Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2002
December

CVEs published in December 2002

874 vulnerabilities, 73 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

sas base, integration technologies +1 moresastcpd in SAS/Base 8.0 might allow local users to gain privileges by setting the netencralg...CVE-2002-20187.2 HighDecember 31, 2002
sas base, integration technologies +1 moresastcpd in SAS/Base 8.0 allows local users to execute arbitrary code by setting the authprog...CVE-2002-201710.0 HighDecember 31, 2002
user-mode linux linuxUser-mode Linux (UML) 2.4.17-8 does not restrict access to kernel address space, which allows...CVE-2002-2016Public exploitFix available7.2 HighDecember 31, 2002
postnuke software foundation postnukePHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include...CVE-2002-2015Public exploit7.5 HighDecember 31, 2002
ibm lotus dominoLotus Domino 5.0.8 web server returns different error messages when a valid or invalid user is...CVE-2002-20145.0 MediumDecember 31, 2002
mozilla, netscape communicator, navigator +2 moreMozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies...CVE-2002-20135.0 MediumDecember 31, 2002
apache http serverUnknown vulnerability in Apache 1.3.19 running on HP Secure OS for Linux 1.0 allows remote...CVE-2002-20125.0 MediumDecember 31, 2002
jon howell faq-o-maticCross-site scripting (XSS) vulnerability in the fom CGI program (fom.cgi) in Faq-O-Matic 2.711...CVE-2002-2011Public exploit4.3 MediumDecember 31, 2002
htdigCross-site scripting (XSS) vulnerability in htsearch.cgi in htdig (ht://Dig) 3.1.5, 3.1.6, and 3...CVE-2002-20104.3 MediumDecember 31, 2002
apache tomcatApache Tomcat Leaks Pathname Information via Error MessageCVE-2002-20095.0 MediumDecember 31, 2002
apache tomcatApache Tomcat Leaks Information via Error MessageCVE-2002-2008Fix available5.0 MediumDecember 31, 2002
apache tomcatThe default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain...CVE-2002-2007Public exploitEPSS 41.4%5.0 MediumDecember 31, 2002
apache tomcatApache Tomcat Default Installation Reveals Sensitive InformationCVE-2002-2006Public exploitFix availableEPSS 30.7%5.0 MediumDecember 31, 2002
sun java web startUnknown vulnerability in Java web start 1.0.1_01, 1.0.1, 1.0 and 1.0.1.01 (HP-UX 11.x only)...CVE-2002-20057.5 HighDecember 31, 2002
compaq tru64portmapper in Compaq Tru64 4.0G and 5.0A allows remote attackers to cause a denial of service via...CVE-2002-20045.0 MediumDecember 31, 2002
compaq tru64ypbind in Compaq Tru64 4.0F, 4.0G, 5.0A, 5.1 and 5.1A allows remote attackers to cause the...CVE-2002-20035.0 MediumDecember 31, 2002
compaq tru64Buffer overflow in libc in Compaq Tru64 4.0F, 5.0, 5.1 and 5.1A allows attackers to execute...CVE-2002-20027.5 HighDecember 31, 2002
jmcce, mandrakesoft mandrake linux +1 morejmcce 1.3.8 in Mandrake 8.1 creates log files in /tmp with predictable names, which allows local...CVE-2002-20011.2 LowDecember 31, 2002
compaq acmsACMS 4.3 and 4.4 in OpenVMS Alpha 7.2 and 7.3 does not properly use process privileges, which...CVE-2002-20002.1 LowDecember 31, 2002
hp praesidium webproxyHP Praesidium Webproxy 1.0 running on HP-UX 11.04 VVOS could allow remote attackers to cause...CVE-2002-19995.0 MediumDecember 31, 2002
sco open unix, unixware +1 moreBuffer overflow in rpc.cmsd in SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows remote attackers to...CVE-2002-19987.5 HighDecember 31, 2002
zonelabs zonealarmZoneAlarm Pro 3.0 MailSafe allows remote attackers to bypass filtering and possibly execute...CVE-2002-19977.5 HighDecember 31, 2002
postnuke software foundation postnukeCross-site scripting (XSS) vulnerability in PostNuke 0.71 and earlier allows remote attackers to...CVE-2002-19962.6 LowDecember 31, 2002
lebios phptonuke.phpCross-site scripting (XSS) vulnerability in phptonuke.php for PHP-Nuke allows remote attackers to...CVE-2002-1995Public exploit4.3 MediumDecember 31, 2002
gamecheats advanced web server professionaladvserver.exe in Advanced Web Server (AdvServer) Professional 1.030000 allows remote attackers to...CVE-2002-19945.0 MediumDecember 31, 2002
affordable web space design webbbswebbbs_post.pl in WebBBS 4 and 5.0 allows remote attackers to execute arbitrary commands via...CVE-2002-1993Public exploitEPSS 11.9%10.0 HighDecember 31, 2002
macromedia coldfusion, coldfusion professional +1 moreBuffer overflow in jrun.dll in ColdFusion MX, when used with IIS 4 or 5, allows remote attackers...CVE-2002-19925.0 MediumDecember 31, 2002
oscommercePHP file inclusion vulnerability in osCommerce 2.1 execute arbitrary commands via the...CVE-2002-1991Public exploit7.5 HighDecember 31, 2002
caucho technology resinResin 2.0.5 through 2.1.2 allows remote attackers to reveal physical path information via a URL...CVE-2002-19905.0 MediumDecember 31, 2002
caucho technology resinResin 2.1.1 allows remote attackers to cause a denial of service (thread and connection...CVE-2002-19895.0 MediumDecember 31, 2002
caucho technology resinResin 2.1.1 allows remote attackers to cause a denial of service (memory consumption and hang)...CVE-2002-19885.0 MediumDecember 31, 2002
caucho technology resinDirectory traversal vulnerability in view_source.jsp in Resin 2.1.2 allows remote attackers to...CVE-2002-19875.0 MediumDecember 31, 2002
perception liteservePerception LiteServe 2.0 through 2.0.1 allows remote attackers to obtain the source code of CGI...CVE-2002-1986Public exploit5.0 MediumDecember 31, 2002
incognito software inc ismtp gatewayiSMTP 5.0.1 allows remote attackers to cause a denial of service via a long "MAIL FROM" command,...CVE-2002-19855.0 MediumDecember 31, 2002
microsoft internet explorerMicrosoft Internet Explorer 5.0.1 through 6.0 on Windows 2000 or Windows XP allows remote...CVE-2002-19845.0 MediumDecember 31, 2002
qnx rtosThe timer implementation in QNX RTOS 6.1.0 allows local users to cause a denial of service (hang)...CVE-2002-1983Public exploit2.1 LowDecember 31, 2002
icecastDirectory traversal vulnerability in the list_directory function in Icecast 1.3.12 allows remote...CVE-2002-1982Public exploit5.0 MediumDecember 31, 2002
microsoft sql serverMicrosoft SQL Server 2000 through SQL Server 2000 SP2 allows the "public" role to execute the (1)...CVE-2002-19815.0 MediumDecember 31, 2002
sun solaris, sunos +1 moreBuffer overflow in Volume Manager daemon (vold) of Sun Solaris 2.5.1 through 8 allows local users...CVE-2002-19807.2 HighDecember 31, 2002
watchguard soho, vclass, legacy rssa +2 moreWatchGuard SOHO products running firmware 5.1.6 and earlier, and Vclass/RSSA using 3.2 SP1 and...CVE-2002-19797.5 HighDecember 31, 2002
darren reed ipfilterIPFilter 3.1.1 through 3.4.28 allows remote attackers to bypass firewall rules by sending a PASV...CVE-2002-19787.5 HighDecember 31, 2002
pgpNetwork Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the ...CVE-2002-19772.1 LowDecember 31, 2002
linux kernelifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface...CVE-2002-19762.1 LowDecember 31, 2002
sharp zaurus sl-5000d firmware, zaurus sl-5500 firmware +1 moreSharp Zaurus PDA SL-5000D and SL-5500 uses a salt of "A0" to encrypt the screen-locking password...CVE-2002-19755.5 MediumDecember 31, 2002
sharp zaurusThe FTP service in Zaurus PDAs SL-5000D and SL-5500 does not require authentication, which allows...CVE-2002-197410.0 HighDecember 31, 2002
working resources inc. badblue, microsoft foundation class library +1 moreBuffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using...CVE-2002-1973Public exploitEPSS 40.0%7.5 HighDecember 31, 2002
sebastian dehne pp powerswitchUnknown vulnerability in Parallel port powerSwitch (aka pp_powerSwitch) 0.1 does not properly...CVE-2002-19724.6 MediumDecember 31, 2002
sourcecraft networking utilsThe ping utility in networking_utils.php in Sourcecraft Networking_Utils 1.0 allows remote...CVE-2002-197110.0 HighDecember 31, 2002
snortcenterSnortCenter 0.9.5, when configured to push Snort rules, stores the rules in a temporary file with...CVE-2002-19702.1 LowDecember 31, 2002
the magic notebook magic notebookMagic Notebook 1.0b and 1.1b allows remote attackers to cause a denial of service (crash) via an...CVE-2002-19695.0 MediumDecember 31, 2002
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open