Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2002
October

CVEs published in October 2002

160 vulnerabilities, 5 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

hp procurve switch 4000mThe HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with...CVE-2002-1147Public exploit7.1 HighOctober 11, 2002
gnu glibcThe BIND 4 and BIND 8.2.x stub resolver libraries, and other libraries such as glibc 2.2.5 and...CVE-2002-1146Fix available5.0 MediumOctober 11, 2002
microsoft servicesAn input validation error in the Sun Microsystems RPC library Services for Unix 3.0 Interix SD,...CVE-2002-1141EPSS 13.9%5.0 MediumOctober 11, 2002
microsoft servicesThe Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft...CVE-2002-1140EPSS 13.9%5.0 MediumOctober 11, 2002
microsoft windows me, windows xp, windows 98 plus pack +2 moreThe Compressed Folders feature in Microsoft Windows 98 with Plus! Pack, Windows Me, and Windows...CVE-2002-11395.0 MediumOctober 11, 2002
microsoft data engine, sql server +1 moreMicrosoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft...CVE-2002-11387.5 HighOctober 11, 2002
microsoft data engine, sql server +1 moreBuffer overflow in the Database Console Command (DBCC) that handles user inputs in Microsoft SQL...CVE-2002-11377.5 HighOctober 11, 2002
oracle mysqlBuffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.02, on the Win32...CVE-2002-09697.8 HighOctober 11, 2002
microsoft virtual machineMicrosoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to...CVE-2002-0867EPSS 27.3%5.0 MediumOctober 11, 2002
microsoft virtual machineJava Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5...CVE-2002-0866Public exploitEPSS 41.4%7.5 HighOctober 11, 2002
microsoft virtual machineA certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM)...CVE-2002-0865EPSS 19.8%7.5 HighOctober 11, 2002
microsoft windows xp, .net windows server, windows 2000 +1 more +3 moreThe Remote Data Protocol (RDP) version 5.1 in Microsoft Windows XP allows remote attackers to...CVE-2002-0864EPSS 16.0%5.0 MediumOctober 11, 2002
apache http server, oracle application server, database server +2 more +4 moreCross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43,...CVE-2002-0840Public exploitFix availableEPSS 95.1%6.8 MediumOctober 11, 2002
microsoft windows 2000, windows 98, windows xp +4 more +6 moreThe HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT...CVE-2002-0694EPSS 13.7%7.5 HighOctober 10, 2002
microsoft frontpage server extensions, windows 2000, windows xp +2 moreBuffer overflow in SmartHTML Interpreter (shtml.dll) in Microsoft FrontPage Server Extensions ...CVE-2002-0692EPSS 18.0%7.5 HighOctober 10, 2002
mozilla bugzillaeditproducts.cgi in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, when the ...CVE-2002-1196Fix available7.5 HighOctober 9, 2002
tkmailtkmail before 4.0beta9-8.1 allows local users to create or overwrite files as users via a symlink...CVE-2002-1193Fix available2.1 LowOctober 8, 2002
apache http server, oracle application server, database server +1 more +3 moreBuffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and...CVE-2002-0843EPSS 21.4%7.5 HighOctober 5, 2002
apache http server, debian linux +1 moreThe shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user...CVE-2002-08397.2 HighOctober 5, 2002
microsoft windows 2000, windows 98, windows xp +4 more +6 moreBuffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second...CVE-2002-0693Public exploitEPSS 31.3%7.5 HighOctober 5, 2002
allume systems division stuffit expander, ibm lotus notes, microsoft windows me +4 more +6 moreBuffer overflow in the ZIP capability for multiple products allows remote attackers to cause a...CVE-2002-0370EPSS 43.3%7.5 HighOctober 5, 2002
phpwebsitemodsecurity.php 1.10 and earlier, in phpWebSite 0.8.2 and earlier, allows remote attackers to...CVE-2002-1135Public exploit7.5 HighOctober 4, 2002
squirrelmailSquirrelMail 1.2.7 and earlier allows remote attackers to determine the absolute pathname of the...CVE-2002-11325.0 MediumOctober 4, 2002
symantec veritas backup execVeritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for...CVE-2002-11175.0 MediumOctober 4, 2002
amavis virus scannersecuretar, as used in AMaViS shell script 0.2.1 and earlier, allows users to cause a denial of...CVE-2002-11092.1 LowOctober 4, 2002
cisco vpn clientCisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.6(Rel), when...CVE-2002-11085.0 MediumOctober 4, 2002
cisco vpn clientCisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.2B, does not...CVE-2002-11077.5 HighOctober 4, 2002
cisco vpn clientCisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, does not...CVE-2002-11067.5 HighOctober 4, 2002
cisco vpn clientCisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, allows local...CVE-2002-11054.6 MediumOctober 4, 2002
cisco vpn clientCisco Virtual Private Network (VPN) Client software 2.x.x and 3.x before 3.0.5 allows remote...CVE-2002-11045.0 MediumOctober 4, 2002
cisco vpn 3000 concentrator series software, vpn 3002 hardware client +1 moreThe LAN-to-LAN IPSEC capability for Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.4,...CVE-2002-11025.0 MediumOctober 4, 2002
cisco vpn 3000 concentrator series software, vpn 3002 hardware client +1 moreCisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to obtain...CVE-2002-10995.0 MediumOctober 4, 2002
cisco vpn 3000 concentrator series software, vpn 3002 hardware client +1 moreCisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, adds an "HTTPS on Public Inbound (XML...CVE-2002-10987.5 HighOctober 4, 2002
cisco vpn 3000 concentrator series software, vpn 3002 hardware client +1 moreCisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.2, allows restricted administrators to...CVE-2002-10977.5 HighOctober 4, 2002
cisco vpn 3000 concentrator series software, vpn 3002 hardware client +1 moreCisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.1, allows restricted administrators to...CVE-2002-10967.5 HighOctober 4, 2002
cisco secure access control server, vpn 3000 concentrator series software, vpn 3002 hardware client +2 moreCisco VPN 3000 Concentrator before 2.5.2(F), with encryption enabled, allows remote attackers to...CVE-2002-10955.0 MediumOctober 4, 2002
cisco vpn 3000 concentrator series softwareHTML interface for Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.0.3(B) allows remote...CVE-2002-10935.0 MediumOctober 4, 2002
cisco vpn 3000 concentrator series softwareCisco VPN 3000 Concentrator 3.6(Rel) and earlier, and 2.x.x, when configured to use internal...CVE-2002-10927.5 HighOctober 4, 2002
mozilla, netscape navigator, opera software web browser +2 moreNetscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and...CVE-2002-10917.5 HighOctober 4, 2002
novell groupwiseBuffer overflow in Novell GroupWise 6.0.1 Support Pack 1 allows remote attackers to execute...CVE-2002-10887.5 HighOctober 4, 2002
aprelium technologies abyss web serverThe Administration console for Abyss Web Server 1.0.3 allows remote attackers to read files...CVE-2002-10815.0 MediumOctober 4, 2002
aprelium technologies abyss web serverDirectory traversal vulnerability in Abyss Web Server 1.0.3 allows remote attackers to read...CVE-2002-1079Public exploit5.0 MediumOctober 4, 2002
ipswitch imailBuffer overflow in the Web Messaging daemon for Ipswitch IMail before 7.12 allows remote...CVE-2002-1076Public exploitEPSS 13.8%7.5 HighOctober 4, 2002
bluecoat cacheosCross-site scripting (XSS) vulnerability in Blue Coat Systems (formerly CacheFlow) CacheOS on...CVE-2002-1060Public exploit4.3 MediumOctober 4, 2002
van dyke technologies securecrtBuffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows...CVE-2002-1059Public exploitEPSS 60.3%7.5 HighOctober 4, 2002
smartmax software mailmaxBuffer overflow in SmartMax MailMax POP3 daemon (popmax) 4.8 allows remote attackers to execute...CVE-2002-1057Public exploit7.5 HighOctober 4, 2002
pablo software solutions ftp serverDirectory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote...CVE-2002-10546.4 MediumOctober 4, 2002
w3c jigsawCross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote...CVE-2002-10536.8 MediumOctober 4, 2002
ehud gavron tracesrouteFormat string vulnerability in TrACESroute 6.0 GOLD (aka NANOG traceroute) allows local users to...CVE-2002-10514.6 MediumOctober 4, 2002
watchguard firebox, soho firewall +1 moreDynamic VPN Configuration Protocol service (DVCP) in Watchguard Firebox firmware 5.x.x allows...CVE-2002-10465.0 MediumOctober 4, 2002
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open