CVEs published in March 2002

105 vulnerabilities, 3 critical, 0 exploited.

• microsoft internet explorer The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote... CVE-2002-0078 EPSS 21.9% 7.5 HighMarch 29, 2002
• sgi irix Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged... CVE-2002-0040 2.1 LowMarch 28, 2002
• sgi irix rpcbind in SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, allows remote attackers... CVE-2002-0039 5.0 MediumMarch 28, 2002
• logwatch LogWatch before 2.5 allows local users to execute arbitrary code via a symlink attack on the... CVE-2002-0162 Public exploit 6.2 MediumMarch 27, 2002
• squid Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12,... CVE-2002-0163 Public exploit EPSS 15.1% 7.5 HighMarch 26, 2002
• enlightenment imlib, michael jennings eterm +1 more Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute... CVE-2002-0143 Public exploit 4.6 MediumMarch 25, 2002
• pi-soft spoonftp Pi-Soft SpoonFTP 1.1 and earlier allows remote attackers to redirect traffic to other sites (aka... CVE-2002-0139 7.5 HighMarch 25, 2002
• sambar server cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of... CVE-2002-0128 Public exploit EPSS 10.1% 7.5 HighMarch 25, 2002
• mdg computer services web server 4d ecommerce MDG Computer Services Web Server 4D WS4D/eCommerce 3.0 and earlier, and possibly 3.5.3, allows... CVE-2002-0123 7.5 HighMarch 25, 2002
• php PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID,... CVE-2002-0121 2.1 LowMarch 25, 2002
• palm desktop Apple Palm Desktop 4.0b76 and 4.0b77 creates world-readable backup files and folders when a... CVE-2002-0120 2.1 LowMarch 25, 2002
• yabb Cross-site scripting vulnerability in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 and earlier... CVE-2002-0117 Public exploit 7.5 HighMarch 25, 2002
• martin roesch snort Snort 1.8.3 does not properly define the minimum ICMP header size, which allows remote attackers... CVE-2002-0115 Public exploit 5.0 MediumMarch 25, 2002
• funsoft dinos webserver Directory traversal vulnerability in Funsoft Dino's Webserver 1.2 and earlier allows remote... CVE-2002-0111 7.5 HighMarch 25, 2002
• cacheflow cacheos Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to... CVE-2002-0107 Public exploit 5.0 MediumMarch 25, 2002
• boozt standard Buffer overflow in index.cgi administration interface for Boozt! Standard 0.9.8 allows local... CVE-2002-0098 Public exploit 7.5 HighMarch 25, 2002
• geeklog Geeklog 1.3 allows remote attackers to hijack user accounts, including the administrator account,... CVE-2002-0097 7.5 HighMarch 25, 2002
• geeklog The installation of Geeklog 1.3 creates an extra group_assignments record which is not properly... CVE-2002-0096 7.2 HighMarch 25, 2002
• fraunhofer fit bscw The default configuration of BSCW (Basic Support for Cooperative Work) 3.x and possibly version 4... CVE-2002-0095 Public exploit 7.5 HighMarch 25, 2002
• fraunhofer fit bscw config_converters.py in BSCW (Basic Support for Cooperative Work) 3.x and versions before 4.06... CVE-2002-0094 7.5 HighMarch 25, 2002
• apache tomcat Apache Tomcat Directory Traversal CVE-2000-1210 5.0 MediumMarch 22, 2002
• apache http server Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute... CVE-2002-0061 Public exploit EPSS 51.5% 7.5 HighMarch 21, 2002
• microsoft virtual machine, sun jdk, jre +2 more +4 more Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java... CVE-2002-0076 EPSS 26.9% 7.5 HighMarch 19, 2002
• caldera openlinux server, openlinux workstation +1 more Vulnerability in the MIT-SHM extension of the X server on Linux (XFree86) 4.2.1 and earlier... CVE-2002-0164 Fix available 4.6 MediumMarch 15, 2002
• scott parish chuid chuid 1.2 and earlier does not properly verify the ownership of files that will be changed, which... CVE-2002-0145 7.5 HighMarch 15, 2002
• scott parish chuid Directory traversal vulnerability in chuid 1.2 and earlier allows remote attackers to change the... CVE-2002-0144 7.5 HighMarch 15, 2002
• pi3 pi3web CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a... CVE-2002-0142 Public exploit 7.5 HighMarch 15, 2002
• maelstrom gpl Maelstrom GPL 3.0.1 allows local users to overwrite arbitrary files of other Maelstrom users via... CVE-2002-0141 1.2 LowMarch 15, 2002
• dnrd Domain Name Relay Daemon (dnrd) 2.10 and earlier allows remote malicious DNS sites to cause a... CVE-2002-0140 Public exploit 7.5 HighMarch 15, 2002
• andreas mueller cdrdao CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command. CVE-2002-0138 2.1 LowMarch 15, 2002
• andreas mueller cdrdao CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on... CVE-2002-0137 Public exploit 7.2 HighMarch 15, 2002
• microsoft internet explorer Microsoft Internet Explorer 5.5 on Windows 98 allows remote web pages to cause a denial of... CVE-2002-0136 5.0 MediumMarch 15, 2002
• netopia timbuktu pro Netopia Timbuktu Pro 6.0.1 and earlier allows remote attackers to cause a denial of service ... CVE-2002-0135 Public exploit 5.0 MediumMarch 15, 2002
• avirt gateway suite Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the... CVE-2002-0134 7.5 HighMarch 15, 2002
• avirt gateway, gateway suite, soho +2 more Buffer overflows in Avirt Gateway Suite 4.2 allow remote attackers to cause a denial of service... CVE-2002-0133 7.5 HighMarch 15, 2002
• chinput Buffer overflow in Chinput 3.0 allows local users to execute arbitrary code via a long HOME... CVE-2002-0132 Public exploit 7.2 HighMarch 15, 2002
• activestate activepython ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer,... CVE-2002-0131 5.0 MediumMarch 15, 2002
• efax Buffer overflow in efax 0.9 and earlier, when installed setuid root, allows local users to... CVE-2002-0130 7.2 HighMarch 15, 2002
• efax efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via... CVE-2002-0129 2.1 LowMarch 15, 2002
• netgear rp114 Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26, when configured to block traffic below... CVE-2002-0127 5.0 MediumMarch 15, 2002
• selom ofori blackmoon ftp server Buffer overflow in BlackMoon FTP Server 1.0 through 1.5 allows remote attackers to execute... CVE-2002-0126 7.5 HighMarch 15, 2002
• clanlib Buffer overflow in ClanLib library 0.5 may allow local users to execute arbitrary code in games... CVE-2002-0125 7.2 HighMarch 15, 2002
• mdg computer services web server 4d ecommerce MDG Computer Services Web Server 4D/eCommerce 3.5.3 allows remote attackers to exploit directory... CVE-2002-0124 5.0 MediumMarch 15, 2002
• siemens 3568i wap Siemens 3568i WAP mobile phones allows remote attackers to cause a denial of service (crash) via... CVE-2002-0122 5.0 MediumMarch 15, 2002
• alcatel speed touch home Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service (reboot)... CVE-2002-0119 5.0 MediumMarch 15, 2002
• infopop ultimate bulletin board Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1... CVE-2002-0118 Public exploit 7.5 HighMarch 15, 2002
• palm os Palm OS 3.5h and possibly other versions, as used in Handspring Visor and Xircom products, allows... CVE-2002-0116 5.0 MediumMarch 15, 2002
• emc networker EMC NetWorker (formerly Legato NetWorker) before 7.0 stores passwords in plaintext in the daemon... CVE-2002-0114 4.6 MediumMarch 15, 2002
• emc networker EMC NetWorker (formerly Legato NetWorker) before 7.0 stores log files in the /nsr/logs/ directory... CVE-2002-0113 4.6 MediumMarch 15, 2002
• etype eserv Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL. CVE-2002-0112 Public exploit 5.0 MediumMarch 15, 2002
• Show olderLoading…