CVEs published in December 2002

874 vulnerabilities, 73 critical, 0 exploited.

• citrix access essentials, metaframe presentation server, presentation server +2 more Cross-site request forgery (CSRF) vulnerability in Citrix Presentation Server 4.0 and 4.5,... CVE-2002-2426 4.3 MediumDecember 31, 2002
• sun solaris answerbook2 Sun AnswerBook2 1.2 through 1.4.2 allows remote attackers to execute administrative scripts such... CVE-2002-2425 Public exploit 10.0 HighDecember 31, 2002
• ekilat llc php\(reactor\) Cross-site scripting (XSS) vulnerability in PHP(Reactor) 1.2.7 pl1 allows remote attackers to... CVE-2002-2424 Public exploit 4.3 MediumDecember 31, 2002
• sendmail Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows... CVE-2002-2423 6.4 MediumDecember 31, 2002
• compaq insight management agent Cross-site scripting (XSS) vulnerability in Compaq Insight Management Agents 2.0, 2.1, 3.6.0, 4.2... CVE-2002-2422 Public exploit 4.3 MediumDecember 31, 2002
• andrey cherezov acweb acWEB 1.14 allows remote attackers to cause a denial of service (crash) via an HTTP request for a... CVE-2002-2421 7.8 HighDecember 31, 2002
• independent solution super site searcher, simple site searcher +1 more site_searcher.cgi in Super Site Searcher allows remote attackers to execute arbitrary commands... CVE-2002-2420 Public exploit 7.5 HighDecember 31, 2002
• dctc project dctc Direct connect text client (DCTC) client 0.83.3 allows remote attackers to cause a denial of... CVE-2002-2419 7.8 HighDecember 31, 2002
• acfp project acfreeproxy Cross-site scripting (XSS) vulnerability in acFreeProxy (aka acFP) 1.33 beta 7 allows remote... CVE-2002-2418 4.3 MediumDecember 31, 2002
• acftp acFTP 1.4 does not properly handle when an invalid password is provided by the user during... CVE-2002-2417 Public exploit 10.0 HighDecember 31, 2002
• zeroo http server Directory traversal vulnerability in Zeroo web server 1.5 allows remote attackers to read... CVE-2002-2416 Public exploit 5.0 MediumDecember 31, 2002
• alliedtelesyn at-8024, rapier 24 +1 more Allied Telesyn AT-8024 1.3.1 and Rapier 24 switches allow remote authenticated users to cause a... CVE-2002-2415 6.8 MediumDecember 31, 2002
• opera software opera, squid +1 more Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a... CVE-2002-2414 4.3 MediumDecember 31, 2002
• deerfield website pro WebSite Pro 3.1.11.0 on Windows allows remote attackers to read script source code for files with... CVE-2002-2413 5.0 MediumDecember 31, 2002
• nullsoft winamp Winamp 2.80 stores authentication credentials in plaintext in the (1) [HTTP-AUTH] and (2) [winamp... CVE-2002-2412 2.1 LowDecember 31, 2002
• bannerwheel Buffer overflow in badmin.c in BannerWheel 1.0 allows remote attackers to execute arbitrary code... CVE-2002-2411 10.0 HighDecember 31, 2002
• open webmail webmail openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and... CVE-2002-2410 5.0 MediumDecember 31, 2002
• qnx photon microgui, neutrino rtos +1 more Photon microGUI in QNX Neutrino realtime operating system (RTOS) 6.1.0 and 6.2.0 allows attackers... CVE-2002-2409 3.5 LowDecember 31, 2002
• gordano ntmail Gordano Messaging Server (GMS) Mail 8 (a.k.a. NTMail) only filters email messages for the first... CVE-2002-2408 7.5 HighDecember 31, 2002
• qnx rtos Certain patches for QNX Neutrino realtime operating system (RTOS) 6.2.0 set insecure permissions... CVE-2002-2407 6.9 MediumDecember 31, 2002
• perception liteserve Buffer overflow in HTTP server in LiteServe 2.0, 2.0.1 and 2.0.2 allows remote attackers to cause... CVE-2002-2406 5.0 MediumDecember 31, 2002
• checkpoint firewall-1 Check Point FireWall-1 4.1 and Next Generation (NG), with UserAuth configured to proxy HTTP... CVE-2002-2405 4.9 MediumDecember 31, 2002
• curtis specialty consulting iispop Buffer overflow in IISPop email server 1.161 and 1.181 allows remote attackers to cause a denial... CVE-2002-2404 Public exploit 5.0 MediumDecember 31, 2002
• key focus kf web server Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read... CVE-2002-2403 Public exploit 5.0 MediumDecember 31, 2002
• surecom ep-4501 SURECOM broadband router EP-4501 uses a default SNMP read community string of "public" and a... CVE-2002-2402 10.0 HighDecember 31, 2002
• microsoft windows 2000, windows nt, windows xp +2 more NT Virtual DOS Machine (NTVDM.EXE) in Windows 2000, NT and XP does not verify user execution... CVE-2002-2401 3.6 LowDecember 31, 2002
• hughes technologies libhttpd Buffer overflow in the httpdProcessRequest function in LibHTTPD 1.2 allows remote attackers to... CVE-2002-2400 Public exploit 10.0 HighDecember 31, 2002
• cascadesoft w3mail Directory traversal vulnerability in viewAttachment.cgi in W3Mail 1.0.6 allows remote attackers... CVE-2002-2399 Public exploit 6.4 MediumDecember 31, 2002
• app apboard The new thread posting page in APBoard 2.02 and 2.03 allows remote attackers to post messages to... CVE-2002-2398 5.0 MediumDecember 31, 2002
• symantec sygate personal firewall Sygate personal firewall 5.0 could allow remote attackers to bypass firewall filters via spoofed ... CVE-2002-2397 10.0 HighDecember 31, 2002
• remi lefebvre advanced tftp Buffer overflow in Advanced TFTP (atftp) 0.5 and 0.6, if installed setuid or setgid, may allow... CVE-2002-2396 7.2 HighDecember 31, 2002
• trend micro interscan viruswall InterScan VirusWall 3.52 for Windows allows remote attackers to bypass virus protection and... CVE-2002-2395 5.0 MediumDecember 31, 2002
• trend micro interscan viruswall InterScan VirusWall 3.6 for Linux and 3.52 for Windows allows remote attackers to bypass virus... CVE-2002-2394 5.0 MediumDecember 31, 2002
• solarwinds serv-u file server Serv-U FTP server 3.0, 3.1 and 4.0.0.4 does not accept new connections while validating user... CVE-2002-2393 5.0 MediumDecember 31, 2002
• nullsoft winamp Winamp 2.65 through 3.0 stores skin files in a predictable file location, which allows remote... CVE-2002-2392 6.4 MediumDecember 31, 2002
• webchat.org webchat, xoops +1 more SQL injection vulnerability in index.php of WebChat 1.5 included in XOOPS 1.0 allows remote... CVE-2002-2391 7.5 HighDecember 31, 2002
• cerulean studios trillian, trillian pro +1 more Buffer overflow in the IDENT daemon (identd) in Trillian 0.6351, 0.725, 0.73, 0.74 and 1.0 pro... CVE-2002-2390 10.0 HighDecember 31, 2002
• fastlink software the server TheServer 1.74 web server stores server.ini under the web document root with insufficient access... CVE-2002-2389 5.0 MediumDecember 31, 2002
• inweb mail server Buffer overflow in INweb POP3 mail server 2.01 allows remote attackers to cause a denial of... CVE-2002-2388 5.0 MediumDecember 31, 2002
• mollensoft software hyperion ftp server Directory traversal vulnerability in Hyperion FTP server 2.8.1 allows remote attackers to read... CVE-2002-2387 5.0 MediumDecember 31, 2002
• xoops Cross-site scripting (XSS) vulnerability in the Quizz module for XOOPS 1.0, when allowing on-line... CVE-2002-2386 4.3 MediumDecember 31, 2002
• hotfoon corporation hotfoon Buffer overflow in hotfoon4.exe in Hotfoon 4.0 allows remote attackers to cause a denial of... CVE-2002-2385 Public exploit 7.5 HighDecember 31, 2002
• hotfoon corporation hotfoon hotfoon4.exe in Hotfoon 4.00 stores user names and passwords in cleartext in the hotfoon2... CVE-2002-2384 3.6 LowDecember 31, 2002
• f2html.pl SQL injection vulnerability in f2html.pl 0.1 through 0.4 allows remote attackers to execute... CVE-2002-2383 7.5 HighDecember 31, 2002
• cvsup cvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain privileges via a... CVE-2002-2382 7.2 HighDecember 31, 2002
• ka-shu wong gtetrinet Multiple buffer overflows in (1) tetrinet_inmessage, (2) speclist_add and (3) config-getthemeinfo... CVE-2002-2381 7.5 HighDecember 31, 2002
• microsoft network firmware NetDSL ADSL Modem 800 with Microsoft Network firmware 5.5.11 allows remote attackers to gain... CVE-2002-2380 EPSS 10.9% 6.4 MediumDecember 31, 2002
• cisco as5350 ** DISPUTED ** Cisco AS5350 IOS 12.2(11)T with access control lists (ACLs) applied and possibly... CVE-2002-2379 Public exploitDisputed 7.8 HighDecember 31, 2002
• nakata an httpd Cross-site scripting (XSS) vulnerability in AN HTTP 1.41d allows remote attackers to inject... CVE-2002-2378 4.3 MediumDecember 31, 2002
• sephiroth32 zap book Cross-site scripting (XSS) vulnerability in addentry.cgi in ZAP 1.0.3 allows remote attackers to... CVE-2002-2377 4.3 MediumDecember 31, 2002
• Show olderLoading…