVE-2002-0215 | Medium | 2002-05-16 | Not applicable | Working exploit published | Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi file by requesting a non-existent .html file, which leaks the pathname in an error message. |
| CVE-2002-0211 | Medium | 2002-05-16 | Not applicable | Working exploit published | Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary "gunzip" program before executing it, which could allow local users to execute arbitrary commands by modifying the program before it is executed. |
| CVE-2002-0209 | Medium | 2002-05-16 | Not applicable | Working exploit published | Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing (SLB) and Cookie-Based Persistence features enabled, allows remote attackers to determine the real IP address of a web server with a half-closed session, which causes ACEdirector to send packets from the server without changing the address to the virtual IP address. |
| CVE-2002-0208 | Medium | 2002-05-16 | Not applicable | No public exploit | PGP Security PGPfire 7.1 for Windows alters the system's TCP/IP stack and modifies packets in ICMP error messages in a way that allows remote attackers to determine that the system is running PGPfire. |
| CVE-2002-0203 | Medium | 2002-05-16 | Not applicable | No public exploit | ttawebtop.cgi in Tarantella Enterprise 3.20 on SPARC Solaris and Linux, and 3.1x and 3.0x including 3.11.903, allows remote attackers to view directory contents via an empty pg parameter. |
| CVE-2002-0201 | Medium | 2002-05-16 | Not applicable | Working exploit published | Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request, possibly triggering a buffer overflow. |
| CVE-2002-0200 | Medium | 2002-05-16 | Not applicable | No public exploit | Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name. |
| CVE-2002-0196 | Medium | 2002-05-16 | Not applicable | No public exploit | GetRelativePath in ACD Incorporated CwpAPI 1.1 only verifies if the server root is somewhere within the path, which could allow remote attackers to read or write files outside of the web root, in other directories whose path includes the web root. |
| CVE-2002-0157 | Medium | 2002-05-16 | Not applicable | No public exploit | Nautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the .nautilus-metafile.xml metadata file. |
| CVE-2002-1592 | Medium | 2002-05-06 | Not applicable | No public exploit | The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that include the full path for the server, which allows remote attackers to obtain sensitive information. |
| CVE-2002-1602 | Medium | 2002-04-23 | Not applicable | Working exploit published | Buffer overflow in the Braille module for GNU screen 3.9.11, when HAVE_BRAILLE is defined, allows local users to execute arbitrary code. |
| CVE-2002-0176 | Medium | 2002-04-22 | Not applicable | No public exploit | The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe. |
| CVE-2002-0175 | Medium | 2002-04-22 | Not applicable | No public exploit | libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe. |
| CVE-2002-0160 | Medium | 2002-04-22 | Not applicable | No public exploit | The administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to read HTML, Java class, and image files outside the web root via a ..\.. (modified ..) in the URL to port 2002. |
| CVE-2002-0073 | Medium | 2002-04-22 | Not applicable | Forecast only | The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have established an FTP session to cause a denial of service via a specially crafted status request containing glob characters. |
| CVE-2002-0072 | Medium | 2002-04-22 | Not applicable | Forecast only | The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote attackers to cause a denial of service (crash) when the URL parser accesses a null pointer. |
| CVE-2002-0041 | Medium | 2002-04-22 | Not applicable | No public exploit | Unknown vulnerability in Mail for SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, when running with the -R option, allows local and remote attackers to cause a core dump. |
| CVE-2002-1598 | Medium | 2002-04-05 | Not applicable | No public exploit | Buffer overflows in Computer Associates MLink (CA-MLink) 6.5 and earlier may allow local users to execute arbitrary code via long command line arguments to (1) mlclear or (2) mllock. |
| CVE-2002-1640 | Medium | 2002-04-01 | No exploit published | No public exploit | Multiple cross-site scripting (XSS) vulnerabilities in Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to inject arbitrary web script or HTML via (1) Text Features in the DHTML UI or (2) the test parameter to the oracle.apps.cz.servlet.UiServlet servlet. |
| CVE-2002-1620 | Medium | 2002-04-01 | Not applicable | No public exploit | Unknown vulnerability in IBM AIX Parallel Systems Support Programs (PSSP) 3.1.1, 3.2, and 3.4 allows remote attackers to read arbitrary files from a file collection. |
| CVE-2001-1165 | Medium | 2002-04-01 | Not applicable | Working exploit published | Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting the information, e.g., with the Disengage tool. |
| CVE-2002-0039 | Medium | 2002-03-28 | Not applicable | No public exploit | rpcbind in SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via malformed RPC packets with invalid lengths. |
| CVE-2002-0162 | Medium | 2002-03-27 | Not applicable | Working exploit published | LogWatch before 2.5 allows local users to execute arbitrary code via a symlink attack on the logwatch temporary directory. |
| CVE-2002-0143 | Medium | 2002-03-25 | Not applicable | Working exploit published | Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary code via a long HOME environment variable. |
| CVE-2002-0136 | Medium | 2002-03-25 | Not applicable | No public exploit | Microsoft Internet Explorer 5.5 on Windows 98 allows remote web pages to cause a denial of service (hang) via extremely long values for form fields such as INPUT and TEXTAREA, which can be automatically filled via Javascript. |
| CVE-2002-0135 | Medium | 2002-03-25 | Not applicable | Working exploit published | Netopia Timbuktu Pro 6.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a series of connections to one of the ports (1417 - 1420). |
| CVE-2002-0131 | Medium | 2002-03-25 | Not applicable | No public exploit | ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prevent a script from reading files from the client's filesystem, which allows remote attackers to read arbitrary files via a malicious web page containing Python script. |
| CVE-2002-0127 | Medium | 2002-03-25 | Not applicable | No public exploit | Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26, when configured to block traffic below port 1024, allows remote attackers to cause a denial of service (hang) via a port scan of the WAN port. |
| CVE-2002-0124 | Medium | 2002-03-25 | Not applicable | No public exploit | MDG Computer Services Web Server 4D/eCommerce 3.5.3 allows remote attackers to exploit directory traversal vulnerability via a ../ (dot dot) containing URL-encoded slashes in the HTTP request. |
| CVE-2002-0122 | Medium | 2002-03-25 | Not applicable | No public exploit | Siemens 3568i WAP mobile phones allows remote attackers to cause a denial of service (crash) via an SMS message containing unusual characters. |
| CVE-2002-0119 | Medium | 2002-03-25 | Not applicable | No public exploit | Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service (reboot) via a network scan with unusual packets, such as nmap with OS detection. |
| CVE-2002-0116 | Medium | 2002-03-25 | Not applicable | No public exploit | Palm OS 3.5h and possibly other versions, as used in Handspring Visor and Xircom products, allows remote attackers to cause a denial of service via a TCP connect scan, e.g. from nmap. |
| CVE-2002-0115 | Medium | 2002-03-25 | Not applicable | Working exploit published | Snort 1.8.3 does not properly define the minimum ICMP header size, which allows remote attackers to cause a denial of service (crash and core dump) via a malformed ICMP packet. |
| CVE-2002-0114 | Medium | 2002-03-25 | Not applicable | No public exploit | EMC NetWorker (formerly Legato NetWorker) before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain privileges by reading the password from the file. NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform. |
| CVE-2002-0113 | Medium | 2002-03-25 | Not applicable | No public exploit | EMC NetWorker (formerly Legato NetWorker) before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which allows local users to read sensitive information and possibly gain privileges. NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform. |
| CVE-2002-0112 | Medium | 2002-03-25 | Not applicable | Working exploit published | Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL. |
| CVE-2002-0109 | Medium | 2002-03-25 | Not applicable | No public exploit | Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via an SNMP query for the default community string "public," which causes the router to change its configuration and send SNMP trap information back to the system that initiated the query. |
| CVE-2002-0107 | Medium | 2002-03-25 | Not applicable | Working exploit published | Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another version string, which causes the information to be leaked in the error message. |
| CVE-2002-0106 | Medium | 2002-03-25 | Mitigation candidate | Working exploit published | BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an MS-DOS device name. |
| CVE-2002-0104 | Medium | 2002-03-25 | Not applicable | No public exploit | AFTPD 5.4.4 allows remote attackers to gain sensitive information via a CD (CWD) ~ (tilde) command, which causes a core dump. |
| CVE-2002-0103 | Medium | 2002-03-25 | Not applicable | No public exploit | An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2) obtaining the administrator password from webcache.xml. |
| CVE-2002-0102 | Medium | 2002-03-25 | Not applicable | No public exploit | Oracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via (1) a request to TCP ports 1100, 4000, 4001, and 4002 with a large number of null characters, and (2) a request to TCP port 4000 with a large number of "." characters. |
| CVE-2002-0101 | Medium | 2002-03-25 | Not applicable | No public exploit | Microsoft Internet Explorer 6.0 and earlier allows local users to cause a denial of service via an infinite loop for modeless dialogs showModelessDialog, which causes CPU usage while the focus for the dialog is not released. |
| CVE-2002-0099 | Medium | 2002-03-25 | Not applicable | No public exploit | Buffer overflow in Michael Lamont Savant Web Server 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP request to the cgi-bin directory in which the CGI program name contains a large number of . (dot) characters. |
| CVE-2001-1222 | Medium | 2002-03-25 | Not applicable | No public exploit | Plesk Server Administrator (PSA) 1.0 allows remote attackers to obtain PHP source code via an HTTP request containing the target's IP address and a valid account name for the domain. |
| CVE-2000-1210 | Medium | 2002-03-22 | Protected by Waratek | No public exploit | Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the argument to source.jsp. |
| CVE-2002-0164 | Medium | 2002-03-15 | Not applicable | No public exploit | Vulnerability in the MIT-SHM extension of the X server on Linux (XFree86) 4.2.1 and earlier allows local users to read and write arbitrary shared memory, possibly to cause a denial of service or gain privileges. |
| CVE-2002-0092 | Medium | 2002-03-15 | Not applicable | No public exploit | CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (server crash) via the diff capability. |
| CVE-2002-0085 | Medium | 2002-03-15 | Not applicable | No public exploit | cachefsd in Solaris 2.6, 7, and 8 allows remote attackers to cause a denial of service (crash) via an invalid procedure call in an RPC request. |
| CVE-2002-0058 | Medium | 2002-03-15 | Outside Waratek scope | No public exploit | Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in (1) Netscape 6.0 through 6.1 and 4.79 and earlier, (2) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, and possibly other implementations that use vulnerable versions of SDK or JDK. |
| CVE-2002-1619 | Medium | 2002-03-08 | Not applicable | No public exploit | Buffer overflow in the FC client for IBM AIX 4.3.x allows remote attackers to cause a denial of service (crash and core dump). |
| CVE-2002-0057 | Medium | 2002-03-08 | Not applicable | No public exploit | XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifying a local file as an XML Data Source. |
| CVE-2002-0055 | Medium | 2002-03-08 | Not applicable | No public exploit | SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer (BDAT) request. |
| CVE-2002-0052 | Medium | 2002-03-08 | Not applicable | No public exploit | Internet Explorer 6.0 and earlier does not properly handle VBScript in certain domain security checks, which allows remote attackers to read arbitrary files. |