| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2002-0421 | 5.0 | IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr password changing programs in the /iisadmpwd directory, including (1) aexp2.htr, (2) aexp2b.htr, (3) aexp3.htr , or (4) aexp4.htr. | 2008-09-05 20:27:00 | 2002-08-12 04:00:00 |
| CVE-2002-0420 | 7.5 | Vulnerability in PureTLS before 0.9b2 related to injection attacks, which could possibly allow remote attackers to corrupt or hijack user sessions. | 2008-09-05 20:27:00 | 2002-08-12 04:00:00 |
| CVE-2002-0418 | 5.0 | Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.36 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the param_name parameter. | 2008-09-05 20:27:00 | 2002-08-12 04:00:00 |
| CVE-2002-0417 | 5.0 | Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the ALTERNATE_TEMPLATES parameter for various mmstdo*.cgi programs. | 2008-09-05 20:27:00 | 2002-08-12 04:00:00 |
| CVE-2002-0416 | 10.0 | Buffer overflow in SH39 MailServer 1.21 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long command to the SMTP port. | 2008-09-05 20:27:00 | 2002-08-12 04:00:00 |
| CVE-2002-0415 | 1.7 | Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow local users to read files that are accessible to RealPlayer via a .. (dot dot) in an HTTP GET request to port 1275. | 2008-09-05 20:27:00 | 2002-08-12 04:00:00 |
| CVE-2002-0414 | 7.5 | KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database (SPD), which could cause a Security Gateway (SG) that does not use Encapsulating Security Payload | 2008-09-05 20:27:00 | 2002-08-12 04:00:00 |
| CVE-2002-0413 | 7.5 | Cross-site scripting vulnerability in ReBB allows remote attackers to execute arbitrary Javascript and steal cookies via an IMG tag whose URL includes the malicious script. | 2008-09-05 20:27:00 | 2002-08-12 04:00:00 |
| CVE-2002-0411 | 7.5 | Cross-site scripting vulnerability in message.php for AeroMail before 1.45 allows remote attackers to execute Javascript as an AeroMail user via an email message with the script in the Subject line. | 2008-09-05 20:27:00 | 2002-08-12 04:00:00 |
| CVE-2002-0410 | 5.0 | send_message.php in AeroMail before 1.45 allows remote attackers to read arbitrary files on the server, instead of just uploaded files, via an attachment that modifies the filename to be uploaded. | 2008-09-05 20:27:00 | 2002-07-26 04:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39953
Zapisa po stranici: