CVEs published in May 2002

188 vulnerabilities, 10 critical, 0 exploited.

• gnu mailman Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute... CVE-2002-0388 Public exploitFix available 7.5 HighMay 31, 2002
• symantec enterprise firewall SMTP proxy in Symantec Enterprise Firewall (SEF) 6.5.x includes the firewall's physical interface... CVE-2002-0309 5.0 MediumMay 31, 2002
• symantec enterprise firewall The Notify daemon for Symantec Enterprise Firewall (SEF) 6.5.x drops large alerts when SNMP is... CVE-2002-0302 5.0 MediumMay 31, 2002
• gnujsp gnujsp 1.0.0 and 1.0.1 allows remote attackers to list directories, read source code of certain... CVE-2002-0300 Public exploit 5.0 MediumMay 31, 2002
• cnet catchup CNet CatchUp before 1.3.1 allows attackers to execute arbitrary code via a .RVP file that creates... CVE-2002-0299 7.6 HighMay 31, 2002
• open source development network slashcode Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere,... CVE-2002-0292 2.6 LowMay 31, 2002
• netwin webnews Buffer overflow in Netwin WebNews CGI program 1.1, Webnews.exe, allows remote attackers to... CVE-2002-0290 7.5 HighMay 31, 2002
• powie pforum pforum 1.14 and earlier does not explicitly enable PHP magic quotes, which allows remote... CVE-2002-0287 10.0 HighMay 31, 2002
• ettercap Buffer overflow in various decoders in Ettercap 0.6.3.1 and earlier, when running on networks... CVE-2002-0276 Public exploit 7.5 HighMay 31, 2002
• blueface falcon web server Falcon web server 2.0.0.1020 and earlier allows remote attackers to bypass authentication and... CVE-2002-0275 5.0 MediumMay 31, 2002
• university of cambridge exim Exim 3.34 and earlier may allow local users to gain privileges via a buffer overflow in long -C ... CVE-2002-0274 4.6 MediumMay 31, 2002
• rob flynn gaim Gaim 0.57 stores sensitive information in world-readable and group-writable files in the /tmp... CVE-2002-0377 2.1 LowMay 29, 2002
• padl software pam ldap Format string vulnerability in the logging function for the pam_ldap PAM LDAP module before... CVE-2002-0374 7.5 HighMay 29, 2002
• aladdin enterprises ghostscript ghostscript before 6.53 allows attackers to execute arbitrary commands by using .locksafe or ... CVE-2002-0363 7.5 HighMay 29, 2002
• aol instant messenger Buffer overflow in AOL Instant Messenger (AIM) 4.2 and later allows remote attackers to execute... CVE-2002-0362 7.5 HighMay 29, 2002
• sgi irix Vulnerability in XFS filesystem reorganizer (fsr_xfs) in SGI IRIX 6.5.10 and earlier allows local... CVE-2002-0356 7.2 HighMay 29, 2002
• sgi irix netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the... CVE-2002-0355 2.1 LowMay 29, 2002
• sips preferences.php in Simple Internet Publishing System (SIPS) before 0.3.1 allows remote attackers... CVE-2002-0267 10.0 HighMay 29, 2002
• sawmill Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable... CVE-2002-0265 Public exploit 4.6 MediumMay 29, 2002
• licq Buffer overflow in licq 1.0.4 and earlier allows remote attackers to cause a denial of service ... CVE-2002-0251 7.5 HighMay 29, 2002
• hp advancestack 10base-t switching hub j3200a, advancestack 10base-t switching hub j3201a, advancestack 10base-t switching hub j3202a +4 more +6 more Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A... CVE-2002-0250 Public exploit 7.5 HighMay 29, 2002
• caldera unixware Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows... CVE-2002-0246 Public exploit 7.2 HighMay 29, 2002
• cisco secure access control server NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired... CVE-2002-0241 7.5 HighMay 29, 2002
• iss blackice agent, blackice defender, realsecure server sensor +2 more Buffer overflow in ISS BlackICE Defender 2.9 and earlier, BlackICE Agent 3.0 and 3.1, and... CVE-2002-0237 7.5 HighMay 29, 2002
• microsoft internet explorer Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via... CVE-2002-0193 Public exploit EPSS 33.3% 7.5 HighMay 29, 2002
• microsoft internet explorer Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to view arbitrary files... CVE-2002-0191 Public exploit EPSS 29.0% 5.0 MediumMay 29, 2002
• microsoft internet explorer Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code... CVE-2002-0190 EPSS 24.0% 7.5 HighMay 29, 2002
• microsoft internet explorer Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via... CVE-2002-0188 EPSS 16.3% 7.5 HighMay 29, 2002
• gnu sharutils uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename... CVE-2002-0178 7.2 HighMay 29, 2002
• sgi irix nsd on SGI IRIX before 6.5.11 allows local users to overwrite arbitrary files and gain root... CVE-2002-0174 7.2 HighMay 29, 2002
• redhat docbook stylesheets, docbook utils +1 more The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure... CVE-2002-0169 4.6 MediumMay 29, 2002
• microsoft msn messenger, msn chat control, msn messenger service for exchange +2 more Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and... CVE-2002-0155 EPSS 24.1% 7.5 HighMay 29, 2002
• sun solaris, sunos +1 more Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to... CVE-2002-0033 Public exploit EPSS 23.1% 10.0 HighMay 29, 2002
• cisco vpn client Buffer overflow in the vpnclient program for UNIX VPN Client before 3.5.2 allows local users to... CVE-2002-1447 Public exploit 7.2 HighMay 28, 2002
• oracle application server web cache Multiple buffer overflows in Oracle Web Cache for Oracle 9i Application Server (9iAS) allow... CVE-2002-1641 10.0 HighMay 27, 2002
• sun solaris answerbook2 Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary... CVE-2002-0360 7.5 HighMay 21, 2002
• phpslash Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator... CVE-2001-1334 Public exploit 5.0 MediumMay 19, 2002
• iss realsecure event collector Memory leak in RealSecure Event Collector 6.5 allows attackers to cause a denial of service ... CVE-2002-1280 5.0 MediumMay 17, 2002
• microsoft internet explorer Cross-site scripting vulnerability in Internet Explorer 6.0 allows remote attackers to execute... CVE-2002-0189 Public exploit EPSS 13.6% 7.5 HighMay 17, 2002
• microsoft outlook, word +1 more Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does... CVE-2002-1056 EPSS 18.5% 7.5 HighMay 16, 2002
• dcscripts dcforum retrieve_password.pl in DCForum 6.x and 2000 generates predictable new passwords based on a... CVE-2002-0226 7.5 HighMay 16, 2002
• sgi irix, xinet k-ashare +1 more xkas in Xinet K-AShare 0.011.01 for IRIX allows local users to read arbitrary files via a symlink... CVE-2002-0213 2.1 LowMay 16, 2002
• tarantella enterprise Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a... CVE-2002-0211 Public exploit 6.2 MediumMay 16, 2002
• nortel alteon acedirector Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing (SLB) and Cookie-Based... CVE-2002-0209 Public exploit 5.0 MediumMay 16, 2002
• realnetworks realone player, realplayer intranet +1 more Buffer overflow in Real Networks RealPlayer 8.0 and earlier allows remote attackers to execute... CVE-2002-0207 Public exploit 7.5 HighMay 16, 2002
• psychoid psybnc psyBNC 2.3 beta and earlier allows remote attackers to spoof encrypted, trusted messages by... CVE-2002-0197 7.5 HighMay 16, 2002
• acd incorporated cwpapi GetRelativePath in ACD Incorporated CwpAPI 1.1 only verifies if the server root is somewhere... CVE-2002-0196 6.4 MediumMay 16, 2002
• apache mod python mod_python version 2.7.6 and earlier allows a module indirectly imported by a published module to... CVE-2002-0185 7.5 HighMay 16, 2002
• sudo project sudo, debian linux +1 more Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow... CVE-2002-0184 Public exploit 7.8 HighMay 16, 2002
• sgi irix Buffer overflow in cpr for the eoe.sw.cpr SGI Checkpoint-Restart Software package on SGI IRIX 6.5... CVE-2002-0173 7.2 HighMay 16, 2002
• Show olderLoading…