CVE Notifier

CVE-2000-1208 CWE-? N/A

CVE-2000-1208

Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper syslog call that uses format strings from the checkremote() call…

MITRE n/a:n/a 01 Aug 2002

CVE-2002-0811 CWE-? N/A

CVE-2002-0811

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, may allow remote attackers to cause a denial of service or execute certain queries via a SQL injection attack on the sort order parameter to buglist.cgi.

MITRE n/a:n/a 31 Jul 2002

CVE-2002-0807 CWE-? N/A

CVE-2002-0807

Cross-site scripting vulnerabilities in Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, could allow remote attackers to execute script as other Bugzilla users via the full name (real name) field, which is not prope…

MITRE n/a:n/a 31 Jul 2002

CVE-2002-0803 CWE-? N/A

CVE-2002-0803

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows remote attackers to display restricted products and components via a direct HTTP request to queryhelp.cgi.

MITRE n/a:n/a 31 Jul 2002

CVE-2002-0684 CWE-? N/A

CVE-2002-0684

Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code thr…

MITRE n/a:n/a 31 Jul 2002

CVE-2002-0659 CWE-? N/A

CVE-2002-0659

The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.

MITRE n/a:n/a 31 Jul 2002

CVE-2002-0657 CWE-? N/A

CVE-2002-0657

Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master key.

MITRE n/a:n/a 31 Jul 2002

CVE-2002-0656 CWE-? N/A

CVE-2002-0656

Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.

MITRE n/a:n/a 31 Jul 2002

CVE-2002-0655 CWE-? N/A

CVE-2002-0655

OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbit…

MITRE n/a:n/a 31 Jul 2002

CVE-2001-1384 CWE-? N/A

CVE-2001-1384

ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp.

MITRE n/a:n/a 31 Jul 2002

CVE-2000-1207 CWE-? N/A

CVE-2000-1207

userhelper in the usermode package on Red Hat Linux executes non-setuid programs as root, which does not activate the security measures in glibc and allows the programs to be exploited via format string vulnerabilities i…

MITRE n/a:n/a 31 Jul 2002

CVE-2002-0800 CWE-? N/A

CVE-2002-0800

BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at the end.

MITRE n/a:n/a 26 Jul 2002