CVEs published in January 2002

24 vulnerabilities, 2 critical, 0 exploited.

• olaf titz cipe CIPE VPN package before 1.3.0-3 allows remote attackers to cause a denial of service (crash) via... CVE-2002-0047 5.0 MediumJanuary 31, 2002
• linux kernel Linux kernel, and possibly other operating systems, allows remote attackers to read portions of... CVE-2002-0046 5.0 MediumJanuary 31, 2002
• openldap, redhat linux +1 more slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to... CVE-2002-0045 7.5 HighJanuary 31, 2002
• gnu enscript, debian linux +1 more GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript... CVE-2002-0044 3.6 LowJanuary 31, 2002
• todd miller sudo sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail... CVE-2002-0043 Public exploit 7.2 HighJanuary 31, 2002
• sgi irix Vulnerability in the cache-limiting function of the unified name service daemon (nsd) in IRIX 6.5... CVE-2002-0038 5.0 MediumJanuary 31, 2002
• mozilla bugzilla Information leak in doeditvotes.cgi in Bugzilla before 2.14.1 may allow remote attackers to more... CVE-2002-0011 5.0 MediumJanuary 31, 2002
• mozilla bugzilla show_bug.cgi in Bugzilla before 2.14.1 allows a user with "Bugs Access" privileges to see other... CVE-2002-0009 5.0 MediumJanuary 31, 2002
• mozilla bugzilla CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous... CVE-2002-0007 10.0 HighJanuary 31, 2002
• aol instant messenger Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions allows... CVE-2002-0005 Public exploit EPSS 15.5% 10.0 HighJanuary 31, 2002
• stunnel, engardelinux secure linux, mandrakesoft mandrake linux +1 more +3 more Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop... CVE-2002-0002 Public exploit 7.5 HighJanuary 31, 2002
• cray unicos, sgi nqsdaemon +1 more Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI... CVE-2001-0891 7.2 HighJanuary 31, 2002
• nobreak technologies crazywwwboard Buffer overflow in CrazyWWWBoard 2000p4 and 2000LEp5 allows remote attackers to execute arbitrary... CVE-2001-1457 7.5 HighJanuary 30, 2002
• oliver rauch xsane xSANE 0.81 and earlier allows local users to modify files of other xSANE users via a symlink... CVE-2001-0887 1.2 LowJanuary 15, 2002
• microsoft internet explorer Microsoft Internet Explorer 5.01, 5.5 and 6.0 treats objects invoked on an HTML page with the... CVE-2002-0077 EPSS 11.5% 7.5 HighJanuary 13, 2002
• hp hp-ux Buffer overflow in passwd for HP UX B.10.20 allows local users to execute arbitrary commands with... CVE-2003-0061 7.2 HighJanuary 11, 2002
• mozilla bugzilla Bugzilla before 2.14.1 allows remote attackers to inject arbitrary SQL code and create files or... CVE-2002-0010 7.5 HighJanuary 10, 2002
• mozilla bugzilla Bugzilla before 2.14.1 allows remote attackers to (1) spoof a user comment via an HTTP request to... CVE-2002-0008 7.5 HighJanuary 10, 2002
• mike spice my classifieds Directory traversal vulnerability in Mike Spice's My Classifieds (classifieds.cgi) before 1.3... CVE-2002-1600 5.0 MediumJanuary 9, 2002
• cisco sn 5420 storage router firmware Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of... CVE-2002-1597 5.0 MediumJanuary 9, 2002
• cisco sn 5420 storage router firmware Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of... CVE-2002-1596 5.0 MediumJanuary 9, 2002
• cisco sn 5420 storage router firmware Cisco SN 5420 Storage Router 1.1(5) and earlier allows attackers to read configuration files... CVE-2002-1595 5.0 MediumJanuary 9, 2002
• mutt Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows... CVE-2002-0001 7.5 HighJanuary 3, 2002
• grpck, pwck +1 more Buffer overflow in (1) grpck and (2) pwck, if installed setuid on a system as recommended in some... CVE-2002-1594 7.2 HighJanuary 2, 2002