CVEs published in October 2002

160 vulnerabilities, 5 critical, 0 exploited.

• sun solaris, sunos +1 more The Web-Based Enterprise Management (WBEM) packages (1) SUNWwbdoc, (2) SUNWwbcou, (3) SUNWwbdev... CVE-2002-1590 7.2 HighOctober 29, 2002
• solarwinds tftp server Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows... CVE-2002-1209 Public exploit EPSS 12.9% 5.0 MediumOctober 29, 2002
• oracle application server The administration module for Oracle Web Cache in Oracle9iAS (9i Application Suite) 9.0.2 allows... CVE-2002-0386 Public exploit EPSS 22.0% 5.0 MediumOctober 29, 2002
• pam PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows local... CVE-2002-1227 Fix available 7.5 HighOctober 28, 2002
• kde Directory traversal vulnerability in kpf for KDE 3.0.1 through KDE 3.0.3a allows remote attackers... CVE-2002-1224 Public exploit 5.0 MediumOctober 28, 2002
• kde Buffer overflow in DSC 3.0 parser from GSview, as used in KGhostView in KDE 1.1 and KDE 3.0.3a,... CVE-2002-1223 7.5 HighOctober 28, 2002
• cisco catos Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through... CVE-2002-1222 Public exploit 7.1 HighOctober 28, 2002
• microsoft windows 2000, windows xp, windows 2000 terminal services +2 more Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers... CVE-2002-1214 EPSS 49.9% 7.5 HighOctober 28, 2002
• caldera openlinux, sco openserver, sun solaris +1 more +3 more The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers... CVE-2002-1199 5.0 MediumOctober 28, 2002
• mozilla bugzilla Bugzilla 2.16.x before 2.16.1 does not properly filter apostrophes from an email address during... CVE-2002-1198 7.5 HighOctober 28, 2002
• mozilla bugzilla bugzilla_email_append.pl in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, allows... CVE-2002-1197 7.5 HighOctober 28, 2002
• microsoft outlook express Buffer overflow in the S/MIME Parsing capability in Microsoft Outlook Express 5.5 and 6.0 allows... CVE-2002-1179 Public exploit EPSS 22.1% 7.5 HighOctober 28, 2002
• oracle oracle8i, oracle9i +1 more TNS Listener in Oracle Net Services for Oracle 9i 9.2.x and 9.0.x, and Oracle 8i 8.1.x, allows... CVE-2002-1118 5.0 MediumOctober 28, 2002
• symantec enterprise firewall, gateway security, raptor firewall +1 more +3 more The web proxy component in Symantec Enterprise Firewall (SEF) 6.5.2 through 7.0, Raptor Firewall... CVE-2002-0990 5.0 MediumOctober 28, 2002
• hp secure os, mandrakesoft mandrake linux, redhat linux +2 more dvips converter for Postscript files in the tetex package calls the system() function insecurely,... CVE-2002-0836 Fix available 7.5 HighOctober 28, 2002
• kth kerberos 4, kerberos 5, debian linux +2 more The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in... CVE-2002-1235 Fix available EPSS 15.1% 10.0 HighOctober 25, 2002
• apache http server A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian... CVE-2002-1233 Fix available 2.6 LowOctober 25, 2002
• ibm websphere caching proxy server Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and... CVE-2002-1168 Public exploit 6.8 MediumOctober 25, 2002
• ibm websphere caching proxy server Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and... CVE-2002-1167 Public exploit 6.8 MediumOctober 25, 2002
• frees wan wan, apple mac os x, mac os x server +9 more +11 more IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length... CVE-2002-0666 Fix available 5.0 MediumOctober 25, 2002
• sun solaris, sunos +1 more Unknown vulnerability in Solaris 8, when the 0x02 bit (aka TEST, KMF_DEADBEEF, or deadbeef) is... CVE-2002-1589 2.1 LowOctober 24, 2002
• microsoft windows 2000 Memory leak in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows 2000 before SP3,... CVE-2001-1451 EPSS 27.9% 5.0 MediumOctober 22, 2002
• mod ssl ssl Cross-site scripting vulnerability in the mod_ssl Apache module 2.8.9 and earlier, when... CVE-2002-1157 Fix available EPSS 11.1% 7.5 HighOctober 22, 2002
• avaya cajun p550, cajun p550r, cajun p580 +2 more +4 more Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts... CVE-2002-1229 7.5 HighOctober 21, 2002
• sun solaris, sunos +1 more Unknown vulnerability in NFS on Solaris 2.5.1 through Solaris 9 allows an NFS client to cause a... CVE-2002-1228 5.0 MediumOctober 21, 2002
• microsoft internet explorer Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5... CVE-2002-1217 Public exploit EPSS 49.8% 7.5 HighOctober 21, 2002
• gnu tar GNU tar 1.13.19 and other versions before 1.13.25 allows remote attackers to overwrite arbitrary... CVE-2002-1216 Fix available 5.0 MediumOctober 21, 2002
• radiobird software webserver 4 all Directory traversal vulnerability in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and... CVE-2002-1213 5.0 MediumOctober 21, 2002
• radiobird software webserver 4 all Buffer overflow in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions... CVE-2002-1212 5.0 MediumOctober 21, 2002
• sabre desktop reservation software The Sabserv client component in Sabre Desktop Reservation Software 4.2 through 4.4 allows remote... CVE-2002-1191 5.0 MediumOctober 21, 2002
• microsoft data engine, sql server +1 more The xp_runwebtask stored procedure in the Web Tasks component of Microsoft SQL Server 7.0 and... CVE-2002-1145 10.0 HighOctober 21, 2002
• debian linux, hp secure os +1 more Memory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier... CVE-2002-1232 Fix available 5.0 MediumOctober 21, 2002
• kth heimdal Unknown vulnerabilities in Heimdal before 0.5 with unknown impact, possibly in the (1) kadmind... CVE-2002-1226 Fix available 10.0 HighOctober 17, 2002
• kth heimdal Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc... CVE-2002-1225 Fix available 10.0 HighOctober 17, 2002
• hp hp-ux, jfs +1 more JFS (JFS3.1 and OnlineJFS) in HP-UX 10.20, 11.00, and 11.04 does not properly implement the... CVE-2002-1618 7.2 HighOctober 16, 2002
• ibm secureway firewall IBM SecureWay Firewall before 4.2.2 performs extra processing before determining that a packet is... CVE-2002-1203 5.0 MediumOctober 15, 2002
• compaq tru64 Unknown vulnerability in routed for HP Tru64 UNIX V4.0F through V5.1A allows local and remote... CVE-2002-1202 7.5 HighOctober 15, 2002
• ibm aix IBM AIX 4.3.3 and AIX 5 allows remote attackers to cause a denial of service (CPU consumption or... CVE-2002-1201 5.0 MediumOctober 15, 2002
• netbsd Buffer overflow in talkd on NetBSD 1.6 and earlier, and possibly other operating systems, may... CVE-2002-1194 7.5 HighOctober 15, 2002
• netbsd, rogue +1 more Multiple buffer overflows in rogue on NetBSD 1.6 and earlier, FreeBSD 4.6, and possibly other... CVE-2002-1192 Public exploit 4.6 MediumOctober 15, 2002
• cisco unity server Cisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers... CVE-2002-1190 7.5 HighOctober 15, 2002
• oneidentity syslog-ng Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or... CVE-2002-1200 Fix available 7.5 HighOctober 15, 2002
• linux-ha heartbeat Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier (claimed as buffer... CVE-2002-1215 Fix available 10.0 HighOctober 14, 2002
• cisco unity server The default configuration of Cisco Unity 2.x and 3.x does not block international operator calls... CVE-2002-1189 4.6 MediumOctober 11, 2002
• jetty http server Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows... CVE-2002-1178 Public exploit 5.0 MediumOctober 11, 2002
• net-snmp The handle_var_requests function in snmp_agent.c for the SNMP daemon in the Net-SNMP (formerly... CVE-2002-1170 Fix available 5.0 MediumOctober 11, 2002
• apache http server Apache 2.0.42 allows remote attackers to view the source code of a CGI script via a POST request... CVE-2002-1156 Fix available EPSS 14.9% 5.0 MediumOctober 11, 2002
• stephen turner analog anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update... CVE-2002-1154 Fix available 5.0 MediumOctober 11, 2002
• ibm websphere application server IBM Websphere 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly... CVE-2002-1153 5.0 MediumOctober 11, 2002
• kde Konqueror in KDE 3.0 through 3.0.2 does not properly detect the "secure" flag in an HTTP cookie,... CVE-2002-1152 7.5 HighOctober 11, 2002
• Show olderLoading…