| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2002-0578 | 7.5 | Buffer overflow in 4D WebServer 6.7.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP request with Basic Authentication containing a long (1) user name or (2) password. | 2008-09-05 20:28:00 | 2002-06-18 04:00:00 |
| CVE-2002-0576 | 5.0 | ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP request that contains an MS-DOS device name such as NUL, which leaks the pathname in an error message. | 2008-09-05 20:28:00 | 2002-06-18 04:00:00 |
| CVE-2002-0427 | 10.0 | Buffer overflows in fpexec in mod_frontpage before 1.6.1 may allow attackers to gain root privileges. | 2008-09-05 20:27:00 | 2002-08-12 04:00:00 |
| CVE-2002-0426 | 7.5 | VPN Server module in Linksys EtherFast BEFVP41 Cable/DSL VPN Router before 1.40.1 reduces the key lengths for keys that are supplied via manual key entry, which makes it easier for attackers to crack the keys. | 2008-09-05 20:27:00 | 2002-08-12 04:00:00 |
| CVE-2002-0425 | 5.0 | mIRC DCC server protocol allows remote attackers to gain sensitive information such as alternate IRC nicknames via a "100 testing" message in a DCC connection request that cannot be ignored or canceled by the user, which may leak the alternate nickna | 2008-09-05 20:27:00 | 2002-08-12 04:00:00 |
| CVE-2002-0424 | 4.6 | efingerd 1.61 and earlier, when configured without the -u option, executes .efingerd files as the efingerd user (typically "nobody"), which allows local users to gain privileges as the efingerd user by modifying their own .efingerd file and running f | 2008-09-05 20:27:00 | 2002-08-12 04:00:00 |
| CVE-2002-0423 | 10.0 | Buffer overflow in efingerd 1.5 and earlier, and possibly up to 1.61, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a finger request from an IP address with a long hostname that is obtained via a reverse | 2008-09-05 20:27:00 | 2002-08-12 04:00:00 |
| CVE-2002-0421 | 5.0 | IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr password changing programs in the /iisadmpwd directory, including (1) aexp2.htr, (2) aexp2b.htr, (3) aexp3.htr , or (4) aexp4.htr. | 2008-09-05 20:27:00 | 2002-08-12 04:00:00 |
| CVE-2002-0420 | 7.5 | Vulnerability in PureTLS before 0.9b2 related to injection attacks, which could possibly allow remote attackers to corrupt or hijack user sessions. | 2008-09-05 20:27:00 | 2002-08-12 04:00:00 |
| CVE-2002-0418 | 5.0 | Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.36 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the param_name parameter. | 2008-09-05 20:27:00 | 2002-08-12 04:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: