CVE Notifier

CVE-2001-1379 CWE-? N/A

CVE-2001-1379

The PostgreSQL authentication modules (1) mod_auth_pgsql 0.9.5, and (2) mod_auth_pgsql_sys 0.9.4, allow remote attackers to bypass authentication and execute arbitrary SQL via a SQL injection attack on the user name.

MITRE n/a:n/a 26 Jul 2002

CVE-2002-0717 CWE-? N/A

CVE-2002-0717

PHP 4.2.0 and 4.2.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP POST request with certain arguments in a multipart/form-data form, which generates an error conditi…

MITRE n/a:n/a 23 Jul 2002

CVE-2002-0715 CWE-? N/A

CVE-2002-0715

Vulnerability in Squid before 2.4.STABLE6 related to proxy authentication credentials may allow remote web sites to obtain the user's proxy login and password.

MITRE n/a:n/a 23 Jul 2002

CVE-2002-0713 CWE-? N/A

CVE-2002-0713

Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper (msnt_auth) when using denyusers or allowusers fil…

MITRE n/a:n/a 23 Jul 2002

CVE-2002-0702 CWE-? N/A

CVE-2002-0702

Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary cod…

MITRE n/a:n/a 23 Jul 2002

CVE-2001-0890 CWE-? N/A

CVE-2001-0890

Certain backend drivers in the SANE library 1.0.3 and earlier, as used in frontend software such as XSane, allows local users to modify files via a symlink attack on temporary files.

MITRE n/a:n/a 23 Jul 2002

CVE-2002-0686 CWE-? N/A

CVE-2002-0686

Buffer overflow in the search component for iPlanet Web Server (iWS) 4.1 and Sun ONE Web Server 6.0 allows remote attackers to execute arbitrary code via a long argument to the NS-rel-doc-name parameter.

MITRE n/a:n/a 15 Jul 2002

CVE-2002-0675 CWE-? N/A

CVE-2002-0675

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges to perform a firmware upgrade, which allows unauthorized users to upgrade the phone.

MITRE n/a:n/a 15 Jul 2002

CVE-2002-0670 CWE-? N/A

CVE-2002-0670

The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 uses Base64 encoded usernames and passwords for HTTP basic authentication, which allows remote attackers to steal and easily decod…

MITRE n/a:n/a 15 Jul 2002

CVE-2002-0667 CWE-? N/A

CVE-2002-0667

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 has a default null administrator password, which could allow remote attackers to gain access to the phone.

MITRE n/a:n/a 15 Jul 2002

CVE-2002-0683 CWE-? N/A

CVE-2002-0683

Directory traversal vulnerability in Carello 1.3 allows remote attackers to execute programs on the server via a .. (dot dot) in the VBEXE parameter.

MITRE n/a:n/a 12 Jul 2002

CVE-2002-0681 CWE-? N/A

CVE-2002-0681

Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web users via script in a URL that generates a "404 not found" message, which does not quote the script.

MITRE n/a:n/a 12 Jul 2002