CVE Notifier

CVE-2002-0858 CWE-? N/A

CVE-2002-0858

catsnmp in Oracle 9i and 8i is installed with a dbsnmp user with a default dbsnmp password, which allows attackers to perform restricted database operations and possibly gain other privileges.

MITRE n/a:n/a 20 Aug 2002

CVE-2002-0857 CWE-? N/A

CVE-2002-0857

Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into …

MITRE n/a:n/a 20 Aug 2002

CVE-2002-0725 CWE-? N/A

CVE-2002-0725

NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard link to the target file, which causes the link to be recorded in the audit trail instead of the targ…

MITRE n/a:n/a 20 Aug 2002

CVE-2002-0721 CWE-? N/A

CVE-2002-0721

Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, which could allow unprivileged users, and possibly remote attackers, to run store…

MITRE n/a:n/a 20 Aug 2002

CVE-2002-0654 CWE-? N/A

CVE-2002-0654

Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a request for a .var file, which leaks the pathname in the resulting error message, or (…

MITRE n/a:n/a 20 Aug 2002

CVE-2002-0093 CWE-? N/A

CVE-2002-0093

Buffer overflow in ipcs for HP Tru64 UNIX 4.0f through 5.1a may allow attackers to execute arbitrary code, a different vulnerability than CVE-2001-0423.

MITRE n/a:n/a 20 Aug 2002

CVE-2002-0855 CWE-? N/A

CVE-2002-0855

Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the (1) adminpw or (2) info parameters to the ml-name f…

MITRE n/a:n/a 14 Aug 2002

CVE-2002-0854 CWE-? N/A

CVE-2002-0854

Buffer overflows in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the i4l package on SuSE 7.3, 8.0, and possibly other operating systems, may allow local users to gain privileges.

MITRE n/a:n/a 14 Aug 2002

CVE-2002-0852 CWE-? N/A

CVE-2002-0852

Buffer overflows in Cisco Virtual Private Network (VPN) Client 3.5.4 and earlier allows remote attackers to cause a denial of service via (1) an Internet Key Exchange (IKE) with a large Security Parameter Index (SPI) pay…

MITRE n/a:n/a 14 Aug 2002

CVE-2002-0632 CWE-? N/A

CVE-2002-0632

Vulnerability in SGI BDS (Bulk Data Service) BDSPro 2.4 and earlier allows clients to read arbitrary files on a BDS server.

MITRE n/a:n/a 14 Aug 2002

CVE-2002-0849 CWE-? N/A

CVE-2002-0849

Linux-iSCSI iSCSI implementation installs the iscsi.conf file with world-readable permissions on some operating systems, including Red Hat Linux Limbo Beta #1, which could allow local users to gain privileges by reading …

MITRE n/a:n/a 10 Aug 2002

CVE-2002-0812 CWE-? N/A

CVE-2002-0812

Information leak in Compaq WL310, and the Orinoco Residential Gateway access point it is based on, uses a system identification string as a default SNMP read/write community string, which allows remote attackers to obtai…

MITRE n/a:n/a 10 Aug 2002