| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2002-0581 | 7.5 | WorkforceROI Xpede 4.1 allows remote attackers to execute arbitrary SQL commands and read, modify, or steal credentials from the database via the Qry parameter in the sprc.asp script. | 2008-09-05 20:28:00 | 2002-06-18 04:00:00 |
| CVE-2002-0580 | 7.5 | WorkforceROI Xpede 4.1 allows remote attackers to obtain the database username via a request to datasource.asp, which leaks the username in a form and allows the attacker to more easily conduct brute force password guessing attacks. | 2008-09-05 20:28:00 | 2002-06-18 04:00:00 |
| CVE-2002-0579 | 7.5 | WorkforceROI Xpede 4.1 allows remote attackers to gain privileges as an Xpede administrator via a direct HTTP request to the /admin/adminproc.asp script, which does not prompt for a password. | 2008-09-05 20:28:00 | 2002-06-18 04:00:00 |
| CVE-2002-0578 | 7.5 | Buffer overflow in 4D WebServer 6.7.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP request with Basic Authentication containing a long (1) user name or (2) password. | 2008-09-05 20:28:00 | 2002-06-18 04:00:00 |
| CVE-2002-0576 | 5.0 | ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP request that contains an MS-DOS device name such as NUL, which leaks the pathname in an error message. | 2008-09-05 20:28:00 | 2002-06-18 04:00:00 |
| CVE-2002-0427 | 10.0 | Buffer overflows in fpexec in mod_frontpage before 1.6.1 may allow attackers to gain root privileges. | 2008-09-05 20:27:00 | 2002-08-12 04:00:00 |
| CVE-2002-0426 | 7.5 | VPN Server module in Linksys EtherFast BEFVP41 Cable/DSL VPN Router before 1.40.1 reduces the key lengths for keys that are supplied via manual key entry, which makes it easier for attackers to crack the keys. | 2008-09-05 20:27:00 | 2002-08-12 04:00:00 |
| CVE-2002-0425 | 5.0 | mIRC DCC server protocol allows remote attackers to gain sensitive information such as alternate IRC nicknames via a "100 testing" message in a DCC connection request that cannot be ignored or canceled by the user, which may leak the alternate nickna | 2008-09-05 20:27:00 | 2002-08-12 04:00:00 |
| CVE-2002-0424 | 4.6 | efingerd 1.61 and earlier, when configured without the -u option, executes .efingerd files as the efingerd user (typically "nobody"), which allows local users to gain privileges as the efingerd user by modifying their own .efingerd file and running f | 2008-09-05 20:27:00 | 2002-08-12 04:00:00 |
| CVE-2002-0423 | 10.0 | Buffer overflow in efingerd 1.5 and earlier, and possibly up to 1.61, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a finger request from an IP address with a long hostname that is obtained via a reverse | 2008-09-05 20:27:00 | 2002-08-12 04:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39953
Zapisa po stranici: