Overview 1,954 matches · 21 in Waratek scope · 1 protected · 5 exploited · 0 CISA KEV · 615 public PoC · 26 EPSS ≥ 0.5
1,954matches
21in Waratek scope1.1%
1protected0.1%
5exploited0.3%
0CISA KEV0.0%
615public PoC31.5%
26EPSS ≥ 0.51.3%
Protected by Waratek
1
0.1%
Rule in development
0
0.0%
Mitigation candidate
7
0.4%
No exploit published
13
0.7%
Outside Waratek scope
9
0.5%
Not applicable
1,924
98.5%
Withdrawn CVE
0
0.0%
blocked by ARMR today
1
0.1%
partly blocked
0
0.0%
not blocked
1,953
99.9%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
5
0.3%
Working exploit published
614
31.4%
Proof of concept only
0
0.0%
Forecast only
5
0.3%
No public exploit
1,330
68.1%
split by
peak 706 / year
19891
Not applicable1
Medium1
not blocked1
No public exploit1
19902
Not applicable2
Medium2
not blocked2
Working exploit published1
No public exploit1
19914
Not applicable4
Medium4
not blocked4
No public exploit4
19920
19933
Not applicable3
Medium3
not blocked3
No public exploit3
199410
Not applicable10
Medium10
not blocked10
Working exploit published2
No public exploit8
19956
Not applicable6
Medium6
not blocked6
Working exploit published2
No public exploit4
199621
Not applicable21
Medium21
not blocked21
Working exploit published5
No public exploit16
199789
Not applicable89
Medium89
not blocked89
Working exploit published18
No public exploit71
199885
Not applicable85
Medium85
not blocked85
Working exploit published11
No public exploit74
1999357
Outside Waratek scope1
Not applicable356
Medium357
not blocked357
Working exploit published119
No public exploit238
2000467
Mitigation candidate4
No exploit published3
Not applicable460
Medium467
not blocked467
Exploited2
Working exploit published195
No public exploit270
2001706
Mitigation candidate2
No exploit published4
Outside Waratek scope7
Not applicable693
Medium706
not blocked706
Exploited3
Working exploit published219
Forecast only2
No public exploit482
2002203
Protected by Waratek1
Mitigation candidate1
No exploit published6
Outside Waratek scope1
Not applicable194
Medium203
blocked by ARMR today1
not blocked202
Working exploit published42
Forecast only3
No public exploit158
1990199219941996199820002002
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2002-1450 | Medium | 2002-07-31 | Not applicable | No public exploit | IBM UniVerse with UV/ODBC allows attackers to cause a denial of service (client crash or server CPU consumption) via a query with an invalid link between tables, possibly via a buffer overflow. |
| CVE-2002-0715 | Medium | 2002-07-26 | Not applicable | No public exploit | Vulnerability in Squid before 2.4.STABLE6 related to proxy authentication credentials may allow remote web sites to obtain the user's proxy login and password. |
| CVE-2002-0448 | Medium | 2002-07-26 | Not applicable | Working exploit published | Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request that contains many "C:/" sequences. |
| CVE-2002-0447 | Medium | 2002-07-26 | Not applicable | No public exploit | Directory traversal vulnerability in Xerver Free Web Server 2.10 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in an HTTP GET request. |
| CVE-2002-0446 | Medium | 2002-07-26 | Not applicable | No public exploit | categorie.php3 in Black Tie Project (BTP) 0.4b through 0.5b allows remote attackers to determine the absolute path of the web server via an invalid category ID (cid) parameter, which leaks the pathname in an error message. |
| CVE-2002-0445 | Medium | 2002-07-26 | Not applicable | No public exploit | article.php in PHP FirstPost 0.1 allows allows remote attackers to obtain the full pathname of the server via an invalid post number in the post parameter, which leaks the pathname in an error message. |
| CVE-2002-0443 | Medium | 2002-07-26 | Not applicable | No public exploit | Microsoft Windows 2000 allows local users to bypass the policy that prohibits reusing old passwords by changing the current password before it expires, which does not enable the check for previous passwords. |
| CVE-2002-0441 | Medium | 2002-07-26 | Not applicable | No public exploit | Directory traversal vulnerability in imlist.php for Php Imglist allows remote attackers to read arbitrary code via a .. (dot dot) in the cwd parameter. |
| CVE-2002-0438 | Medium | 2002-07-26 | Not applicable | No public exploit | ZyXEL ZyWALL 10 before 3.50 allows remote attackers to cause a denial of service via an ARP packet with the firewall's IP address and an incorrect MAC address, which causes the firewall to disable the LAN interface. |
| CVE-2002-0433 | Medium | 2002-07-26 | Not applicable | No public exploit | Pi3Web 2.0.0 allows remote attackers to view restricted files via an HTTP request containing a "*" (wildcard or asterisk) character. |
| CVE-2002-0431 | Medium | 2002-07-26 | Not applicable | Working exploit published | XTux allows remote attackers to cause a denial of service (CPU consumption) via random inputs in the initial connection. |
| CVE-2002-0410 | Medium | 2002-07-26 | Not applicable | No public exploit | send_message.php in AeroMail before 1.45 allows remote attackers to read arbitrary files on the server, instead of just uploaded files, via an attachment that modifies the filename to be uploaded. |
| CVE-2002-0409 | Medium | 2002-07-26 | Not applicable | No public exploit | orderdetails.aspx, as made available to Microsoft .NET developers as example code and demonstrated on www.ibuyspystore.com, allows remote attackers to view the orders of other users by modifying the OrderID parameter. |
| CVE-2002-0408 | Medium | 2002-07-26 | Not applicable | No public exploit | htcgibin.exe in Lotus Domino server 5.0.9a and earlier, when configured with the NoBanner setting, allows remote attackers to determine the version number of the server via a request that generates an HTTP 500 error code, which leaks the version in a hard-coded error message. |
| CVE-2002-0407 | Medium | 2002-07-26 | Not applicable | No public exploit | htcgibin.exe in Lotus Domino server 5.0.9a and earlier allows remote attackers to determine the physical pathname for the server via requests that contain certain MS-DOS device names such as com5, such as (1) a request with a .pl or .java extension, or (2) a request containing a large number of periods, which causes htcgibin.exe to leak the pathname in an error message. |
| CVE-2002-0406 | Medium | 2002-07-26 | Not applicable | Working exploit published | Menasoft SPHERE server 0.99x and 0.5x allows remote attackers to cause a denial of service by establishing a large number of connections to the server without providing login credentials, which prevents other users from being able to log in. |
| CVE-2002-0397 | Medium | 2002-07-26 | Not applicable | No public exploit | Red-M 1050 (Bluetooth Access Point) publicizes its name, IP address, and other information in UDP packets to a broadcast address, which allows any system on the network to obtain potentially sensitive information about the Access Point device by monitoring UDP port 8887. |
| CVE-2002-0358 | Medium | 2002-07-26 | Not applicable | No public exploit | MediaMail and MediaMail Pro in SGI IRIX 6.5.16 and earlier allows local users to force the program to dump core via certain arguments, which could allow the users to read sensitive data or gain privileges. |
| CVE-2002-0031 | Medium | 2002-07-26 | Not applicable | Working exploit published | Buffer overflows in Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary code via a ymsgr URI with long arguments to (1) call, (2) sendim, (3) getimv, (4) chat, (5) addview, or (6) addfriend. |
| CVE-2002-0687 | Medium | 2002-07-23 | Not applicable | No public exploit | The "through the web code" capability for Zope 2.0 through 2.5.1 b1 allows untrusted users to shut down the Zope server via certain headers. |
| CVE-2002-0680 | Medium | 2002-07-23 | Not applicable | Working exploit published | Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / (%5C) in a .. (dot dot) sequence. NOTE: it is highly likely that this candidate will be REJECTED because it has been reported to be a duplicate of CVE-2001-0228. |
| CVE-2002-0675 | Medium | 2002-07-23 | Not applicable | No public exploit | Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges to perform a firmware upgrade, which allows unauthorized users to upgrade the phone. |
| CVE-2002-0673 | Medium | 2002-07-23 | Not applicable | No public exploit | The enrollment process for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to the phone to log out the current user and re-register the phone using MyPingtel Sign-In to gain remote access and perform unauthorized actions. |
| CVE-2002-0672 | Medium | 2002-07-23 | Not applicable | No public exploit | Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to restore the phone to factory defaults without authentication via a menu option, which sets the administrator password to null. |
| CVE-2002-0643 | Medium | 2002-07-23 | Not applicable | No public exploit | The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with insecure permissions and does not delete them after installation, which allows local users to obtain sensitive data, including weakly encrypted passwords, to gain privileges, aka "SQL Server Installation Process May Leave Passwords on System." |
| CVE-2002-0621 | Medium | 2002-07-03 | Not applicable | No public exploit | Buffer overflow in the Office Web Components (OWC) package installer used by Microsoft Commerce Server 2000 allows remote attackers to cause the process to fail or run arbitrary code in the LocalSystem security context via certain input to the OWC package installer. |
| CVE-2002-0620 | Medium | 2002-07-03 | Not applicable | No public exploit | Buffer overflow in the Profile Service of Microsoft Commerce Server 2000 allows remote attackers to cause the server to fail or run arbitrary code in the LocalSystem security context via an input field using an affected API. |
| CVE-2002-0574 | Medium | 2002-07-03 | Not applicable | No public exploit | Memory leak in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service (memory exhaustion) via ICMP echo packets that trigger a bug in ip_output() in which the reference count for a routing table entry is not decremented, which prevents the entry from being removed. |
| CVE-2002-0566 | Medium | 2002-07-03 | Not applicable | No public exploit | PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to cause a denial of service (crash) via an HTTP Authorization header without an authentication type. |
| CVE-2002-0565 | Medium | 2002-07-03 | No exploit published | No public exploit | Oracle 9iAS 1.0.2.x compiles JSP files in the _pages directory with world-readable permissions under the web root, which allows remote attackers to obtain sensitive information derived from the JSP code, including usernames and passwords, via a direct HTTP request to _pages. |
| CVE-2002-0563 | Medium | 2002-07-03 | No exploit published | Forecast only | The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including Dynamic Monitoring Services (1) dms0, (2) dms/DMSDump, (3) servlet/DMSDump, (4) servlet/Spy, (5) soap/servlet/Spy, and (6) dms/AggreSpy; and Oracle Java Process Manager (7) oprocmgr-status and (8) oprocmgr-service, which can be used to control Java processes. |
| CVE-2002-0562 | Medium | 2002-07-03 | No exploit published | No public exploit | The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote attackers to gain sensitive information including usernames and passwords via a direct HTTP request to globals.jsa. |
| CVE-2002-0560 | Medium | 2002-07-03 | Not applicable | No public exploit | PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to obtain sensitive information via the OWA_UTIL stored procedures (1) OWA_UTIL.signature, (2) OWA_UTIL.listprint, or (3) OWA_UTIL.show_query_columns. |
| CVE-2002-0558 | Medium | 2002-07-03 | Not applicable | No public exploit | Directory traversal vulnerability in TYPSoft FTP server 0.97.1 and earlier allows a remote authenticated user (possibly anonymous) to list arbitrary directories via a .. in a LIST (ls) command ending in wildcard *.* characters. |
| CVE-2002-0556 | Medium | 2002-07-03 | Not applicable | No public exploit | Directory traversal vulnerability in Quik-Serv HTTP server 1.1B allows remote attackers to read arbitrary files via a .. (dot dot) in a URL. |
| CVE-2002-0545 | Medium | 2002-07-03 | Not applicable | No public exploit | Cisco Aironet before 11.21 with Telnet enabled allows remote attackers to cause a denial of service (reboot) via a series of login attempts with invalid usernames and passwords. |
| CVE-2002-0543 | Medium | 2002-07-03 | Not applicable | Working exploit published | Directory traversal vulnerability in Aprelium Abyss Web Server (abyssws) before 1.0.0.2 allows remote attackers to read files outside the web root, including the abyss.conf file, via URL-encoded .. (dot dot) sequences in the HTTP request. |
| CVE-2002-0535 | Medium | 2002-07-03 | Not applicable | Working exploit published | Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other users via (1) an [IMG] tag when BBCode is enabled, or (2) in a topic title. |
| CVE-2002-0381 | Medium | 2002-06-25 | Not applicable | No public exploit | The TCP implementation in various BSD operating systems (tcp_input.c) does not properly block connections to broadcast addresses, which could allow remote attackers to bypass intended filters via packets with a unicast link layer address and an IP broadcast address. |
| CVE-2002-0354 | Medium | 2002-06-25 | Not applicable | No public exploit | The XMLHttpRequest object (XMLHTTP) in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files and list directories on a client system by opening a URL that redirects the browser to the file on the client, then reading the result using the responseText property. |
| CVE-2002-0353 | Medium | 2002-06-25 | Not applicable | No public exploit | The ASN.1 parser in Ethereal 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a certain malformed packet, which causes Ethereal to allocate memory incorrectly, possibly due to zero-length fields. |
| CVE-2002-0352 | Medium | 2002-06-25 | Not applicable | No public exploit | Phorum 3.3.2 allows remote attackers to determine the email addresses of the 10 most active users via a direct HTTP request to the stats.php program, which does not require authentication. |
| CVE-2002-0349 | Medium | 2002-06-25 | Not applicable | No public exploit | Tiny Personal Firewall (TPF) 2.0.15, under certain configurations, will pop up an alert to the system even when the screen is locked, which could allow an attacker with physical access to the machine to hide activities or bypass access restrictions. |
| CVE-2002-0347 | Medium | 2002-06-25 | Not applicable | No public exploit | Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. (dot dot) in an HTTP request. |
| CVE-2002-0344 | Medium | 2002-06-25 | Not applicable | No public exploit | Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers to impersonate the LiveUpdate server. |
| CVE-2002-0343 | Medium | 2002-06-25 | Not applicable | No public exploit | Hotline Client 1.8.5 stores sensitive user information, including passwords, in plaintext in the bookmarks file, which could allow local users with access to the bookmarks file to gain privileges by extracting the passwords. |
| CVE-2002-0342 | Medium | 2002-06-25 | Not applicable | No public exploit | Kmail 1.2 on KDE 2.1.1 allows remote attackers to cause a denial of service (crash) via an email message whose body is approximately 55 K long. |
| CVE-2002-0341 | Medium | 2002-06-25 | Not applicable | No public exploit | GWWEB.EXE in GroupWise Web Access 5.5, and possibly other versions, allows remote attackers to determine the full pathname of the web server via an HTTP request with an invalid HTMLVER parameter. |
| CVE-2002-0339 | Medium | 2002-06-25 | Not applicable | No public exploit | Cisco IOS 11.1CC through 12.2 with Cisco Express Forwarding (CEF) enabled includes portions of previous packets in the padding of a MAC level packet when the MAC packet's length is less than the IP level packet length. |
| CVE-2002-0338 | Medium | 2002-06-25 | Not applicable | Working exploit published | The Bat! 1.53d and 1.54beta, and possibly other versions, allows remote attackers to cause a denial of service (crash) via an attachment whose name includes an MS-DOS device name. |
| CVE-2002-0337 | Medium | 2002-06-25 | Not applicable | No public exploit | RealPlayer 8 allows remote attackers to cause a denial of service (CPU utilization) via malformed .mp3 files. |
| CVE-2002-0333 | Medium | 2002-06-25 | Not applicable | Working exploit published | Directory traversal vulnerability in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to read files with short names, and local users to read more files using a symlink with a short name, via a .. in the TTY argument. |
| CVE-2002-0331 | Medium | 2002-06-25 | Not applicable | Working exploit published | Directory traversal vulnerability in the HTTP server for BPM Studio Pro 4.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request. |
| CVE-2002-0325 | Medium | 2002-06-25 | Not applicable | Working exploit published | Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the URL. |
| CVE-2002-0323 | Medium | 2002-06-25 | Not applicable | No public exploit | comment2.jse in ScriptEase:WebServer allows remote attackers to read arbitrary files by specifying the target file as an argument in the URL. |
| CVE-2002-0321 | Medium | 2002-06-25 | Not applicable | No public exploit | Yahoo! Messenger 5.0 allows remote attackers to spoof other users by modifying the username and using the spoofed username for social engineering or denial of service (flooding) attacks. |
| CVE-2002-0318 | Medium | 2002-06-25 | Not applicable | No public exploit | FreeRADIUS RADIUS server allows remote attackers to cause a denial of service (CPU consumption) via a flood of Access-Request packets. |
| CVE-2002-0314 | Medium | 2002-06-25 | Not applicable | No public exploit | fasttrack p2p, as used in (1) KaZaA before 1.5, (2) grokster, and (3) morpheus allows remote attackers to cause a denial of service (memory exhaustion) via a series of client-to-client messages, which pops up new windows per message. |
| CVE-2002-0312 | Medium | 2002-06-25 | Not applicable | No public exploit | Directory traversal vulnerability in Essentia Web Server 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL. |
| CVE-2002-0146 | Medium | 2002-06-25 | Not applicable | No public exploit | fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array. |
| CVE-2001-1300 | Medium | 2002-06-25 | Not applicable | No public exploit | Directory traversal vulnerability in Dynu FTP server 1.05 and earlier allows remote attackers to read arbitrary files via a .. in the CD (CWD) command. |
| CVE-2002-0614 | Medium | 2002-06-18 | Not applicable | No public exploit | PHP-Survey 20000615 and earlier stores the global.inc file under the web root, which allows remote attackers to obtain sensitive information, including database credentials, if .inc files are not preprocessed by the server. |
| CVE-2002-0611 | Medium | 2002-06-18 | Not applicable | Working exploit published | Directory traversal vulnerability in FileSeek.cgi allows remote attackers to read arbitrary files via a ....// (modified dot dot) in the (1) head or (2) foot parameters, which are not properly filtered. |
| CVE-2002-0609 | Medium | 2002-06-18 | Not applicable | No public exploit | Vulnerability in HP MPE/iX 6.0 through 7.0 allows attackers to cause a denial of service (system failure with "SA1457 out of i_port_timeout.fix_up_message_frame") via malformed IP packets. |
| CVE-2002-0604 | Medium | 2002-06-18 | Not applicable | No public exploit | Snapgear Lite+ firewall 1.5.3 and 1.5.4 allows remote attackers to cause a denial of service (crash) via a large number of packets with malformed IP options. |
| CVE-2002-0603 | Medium | 2002-06-18 | Not applicable | No public exploit | Snapgear Lite+ firewall 1.5.3 allows remote attackers to cause a denial of service (IPSEC crash) via a zero length packet to UDP port 500. |
| CVE-2002-0602 | Medium | 2002-06-18 | Not applicable | No public exploit | Snapgear Lite+ firewall 1.5.4 and 1.5.3 allows remote attackers to cause a denial of service (crash) via a large number of connections to (1) the HTTP web management port, or (2) the PPTP port. |
| CVE-2002-0601 | Medium | 2002-06-18 | Not applicable | No public exploit | ISS RealSecure Network Sensor 5.x through 6.5 allows remote attackers to cause a denial of service (crash) via malformed DHCP packets that cause RealSecure to dereference a null pointer. |
| CVE-2002-0597 | Medium | 2002-06-18 | Not applicable | Working exploit published | LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service (CPU/memory exhaustion) via a stream of malformed data to microsoft-ds port 445. |
| CVE-2002-0596 | Medium | 2002-06-18 | Not applicable | No public exploit | WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request to get_od_toc.pl with an empty Profile parameter, which leaks the pathname in an error message. |
| CVE-2002-0594 | Medium | 2002-06-18 | Not applicable | No public exploit | Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet (CSS) page that causes an HTTP redirect. |
| CVE-2002-0591 | Medium | 2002-06-18 | Not applicable | Working exploit published | Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename. |
| CVE-2002-0588 | Medium | 2002-06-18 | Not applicable | Working exploit published | PVote before 1.9 does not authenticate users for restricted operations, which allows remote attackers to add or delete polls by modifying parameters to (1) add.php or (2) del.php. |
| CVE-2002-0585 | Medium | 2002-06-18 | Not applicable | No public exploit | Unknown vulnerability in ndd for HP-UX 11.11 with certain TRANSPORT patches allows attackers to cause a denial of service. |
| CVE-2002-0584 | Medium | 2002-06-18 | Not applicable | No public exploit | WorkforceROI Xpede 4.1 allows remote attackers to read user timesheets by modifying the TSN ID parameter to the ts_app_process.asp script, which is easily guessable because it is incremented by 1 for each new timesheet. |
| CVE-2002-0583 | Medium | 2002-06-18 | Not applicable | No public exploit | WorkforceROI Xpede 4.1 uses a small random namespace (5 alphanumeric characters) for temporary expense claim reports in the /reports/temp directory, which allows remote attackers to read the reports via a brute force attack. |
| CVE-2002-0582 | Medium | 2002-06-18 | Not applicable | No public exploit | WorkforceROI Xpede 4.1 stores temporary expense claim reports in a world-readable and indexable /reports/temp directory, which allows remote attackers to read the reports by accessing the directory. |
| CVE-2002-0576 | Medium | 2002-06-18 | Not applicable | No public exploit | ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP request that contains an MS-DOS device name such as NUL, which leaks the pathname in an error message. |
| CVE-2002-0404 | Medium | 2002-06-18 | Not applicable | No public exploit | Vulnerability in GIOP dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (memory consumption). |
| CVE-2002-0403 | Medium | 2002-06-18 | Not applicable | No public exploit | DNS dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (CPU consumption) via a malformed packet that causes Ethereal to enter an infinite loop. |
| CVE-2002-0400 | Medium | 2002-06-18 | Not applicable | No public exploit | ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka DoS_findtype. |
| CVE-2002-0368 | Medium | 2002-06-18 | Not applicable | No public exploit | The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service (CPU consumption) via a mail message with a malformed RFC message attribute, aka "Malformed Mail Attribute can Cause Exchange 2000 to Exhaust CPU Resources." |
| CVE-2002-0309 | Medium | 2002-05-31 | Not applicable | No public exploit | SMTP proxy in Symantec Enterprise Firewall (SEF) 6.5.x includes the firewall's physical interface name and address in an SMTP protocol exchange when NAT translation is made to an address other than the firewall, which could allow remote attackers to determine certain firewall configuration information. |
| CVE-2002-0305 | Medium | 2002-05-31 | Not applicable | No public exploit | Zero One Tech (ZOT) P100s print server does not properly disable the SNMP service or change the default password, which could leave the server open to attack without the administrator's knowledge. |
| CVE-2002-0304 | Medium | 2002-05-31 | Not applicable | No public exploit | Lil HTTP Server 2.1 allows remote attackers to read password-protected files via a /./ in the HTTP request. |
| CVE-2002-0303 | Medium | 2002-05-31 | Not applicable | No public exploit | GroupWise 6, when using LDAP authentication and when Post Office has a blank username and password, allows attackers to gain privileges of other users by logging in without a password. |
| CVE-2002-0302 | Medium | 2002-05-31 | Not applicable | No public exploit | The Notify daemon for Symantec Enterprise Firewall (SEF) 6.5.x drops large alerts when SNMP is used as the transport, which could prevent some alerts from being sent in the event of an attack. |
| CVE-2002-0301 | Medium | 2002-05-31 | Not applicable | No public exploit | Citrix NFuse 1.6 allows remote attackers to bypass authentication and obtain sensitive information by directly calling launch.asp with invalid NFUSE_USER and NFUSE_PASSWORD parameters. |
| CVE-2002-0300 | Medium | 2002-05-31 | Not applicable | Working exploit published | gnujsp 1.0.0 and 1.0.1 allows remote attackers to list directories, read source code of certain scripts, and bypass access restrictions by directly requesting the target file from the gnujsp servlet, which does not work around a limitation of JServ and does not process the requested file. |
| CVE-2002-0298 | Medium | 2002-05-31 | Not applicable | No public exploit | ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) via certain HTTP GET requests containing (1) a %2e%2e (encoded dot-dot), (2) several /../ (dot dot) sequences, (3) a missing URI, or (4) several ../ in a URI that does not begin with a / (slash) character. |
| CVE-2002-0297 | Medium | 2002-05-31 | Not applicable | No public exploit | Buffer overflow in ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL in an HTTP request. |
| CVE-2002-0295 | Medium | 2002-05-31 | Not applicable | No public exploit | Alcatel OmniPCX 4400 installs files with world-writable permissions, which allows local users to reconfigure the system and possibly gain privileges. |
| CVE-2002-0293 | Medium | 2002-05-31 | Not applicable | No public exploit | FTP service in Alcatel OmniPCX 4400 allows the "halt" user to gain root privileges by modifying root's .profile file. |
| CVE-2002-0291 | Medium | 2002-05-31 | Not applicable | No public exploit | Dino's Webserver 1.2 allows remote attackers to cause a denial of service (CPU consumption) and possibly execute arbitrary code via several large HTTP requests within a short time. |
| CVE-2002-0289 | Medium | 2002-05-31 | Not applicable | Working exploit published | Buffer overflow in Phusion web server 1.0 allows remote attackers to cause a denial of service and execute arbitrary code via a long HTTP request. |
| CVE-2002-0288 | Medium | 2002-05-31 | Not applicable | Working exploit published | Directory traversal vulnerability in Phusion web server 1.0 allows remote attackers to read arbitrary files via a ... (triple dot dot) in the HTTP request. |
| CVE-2002-0283 | Medium | 2002-05-31 | Not applicable | No public exploit | Windows XP with port 445 open allows remote attackers to cause a denial of service (CPU consumption) via a flood of TCP SYN packets containing possibly malformed data. |
| CVE-2002-0282 | Medium | 2002-05-31 | Not applicable | No public exploit | DCP-Portal 3.7 through 4.5 allows remote attackers to obtain the physical path of the server via (1) a direct request to add_user.php, or via an invalid new_language parameter in (2) contents.php, (3) categories.php, or (4) files.php, which leaks the path in an error message. |
| CVE-2002-0281 | Medium | 2002-05-31 | Not applicable | No public exploit | Cross-site scripting vulnerability in DCP-Portal 4.2 and earlier allows remote attackers to gain privileges of other portal users by providing Javascript in the job information field to user_update.php. |
| CVE-2002-0279 | Medium | 2002-05-31 | Not applicable | No public exploit | The kernel in HP-UX 11.11 does not properly provide arguments for setrlimit, which could allow local attackers to cause a denial of service (kernel panic) and possibly gain privileges. |