Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2002
December

CVEs published in December 2002

874 vulnerabilities, 73 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

safenet softremote vpn clientSafeNet VPN client allows remote attackers to cause a denial of service and possibly execute...CVE-2002-22255.1 MediumDecember 31, 2002
network associates pgp freewareBuffer overflow in PGPFreeware 7.03 running on Windows NT 4.0 SP6 allows remote attackers to...CVE-2002-22245.1 MediumDecember 31, 2002
juniper netscreen remote security client, netscreen remote vpn client +1 moreBuffer overflow in NetScreen-Remote 8.0 allows remote attackers to cause a denial of service and...CVE-2002-22235.1 MediumDecember 31, 2002
openbsd, freebsd ports collection +1 moreisakmpd/message.c in isakmpd in FreeBSD before isakmpd-20020403_1, and in OpenBSD 3.1, allows...CVE-2002-22225.1 MediumDecember 31, 2002
chetcpasswdUntrusted search path vulnerability in Pedro Lineu Orso chetcpasswd 2.4.1 and earlier allows...CVE-2002-22216.2 MediumDecember 31, 2002
chetcpasswdBuffer overflow in Pedro Lineu Orso chetcpasswd before 1.12, when configured for access from 0.0...CVE-2002-22206.2 MediumDecember 31, 2002
chetcpasswdchetcpasswd.cgi in Pedro Lineu Orso chetcpasswd before 2.1 allows remote attackers to read the...CVE-2002-2219Public exploit7.5 HighDecember 31, 2002
sipsCRLF injection vulnerability in the setUserValue function in sipssys/code/site.inc.php in Haakon...CVE-2002-221810.0 HighDecember 31, 2002
comscripts web server creatorMultiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal (WSC...CVE-2002-22177.5 HighDecember 31, 2002
soft3304 04webserverSoft3304 04WebServer before 1.20 does not properly process URL strings, which allows remote...CVE-2002-22165.0 MediumDecember 31, 2002
phpThe imap_header function in the IMAP functionality for PHP before 4.3.0 allows remote attackers...CVE-2002-22155.0 MediumDecember 31, 2002
phpThe php_if_imap_mime_header_decode function in the IMAP functionality in PHP before 4.2.2 allows...CVE-2002-22145.0 MediumDecember 31, 2002
infoblox dns one, isc bind +1 moreThe DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS...CVE-2002-22135.0 MediumDecember 31, 2002
fujitsu uxp v, isc bind +1 moreThe DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries...CVE-2002-22125.0 MediumDecember 31, 2002
isc bindBIND 4 and BIND 8, when resolving recursive DNS queries for arbitrary hosts, allows remote...CVE-2002-22115.0 MediumDecember 31, 2002
openofficeThe installation of OpenOffice 1.0.1 allows local users to overwrite files and possibly gain...CVE-2002-22106.2 MediumDecember 31, 2002
pablo software solutions baby ftp serverUnspecified "security vulnerability" in Baby FTP Server versions before November 7, 2002 has...CVE-2002-220910.0 HighDecember 31, 2002
cisco ios, extended interior gateway routing protocol interior gateway routing protocol +1 moreExtended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2...CVE-2002-22087.8 HighDecember 31, 2002
eric rescorla ssldumpBuffer overflow in ssldump 0.9b2 and earlier, when running in decryption mode, allows remote...CVE-2002-2207Fix available10.0 HighDecember 31, 2002
symantec norton antivirusThe POP3 proxy service (POPROXY.EXE) in Norton AntiVirus 2001 allows local users to cause a...CVE-2002-22067.8 HighDecember 31, 2002
webresolveBuffer overflow in Webresolve 0.1.0 and earlier allows remote attackers to execute arbitrary code...CVE-2002-22055.0 MediumDecember 31, 2002
redhat package managerThe default --checksig setting in RPM Package Manager 4.0.4 checks that a package's signature is...CVE-2002-22047.5 HighDecember 31, 2002
sun solaris, sunos +1 moreUnknown vulnerability in the System Serial Console terminal in Solaris 2.5.1, 2.6, and 7 allows...CVE-2002-22034.9 MediumDecember 31, 2002
microsoft outlook expressOutlook Express 6.0 does not delete messages from dbx files, even when a user empties the Deleted...CVE-2002-22023.8 LowDecember 31, 2002
webminThe Printer Administration module for Webmin 0.990 and earlier allows remote attackers to execute...CVE-2002-220110.0 HighDecember 31, 2002
benjamin lefevre dobermann forumBenjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and...CVE-2002-2200Public exploit7.5 HighDecember 31, 2002
freebsd advanced intrusion detection environmentThe default aide.conf file in Advanced Intrusion Detection Environment (AIDE) before 0.7_1 on...CVE-2002-21994.6 MediumDecember 31, 2002
zmailerBuffer overflow in ZMailer before 2.99.51_1 allows remote attackers to execute arbitrary code...CVE-2002-219810.0 HighDecember 31, 2002
sun solaris, sunos +1 moreUnknown vulnerability in Sun Solaris 8.0 allows local users to cause a denial of service (kernel...CVE-2002-21977.2 HighDecember 31, 2002
sambaSamba before 2.2.5 does not properly terminate the enum_csc_policy data structure, which may...CVE-2002-2196Fix available7.5 HighDecember 31, 2002
nullsoft winampBuffer overflow in the version update check for Winamp 2.80 and earlier allows remote attackers...CVE-2002-2195Public exploit5.0 MediumDecember 31, 2002
mojo mail mailCross-site scripting (XSS) vulnerability in mojo.cgi for Mojo Mail 2.7 allows remote attackers to...CVE-2002-2193Public exploit4.3 MediumDecember 31, 2002
perception liteserveCross-site scripting (XSS) vulnerability in Perception LiteServe 2.0.1 allows remote attackers to...CVE-2002-2192Public exploit4.3 MediumDecember 31, 2002
lotus dominoLotus Domino 5.0.9a and earlier, even when configured with the 'DominoNoBanner=1' option, allows...CVE-2002-2191Public exploit5.0 MediumDecember 31, 2002
artscore studios cutecast forumArtsCore Studios CuteCast Forum 1.2 stores passwords in plaintext under the web document root,...CVE-2002-2190Public exploit7.5 HighDecember 31, 2002
activxperts software activwebserver, microsoft windows 2003 server +1 moreCross-site scripting (XSS) vulnerability in ActiveXperts Software ActiveWebserver allows remote...CVE-2002-21895.1 MediumDecember 31, 2002
openbsdOpenBSD before 3.2 allows local users to cause a denial of service (kernel crash) via a call to...CVE-2002-21884.9 MediumDecember 31, 2002
macromedia jrunUnknown "file disclosure" vulnerability in Macromedia JRun 3.0, 3.1, and 4.0, related to a log...CVE-2002-21875.0 MediumDecember 31, 2002
macromedia jrunMacromedia JRun 3.0, 3.1, and 4.0 allow remote attackers to view the source code of .JSP files...CVE-2002-21865.0 MediumDecember 31, 2002
debian linux, mandrakesoft mandrake linux, microsoft windows 98 +6 more +8 moreThe Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via...CVE-2002-21854.9 MediumDecember 31, 2002
digi-net technologies digichatDigi-Net Technologies DigiChat 3.5 allows chat users to obtain the IP addresses of other chat...CVE-2002-21845.0 MediumDecember 31, 2002
phpsharephpShare.php in phpShare before 0.6 beta 3 allows remote attackers to include and execute...CVE-2002-21837.5 HighDecember 31, 2002
seunghyun seo msn666Buffer overflow in Seunghyun Seo's MSN666 MSN Sniffer 1.0 and 1.0.1 allows remote attackers to...CVE-2002-21826.4 MediumDecember 31, 2002
sonicwall content filteringSonicWall Content Filtering allows local users to access prohibited web sites via requests to the...CVE-2002-21815.0 MediumDecember 31, 2002
openbsdThe setitimer(2) system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments...CVE-2002-21806.8 MediumDecember 31, 2002
unisys clearpath mcpThe dynamic initialization feature of the ClearPath MCP environment allows remote attackers to...CVE-2002-21797.8 HighDecember 31, 2002
phpwebsiteCross-site scripting (XSS) vulnerability in article.php module for phpWebSite 0.8.3 allows remote...CVE-2002-2178Public exploit4.3 MediumDecember 31, 2002
bea weblogic serverBEA WebLogic Server and Express 6.1 through 7.0.0.1 buffers HTTP requests in a way that can cause...CVE-2002-21772.6 LowDecember 31, 2002
phpbb group phpbbSQL injection vulnerability in Gender MOD 1.1.3 allows remote attackers to gain administrative...CVE-2002-2176Public exploit10.0 HighDecember 31, 2002
php phpsquidpassphpSquidPass before 0.2 uses an incomplete regular expression to find a matching username in its...CVE-2002-21754.0 MediumDecember 31, 2002
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open