CVEs published in April 2002
44 vulnerabilities, 1 critical, 0 exploited.
- microsoft sql server Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote... 7.5 High
- gnu screen Buffer overflow in the Braille module for GNU screen 3.9.11, when HAVE_BRAILLE is defined, allows... 4.6 Medium
- ibm aix Buffer overflow in the file_comp function in rcp for IBM AIX 4.3.x and 5.1 allows remote... 10.0 High
- horde, horde imp +1 more Cross-site scripting vulnerability in status.php3 for IMP 2.2.8 and HORDE 1.2.7 allows remote... 7.5 High
- xpilot Buffer overflow in xpilot-server for XPilot 4.5.0 and earlier allows remote attackers to execute... 7.5 High
- avaya libsafe The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing... 4.6 Medium
- avaya libsafe libsafe 2.0-11 and earlier allows attackers to bypass protection against format string... 4.6 Medium
- zope Zope does not properly verify the access for objects with proxy roles 7.5 High
- enlightenment imlib Vulnerability in Imlib before 1.9.13 allows attackers to cause a denial of service (crash) and... 7.5 High
- enlightenment imlib Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow... 7.5 High
- stephen turner analog Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute... 7.5 High
- cisco secure access control server The administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and... 5.0 Medium
- cisco secure access control server Format string vulnerability in the administration function in Cisco Secure Access Control Server ... 7.5 High
- microsoft ie Internet Explorer 5.1 for Macintosh allows remote attackers to bypass security checks and invoke... 7.5 High
- microsoft entourage, excel, outlook express +3 more +5 more Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause... 7.5 High
- microsoft internet information server, internet information services +1 more Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to... 7.5 High
- microsoft internet information server, internet information services +1 more Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote... 7.5 High
- microsoft internet information server, internet information services +1 more Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows... 7.5 High
- microsoft internet information server, internet information services +1 more Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0,... 7.5 High
- microsoft internet information server, internet information services +1 more Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4... 7.5 High
- microsoft internet information server, internet information services +1 more Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows... 7.5 High
- microsoft internet information server, internet information services +1 more Cross-site scripting vulnerability in Help File search facility for Internet Information Server ... 7.5 High
- microsoft internet information server, internet information services +1 more The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have... 5.0 Medium
- microsoft internet information server, internet information services +1 more The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information... 5.0 Medium
- microsoft internet information server, internet information services +1 more Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet... 7.5 High
- funk software proxy, bindview netrc +1 more Funk Software Proxy Host 3.x before 3.09A creates a Named Pipe that does not require... 7.5 High
- funk software proxy, bindview netrc +1 more Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local... 7.2 High
- funk software proxy, bindview netrc +1 more Funk Software Proxy Host 3.x is installed with insecure permissions for the registry and the file... 7.2 High
- bradford barrett webalizer Buffer overflow in Webalizer 2.01-06, when configured to use reverse DNS lookups, allows remote... 7.5 High
- icecast Buffer overflows in icecast 1.3.11 and earlier allows remote attackers to execute arbitrary code... 7.5 High
- sgi irix Unknown vulnerability in Mail for SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions,... 5.0 Medium
- ibm lotus domino server Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and... 7.5 High
- aol instant messenger AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet... 7.5 High
- broadcom mlink Buffer overflows in Computer Associates MLink (CA-MLink) 6.5 and earlier may allow local users to... 4.6 Medium
- microsoft windows 2000, windows nt, windows xp +2 more Buffer overflow in Multiple UNC Provider (MUP) in Microsoft Windows operating systems allows... 7.2 High
- microsoft windows 2000 Windows 2000 allows local users to prevent the application of new group policy settings by... 7.8 High
- logwatch LogWatch 2.5 allows local users to gain root privileges via a symlink attack, a different... 7.2 High
- sgi irix Buffer overflow in SNMP daemon (snmpd) on SGI IRIX 6.5 through 6.5.15m allows remote attackers to... 7.5 High
- sun solaris, sunos +1 more Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a... 7.2 High
- oracle configurator Multiple cross-site scripting (XSS) vulnerabilities in Oracle Configurator before 11.5.7.17.32... 6.8 Medium
- oracle configurator Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain... 7.5 High
- ibm aix parallel systems support programs Unknown vulnerability in IBM AIX Parallel Systems Support Programs (PSSP) 3.1.1, 3.2, and 3.4... 5.0 Medium
- andries brouwer util-linux vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases,... 7.2 High
- elm development group elm Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a... 7.5 High