CVEs published in June 2002

184 vulnerabilities, 21 critical, 1 exploited.

• xchat XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a... CVE-2002-0382 7.5 HighJune 25, 2002
• freebsd, netbsd, openbsd +2 more The TCP implementation in various BSD operating systems (tcp_input.c) does not properly block... CVE-2002-0381 5.0 MediumJune 25, 2002
• university of washington uw-imap Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and... CVE-2002-0379 Public exploit EPSS 19.4% 7.5 HighJune 25, 2002
• microsoft windows, windows 2000, windows nt +2 more smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate... CVE-2002-0367 In KEVPublic exploit 7.8 HighJune 25, 2002
• cisco ios Cisco IOS 11.1CC through 12.2 with Cisco Express Forwarding (CEF) enabled includes portions of... CVE-2002-0339 5.0 MediumJune 25, 2002
• openbb Cross-site scripting vulnerability in codeparse.php of Open Bulletin Board (OpenBB) 1.0.0 allows... CVE-2002-0330 Public exploit 7.5 HighJune 25, 2002
• snitz communications forums 2000 Cross-site scripting vulnerability in Snitz Forums 2000 3.3.03 and earlier allows remote... CVE-2002-0329 Public exploit 7.5 HighJune 25, 2002
• freeradius FreeRADIUS RADIUS server allows remote attackers to cause a denial of service (CPU consumption)... CVE-2002-0318 5.0 MediumJune 25, 2002
• essen essentia web server Buffer overflow in Essentia Web Server 2.1 allows remote attackers to cause a denial of service,... CVE-2002-0313 Public exploit 7.5 HighJune 25, 2002
• fetchmail fetchmail email client before 5.9.10 does not properly limit the maximum number of messages... CVE-2002-0146 5.0 MediumJune 25, 2002
• xchat XChat 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allows remote... CVE-2002-0006 Public exploit 7.5 HighJune 25, 2002
• dnstools software dnstools dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication... CVE-2002-0613 Public exploit EPSS 11.3% 10.0 HighJune 18, 2002
• macromedia flash player Buffer overflow in Flash OCX for Macromedia Flash 6 revision 23 (6,0,23,0) allows remote... CVE-2002-0605 7.5 HighJune 18, 2002
• information security systems realsecure network sensor ISS RealSecure Network Sensor 5.x through 6.5 allows remote attackers to cause a denial of... CVE-2002-0601 5.0 MediumJune 18, 2002
• blahz-dns Blahz-DNS 0.2 and earlier allows remote attackers to bypass authentication and modify... CVE-2002-0599 Public exploit EPSS 11.5% 10.0 HighJune 18, 2002
• foundstone fscan Format string vulnerability in Foundstone FScan 1.12 with banner grabbing enabled allows remote... CVE-2002-0598 7.5 HighJune 18, 2002
• microsoft windows 2000 LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service ... CVE-2002-0597 Public exploit EPSS 46.6% 5.0 MediumJune 18, 2002
• mozilla, galeon browser, netscape navigator +2 more Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of... CVE-2002-0594 5.0 MediumJune 18, 2002
• allaire coldfusion server ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute... CVE-2002-0576 5.0 MediumJune 18, 2002
• openbsd openssh Buffer overflow in OpenSSH before 2.9.9, and 3.x before 3.2.1, with Kerberos/AFS support and... CVE-2002-0575 Public exploit 7.5 HighJune 18, 2002
• ethereal group ethereal Vulnerability in GIOP dissector in Ethereal before 0.9.3 allows remote attackers to cause a... CVE-2002-0404 5.0 MediumJune 18, 2002
• ethereal group ethereal DNS dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (CPU... CVE-2002-0403 5.0 MediumJune 18, 2002
• ethereal group ethereal Buffer overflow in X11 dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a... CVE-2002-0402 7.5 HighJune 18, 2002
• ethereal, debian linux +1 more SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service ... CVE-2002-0401 7.5 HighJune 18, 2002
• isc bind ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a... CVE-2002-0400 EPSS 14.2% 5.0 MediumJune 18, 2002
• gnu mailman Pipermail in Mailman stores private mail messages with predictable filenames in a world... CVE-2002-0389 Fix available 2.1 LowJune 18, 2002
• lbl tcpdump Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service... CVE-2002-0380 Fix available 7.5 HighJune 18, 2002
• microsoft exchange server The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service... CVE-2002-0368 EPSS 15.2% 5.0 MediumJune 18, 2002
• sgi irix Unknown vulnerability in rpc.passwd in the nfs.sw.nis subsystem of SGI IRIX 6.5.15 and earlier... CVE-2002-0357 7.2 HighJune 18, 2002
• sgi irix Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a... CVE-2002-0042 2.1 LowJune 18, 2002
• astart technologies lprng The default configuration of LPRng print spooler in Red Hat Linux 7.0 through 7.3, Mandrake 8.1... CVE-2002-0378 7.5 HighJune 15, 2002
• microsoft internet explorer, isa server, proxy server +1 more +3 more Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2... CVE-2002-0371 Public exploit EPSS 54.4% 7.5 HighJune 15, 2002
• php-survey PHP-Survey 20000615 and earlier stores the global.inc file under the web root, which allows... CVE-2002-0614 5.0 MediumJune 11, 2002
• craig patchett fileseek FileSeek.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in... CVE-2002-0612 Public exploit 7.5 HighJune 11, 2002
• craig patchett fileseek Directory traversal vulnerability in FileSeek.cgi allows remote attackers to read arbitrary files... CVE-2002-0611 Public exploit 5.0 MediumJune 11, 2002
• hp mpe ix Vulnerability in FTPSRVR in HP MPE/iX 6.0 through 7.0 does not properly validate certain FTP... CVE-2002-0610 7.5 HighJune 11, 2002
• hp mpe ix Vulnerability in HP MPE/iX 6.0 through 7.0 allows attackers to cause a denial of service (system... CVE-2002-0609 5.0 MediumJune 11, 2002
• matu ftp Buffer overflow in Matu FTP client 1.74 allows remote FTP servers to execute arbitrary code via a... CVE-2002-0608 Public exploit 7.5 HighJune 11, 2002
• snitz communications forums 2000 members.asp in Snitz Forums 2000 version 3.3.03 and earlier allows remote attackers to execute... CVE-2002-0607 Public exploit 7.5 HighJune 11, 2002
• 3com 3cdaemon Buffer overflow in 3Cdaemon 2.0 FTP server allows remote attackers to cause a denial of service ... CVE-2002-0606 Public exploit EPSS 10.6% 7.5 HighJune 11, 2002
• snapgear lite\+ firewall Snapgear Lite+ firewall 1.5.3 and 1.5.4 allows remote attackers to cause a denial of service ... CVE-2002-0604 5.0 MediumJune 11, 2002
• snapgear lite\+ firewall Snapgear Lite+ firewall 1.5.3 allows remote attackers to cause a denial of service (IPSEC crash)... CVE-2002-0603 5.0 MediumJune 11, 2002
• snapgear lite\+ firewall Snapgear Lite+ firewall 1.5.4 and 1.5.3 allows remote attackers to cause a denial of service ... CVE-2002-0602 5.0 MediumJune 11, 2002
• kth kerberos, luke mewburn lukemftp +1 more Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute... CVE-2002-0600 7.5 HighJune 11, 2002
• webtrends reporting center WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web... CVE-2002-0596 5.0 MediumJune 11, 2002
• webtrends reporting center Buffer overflow in WTRS_UI.EXE (WTX_REMOTE.DLL) for WebTrends Reporting Center 4.0d allows remote... CVE-2002-0595 Public exploit EPSS 10.7% 7.5 HighJune 11, 2002
• mozilla, netscape communicator, navigator +2 more Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a... CVE-2002-0593 7.5 HighJune 11, 2002
• aol instant messenger AOL Instant Messenger (AIM) allows remote attackers to steal files that are being transferred to... CVE-2002-0592 7.5 HighJune 11, 2002
• aol instant messenger Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows... CVE-2002-0591 Public exploit EPSS 11.6% 5.0 MediumJune 11, 2002
• icredibb Cross-site scripting (CSS) vulnerability in IcrediBB 1.1 Beta allows remote attackers to execute... CVE-2002-0590 Public exploit 7.5 HighJune 11, 2002
• Show olderLoading…