Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2002
December

CVEs published in December 2002

874 vulnerabilities, 73 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

easy software products cups, apple mac os x +1 moreCommon Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to...CVE-2002-1366Fix available6.2 MediumDecember 26, 2002
microsoft windows xpBuffer overflow in the Windows Shell function in Microsoft Windows XP allows remote attackers to...CVE-2002-1327EPSS 23.4%7.5 HighDecember 26, 2002
melange chat systemBuffer overflow in Melange Chat System 1.10 allows remote attackers to cause a denial of service ...CVE-2002-1351Public exploit5.0 MediumDecember 24, 2002
macromedia flash playerMacromedia Flash Player before 6.0.65.0 allows remote attackers to execute arbitrary code via...CVE-2002-13827.5 HighDecember 23, 2002
university of cambridge eximFormat string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows...CVE-2002-1381Public exploitFix available7.2 HighDecember 23, 2002
linux kernelLinux kernel 2.2.x allows local users to cause a denial of service (crash) by using the mmap()...CVE-2002-1380Public exploit2.1 LowDecember 23, 2002
vim development group vimvim 6.0 and 6.1, and possibly other versions, allows attackers to execute arbitrary commands...CVE-2002-1377Fix available4.6 MediumDecember 23, 2002
fetchmailHeap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the "@" character...CVE-2002-1365Fix available7.5 HighDecember 23, 2002
ehud gavron tracesrouteBuffer overflow in the get_origin function in traceroute-nanog allows attackers to execute...CVE-2002-1364Public exploit7.2 HighDecember 23, 2002
sun cobalt raq 4overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed...CVE-2002-1361Public exploitEPSS 11.9%10.0 HighDecember 23, 2002
microsoft windows 2000, windows 2000 terminal services, windows 95 +5 more +7 moreMicrosoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a...CVE-2002-1325EPSS 13.9%5.0 MediumDecember 23, 2002
sun solaris, sunos +1 moreDirectory traversal vulnerability in priocntl system call in Solaris does allows local users to...CVE-2002-12967.2 HighDecember 23, 2002
microsoft windows 2000, windows 2000 terminal services, windows 95 +5 more +7 moreThe Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier...CVE-2002-1260EPSS 15.5%7.5 HighDecember 23, 2002
microsoft windows 2000, windows 2000 terminal services, windows 95 +5 more +7 moreMicrosoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to...CVE-2002-1257EPSS 15.3%10.0 HighDecember 23, 2002
microsoft windows 2000, windows xp, windows 2000 terminal services +2 moreThe SMB signing capability in the Server Message Block (SMB) protocol in Microsoft Windows 2000...CVE-2002-12565.0 MediumDecember 23, 2002
carnegie mellon university cyrus imap serverInteger overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to...CVE-2002-1580Public exploitFix availableEPSS 16.5%7.5 HighDecember 23, 2002
easy software products cups, apple mac os x +1 moreMultiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow...CVE-2002-1383Fix available10.0 HighDecember 20, 2002
easy software products cups, apple mac os x +1 moreCommon Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a...CVE-2002-1368Public exploitFix availableEPSS 15.5%7.5 HighDecember 20, 2002
nullsoft winampMultiple buffer overflows in Winamp 3.0, when displaying an MP3 in the Media Library window,...CVE-2002-11777.5 HighDecember 20, 2002
nullsoft winampBuffer overflow in Winamp 2.81 allows remote attackers to execute arbitrary code via a long...CVE-2002-11767.5 HighDecember 20, 2002
realnetworks helix universal serverMultiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote...CVE-2002-1643Public exploitEPSS 74.7%7.5 HighDecember 19, 2002
greg roelofs libpngPortable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate...CVE-2002-1363Fix available7.5 HighDecember 19, 2002
typsoft ftp serverDirectory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the...CVE-2002-13545.0 MediumDecember 18, 2002
trend micro pc-cillin, officescan +1 moreBuffer overflow in pop3trap.exe for PC-cillin 2000, 2002, and 2003 allows local users to execute...CVE-2002-1349Public exploit4.6 MediumDecember 18, 2002
microsoft outlookMicrosoft Outlook 2002 allows remote attackers to cause a denial of service (repeated failure)...CVE-2002-1255EPSS 14.0%5.0 MediumDecember 18, 2002
cannaCanna 3.6 and earlier does not properly validate requests, which allows remote attackers to cause...CVE-2002-1159Fix available6.4 MediumDecember 18, 2002
cannaBuffer overflow in the irw_through function for Canna 3.5b2 and earlier allows local users to...CVE-2002-1158Fix available7.2 HighDecember 18, 2002
openldapOpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows remote or local attackers to execute arbitrary...CVE-2002-13797.5 HighDecember 17, 2002
openldapMultiple buffer overflows in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allow remote attackers to...CVE-2002-13787.5 HighDecember 17, 2002
cisco ios, fissh ssh client, intersoft securenetterm +4 more +6 moreMultiple SSH2 servers and clients do not properly handle strings with null characters in them...CVE-2002-136010.0 HighDecember 17, 2002
cisco ios, fissh ssh client, intersoft securenetterm +4 more +6 moreMultiple SSH2 servers and clients do not properly handle large packets or large fields, which may...CVE-2002-1359Public exploitEPSS 80.2%10.0 HighDecember 17, 2002
cisco ios, fissh ssh client, intersoft securenetterm +4 more +6 moreMultiple SSH2 servers and clients do not properly handle lists with empty elements or strings,...CVE-2002-135810.0 HighDecember 17, 2002
cisco ios, fissh ssh client, intersoft securenetterm +4 more +6 moreMultiple SSH2 servers and clients do not properly handle packets or data elements with incorrect...CVE-2002-135710.0 HighDecember 17, 2002
ethereal group etherealEthereal 0.9.7 and earlier allows remote attackers to cause a denial of service (crash) and...CVE-2002-13567.5 HighDecember 17, 2002
ethereal group etherealMultiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow...CVE-2002-13555.0 MediumDecember 17, 2002
ncftp software ncftp, openbsd, sun solaris +1 more +3 moreDirectory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote...CVE-2002-13455.0 MediumDecember 17, 2002
microsoft windows 2000, windows 2000 terminal services, windows 95 +5 more +7 moreTwo vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used...CVE-2002-1258EPSS 15.3%5.0 MediumDecember 17, 2002
oracle mysql, symantec veritas netbackup advanced reporter, netbackup global data manager +2 morelibmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify...CVE-2002-13767.5 HighDecember 17, 2002
oracle mysql, symantec veritas netbackup advanced reporter, netbackup global data manager +2 moreThe COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote...CVE-2002-1375Public exploitEPSS 23.5%7.5 HighDecember 17, 2002
oracle mysql, symantec veritas netbackup advanced reporter, netbackup global data manager +2 moreThe COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote...CVE-2002-1374Public exploitEPSS 20.5%7.5 HighDecember 17, 2002
oracle mysqlSigned integer vulnerability in the COM_TABLE_DUMP package for MySQL 3.23.x before 3.23.54 allows...CVE-2002-13735.0 MediumDecember 17, 2002
university of kansas lynx, elinks, links +2 moreCRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false...CVE-2002-1405Public exploitFix available5.0 MediumDecember 13, 2002
matthew smith micqmICQ 0.4.9 and earlier allows remote attackers to cause a denial of service (crash) via malformed...CVE-2002-1362Fix available5.0 MediumDecember 13, 2002
cyrusimap cyrus sasl, apple mac os x, mac os x server +2 moreMultiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause...CVE-2002-1347Fix available9.8 CriticalDecember 11, 2002
gnu wget, sun cobalt raq xtr +1 moreDirectory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or...CVE-2002-1344Fix available5.0 MediumDecember 11, 2002
squirrelmailCross-site scripting (XSS) vulnerability in read_body.php for SquirrelMail 1.2.10, 1.2.9, and...CVE-2002-1341Fix available6.8 MediumDecember 11, 2002
microsoft office web componentsThe "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC)...CVE-2002-1340EPSS 12.0%5.0 MediumDecember 11, 2002
microsoft office web componentsThe "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows...CVE-2002-1339EPSS 12.0%5.0 MediumDecember 11, 2002
microsoft office web componentsThe Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an...CVE-2002-1338EPSS 23.4%5.0 MediumDecember 11, 2002
tightvncTightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows...CVE-2002-1336Fix available7.5 HighDecember 11, 2002
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open