Overview 2,054 matches · 21 in Waratek scope · 1 protected · 5 exploited · 0 CISA KEV · 640 public PoC · 26 EPSS ≥ 0.5
2,054matches
21in Waratek scope1.0%
1protected0.0%
5exploited0.2%
0CISA KEV0.0%
640public PoC31.2%
26EPSS ≥ 0.51.3%
Protected by Waratek
1
0.0%
Rule in development
0
0.0%
Mitigation candidate
7
0.3%
No exploit published
13
0.6%
Outside Waratek scope
10
0.5%
Not applicable
2,023
98.5%
Withdrawn CVE
0
0.0%
blocked by ARMR today
1
0.0%
partly blocked
0
0.0%
not blocked
2,053
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
5
0.2%
Working exploit published
639
31.1%
Proof of concept only
0
0.0%
Forecast only
5
0.2%
No public exploit
1,405
68.4%
split by
peak 706 / year
19891
Not applicable1
Medium1
not blocked1
No public exploit1
19902
Not applicable2
Medium2
not blocked2
Working exploit published1
No public exploit1
19914
Not applicable4
Medium4
not blocked4
No public exploit4
19920
19933
Not applicable3
Medium3
not blocked3
No public exploit3
199410
Not applicable10
Medium10
not blocked10
Working exploit published2
No public exploit8
19956
Not applicable6
Medium6
not blocked6
Working exploit published2
No public exploit4
199621
Not applicable21
Medium21
not blocked21
Working exploit published5
No public exploit16
199789
Not applicable89
Medium89
not blocked89
Working exploit published18
No public exploit71
199885
Not applicable85
Medium85
not blocked85
Working exploit published11
No public exploit74
1999357
Outside Waratek scope1
Not applicable356
Medium357
not blocked357
Working exploit published119
No public exploit238
2000467
Mitigation candidate4
No exploit published3
Not applicable460
Medium467
not blocked467
Exploited2
Working exploit published195
No public exploit270
2001706
Mitigation candidate2
No exploit published4
Outside Waratek scope7
Not applicable693
Medium706
not blocked706
Exploited3
Working exploit published219
Forecast only2
No public exploit482
2002303
Protected by Waratek1
Mitigation candidate1
No exploit published6
Outside Waratek scope2
Not applicable293
Medium303
blocked by ARMR today1
not blocked302
Working exploit published67
Forecast only3
No public exploit233
1990199219941996199820002002
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2002-1608 | Medium | 2002-08-31 | Not applicable | No public exploit | Buffer overflow in traceroute in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code. |
| CVE-2002-1607 | Medium | 2002-08-31 | Not applicable | No public exploit | Buffer overflow in ypmatch in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code. |
| CVE-2002-1611 | Medium | 2002-08-30 | Not applicable | No public exploit | Buffer overflow in quot in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges. |
| CVE-2002-1609 | Medium | 2002-08-30 | Not applicable | No public exploit | Buffer overflow in binmail in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges. |
| CVE-2002-1606 | Medium | 2002-08-30 | Not applicable | No public exploit | Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain privileges via (1) lpc, (2) lpd, (3) lpq, (4) lpr, or (5) lprm. |
| CVE-2002-1353 | Medium | 2002-08-29 | Not applicable | No public exploit | LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst. |
| CVE-2002-1451 | Medium | 2002-08-24 | Not applicable | Working exploit published | Blazix before 1.2.2 allows remote attackers to read source code of JSP scripts or list restricted web directories via an HTTP request that ends in a (1) "+" or (2) "\" (backslash) character. |
| CVE-2002-1453 | Medium | 2002-08-14 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in MyWebServer 1.0.2 allows remote attackers to insert script and HTML via a long request followed by the malicious script, which is echoed back to the user in an error message. |
| CVE-2002-1445 | Medium | 2002-08-12 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in CERN Proxy Server allows remote attackers to execute script as other users via a link to a non-existent page whose name contains the script, which is inserted into the resulting error page. |
| CVE-2002-0849 | Medium | 2002-08-12 | Not applicable | No public exploit | Linux-iSCSI iSCSI implementation installs the iscsi.conf file with world-readable permissions on some operating systems, including Red Hat Linux Limbo Beta #1, which could allow local users to gain privileges by reading the cleartext CHAP password. |
| CVE-2002-0848 | Medium | 2002-08-12 | Not applicable | No public exploit | Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type of Password Authentication Protocol (PAP) or Challenge, sends the user password in cleartext in a validation retry request, which could allow remote attackers to steal passwords via sniffing. |
| CVE-2002-0830 | Medium | 2002-08-12 | Not applicable | No public exploit | Network File System (NFS) in FreeBSD 4.6.1 RELEASE-p7 and earlier, NetBSD 1.5.3 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service (hang) via an RPC message with a zero length payload, which causes NFS to reference a previous payload and enter an infinite loop. |
| CVE-2002-0829 | Medium | 2002-08-12 | Not applicable | No public exploit | Integer overflow in the Berkeley Fast File System (FFS) in FreeBSD 4.6.1 RELEASE-p4 and earlier allows local users to access arbitrary file contents within FFS to gain privileges by creating a file that is larger than allowed by the virtual memory system. |
| CVE-2002-0824 | Medium | 2002-08-12 | Not applicable | Working exploit published | BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specified as a tty device. |
| CVE-2002-0812 | Medium | 2002-08-12 | Not applicable | Working exploit published | Information leak in Compaq WL310, and the Orinoco Residential Gateway access point it is based on, uses a system identification string as a default SNMP read/write community string, which allows remote attackers to obtain and modify sensitive configuration information by querying for the identification string. |
| CVE-2002-0810 | Medium | 2002-08-12 | Not applicable | No public exploit | Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML output, which could leak sensitive information, including plaintext passwords, if syncshadowdb fails. |
| CVE-2002-0805 | Medium | 2002-08-12 | Not applicable | No public exploit | Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, (1) creates new directories with world-writable permissions, and (2) creates the params file with world-writable permissions, which allows local users to modify the files and execute code. |
| CVE-2002-0803 | Medium | 2002-08-12 | Not applicable | No public exploit | Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows remote attackers to display restricted products and components via a direct HTTP request to queryhelp.cgi. |
| CVE-2002-0800 | Medium | 2002-08-12 | Not applicable | No public exploit | BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at the end. |
| CVE-2002-0794 | Medium | 2002-08-12 | Not applicable | No public exploit | The accept_filter mechanism in FreeBSD 4 through 4.5 does not properly remove entries from the incomplete listen queue when adding a syncache, which allows remote attackers to cause a denial of service (network service availability) via a large number of connection attempts, which fills the queue. |
| CVE-2002-0793 | Medium | 2002-08-12 | Not applicable | Working exploit published | Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrite arbitrary files via (1) the -f argument to the monitor utility, (2) the -d argument to dumper, (3) the -c argument to crttrap, or (4) using the Watcom sample utility. |
| CVE-2002-0792 | Medium | 2002-08-12 | Not applicable | No public exploit | The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to cause a denial of service (soft reset) via (1) an HTTPS POST request, or (2) malformed XML data. |
| CVE-2002-0791 | Medium | 2002-08-12 | Not applicable | No public exploit | Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) via a connection to the server followed by a carriage return, and possibly other invalid commands with improper syntax or length. |
| CVE-2002-0788 | Medium | 2002-08-12 | Not applicable | No public exploit | An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files that cannot be wiped or deleted due to strong permissions, which could allow certain local users or attackers with physical access to obtain cleartext information. |
| CVE-2002-0786 | Medium | 2002-08-12 | Not applicable | Working exploit published | iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators to read arbitrary files by specifying the target file in the LOG parameter. |
| CVE-2002-0785 | Medium | 2002-08-12 | Not applicable | No public exploit | AOL Instant Messenger (AIM) allows remote attackers to cause a denial of service (crash) via an "AddBuddy" link with the ScreenName parameter set to a large number of comma-separated values, possibly triggering a buffer overflow. |
| CVE-2002-0784 | Medium | 2002-08-12 | Not applicable | No public exploit | Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HTTP request with a ... (modified dot dot). |
| CVE-2002-0782 | Medium | 2002-08-12 | Not applicable | No public exploit | Novell BorderManager 3.5 with PAT (Port-Address Translate) enabled allows remote attackers to cause a denial of service by filling the connection table with a large number of connection requests to hosts that do not have a specific route, which may be forwarded to the public interface. |
| CVE-2002-0781 | Medium | 2002-08-12 | Not applicable | No public exploit | RTSP proxy for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a GET request to port 9090 followed by a series of carriage returns, which causes proxy.nlm to ABEND. |
| CVE-2002-0780 | Medium | 2002-08-12 | Not applicable | No public exploit | IP/IPX gateway for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a connection to port 8225 with a large amount of random data, which causes ipipxgw.nlm to ABEND. |
| CVE-2002-0779 | Medium | 2002-08-12 | Not applicable | No public exploit | FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service (network connectivity loss) via a connection to port 21 with a large amount of random data. |
| CVE-2002-0775 | Medium | 2002-08-12 | Not applicable | Working exploit published | browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter. |
| CVE-2002-0772 | Medium | 2002-08-12 | Not applicable | Working exploit published | Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. (dot dot) in the RootName parameter. |
| CVE-2002-0771 | Medium | 2002-08-12 | Not applicable | Working exploit published | Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the (1) cvsroot or (2) sortby parameters. |
| CVE-2002-0770 | Medium | 2002-08-12 | Not applicable | Working exploit published | Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin commands via a client that does not expand "$" macros, which causes the server to expand the macros and leak the information, as demonstrated using "say $rcon_password." |
| CVE-2002-0769 | Medium | 2002-08-12 | Not applicable | Working exploit published | The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass authentication via an HTTP POST request with a single byte, which allows the attackers to (1) obtain the password from the login screen, or (2) reconfigure the adaptor by modifying certain request parameters. |
| CVE-2002-0759 | Medium | 2002-08-12 | Not applicable | No public exploit | bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, does not use the O_EXCL flag to create files during decompression and does not warn the user if an existing file would be overwritten, which could allow attackers to overwrite files via a bzip2 archive. |
| CVE-2002-0752 | Medium | 2002-08-12 | Not applicable | No public exploit | CGIscript.net csMailto.cgi program exports feedback to a file that is accessible from the web document root, which could allow remote attackers to obtain sensitive information by directly accessing the file. |
| CVE-2002-0750 | Medium | 2002-08-12 | Not applicable | No public exploit | CGIscript.net csMailto.cgi program allows remote attackers to read arbitrary files by specifying the target filename in the form-attachment field. |
| CVE-2002-0748 | Medium | 2002-08-12 | Not applicable | Working exploit published | LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request that ends in two newline characters, instead of the expected carriage return/newline combinations. |
| CVE-2002-0741 | Medium | 2002-08-12 | Not applicable | Working exploit published | psyBNC 2.3 allows remote attackers to cause a denial of service (CPU consumption and resource exhaustion) by sending a PASS command with a long password argument and quickly killing the connection, which is not properly terminated by psyBNC. |
| CVE-2002-0737 | Medium | 2002-08-12 | Not applicable | Working exploit published | Sambar web server before 5.2 beta 1 allows remote attackers to obtain source code of server-side scripts, or cause a denial of service (resource exhaustion) via DOS devices, using a URL that ends with a space and a null character. |
| CVE-2002-0729 | Medium | 2002-08-12 | Not applicable | No public exploit | Microsoft SQL Server 2000 allows remote attackers to cause a denial of service via a malformed 0x08 packet that is missing a colon separator. |
| CVE-2002-0728 | Medium | 2002-08-12 | Not applicable | No public exploit | Buffer overflow in the progressive reader for libpng 1.2.x before 1.2.4, and 1.0.x before 1.0.14, allows attackers to cause a denial of service (crash) via a PNG data stream that has more IDAT data than indicated by the IHDR chunk. |
| CVE-2002-0710 | Medium | 2002-08-12 | Not applicable | No public exploit | Directory traversal vulnerability in sendform.cgi 1.44 and earlier allows remote attackers to read arbitrary files by specifying the desired files in the BlurbFilePath parameter. |
| CVE-2002-0659 | Medium | 2002-08-12 | Outside Waratek scope | Working exploit published | The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings. |
| CVE-2002-0658 | Medium | 2002-08-12 | Not applicable | Working exploit published | OSSP mm library (libmm) before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack. |
| CVE-2002-0650 | Medium | 2002-08-12 | Not applicable | No public exploit | The keep-alive mechanism for Microsoft SQL Server 2000 allows remote attackers to cause a denial of service (bandwidth consumption) via a "ping" style packet to the Resolution Service (UDP port 1434) with a spoofed IP address of another SQL Server system, which causes the two servers to exchange packets in an infinite loop. |
| CVE-2002-0638 | Medium | 2002-08-12 | Not applicable | No public exploit | setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow local users to gain privileges via a complex race condition that uses an open file descriptor in utility programs such as chfn and chsh. |
| CVE-2002-0617 | Medium | 2002-08-12 | Not applicable | No public exploit | The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that points to a destination workbook containing an autoexecute macro, aka "Hyperlinked Excel Workbook Macro Bypass." |
| CVE-2002-0616 | Medium | 2002-08-12 | Not applicable | No public exploit | The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by attaching an inline macro to an object within an Excel workbook, aka the "Excel Inline Macros Vulnerability." |
| CVE-2002-0534 | Medium | 2002-08-12 | Not applicable | No public exploit | PostBoard 2.0.1 and earlier with BBcode allows remote attackers to cause a denial of service (CPU consumption) and corrupt the database via null \0 characters within [code] tags. |
| CVE-2002-0533 | Medium | 2002-08-12 | Not applicable | No public exploit | phpBB 1.4.4 and earlier with BBcode allows remote attackers to cause a denial of service (CPU consumption) and corrupt the database via null \0 characters within [code] tags. |
| CVE-2002-0531 | Medium | 2002-08-12 | Not applicable | No public exploit | Directory traversal vulnerability in emumail.cgi in EMU Webmail 4.5.x and 5.1.0 allows remote attackers to read arbitrary files or list arbitrary directories via a .. (dot dot) in the type parameter. |
| CVE-2002-0530 | Medium | 2002-08-12 | Not applicable | No public exploit | Cross-site scripting vulnerability in Novell Web Search 2.0.1 allows remote attackers to execute arbitrary script as other Web Search users via the search parameter. |
| CVE-2002-0529 | Medium | 2002-08-12 | Not applicable | No public exploit | HP Photosmart printer driver for Mac OS X installs the hp_imaging_connectivity program and the hp_imaging_connectivity.app directory with world-writable permissions, which allows local users to gain privileges of other Photosmart users by replacing hp_imaging_connectivity with a Trojan horse. |
| CVE-2002-0527 | Medium | 2002-08-12 | Not applicable | No public exploit | Watchguard SOHO firewall before 5.0.35 allows remote attackers to cause a denial of service (crash and reboot) when SOHO forwards a packet with bad IP options. |
| CVE-2002-0524 | Medium | 2002-08-12 | Not applicable | No public exploit | ASP-Nuke RC2 and earlier allows remote attackers to determine the absolute path of the server by (1) calling database-inc.asp with incorrect cookies, or (2) calling Post.asp with certain arguments, which leak the pathname in an error message. |
| CVE-2002-0523 | Medium | 2002-08-12 | Not applicable | No public exploit | ASP-Nuke RC2 and earlier allows remote attackers to list all logged-in users by submitting an invalid "pseudo" cookie. |
| CVE-2002-0521 | Medium | 2002-08-12 | Not applicable | No public exploit | Cross-site scripting vulnerabilities in ASP-Nuke RC2 and earlier allow remote attackers to execute script or gain privileges as other ASP-Nuke users via script in (1) the name parameter in downloads.asp, (2) the message parameter in Post.asp, or (3) a web site URL in profile.asp. |
| CVE-2002-0518 | Medium | 2002-08-12 | Not applicable | No public exploit | The SYN cache (syncache) and SYN cookie (syncookie) mechanism in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service (crash) (1) via a SYN packet that is accepted using syncookies that causes a null pointer to be referenced for the socket's TCP options, or (2) by killing and restarting a process that listens on the same socket, which does not properly clear the old inpcb pointer on restart. |
| CVE-2002-0515 | Medium | 2002-08-12 | Not applicable | No public exploit | IPFilter 3.4.25 and earlier sets a different TTL when a port is being filtered than when it is not being filtered, which allows remote attackers to identify filtered ports by comparing TTLs. |
| CVE-2002-0514 | Medium | 2002-08-12 | Not applicable | No public exploit | PF in OpenBSD 3.0 with the return-rst rule sets the TTL to 128 in the RST packet, which allows remote attackers to determine if a port is being filtered because the TTL is different than the default TTL. |
| CVE-2002-0512 | Medium | 2002-08-12 | Not applicable | No public exploit | startkde in KDE for Caldera OpenLinux 2.3 through 3.1.1 sets the LD_LIBRARY_PATH environment variable to include the current working directory, which could allow local users to gain privileges of other users running startkde via Trojan horse libraries. |
| CVE-2002-0510 | Medium | 2002-08-12 | Not applicable | No public exploit | The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine that a target system is running Linux. |
| CVE-2002-0509 | Medium | 2002-08-12 | Not applicable | No public exploit | Transparent Network Substrate (TNS) Listener in Oracle 9i 9.0.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a single malformed TCP packet to port 1521. |
| CVE-2002-0505 | Medium | 2002-08-12 | Not applicable | No public exploit | Memory leak in the Call Telephony Integration (CTI) Framework authentication for Cisco CallManager 3.0 and 3.1 before 3.1(3) allows remote attackers to cause a denial of service (crash and reload) via a series of authentication failures, e.g. via incorrect passwords. |
| CVE-2002-0503 | Medium | 2002-08-12 | Not applicable | No public exploit | Directory traversal vulnerability in boilerplate.asp for Citrix NFuse 1.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the NFuse_Template parameter. |
| CVE-2002-0502 | Medium | 2002-08-12 | Not applicable | Working exploit published | Citrix NFuse 1.6 may allow remote attackers to list applications without authentication by accessing the applist.asp page. |
| CVE-2002-0500 | Medium | 2002-08-12 | Not applicable | No public exploit | Internet Explorer 5.0 through 6.0 allows remote attackers to determine the existence of files on the client via an IMG tag with a dynsrc property that references the target file, which sets certain elements of the image object such as file size. |
| CVE-2002-0498 | Medium | 2002-08-12 | Not applicable | No public exploit | Etnus TotalView 5.0.0-4 installs certain files with UID 5039 and GID 59, which could allow local users with that UID or GID to modify the files and gain privileges as other TotalView users. |
| CVE-2002-0496 | Medium | 2002-08-12 | Not applicable | No public exploit | The HTTP server for SouthWest Talker server 1.0.0 allows remote attackers to cause a denial of service (server crash) via a malformed URL to port 5002. |
| CVE-2002-0492 | Medium | 2002-08-12 | Not applicable | Working exploit published | dcshop.cgi in DCShop 1.002 Beta allows remote attackers to delete arbitrary setup files via a null character in the database parameter. |
| CVE-2002-0487 | Medium | 2002-08-12 | Not applicable | No public exploit | Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, which could allow local users with access to gain privileges of other Xpede users by reading the password from the source file, e.g. from the browser's cache. |
| CVE-2002-0484 | Medium | 2002-08-12 | Not applicable | Working exploit published | move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attackers to upload files to unintended locations on the system. |
| CVE-2002-0483 | Medium | 2002-08-12 | Not applicable | Working exploit published | index.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of the web server when the file parameter is set to index.php, which triggers an error message that leaks the pathname. |
| CVE-2002-0482 | Medium | 2002-08-12 | Not applicable | No public exploit | Directory traversal vulnerability in PCI Netsupport Manager before version 7, when running web extensions, allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP GET request. |
| CVE-2002-0481 | Medium | 2002-08-12 | Not applicable | No public exploit | An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security settings and execute Javascript via an IFRAME in an HTML email message that references .WMS (Windows Media Skin) or other WMP media files, whose onload handlers execute the player.LaunchURL() Javascript function. |
| CVE-2002-0478 | Medium | 2002-08-12 | Not applicable | No public exploit | The default configuration of Foundry Networks EdgeIron 4802F allows remote attackers to modify sensitive information via arbitrary SNMP community strings. |
| CVE-2002-0476 | Medium | 2002-08-12 | Not applicable | No public exploit | Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file containing the undocumented "save" FSCommand. |
| CVE-2002-0475 | Medium | 2002-08-12 | Not applicable | No public exploit | Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within an IMG image tag while editing a message. |
| CVE-2002-0474 | Medium | 2002-08-12 | Not applicable | No public exploit | Cross-site scripting vulnerability in ZeroForum allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within IMG image tag. |
| CVE-2002-0472 | Medium | 2002-08-12 | Not applicable | No public exploit | MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from other users. |
| CVE-2002-0468 | Medium | 2002-08-12 | Not applicable | Working exploit published | Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileges via (1) a long command line argument, which is not properly handled in core.c, or possibly via bad uses of sprintf() in (2) moderate.c, (3) lcgi.c, (4) fileapi.c, (5) cookie.c, (6) codes.c, or other files. |
| CVE-2002-0466 | Medium | 2002-08-12 | Not applicable | No public exploit | Hosting Controller 1.4.1 and earlier allows remote attackers to browse arbitrary directories via a full C: style pathname in the filepath arguments to (1) Statsbrowse.asp, (2) servubrowse.asp, (3) browsedisk.asp, (4) browsewebalizerexe.asp, or (5) sqlbrowse.asp. |
| CVE-2002-0464 | Medium | 2002-08-12 | Not applicable | No public exploit | Directory traversal vulnerability in Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files and directories via a .. (dot dot) in arguments to (1) file_editor.asp, (2) folderactions.asp, or (3) editoractions.asp. |
| CVE-2002-0463 | Medium | 2002-08-12 | Not applicable | No public exploit | home.php in ARSC (Really Simple Chat) 1.0.1 and earlier allows remote attackers to determine the full pathname of the web server via an invalid language in the arsc_language parameter, which leaks the pathname in an error message. |
| CVE-2002-0462 | Medium | 2002-08-12 | Not applicable | No public exploit | bigsam_guestbook.php for Big Sam (Built-In Guestbook Stand-Alone Module) 1.1.08 and earlier allows remote attackers to cause a denial of service (CPU consumption) or obtain the absolute path of the web server via a displayBegin parameter with a very large number, which leaks the web path in an error message when PHP safe_mode is enabled, or consumes resources when safe_mode is not enabled. |
| CVE-2002-0461 | Medium | 2002-08-12 | Not applicable | Working exploit published | Internet Explorer 5.01 through 6 allows remote attackers to cause a denial of service (application crash) via Javascript in a web page that calls location.replace on itself, causing a loop. |
| CVE-2002-0460 | Medium | 2002-08-12 | Not applicable | No public exploit | Bitvise WinSSHD before 2002-03-16 allows remote attackers to cause a denial of service (resource exhaustion) via a large number of incomplete connections that are not properly terminated, which are not properly freed by SSHd. |
| CVE-2002-0456 | Medium | 2002-08-12 | Not applicable | No public exploit | Eudora 5.1 and earlier versions stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known pathnames. |
| CVE-2002-0455 | Medium | 2002-08-12 | Not applicable | No public exploit | IncrediMail stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known pathnames. |
| CVE-2002-0454 | Medium | 2002-08-12 | Not applicable | Working exploit published | Qpopper (aka in.qpopper or popper) 4.0.3 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a very large string, which causes an infinite loop. |
| CVE-2002-0425 | Medium | 2002-08-12 | Not applicable | No public exploit | mIRC DCC server protocol allows remote attackers to gain sensitive information such as alternate IRC nicknames via a "100 testing" message in a DCC connection request that cannot be ignored or canceled by the user, which may leak the alternate nickname in a response message. |
| CVE-2002-0424 | Medium | 2002-08-12 | Not applicable | No public exploit | efingerd 1.61 and earlier, when configured without the -u option, executes .efingerd files as the efingerd user (typically "nobody"), which allows local users to gain privileges as the efingerd user by modifying their own .efingerd file and running finger. |
| CVE-2002-0421 | Medium | 2002-08-12 | Not applicable | No public exploit | IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr password changing programs in the /iisadmpwd directory, including (1) aexp2.htr, (2) aexp2b.htr, (3) aexp3.htr , or (4) aexp4.htr. |
| CVE-2002-0419 | Medium | 2002-08-12 | Not applicable | Working exploit published | Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easily conduct brute force attacks via responses from the server in which (2) in certain configurations, the server IP address is provided as the realm for Basic authentication, which could reveal real IP addresses that were obscured by NAT, or (3) when NTLM authentication is used, the NetBIOS name of the server and its Windows NT domain are revealed in response to an Authorization request. NOTE: this entry originally contained a vector (1) in which the server reveals whether it supports Basic or NTLM authentication through 401 Access Denied error messages. CVE has REJECTED this vector; it is not a vulnerability because the information is already available through legitimate use, since authentication cannot proceed without specifying a scheme that is supported by both the client and the server. |
| CVE-2002-0418 | Medium | 2002-08-12 | Not applicable | No public exploit | Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.36 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the param_name parameter. |
| CVE-2002-0417 | Medium | 2002-08-12 | Not applicable | No public exploit | Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the ALTERNATE_TEMPLATES parameter for various mmstdo*.cgi programs. |
| CVE-2002-1446 | Medium | 2002-08-01 | Not applicable | No public exploit | The error checking routine used for the C_Verify call on a symmetric verification key in the nCipher PKCS#11 library 1.2.0 and later returns the CKR_OK status even when it detects an invalid signature, which could allow remote attackers to modify or forge messages. |