Overview 623 matches · 3 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 130 public PoC · 6 EPSS ≥ 0.5
623matches
3in Waratek scope0.5%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
130public PoC20.9%
6EPSS ≥ 0.51.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
3
0.5%
Outside Waratek scope
2
0.3%
Not applicable
618
99.2%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
623
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
130
20.9%
Proof of concept only
0
0.0%
Forecast only
4
0.6%
No public exploit
489
78.5%
split by
peak 182 / year
19901
Not applicable1
Low1
not blocked1
No public exploit1
19910
19921
Not applicable1
Low1
not blocked1
No public exploit1
19932
Not applicable2
Low2
not blocked2
No public exploit2
19941
Not applicable1
Low1
not blocked1
Working exploit published1
19951
Not applicable1
Low1
not blocked1
No public exploit1
19969
Not applicable9
Low9
not blocked9
No public exploit9
199719
Not applicable19
Low19
not blocked19
Working exploit published4
Forecast only2
No public exploit13
199823
Not applicable23
Low23
not blocked23
Working exploit published5
No public exploit18
1999111
Not applicable111
Low111
not blocked111
Working exploit published28
No public exploit83
200096
Not applicable96
Low96
not blocked96
Working exploit published34
No public exploit62
2001182
Outside Waratek scope2
Not applicable180
Low182
not blocked182
Working exploit published38
No public exploit144
2002143
No exploit published3
Not applicable140
Low143
not blocked143
Working exploit published18
Forecast only2
No public exploit123
200334
Not applicable34
Low34
not blocked34
Working exploit published2
No public exploit32
1991199319951997199920012003
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2003-0643 | Low | 2003-07-25 | Not applicable | No public exploit | Integer signedness error in the Linux Socket Filter implementation (filter.c) in Linux 2.4.3-pre3 to 2.4.22-pre10 allows attackers to cause a denial of service (crash). |
| CVE-2003-0448 | Low | 2003-07-24 | Not applicable | No public exploit | Portmon 1.7 and possibly earlier versions allows local users to read and write arbitrary files via the (1) -c (host file) or (2) -l (log file) command line options. |
| CVE-2003-0438 | Low | 2003-07-24 | Not applicable | No public exploit | eldav WebDAV client for Emacs, version 0.7.2 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files. |
| CVE-2003-0381 | Low | 2003-07-24 | Not applicable | No public exploit | Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files via multiple vectors including the noroff script. |
| CVE-2001-1409 | Low | 2003-07-24 | Not applicable | No public exploit | dexconf in XFree86 Xserver 4.1.0-2 creates the /dev/dri directory with insecure permissions (666), which allows local users to replace or create files in the root file system. |
| CVE-2003-1065 | Low | 2003-07-23 | Not applicable | No public exploit | Unknown vulnerability in patches 108993-14 through 108993-19 and 108994-14 through 108994-19 for Solaris 8 may allow local users to cause a denial of service (automountd crash). |
| CVE-2003-0367 | Low | 2003-07-02 | Not applicable | No public exploit | znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files. |
| CVE-2003-0282 | Low | 2003-06-16 | Not applicable | Working exploit published | Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . (dot) characters, which are filtered and result in a ".." sequence. |
| CVE-2003-0279 | Low | 2003-06-16 | Not applicable | No public exploit | Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 5.x through 6.5 allows remote attackers to steal sensitive information via numeric fields, as demonstrated using (1) the viewlink function and cid parameter, or (2) index.php. |
| CVE-2003-0246 | Low | 2003-06-16 | Not applicable | No public exploit | The ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges, which allows local users to gain read or write access to certain I/O ports. |
| CVE-2002-1563 | Low | 2003-05-12 | Not applicable | No public exploit | stunnel 4.0.3 and earlier allows attackers to cause a denial of service (crash) via SIGCHLD signal handler race conditions that cause an inconsistency in the child counter. |
| CVE-2003-0334 | Low | 2003-05-10 | Not applicable | No public exploit | BitchX IRC client 1.0c20cvs and earlier allows attackers to cause a denial of service (core dump) via certain channel mode changes that are not properly handled in names.c. |
| CVE-2003-0207 | Low | 2003-05-05 | Not applicable | No public exploit | ps2epsi creates insecure temporary files when calling ghostscript, which allows local attackers to overwrite arbitrary files. |
| CVE-2003-0136 | Low | 2003-05-05 | Not applicable | No public exploit | psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/before file. |
| CVE-2003-1072 | Low | 2003-04-28 | Not applicable | No public exploit | Memory leak in lofiadm in Solaris 8 allows local users to cause a denial of service (kernel memory consumption). |
| CVE-2002-1470 | Low | 2003-04-22 | Not applicable | No public exploit | SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to port 8001, which causes the password to be logged in the world-readable sc_serv.log file. |
| CVE-2002-1409 | Low | 2003-04-11 | Not applicable | No public exploit | ptrace on HP-UX 11.00 through 11.11 allows local users to cause a denial of service (data page fault panic) via "an incorrect reference to thread register state." |
| CVE-2002-1521 | Low | 2003-04-02 | Not applicable | No public exploit | Web Server 4D (WS4D) 3.6 stores passwords in plaintext in the Ws4d.4DD file, which allows attackers to gain privileges. |
| CVE-2002-1518 | Low | 2003-04-02 | Not applicable | No public exploit | mv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory, which could allow local users to modify files and directories. |
| CVE-2002-1502 | Low | 2003-04-02 | Not applicable | No public exploit | Symbolic link vulnerability in xbreaky before 0.5.5 allows local users to overwrite arbitrary files via a symlink from the user's .breakyhighscores file to the target file. |
| CVE-2002-1490 | Low | 2003-04-02 | Not applicable | No public exploit | NetBSD 1.4 through 1.6 beta allows local users to cause a denial of service (kernel panic) via a series of calls to the TIOCSCTTY ioctl, which causes an integer overflow in a structure counter and sets the counter to zero, which frees memory that is still in use by other processes. |
| CVE-2003-0086 | Low | 2003-03-31 | Not applicable | No public exploit | The code for writing reg files in Samba before 2.2.8 allows local users to overwrite arbitrary files via a race condition involving chown. |
| CVE-2003-0120 | Low | 2003-03-07 | Not applicable | No public exploit | adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local users to overwrite arbitrary files via a symlink attack on a default temporary directory with a predictable name. |
| CVE-2003-1077 | Low | 2003-03-05 | Not applicable | No public exploit | Unknown vulnerability in UFS for Solaris 9 for SPARC, with logging enabled, allows local users to cause a denial of service (UFS file system hang). |
| CVE-2003-0079 | Low | 2003-03-03 | Not applicable | No public exploit | The DEC UDK processing feature in the hanterm (hanterm-xf) terminal emulator before 2.0.5 allows attackers to cause a denial of service via a certain character escape sequence that causes the terminal to enter a tight loop. |
| CVE-2003-0071 | Low | 2003-03-03 | Not applicable | No public exploit | The DEC UDK processing feature in the xterm terminal emulator in XFree86 4.2.99.4 and earlier allows attackers to cause a denial of service via a certain character escape sequence that causes the terminal to enter a tight loop. |
| CVE-2002-1509 | Low | 2003-03-03 | Not applicable | No public exploit | A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of the new user's group (mode 660), which allows other users in the same group to read or modify the new user's incoming email. |
| CVE-2003-0018 | Low | 2003-02-19 | Not applicable | No public exploit | Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the O_DIRECT feature, which allows local attackers with write privileges to read portions of previously deleted files, or cause file system corruption. |
| CVE-2002-1508 | Low | 2003-02-19 | Not applicable | No public exploit | slapd in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows local users to overwrite arbitrary files via a race condition during the creation of a log file for rejected replication requests. |
| CVE-2003-1080 | Low | 2003-02-11 | Not applicable | No public exploit | Unknown vulnerability in mail for Solaris 2.6 through 9 allows local users to read the email of other users. |
| CVE-2003-0012 | Low | 2003-01-17 | Not applicable | No public exploit | The data collection script for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 sets world-writable permissions for the data/mining directory when it runs, which allows local users to modify or delete the data. |
| CVE-2002-1395 | Low | 2003-01-17 | Not applicable | No public exploit | Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obtain unauthorized directory permissions via a temporary directory used by impwagent, and (2) overwrite and create arbitrary files via immknmz. |
| CVE-2002-1392 | Low | 2003-01-17 | Not applicable | No public exploit | faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which allows local users to modify fax transmission privileges. |
| CVE-2003-1071 | Low | 2003-01-03 | Not applicable | Working exploit published | rpc.walld (wall daemon) for Solaris 2.6 through 9 allows local users to send messages to logged on users that appear to come from arbitrary user IDs by closing stderr before executing wall, then supplying a spoofed from header. |
| CVE-2002-2412 | Low | 2002-12-31 | Not applicable | No public exploit | Winamp 2.80 stores authentication credentials in plaintext in the (1) [HTTP-AUTH] and (2) [winamp] sections in winamp.ini, which allows local users to gain access to other accounts. |
| CVE-2002-2409 | Low | 2002-12-31 | Not applicable | No public exploit | Photon microGUI in QNX Neutrino realtime operating system (RTOS) 6.1.0 and 6.2.0 allows attackers to read user clipboard information via a direct request to the 1.TEXT file in a directory whose name is a hex-encoded user ID. |
| CVE-2002-2401 | Low | 2002-12-31 | Not applicable | No public exploit | NT Virtual DOS Machine (NTVDM.EXE) in Windows 2000, NT and XP does not verify user execution permissions for 16-bit executable files, which allows local users to bypass the loader and execute arbitrary programs. |
| CVE-2002-2384 | Low | 2002-12-31 | Not applicable | No public exploit | hotfoon4.exe in Hotfoon 4.00 stores user names and passwords in cleartext in the hotfoon2 registry key, which allows local users to gain access to user accounts and steal phone service. |
| CVE-2002-2334 | Low | 2002-12-31 | Not applicable | No public exploit | Joe text editor 2.8 through 2.9.7 does not remove the group and user setuid bits for backup files, which could allow local users to execute arbitrary setuid and setgid root programs when root edits scripts owned by other users. |
| CVE-2002-2301 | Low | 2002-12-31 | Not applicable | No public exploit | Lawson Financials 8.0, when configured to use a third party relational database, stores usernames and passwords in a world-readable file, which allows local users to read the passwords and log onto the database. |
| CVE-2002-2283 | Low | 2002-12-31 | Not applicable | No public exploit | Microsoft Windows XP with Fast User Switching (FUS) enabled does not remove the "show processes from all users" privilege when the user is removed from the administrator group, which allows that user to view processes of other users. |
| CVE-2002-2280 | Low | 2002-12-31 | Not applicable | No public exploit | syslogd on OpenBSD 2.9 through 3.2 does not change the source IP address of syslog packets when the machine's IP addressed is changed without rebooting, e.g. via ifconfig, which can cause incorrect information to be sent to the syslog server. |
| CVE-2002-2275 | Low | 2002-12-31 | Not applicable | No public exploit | Fortres 101 4.1 allows local users to bypass Fortres by pressing the Windows and "F" key together for 30 seconds, which opens multiple windows and eventually causes explorer.exe to crash, which then opens an unrestricted explorer.exe. |
| CVE-2002-2274 | Low | 2002-12-31 | Not applicable | No public exploit | akfingerd 0.5 allows local users to read arbitrary files as the akfingerd user (nobody) via a symlink attack on the .plan file. |
| CVE-2002-2270 | Low | 2002-12-31 | Not applicable | No public exploit | Unspecified vulnerability in the ied command in HP-UX 10.10, 10.20, and 11.0 allows local users to view "normally invisible data" via unknown attack vectors. |
| CVE-2002-2254 | Low | 2002-12-31 | Not applicable | No public exploit | The experimental IP packet queuing feature in Netfilter / IPTables in Linux kernel 2.4 up to 2.4.19 and 2.5 up to 2.5.31, when a privileged process exits and network traffic is not being queued, may allow a later process with the same Process ID (PID) to access certain network traffic that would otherwise be restricted. |
| CVE-2002-2244 | Low | 2002-12-31 | Not applicable | No public exploit | Akfingerd 0.5 and earlier versions allow local users to cause a denial of service (crash) via a .plan with a symlink to /dev/urandom or other device, then disconnecting while data is being transferred, which causes a SIGPIPE error that Akfingerd cannot handle. |
| CVE-2002-2202 | Low | 2002-12-31 | Not applicable | No public exploit | Outlook Express 6.0 does not delete messages from dbx files, even when a user empties the Deleted items folder, which allows local users to read other users email. |
| CVE-2002-2177 | Low | 2002-12-31 | No exploit published | No public exploit | BEA WebLogic Server and Express 6.1 through 7.0.0.1 buffers HTTP requests in a way that can cause BEA to send the same response for two different HTTP requests, which could allow remote attackers to obtain sensitive information that was intended for other users. |
| CVE-2002-2172 | Low | 2002-12-31 | Not applicable | No public exploit | Informed (1) Designer and (2) Filler 3.05 does not zero out newly allocated disk blocks as an encrypted file grows in size, which may allow attackers to obtain sensitive information. |
| CVE-2002-2165 | Low | 2002-12-31 | Not applicable | Working exploit published | The IMHO Webmail module 0.97.3 and earlier for Roxen leaks the REFERER from the browser's previous login session in an error page, which allows local users to read another user's inbox. |
| CVE-2002-2132 | Low | 2002-12-31 | Not applicable | No public exploit | Windows File Protection (WFP) in Windows 2000 and XP does not remove old security catalog .CAT files, which could allow local users to replace new files with vulnerable old files that have valid hash codes. |
| CVE-2002-2127 | Low | 2002-12-31 | Not applicable | No public exploit | Integrity Protection Driver (IPD) 1.2 and earlier blocks access to \Device\PhysicalMemory by its name, which could allow local privileged processes to overwrite kernel memory by accessing the device through a symlink. |
| CVE-2002-2126 | Low | 2002-12-31 | Not applicable | No public exploit | restrictEnabled in Integrity Protection Driver (IPD) 1.2 delays driver installation for 20 minutes, which allows local users to insert malicious code by setting system clock to an earlier time. |
| CVE-2002-2122 | Low | 2002-12-31 | Not applicable | No public exploit | Pointsec before 1.2 for PalmOS stores a user's PIN number in memory in plaintext, which allows a local attacker who steals an unlocked Palm to retrieve the PIN by dumping memory. |
| CVE-2002-2105 | Low | 2002-12-31 | Not applicable | Working exploit published | Microsoft Windows XP allows local users to prevent the system from booting via a corrupt explorer.exe.manifest file. |
| CVE-2002-2093 | Low | 2002-12-31 | Not applicable | No public exploit | The Video Control Panel on SGI O2/IRIX 6.5, when the Default Input is set to "Output Video", allows attackers to access a console session by running videoout then videoin. |
| CVE-2002-2092 | Low | 2002-12-31 | Not applicable | No public exploit | Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileges by attaching a debugger to a process before the kernel has determined that the process is setuid or setgid. |
| CVE-2002-2083 | Low | 2002-12-31 | Not applicable | No public exploit | The Novell Netware client running on Windows 95 allows local users to bypass the login and open arbitrary files via the "What is this?" help feature, which can be launched from the Novell Netware login screen. |
| CVE-2002-2051 | Low | 2002-12-31 | Not applicable | No public exploit | The processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a symlink attack on files specified as hostnames in a log file. |
| CVE-2002-2050 | Low | 2002-12-31 | Not applicable | No public exploit | Directory traversal vulnerability in processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a .. (dot dot) in the hostname of a log entry. |
| CVE-2002-2039 | Low | 2002-12-31 | Not applicable | Working exploit published | /bin/su in QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows local users to obtain sensitive information from core dump files by sending the SIGSERV (invalid memory reference) signal. |
| CVE-2002-2038 | Low | 2002-12-31 | Not applicable | No public exploit | Next Generation POSIX Threading (NGPT) 1.9.0 uses a filesystem-based shared memory entry, which allows local users to cause a denial of service or in threaded processes or spoof files via unknown methods. |
| CVE-2002-2028 | Low | 2002-12-31 | Not applicable | No public exploit | The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when a valid password is provided, which makes it easier for users with physical access to conduct brute force password guessing. |
| CVE-2002-2023 | Low | 2002-12-31 | Not applicable | No public exploit | The get_parameter_from_freqency_source function in beep2 1.0, 1.1 and 1.2, when installed setuid root, allows local users to read arbitrary files via unknown attack vectors. |
| CVE-2002-2001 | Low | 2002-12-31 | Not applicable | No public exploit | jmcce 1.3.8 in Mandrake 8.1 creates log files in /tmp with predictable names, which allows local users to overwrite arbitrary files via a symlink attack. |
| CVE-2002-2000 | Low | 2002-12-31 | Not applicable | No public exploit | ACMS 4.3 and 4.4 in OpenVMS Alpha 7.2 and 7.3 does not properly use process privileges, which allows attackers to access data. |
| CVE-2002-1996 | Low | 2002-12-31 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in PostNuke 0.71 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name parameter in modules.php and (2) catid parameter in index.php. |
| CVE-2002-1983 | Low | 2002-12-31 | Not applicable | Working exploit published | The timer implementation in QNX RTOS 6.1.0 allows local users to cause a denial of service (hang) and possibly execute arbitrary code by creating multiple timers with a 1-ms tick. |
| CVE-2002-1977 | Low | 2002-12-31 | Not applicable | No public exploit | Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the "Passphrase Cache" option, which could allow attackers to open encrypted files without providing a passphrase. |
| CVE-2002-1976 | Low | 2002-12-31 | Not applicable | No public exploit | ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap. |
| CVE-2002-1970 | Low | 2002-12-31 | Not applicable | No public exploit | SnortCenter 0.9.5, when configured to push Snort rules, stores the rules in a temporary file with world-readable and world-writable permissions, which allows local users to obtain usernames and passwords for the alert database servers. |
| CVE-2002-1968 | Low | 2002-12-31 | Not applicable | No public exploit | Com21 DOXport 1100 series cable modem running firmware 2.1.1.106, and possibly other versions before 2.1.1.108.003, downloads a DOCSIS configuration file from a TFTP server running on the internal network, which allows local users to modify configuration of the modem via a malicious TFTP server. |
| CVE-2002-1963 | Low | 2002-12-31 | Not applicable | No public exploit | Linux kernel 2.4.1 through 2.4.19 sets root's NR_RESERVED_FILES limit to 10 files, which allows local users to cause a denial of service (resource exhaustion) by opening 10 setuid binaries. |
| CVE-2002-1956 | Low | 2002-12-31 | Not applicable | No public exploit | ROX Filer 1.1.9 and 1.2 is installed with world writable permissions, which allows local users to write to arbitrary files. |
| CVE-2002-1939 | Low | 2002-12-31 | Not applicable | No public exploit | FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties. |
| CVE-2002-1927 | Low | 2002-12-31 | Not applicable | No public exploit | Aquonics File Manager 1.5 allows users with edit privileges to modify user accounts by editing the userlist.cgi file. |
| CVE-2002-1892 | Low | 2002-12-31 | Not applicable | No public exploit | NETGEAR FVS318 running firmware 1.1 stores the username and password in a readable format when a backup of the configuration file is made, which allows local users to obtain sensitive information. |
| CVE-2002-1890 | Low | 2002-12-31 | Not applicable | No public exploit | rhmask 1.0-9 in Red Hat Linux 7.1 allows local users to overwrite arbitrary files via a symlink attack on the mask file. |
| CVE-2002-1888 | Low | 2002-12-31 | Not applicable | No public exploit | CommonName Toolbar 3.5.2.0 sends unqualified domain name requests to the CommonName organization and possibly other web servers for name resolution, which allows those organizations to obtain internal server names. |
| CVE-2002-1876 | Low | 2002-12-31 | Not applicable | No public exploit | Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a large number of rapid requests, which consumes all of the licenses that are granted to Exchange by IIS. |
| CVE-2002-1869 | Low | 2002-12-31 | Not applicable | No public exploit | Heysoft EventSave 5.1 and 5.2 and Heysoft EventSave+ 5.1 and 5.2 does not check whether the log file can be written to, which allows attackers to prevent events from being recorded by opening the log file using an application such as Microsoft's Event Viewer. |
| CVE-2002-1848 | Low | 2002-12-31 | Not applicable | No public exploit | TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text control of the WinVNC Properties dialog, which could allow local users to access passwords. |
| CVE-2002-1827 | Low | 2002-12-31 | Not applicable | Working exploit published | Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an exclusive lock on the (1) alias, (2) map, (3) statistics, and (4) pid files. |
| CVE-2002-1813 | Low | 2002-12-31 | Not applicable | Working exploit published | Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8.2790 allows remote attackers to execute arbitrary programs by specifying the program in the href attribute of a link. |
| CVE-2002-1791 | Low | 2002-12-31 | Not applicable | No public exploit | SGI IRIX 6.5 through 6.5.17 creates temporary desktop files with world-writable permissions, which allows local users to overwrite or corrupt those files. |
| CVE-2002-1786 | Low | 2002-12-31 | Not applicable | No public exploit | SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users to read the core dumps and possibly obtain sensitive information. |
| CVE-2002-1785 | Low | 2002-12-31 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in Zeus Administration Server in Zeus Web Server 4.0 through 4.1r2 allows remote authenticated users to inject arbitrary web script or HTML via the section parameter to index.fcgi. |
| CVE-2002-1782 | Low | 2002-12-31 | Not applicable | No public exploit | The default configuration of University of Washington IMAP daemon (wu-imapd), when running on a system that does not allow shell access, allows a local user with a valid IMAP account to read arbitrary files as that user. |
| CVE-2002-1764 | Low | 2002-12-31 | Not applicable | No public exploit | acroread in Adobe Acrobat Reader 4.05 on Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files. |
| CVE-2002-1754 | Low | 2002-12-31 | Not applicable | No public exploit | Buffer overflow in Novell NetWare Client 4.80 through 4.83 allows local users to cause a denial of service (crash) by using ping, traceroute, or a similar utility to force the client to resolve a large hostname. |
| CVE-2002-1740 | Low | 2002-12-31 | Not applicable | Working exploit published | Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to execute arbitrary code via a long folder name (NewFolder parameter). |
| CVE-2002-1737 | Low | 2002-12-31 | Not applicable | No public exploit | Astaro Security Linux 2.016 creates world-writable files and directories, which allows local users to overwrite arbitrary files. |
| CVE-2002-1731 | Low | 2002-12-31 | Not applicable | Working exploit published | The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF. |
| CVE-2002-1711 | Low | 2002-12-31 | Not applicable | No public exploit | BasiliX 1.1.0 saves attachments in a world readable /tmp/BasiliX directory, which allows local users to read other users' attachments. |
| CVE-2002-1710 | Low | 2002-12-31 | Not applicable | No public exploit | The attachment capability in Compose Mail in BasiliX Webmail 1.1.0 does not check whether the attachment was uploaded by the user or came from a HTTP POST, which could allow local users to steal sensitive information like a password file. |
| CVE-2002-1692 | Low | 2002-12-31 | Not applicable | No public exploit | Buffer overflow in backup utility of Microsoft Windows 95 allows attackers to execute arbitrary code by causing a filename with a long extension to be placed in a folder to be backed up. |
| CVE-2002-1687 | Low | 2002-12-31 | Not applicable | No public exploit | Buffer overflow in the diagnostics library in AIX allows local users to "cause data and instructions to be overwritten" via a long DIAGNOSTICS environment variable. |
| CVE-2002-1676 | Low | 2002-12-31 | Not applicable | No public exploit | BindView NetInventory 1.0, when used with NetRC 1.0, allows local users to read sensitive information (passwords) by deleting the HOSTCFG._NI file and forcing an audit, which rewrites the HOSTCFG._NI to HOSTCFG.INI and stores the passwords in cleartext until the audit is complete. |
| CVE-2002-1674 | Low | 2002-12-31 | Not applicable | No public exploit | procfs on FreeBSD before 4.5 allows local users to cause a denial of service (kernel panic) by removing a file that the fstatfs function refers to. |