Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2002-1990 5.0 Resin 2.0.5 through 2.1.2 allows remote attackers to reveal physical path information via a URL request for the example Java class file HelloServlet. 2008-09-05 20:32:00
CVE-2002-1989 5.0 Resin 2.1.1 allows remote attackers to cause a denial of service (thread and connection consumption) via multiple URL requests containing the DOS 'CON' device name and a registered file extension such as .jsp or .xtp. 2008-09-05 20:32:00
CVE-2002-1988 5.0 Resin 2.1.1 allows remote attackers to cause a denial of service (memory consumption and hang) via a URL with long variables for non-existent resources. 2008-09-05 20:32:00
CVE-2002-1987 5.0 Directory traversal vulnerability in view_source.jsp in Resin 2.1.2 allows remote attackers to read arbitrary files via a "\.." (backslash dot dot). 2008-09-05 20:32:00
CVE-2002-1986 5.0 Perception LiteServe 2.0 through 2.0.1 allows remote attackers to obtain the source code of CGI scripts via an HTTP request with a trailing dot ("."). 2008-09-05 20:32:00
CVE-2002-1985 5.0 iSMTP 5.0.1 allows remote attackers to cause a denial of service via a long "MAIL FROM" command, possibly triggering a buffer overflow. 2008-09-05 20:32:00
CVE-2002-1982 5.0 Directory traversal vulnerability in the list_directory function in Icecast 1.3.12 allows remote attackers to determine if a directory exists via a .. (dot dot) in the GET request, which returns different error messages depending on whether the direc 2008-09-05 20:32:00
CVE-2002-1981 5.0 Microsoft SQL Server 2000 through SQL Server 2000 SP2 allows the "public" role to execute the (1) sp_MSSetServerProperties or (2) sp_MSsetalertinfo stored procedures, which allows attackers to modify configuration including SQL server startup and ale 2008-09-05 20:32:00
CVE-2002-1977 2.1 Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the "Passphrase Cache" option, which could allow attackers to open encrypted files without providing a passphrase. 2008-09-05 20:32:00
CVE-2002-1976 2.1 ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow attackers to sniff the network without detection, as 2008-09-05 20:32:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/40089
Zapisa po stranici: