Buffer overflow in the URL catcher feature for SSH Secure Shell for Workstations client 3.1 to 3.2.0 allows remote attackers to execute arbitrary code via a long URL.
Max CVSS
10.0
EPSS Score
1.80%
Published
2002-11-25
Updated
2017-07-11
SSH Secure Shell for Servers and SSH Secure Shell for Workstations 2.0.13 through 3.2.1, when running without a PTY, does not call setsid to remove the child process from the process group of the parent process, which allows attackers to gain certain privileges.
Max CVSS
7.2
EPSS Score
0.06%
Published
2002-11-25
Updated
2017-07-11
Mailtool for OpenWindows 3.6, 3.6.1, and 3.6.2 allows remote attackers to cause a denial of service (mailtool segmentation violation and crash) via a malformed mail attachment.
Max CVSS
5.0
EPSS Score
7.97%
Published
2002-11-29
Updated
2017-07-11
Unknown vulnerability in Solaris 8 for Intel and Solaris 8 and 9 for SPARC allows remote attackers to cause a denial of service via certain packets that cause some network interfaces to stop responding to TCP traffic.
Max CVSS
5.0
EPSS Score
7.97%
Published
2002-11-08
Updated
2018-10-30
importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell metacharacters in the dir parameter, and possibly allows remote attackers to exploit this vulnerability via a separate XSS issue (CVE-2002-1315).
Max CVSS
6.8
EPSS Score
7.84%
Published
2002-11-29
Updated
2016-10-18
Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability in conjunction with another issue (CVE-2002-1316).
Max CVSS
6.8
EPSS Score
81.54%
Published
2002-11-29
Updated
2016-10-18
nullmailer 1.00RC5 and earlier allows local users to cause a denial of service via an email to a local user that does not exist, which generates an error that causes nullmailer to stop sending mail to all users.
Max CVSS
2.1
EPSS Score
0.04%
Published
2002-11-29
Updated
2017-10-10
Buffer overflow in the Web management interface in Linksys BEFW11S4 wireless access point router 2 and BEFSR11, BEFSR41, and BEFSRU31 EtherFast Cable/DSL routers with firmware before 1.43.3 with remote management enabled allows remote attackers to cause a denial of service (router crash) via a long password.
Max CVSS
5.0
EPSS Score
1.54%
Published
2002-11-20
Updated
2017-07-11
Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files.
Max CVSS
4.6
EPSS Score
0.04%
Published
2002-11-29
Updated
2016-10-18
Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia JRun 4.0 and earlier allows remote attackers to execute arbitrary via an HTTP GET request with a long .jsp file name.
Max CVSS
7.5
EPSS Score
1.21%
Published
2002-11-29
Updated
2017-07-11
Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia ColdFusion 6.0 allows remote attackers to execute arbitrary via an HTTP GET request with a long .cfm file name.
Max CVSS
7.5
EPSS Score
1.36%
Published
2002-11-29
Updated
2016-10-18
Heap-based buffer overflow in Netscape and Mozilla allows remote attackers to execute arbitrary code via a jar: URL that references a malformed .jar file, which overflows a buffer during decompression.
Max CVSS
7.5
EPSS Score
8.82%
Published
2002-11-29
Updated
2017-10-10
Cross-site scripting vulnerability (XSS) in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML via an email message with the script in a MIME header name.
Max CVSS
6.8
EPSS Score
1.47%
Published
2002-11-29
Updated
2017-10-10
Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow (1) local and possibly remote attackers to execute arbitrary code via the "lisa" daemon, and (2) remote attackers to execute arbitrary code via a certain "lan://" URL.
Max CVSS
7.5
EPSS Score
9.37%
Published
2002-11-29
Updated
2016-10-18
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service (crash) and possibly conduct other unauthorized activities via applet tags in HTML that bypass Java class restrictions (such as private constructors) by providing the class name in the code parameter, aka "Incomplete Java Object Instantiation Vulnerability."
Max CVSS
7.5
EPSS Score
0.59%
Published
2002-11-29
Updated
2018-10-12
The Microsoft Java implementation, as used in Internet Explorer, can provide HTML object references to applets via Javascript, which allows remote attackers to cause a denial of service (crash due to illegal memory accesses) and possibly conduct other unauthorized activities via an applet that uses those references to access proprietary Microsoft methods.
Max CVSS
7.5
EPSS Score
5.69%
Published
2002-11-29
Updated
2016-10-18
The Microsoft Java implementation, as used in Internet Explorer, provides a public load0() method for the CabCracker class (com.ms.vm.loader.CabCracker), which allows remote attackers to bypass the security checks that are performed by the load() method.
Max CVSS
7.5
EPSS Score
1.63%
Published
2002-11-29
Updated
2016-10-18
The Microsoft Java virtual machine (VM) build 5.0.3805 and earlier, as used in Internet Explorer, allows remote attackers to extend the Standard Security Manager (SSM) class (com.ms.security.StandardSecurityManager) and bypass intended StandardSecurityManager restrictions by modifying the (1) deniedDefinitionPackages or (2) deniedAccessPackages settings, causing a denial of service by adding Java applets to the list of applets that are prevented from running.
Max CVSS
7.5
EPSS Score
1.58%
Published
2002-11-29
Updated
2018-10-12
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read arbitrary local files and network shares via an applet tag with a codebase set to a "file://%00" (null character) URL.
Max CVSS
5.0
EPSS Score
24.59%
Published
2002-11-29
Updated
2016-10-18
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read and modify the contents of the Clipboard via an applet that accesses the (1) ClipBoardGetText and (2) ClipBoardSetText methods of the INativeServices class.
Max CVSS
6.4
EPSS Score
2.55%
Published
2002-11-29
Updated
2016-10-18
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read restricted process memory, cause a denial of service (crash), and possibly execute arbitrary code via the getNativeServices function, which creates an instance of the com.ms.awt.peer.INativeServices (INativeServices) class, whose methods do not verify the memory addresses that are passed as parameters.
Max CVSS
7.5
EPSS Score
4.49%
Published
2002-11-29
Updated
2016-10-18
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to determine the current directory of the Internet Explorer process via the getAbsolutePath() method in a File() call.
Max CVSS
5.0
EPSS Score
1.97%
Published
2002-11-29
Updated
2016-10-18
Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service via a long class name through (1) Class.forName or (2) ClassLoader.loadClass.
Max CVSS
5.0
EPSS Score
82.66%
Published
2002-11-29
Updated
2016-10-18
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute script in a different security context via a URL that contains a colon in the domain portion, which is not properly parsed and loads an applet from a malicious site within the security context of the site that is being visited by the user.
Max CVSS
7.5
EPSS Score
1.86%
Published
2002-11-29
Updated
2017-07-11
runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments.
Max CVSS
7.2
EPSS Score
0.05%
Published
2002-11-29
Updated
2008-09-10
74 vulnerabilities found
1 2 3
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!