CVE Notifier

CVE-2002-0879 CWE-? N/A

CVE-2002-0879

showtemp.cfm for Gafware CFXImage 1.6.6 allows remote attackers to read arbitrary files via (1) a .. or (2) a C: style pathname in the FILE parameter.

MITRE n/a:n/a 31 Aug 2002

CVE-2002-0878 CWE-? N/A

CVE-2002-0878

SQL injection vulnerability in the login form for LogiSense software including (1) Hawk-i Billing, (2) Hawk-i ASP and (3) DNS Manager allows remote attackers to bypass authentication via SQL code in the password field.

MITRE n/a:n/a 31 Aug 2002

CVE-2002-0877 CWE-? N/A

CVE-2002-0877

Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) LIST (ls) or (2) GET commands.

MITRE n/a:n/a 31 Aug 2002

CVE-2002-0876 CWE-? N/A

CVE-2002-0876

Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request.

MITRE n/a:n/a 31 Aug 2002

CVE-2002-0699 CWE-? N/A

CVE-2002-0699

Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0, Windows 2000, and Windows XP allow remote attackers to delete di…

MITRE n/a:n/a 31 Aug 2002

CVE-2001-1408 CWE-? N/A

CVE-2001-1408

Directory traversal vulnerability in readmsg.php in WebMail 2.0.1 in Cobalt Qube 3 allows remote attackers to read arbitrary files via a .. (dot dot) in the mailbox parameter.

MITRE n/a:n/a 31 Aug 2002

CVE-2001-1405 CWE-? N/A

CVE-2001-1405

Bugzilla before 2.14 does not restrict access to sanitycheck.cgi, which allows local users to cause a denial of service (CPU consumption) via a flood of requests to sanitycheck.cgi.

MITRE n/a:n/a 31 Aug 2002

CVE-2001-1404 CWE-? N/A

CVE-2001-1404

Bugzilla before 2.14 stores user passwords in plaintext and sends password requests in an email message, which could allow attackers to gain privileges.

MITRE n/a:n/a 31 Aug 2002

CVE-2001-1403 CWE-? N/A

CVE-2001-1403

Bugzilla before 2.14 includes the username and password in URLs, which could allow attackers to gain privileges by reading the information from the web server logs, or by "shoulder-surfing" and observing the web browser'…

MITRE n/a:n/a 31 Aug 2002

CVE-2001-1402 CWE-? N/A

CVE-2001-1402

Bugzilla before 2.14 does not properly escape untrusted parameters, which could allow remote attackers to conduct unauthorized activities via cross-site scripting (CSS) and possibly SQL injection attacks on (1) the produ…

MITRE n/a:n/a 31 Aug 2002

CVE-2001-1401 CWE-? N/A

CVE-2001-1401

Bugzilla before 2.14 does not properly restrict access to confidential bugs, which could allow Bugzilla users to bypass viewing permissions via modified bug id parameters in (1) process_bug.cgi, (2) show_activity.cgi, (3…

MITRE n/a:n/a 31 Aug 2002

CVE-2001-1400 CWE-? N/A

CVE-2001-1400

Unknown vulnerabilities in the UDP port allocation for Linux kernel before 2.2.19 could allow local users to cause a denial of service (deadlock).

MITRE n/a:n/a 31 Aug 2002