5507 matches found
CVE-2002-0862
CVE-2002-0862 concerns the CryptoAPI in Microsoft products (Windows 98 through XP; Office for Mac; IE for Mac; Outlook Express for Mac). The issue: the CertGetCertificateChain, CertVerifyCertificateChainPolicy, and WinVerifyTrust APIs fail to properly verify the Basic Constraints of intermediate ...
CVE-2002-1100
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to cause a denial of service crash via a long 1 username or 2 password to the HTML login interface...
CVE-2002-0862
The 1 CertGetCertificateChain, 2 CertVerifyCertificateChainPolicy, and 3 WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac, Internet Explorer for Mac, and Outlook Express for Mac, do not properly verify the Basic Constraints ...
CVE-2002-1114
configinc2.php in Mantis before 0.17.4 allows remote attackers to execute arbitrary code or read arbitrary files via the parameters 1 gbottomincludepage, 2 gtopincludepage, 3 gcssincludefile, 4 gmetaincludefile, or 5 a cookie...
CVE-2002-1114
CVE-2002-1114 affects MantisBT prior to 0.17.4. The issue allows remote attackers to execute arbitrary code or read arbitrary files via config_inc2.php by supplying values for g_bottom_include_page, g_top_include_page, g_css_include_file, g_meta_include_file, or via a cookie. The vulnerability pa...
CVE-2002-0664
The CVE-2002-0664 entry describes a vulnerability in IBM Lotus Domino ZMerge administration databases where default ACLs allow arbitrary/anonymous users to obtain Manager-level access. This misconfiguration can let an unauthenticated attacker read or modify import/export scripts and disclose serv...
CVE-2002-1115
CVE-2002-1115 affects Mantis ≤ 0.17.4a; the issue is improper access control in bug viewing pages, allowing remote attackers to view private bugs by altering f_id on pages bug_update_advanced_page.php, bug_update_page.php, view_bug_advanced_page.php, or view_bug_page.php. Impact is exposure of pr...
Savant 3.1 Web Server Overflow
This module exploits a stack buffer overflow in Savant 3.1 Web Server. The service supports a maximum of 10 threads for a default install. Each exploit attempt generally causes a thread to die whether successful or not. Therefore, in a default configuration, you only have 10 chances. Due to the...
[SECURITY] [DSA 163-1] New mhonarc packages fix cross site scripting problems
-------------------------------------------------------------------------- Debian Security Advisory DSA 163-1 [email protected] http://www.debian.org/security/ Martin Schulze September 9th, 2002 http://www.debian.org/security/faq -...
CVE-2002-0720
A handler routine for the Network Connection Manager NCM in Windows 2000 allows local users to gain privileges via a complex attack that causes the handler to run in the LocalSystem context with user-specified code...
CVE-2002-0725
NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard link to the target file, which causes the link to be recorded in the audit trail instead of the target file...
CVE-2002-0853
Cisco Virtual Private Network VPN Client 3.5.4 and earlier allows remote attackers to cause a denial of service CPU consumption via a packet with a zero-length payload...
CVE-2002-0857
Format string vulnerabilities in Oracle Listener Control utility lsnrctl for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file...
CVE-2002-0859
Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code...
CVE-2002-0632
Vulnerability in SGI BDS Bulk Data Service BDSPro 2.4 and earlier allows clients to read arbitrary files on a BDS server...
CVE-2002-0654
Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via 1 a request for a .var file, which leaks the pathname in the resulting error message, or 2 via an error message that occurs when a script child process cannot be invoked...
CVE-2002-0851
Format string vulnerability in ISDN Point to Point Protocol PPP daemon ipppd in the ISDN4Linux i4l package allows local users to gain root privileges via format strings in the device name command line argument, which is not properly handled in a call to syslog...
CVE-2002-0854
Buffer overflows in ISDN Point to Point Protocol PPP daemon ipppd in the i4l package on SuSE 7.3, 8.0, and possibly other operating systems, may allow local users to gain privileges...
CVE-2002-0856
SQLNET listener for Oracle Net Oracle9i 9.0.x and 9.2 allows remote attackers to cause a denial of service crash via certain debug requests that are not properly handled by the debugging feature...