CVE Notifier

CVE-2002-0102 CWE-? N/A

CVE-2002-0102

Oracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via (1) a request to TCP ports 1100, 4000, 4001, and 4002 with a large number of null characters, and (2) a request to TCP port 4000 with …

MITRE n/a:n/a 15 Mar 2002

CVE-2002-0101 CWE-? N/A

CVE-2002-0101

Microsoft Internet Explorer 6.0 and earlier allows local users to cause a denial of service via an infinite loop for modeless dialogs showModelessDialog, which causes CPU usage while the focus for the dialog is not relea…

MITRE n/a:n/a 15 Mar 2002

CVE-2002-0100 CWE-? N/A

CVE-2002-0100

AOL AOLserver 3.4.2 Win32 allows remote attackers to bypass authentication and read password-protected files via a URL that directly references the file.

MITRE n/a:n/a 15 Mar 2002

CVE-2002-0099 CWE-? N/A

CVE-2002-0099

Buffer overflow in Michael Lamont Savant Web Server 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP request to the cgi-bin directory in which the CGI program name contains a large number …

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1226 CWE-? N/A

CVE-2001-1226

AdCycle 1.17 and earlier allow remote attackers to modify SQL queries, which are not properly sanitized before being passed to the MySQL database.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1225 CWE-? N/A

CVE-2001-1225

Hughes Technology Mini SQL 2.0.10 through 2.0.12 allows local users to cause a denial of service by creating a very large array in a table, which causes miniSQL to crash when the table is queried.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1224 CWE-? N/A

CVE-2001-1224

get_input in adrotate.pm for Les VanBrunt AdRotate Pro 2.0 allows remote attackers to modify the database and possibly execute arbitrary commands via a SQL code injection attack.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1223 CWE-? N/A

CVE-2001-1223

The web administration server for ELSA Lancom 1100 Office does not require authentication, which allows arbitrary remote attackers to gain administrative privileges by connecting to the server.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1222 CWE-? N/A

CVE-2001-1222

Plesk Server Administrator (PSA) 1.0 allows remote attackers to obtain PHP source code via an HTTP request containing the target's IP address and a valid account name for the domain.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1221 CWE-? N/A

CVE-2001-1221

D-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point uses a default SNMP community string of 'public' which allows remote attackers to gain sensitive information.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1220 CWE-? N/A

CVE-2001-1220

D-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point stores the administrative password in plaintext in the default Management Information Base (MIB), which allows remote attackers to gain administrative priv…

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1219 CWE-? N/A

CVE-2001-1219

Microsoft Internet Explorer 6.0 and earlier allows malicious website operators to cause a denial of service (client crash) via JavaScript that continually refreshes the window via self.location.

MITRE n/a:n/a 15 Mar 2002