# CVEs published 2002-06-25

190 CVEs were published on June 25, 2002: 0 critical, 1 high. Days are UTC.

- [CVE-1999-1080](https://cve.now/CVE-1999-1080.md): rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in previous versions of S (no CVSS)
- [CVE-1999-1362](https://cve.now/CVE-1999-1362.md): Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service (crash) by calling certain WIN32K functions with inc (no CVSS)
- [CVE-2000-0060](https://cve.now/CVE-2000-0060.md): Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name. (no CVSS)
- [CVE-2000-0072](https://cve.now/CVE-2000-0072.md): Visual Casel (Vcasel) does not properly prevent users from executing files, which allows local users to use a relative pathname to specify a (no CVSS)
- [CVE-2000-0087](https://cve.now/CVE-2000-0087.md): Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Comm (no CVSS)
- [CVE-2000-0976](https://cve.now/CVE-2000-0976.md): Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY environment variable or (no CVSS)
- [CVE-2000-1166](https://cve.now/CVE-2000-1166.md): Twig webmail system does not properly set the "vhosts" variable if it is not configured on the site, which allows remote attackers to insert (no CVSS)
- [CVE-2000-1193](https://cve.now/CVE-2000-1193.md): Performance Metrics Collector Daemon (PMCD) in Performance Copilot in IRIX 6.x allows remote attackers to cause a denial of service (resourc (no CVSS)
- [CVE-2001-0508](https://cve.now/CVE-2001-0508.md): Vulnerability in IIS 5.0 allows remote attackers to cause a denial of service (restart) via a long, invalid WebDAV request. (no CVSS)
- [CVE-2001-0550](https://cve.now/CVE-2001-0550.md): wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handl (no CVSS)
- [CVE-2001-0553](https://cve.now/CVE-2001-0553.md): SSH Secure Shell 3.0.0 on Unix systems does not properly perform password authentication to the sshd2 daemon, which allows local users to ga (no CVSS)
- [CVE-2001-0726](https://cve.now/CVE-2001-0726.md): Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server, when used with Internet Explorer, does not properly detect certain inline script, (no CVSS)
- [CVE-2001-0727](https://cve.now/CVE-2001-0727.md): Internet Explorer 6.0 allows remote attackers to execute arbitrary code by modifying the Content-Disposition and Content-Type header fields (no CVSS)
- [CVE-2001-0731](https://cve.now/CVE-2001-0731.md): Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the (no CVSS)
- [CVE-2001-0769](https://cve.now/CVE-2001-0769.md): Memory leak in GuildFTPd Server 0.97 allows remote attackers to cause a denial of service via a request containing a null character. (no CVSS)
- [CVE-2001-0770](https://cve.now/CVE-2001-0770.md): Buffer overflow in GuildFTPd Server 0.97 allows remote attacker to execute arbitrary code via a long SITE command. (no CVSS)
- [CVE-2001-0797](https://cve.now/CVE-2001-0797.md): Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large numbe (no CVSS)
- [CVE-2001-0869](https://cve.now/CVE-2001-0869.md): Format string vulnerability in the default logging callback function \_sasl\_syslog in common.c in Cyrus SASL library (cyrus-sasl) may allow r (no CVSS)
- [CVE-2001-0872](https://cve.now/CVE-2001-0872.md): OpenSSH 3.0.1 and earlier with UseLogin enabled does not properly cleanse critical environment variables such as LD\_PRELOAD, which allows lo (no CVSS)
- [CVE-2001-0884](https://cve.now/CVE-2001-0884.md): Cross-site scripting vulnerability in Mailman email archiver before 2.08 allows attackers to obtain sensitive information or authentication (no CVSS)
- [CVE-2001-0886](https://cve.now/CVE-2001-0886.md): Buffer overflow in glob function of glibc allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a gl (no CVSS)
- [CVE-2001-0887](https://cve.now/CVE-2001-0887.md): xSANE 0.81 and earlier allows local users to modify files of other xSANE users via a symlink attack on temporary files. (no CVSS)
- [CVE-2001-0888](https://cve.now/CVE-2001-0888.md): Atmel Firmware 1.3 Wireless Access Point (WAP) allows remote attackers to cause a denial of service via a SNMP request with (1) a community (no CVSS)
- [CVE-2001-0889](https://cve.now/CVE-2001-0889.md): Exim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe, (no CVSS)
- [CVE-2001-0894](https://cve.now/CVE-2001-0894.md): Vulnerability in Postfix SMTP server before 20010228-pl07, when configured to email the postmaster when SMTP errors cause the session to ter (no CVSS)
- [CVE-2001-0895](https://cve.now/CVE-2001-0895.md): Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent (no CVSS)
- [CVE-2001-0896](https://cve.now/CVE-2001-0896.md): Inetd in OpenServer 5.0.5 allows remote attackers to cause a denial of service (crash) via a port scan, e.g. (no CVSS)
- [CVE-2001-0899](https://cve.now/CVE-2001-0899.md): Network Tools 0.2 for PHP-Nuke allows remote attackers to execute commands on the server via shell metacharacters in the $hostinput variable (no CVSS)
- [CVE-2001-0900](https://cve.now/CVE-2001-0900.md): Directory traversal vulnerability in modules.php in Gallery before 1.2.3 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0901](https://cve.now/CVE-2001-0901.md): Hypermail allows remote attackers to execute arbitrary commands on a server supporting SSI via an attachment with a .shtml extension, which (no CVSS)
- [CVE-2001-0905](https://cve.now/CVE-2001-0905.md): Race condition in signal handling of procmail 3.20 and earlier, when running setuid, allows local users to cause a denial of service or gain (no CVSS)
- [CVE-2001-0906](https://cve.now/CVE-2001-0906.md): teTeX filter before 1.0.7 allows local users to gain privileges via a symlink attack on temporary files that are produced when printing .dvi (no CVSS)
- [CVE-2001-0912](https://cve.now/CVE-2001-0912.md): Packaging error for expect 8.3.3 in Mandrake Linux 8.1 causes expect to search for its libraries in the /home/snailtalk directory before oth (no CVSS)
- [CVE-2001-0917](https://cve.now/CVE-2001-0917.md): Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension. (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2001-0918](https://cve.now/CVE-2001-0918.md): Vulnerabilities in CGI scripts in susehelp in SuSE 7.2 and 7.3 allow remote attackers to execute arbitrary commands by not opening files sec (no CVSS)
- [CVE-2001-0920](https://cve.now/CVE-2001-0920.md): Format string vulnerability in auto nice daemon (AND) 1.0.4 and earlier allows a local user to possibly execute arbitrary code via a process (no CVSS)
- [CVE-2001-0929](https://cve.now/CVE-2001-0929.md): Cisco IOS Firewall Feature set, aka Context Based Access Control (CBAC) or Cisco Secure Integrated Software, for IOS 11.2P through 12.2T doe (no CVSS)
- [CVE-2001-0936](https://cve.now/CVE-2001-0936.md): Buffer overflow in Frox transparent FTP proxy 0.6.6 and earlier, with the local caching method selected, allows remote FTP servers to run ar (no CVSS)
- [CVE-2001-0939](https://cve.now/CVE-2001-0939.md): Lotus Domino 5.08 and earlier allows remote attackers to cause a denial of service (crash) via a SunRPC NULL command to port 443. (no CVSS)
- [CVE-2001-0940](https://cve.now/CVE-2001-0940.md): Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows remote attackers to exec (no CVSS)
- [CVE-2001-0946](https://cve.now/CVE-2001-0946.md): apmscript in Apmd in Red Hat 7.2 "Enigma" allows local users to create or change the modification dates of arbitrary files via a symlink att (no CVSS)
- [CVE-2001-0961](https://cve.now/CVE-2001-0961.md): Buffer overflow in tab expansion capability of the most program allows local or remote attackers to execute arbitrary code via a malformed f (no CVSS)
- [CVE-2001-0962](https://cve.now/CVE-2001-0962.md): IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privilege (no CVSS)
- [CVE-2001-0977](https://cve.now/CVE-2001-0977.md): slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic (no CVSS)
- [CVE-2001-0981](https://cve.now/CVE-2001-0981.md): HP CIFS/9000 Server (SAMBA) A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program without specifying the (no CVSS)
- [CVE-2001-1002](https://cve.now/CVE-2001-1002.md): The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is e (no CVSS)
- [CVE-2001-1022](https://cve.now/CVE-2001-1022.md): Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the (no CVSS)
- [CVE-2001-1027](https://cve.now/CVE-2001-1027.md): Buffer overflow in WindowMaker (aka wmaker) 0.64 and earlier allows remote attackers to execute arbitrary code via a long window title. (no CVSS)
- [CVE-2001-1030](https://cve.now/CVE-2001-1030.md): Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd\_accel\_host and http\_accel\_with\_p (no CVSS)
- [CVE-2001-1032](https://cve.now/CVE-2001-1032.md): admin.php in PHP-Nuke 5.2 and earlier, except 5.0RC1, does not check login credentials for upload operations, which allows remote attackers (no CVSS)
- [CVE-2001-1043](https://cve.now/CVE-2001-1043.md): ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file that points to t (no CVSS)
- [CVE-2001-1046](https://cve.now/CVE-2001-1046.md): Buffer overflow in qpopper (aka qpop or popper) 4.0 through 4.0.2 allows remote attackers to gain privileges via a long username. (no CVSS)
- [CVE-2001-1053](https://cve.now/CVE-2001-1053.md): AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting SQL code in the $pa (no CVSS)
- [CVE-2001-1062](https://cve.now/CVE-2001-1062.md): Buffer overflow in mana in OpenServer 5.0.6a and earlier allows local users to execute arbitrary code. (no CVSS)
- [CVE-2001-1071](https://cve.now/CVE-2001-1071.md): Cisco IOS 12.2 and earlier running Cisco Discovery Protocol (CDP) allows remote attackers to cause a denial of service (memory consumption) (no CVSS)
- [CVE-2001-1072](https://cve.now/CVE-2001-1072.md): Apache with mod\_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters (no CVSS)
- [CVE-2001-1074](https://cve.now/CVE-2001-1074.md): Webmin 0.84 and earlier does not properly clear the HTTP\_AUTHORIZATION environment variable when the web server is restarted, which makes au (no CVSS)
- [CVE-2001-1079](https://cve.now/CVE-2001-1079.md): create\_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allo (no CVSS)
- [CVE-2001-1083](https://cve.now/CVE-2001-1083.md): Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers to cause a denial of (no CVSS)
- [CVE-2001-1084](https://cve.now/CVE-2001-1084.md): Cross-site scripting vulnerability in Allaire JRun 3.0 and 2.3.3 allows a malicious webmaster to embed Javascript in a request for a .JSP, . (no CVSS)
- [CVE-2001-1085](https://cve.now/CVE-2001-1085.md): Lmail 2.7 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file. (no CVSS)
- [CVE-2001-1088](https://cve.now/CVE-2001-1088.md): Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" opti (no CVSS)
- [CVE-2001-1089](https://cve.now/CVE-2001-1089.md): libnss-pgsql in nss-pgsql 0.9.0 and earlier allows remote attackers to execute arbitrary SQL queries by inserting SQL code into an HTTP requ (no CVSS)
- [CVE-2001-1095](https://cve.now/CVE-2001-1095.md): Buffer overflow in uuq in AIX 4 could allow local users to execute arbitrary code via a long -r parameter. (no CVSS)
- [CVE-2001-1096](https://cve.now/CVE-2001-1096.md): Buffer overflows in muxatmd in AIX 4 allows an attacker to cause a core dump and possibly execute code. (no CVSS)
- [CVE-2001-1099](https://cve.now/CVE-2001-1099.md): The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file (no CVSS)
- [CVE-2001-1100](https://cve.now/CVE-2001-1100.md): sendmessage.cgi in W3Mail 1.0.2, and possibly other CGI programs, allows remote attackers to execute arbitrary commands via shell metacharac (no CVSS)
- [CVE-2001-1108](https://cve.now/CVE-2001-1108.md): Directory traversal vulnerability in SnapStream PVS 1.2a allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-1113](https://cve.now/CVE-2001-1113.md): Buffer overflow in TrollFTPD 1.26 and earlier allows local users to execute arbitrary code by creating a series of deeply nested directories (no CVSS)
- [CVE-2001-1116](https://cve.now/CVE-2001-1116.md): Identix BioLogon 2.03 and earlier does not lock secondary displays on a multi-monitor system running Windows 98 or ME, which allows an attac (no CVSS)
- [CVE-2001-1117](https://cve.now/CVE-2001-1117.md): LinkSys EtherFast BEFSR41 Cable/DSL routers running firmware before 1.39.3 Beta allows a remote attacker to view administration and user pas (no CVSS)
- [CVE-2001-1118](https://cve.now/CVE-2001-1118.md): A module in Roxen 2.0 before 2.0.92, and 2.1 before 2.1.264, does not properly decode UTF-8, Mac and ISO-2202 encoded URLs, which could allo (no CVSS)
- [CVE-2001-1119](https://cve.now/CVE-2001-1119.md): cda in xmcd 3.0.2 and 2.6 in SuSE Linux allows local users to overwrite arbitrary files via a symlink attack. (no CVSS)
- [CVE-2001-1130](https://cve.now/CVE-2001-1130.md): Sdbsearch.cgi in SuSE Linux 6.0-7.2 could allow remote attackers to execute arbitrary commands by uploading a keylist.txt file that contains (no CVSS)
- [CVE-2001-1132](https://cve.now/CVE-2001-1132.md): Mailman 2.0.x before 2.0.6 allows remote attackers to gain access to list administrative pages when there is an empty site or list password, (no CVSS)
- [CVE-2001-1141](https://cve.now/CVE-2001-1141.md): The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to d (no CVSS)
- [CVE-2001-1144](https://cve.now/CVE-2001-1144.md): Directory traversal vulnerability in McAfee ASaP VirusScan agent 1.0 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-1146](https://cve.now/CVE-2001-1146.md): AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 creates temporary files with predictable names, which allows local users to (no CVSS)
- [CVE-2001-1147](https://cve.now/CVE-2001-1147.md): The PAM implementation in /bin/login of the util-linux package before 2.11 causes a password entry to be rewritten across multiple PAM calls (no CVSS)
- [CVE-2001-1149](https://cve.now/CVE-2001-1149.md): Panda Antivirus Platinum before 6.23.00 allows a remore attacker to cause a denial of service (crash) when a user selects an action for a ma (no CVSS)
- [CVE-2001-1153](https://cve.now/CVE-2001-1153.md): lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a long command line argum (no CVSS)
- [CVE-2001-1155](https://cve.now/CVE-2001-1155.md): TCP Wrappers (tcp\_wrappers) in FreeBSD 4.1.1 through 4.3 with the PARANOID ACL option enabled does not properly check the result of a revers (no CVSS)
- [CVE-2001-1158](https://cve.now/CVE-2001-1158.md): Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept\_fw1\_rdp, which can allow remote attackers to bypass intended rest (no CVSS)
- [CVE-2001-1160](https://cve.now/CVE-2001-1160.md): udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metachar (no CVSS)
- [CVE-2001-1161](https://cve.now/CVE-2001-1161.md): Cross-site scripting (CSS) vulnerability in Lotus Domino 5.0.6 allows remote attackers to execute script on other web clients via a URL that (no CVSS)
- [CVE-2001-1162](https://cve.now/CVE-2001-1162.md): Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overw (no CVSS)
- [CVE-2001-1166](https://cve.now/CVE-2001-1166.md): linprocfs on FreeBSD 4.3 and earlier does not properly restrict access to kernel memory, which allows one process with debugging rights on a (no CVSS)
- [CVE-2001-1172](https://cve.now/CVE-2001-1172.md): OmniSecure HTTProtect 1.1.1 allows a superuser without omnish privileges to modify a protected file by creating a symbolic link to that file (no CVSS)
- [CVE-2001-1174](https://cve.now/CVE-2001-1174.md): Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header. (no CVSS)
- [CVE-2001-1175](https://cve.now/CVE-2001-1175.md): vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users (no CVSS)
- [CVE-2001-1176](https://cve.now/CVE-2001-1176.md): Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary co (no CVSS)
- [CVE-2001-1177](https://cve.now/CVE-2001-1177.md): ml85p in Samsung ML-85G GDI printer driver before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary fi (no CVSS)
- [CVE-2001-1180](https://cve.now/CVE-2001-1180.md): FreeBSD 4.3 does not properly clear shared signal handlers when executing a process, which allows local users to gain privileges by calling (no CVSS)
- [CVE-2001-1183](https://cve.now/CVE-2001-1183.md): PPTP implementation in Cisco IOS 12.1 and 12.2 allows remote attackers to cause a denial of service (crash) via a malformed packet. (no CVSS)
- [CVE-2001-1185](https://cve.now/CVE-2001-1185.md): Some AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow a local user to overwrite memory of the ne (no CVSS)
- [CVE-2001-1193](https://cve.now/CVE-2001-1193.md): Directory traversal vulnerability in EFTP 2.0.8.346 allows local users to read directories via a ... (no CVSS)
- [CVE-2001-1199](https://cve.now/CVE-2001-1199.md): Cross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g, when debug mode is enabled, allows remote attackers to execute (no CVSS)
- [CVE-2001-1201](https://cve.now/CVE-2001-1201.md): Buffer overflow in wmcube-gdk for WMCube/GDK 0.98 allows local users to execute arbitrary code via long lines in the object description file (no CVSS)
- [CVE-2001-1203](https://cve.now/CVE-2001-1203.md): Format string vulnerability in gpm-root in gpm 1.17.8 through 1.17.18 allows local users to gain root privileges. (no CVSS)
- [CVE-2001-1215](https://cve.now/CVE-2001-1215.md): Format string vulnerability in PFinger 0.7.5 through 0.7.7 allows remote attackers to execute arbitrary code via format string specifiers in (no CVSS)
- [CVE-2001-1227](https://cve.now/CVE-2001-1227.md): Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt at (no CVSS)
- [CVE-2001-1231](https://cve.now/CVE-2001-1231.md): GroupWise 5.5 and 6 running in live remote or smart caching mode allows remote attackers to read arbitrary users' mailboxes by extracting us (no CVSS)
- [CVE-2001-1234](https://cve.now/CVE-2001-1234.md): Bharat Mediratta Gallery PHP script before 1.2.1 allows remote attackers to execute arbitrary code by including files from remote web sites (no CVSS)
- [CVE-2001-1235](https://cve.now/CVE-2001-1235.md): pSlash PHP script 0.7 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP (no CVSS)
- [CVE-2001-1236](https://cve.now/CVE-2001-1236.md): myphpPagetool PHP script 0.4.3-1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, usi (no CVSS)
- [CVE-2001-1237](https://cve.now/CVE-2001-1237.md): Phormation PHP script 0.9.1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an (no CVSS)
- [CVE-2001-1240](https://cve.now/CVE-2001-1240.md): The default configuration of sudo in Engarde Secure Linux 1.0.1 allows any user in the admin group to run certain commands that could be lev (no CVSS)
- [CVE-2001-1246](https://cve.now/CVE-2001-1246.md): PHP 4.0.5 through 4.1.0 in safe mode does not properly cleanse the 5th parameter to the mail() function, which allows local users and possib (no CVSS)
- [CVE-2001-1247](https://cve.now/CVE-2001-1247.md): PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the web server UID by uploading a PHP script th (no CVSS)
- [CVE-2001-1252](https://cve.now/CVE-2001-1252.md): Network Associates PGP Keyserver 7.0 allows remote attackers to bypass authentication and access the administrative web interface via URLs t (no CVSS)
- [CVE-2001-1266](https://cve.now/CVE-2001-1266.md): Directory traversal vulnerability in Doug Neal's HTTPD Daemon (DNHTTPD) before 0.4.1 allows remote attackers to view arbitrary files via a . (no CVSS)
- [CVE-2001-1276](https://cve.now/CVE-2001-1276.md): ispell before 3.1.20 allows local users to overwrite files of other users via a symlink attack on a temporary file. (no CVSS)
- [CVE-2001-1277](https://cve.now/CVE-2001-1277.md): makewhatis in the man package before 1.5i2 allows an attacker in group man to overwrite arbitrary files via a man page whose name contains s (no CVSS)
- [CVE-2001-1295](https://cve.now/CVE-2001-1295.md): Directory traversal vulnerability in Cerberus FTP Server 1.5 and earlier allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-1297](https://cve.now/CVE-2001-1297.md): PHP remote file inclusion vulnerability in Actionpoll PHP script before 1.1.2 allows remote attackers to execute arbitrary PHP code via a UR (no CVSS)
- [CVE-2001-1299](https://cve.now/CVE-2001-1299.md): Zorbat Zorbstats PHP script before 0.9 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that set (no CVSS)
- [CVE-2001-1322](https://cve.now/CVE-2001-1322.md): xinetd 2.1.8 and earlier runs with a default umask of 0, which could allow local users to read or modify files that are created by an applic (no CVSS)
- [CVE-2001-1342](https://cve.now/CVE-2001-1342.md): Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI th (no CVSS)
- [CVE-2001-1345](https://cve.now/CVE-2001-1345.md): bctool in Jetico BestCrypt 0.7 and earlier trusts the user-supplied PATH to find and execute an fsck utility program, which allows local use (no CVSS)
- [CVE-2002-0002](https://cve.now/CVE-2002-0002.md): Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious serve (no CVSS)
- [CVE-2002-0003](https://cve.now/CVE-2002-0003.md): Buffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to gain privileges via lpd in the LPRng printing syste (no CVSS)
- [CVE-2002-0004](https://cve.now/CVE-2002-0004.md): Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes (no CVSS)
- [CVE-2002-0007](https://cve.now/CVE-2002-0007.md): CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that (no CVSS)
- [CVE-2002-0018](https://cve.now/CVE-2002-0018.md): In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domain does not verify th (no CVSS)
- [CVE-2002-0020](https://cve.now/CVE-2002-0020.md): Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via malformed protocol op (no CVSS)
- [CVE-2002-0021](https://cve.now/CVE-2002-0021.md): Network Product Identification (PID) Checker in Microsoft Office v. (no CVSS)
- [CVE-2002-0022](https://cve.now/CVE-2002-0022.md): Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5 and 6.0 allows remote attackers to execute (no CVSS)
- [CVE-2002-0023](https://cve.now/CVE-2002-0023.md): Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function, which (no CVSS)
- [CVE-2002-0025](https://cve.now/CVE-2002-0025.md): Internet Explorer 5.01, 5.5 and 6.0 does not properly handle the Content-Type HTML header field, which allows remote attackers to modify whi (no CVSS)
- [CVE-2002-0026](https://cve.now/CVE-2002-0026.md): Internet Explorer 5.5 and 6.0 allows remote attackers to bypass restrictions for executing scripts via an object that processes asynchronous (no CVSS)
- [CVE-2002-0027](https://cve.now/CVE-2002-0027.md): Internet Explorer 5.5 and 6.0 allows remote attackers to read certain files and spoof the URL in the address bar by using the Document.open (no CVSS)
- [CVE-2002-0028](https://cve.now/CVE-2002-0028.md): Buffer overflow in ICQ before 2001B Beta v5.18 Build #3659 allows remote attackers to execute arbitrary code via a Voice Video & Games reque (no CVSS)
- [CVE-2002-0038](https://cve.now/CVE-2002-0038.md): Vulnerability in the cache-limiting function of the unified name service daemon (nsd) in IRIX 6.5.4 through 6.5.11 allows remote attackers t (no CVSS)
- [CVE-2002-0040](https://cve.now/CVE-2002-0040.md): Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES enviro (no CVSS)
- [CVE-2002-0043](https://cve.now/CVE-2002-0043.md): sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail program, which could allow local users to gain ro (no CVSS)
- [CVE-2002-0044](https://cve.now/CVE-2002-0044.md): GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files. (no CVSS)
- [CVE-2002-0045](https://cve.now/CVE-2002-0045.md): slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls (no CVSS)
- [CVE-2002-0046](https://cve.now/CVE-2002-0046.md): Linux kernel, and possibly other operating systems, allows remote attackers to read portions of memory via a series of fragmented ICMP packe (no CVSS)
- [CVE-2002-0047](https://cve.now/CVE-2002-0047.md): CIPE VPN package before 1.3.0-3 allows remote attackers to cause a denial of service (crash) via a short malformed packet. (no CVSS)
- [CVE-2002-0049](https://cve.now/CVE-2002-0049.md): Microsoft Exchange Server 2000 System Attendant gives "Everyone" group privileges to the WinReg key, which could allow remote attackers to r (no CVSS)
- [CVE-2002-0050](https://cve.now/CVE-2002-0050.md): Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitrary code via long auth (no CVSS)
- [CVE-2002-0051](https://cve.now/CVE-2002-0051.md): Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read ac (CVSS 7.8)
- [CVE-2002-0052](https://cve.now/CVE-2002-0052.md): Internet Explorer 6.0 and earlier does not properly handle VBScript in certain domain security checks, which allows remote attackers to read (no CVSS)
- [CVE-2002-0055](https://cve.now/CVE-2002-0055.md): SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via (no CVSS)
- [CVE-2002-0057](https://cve.now/CVE-2002-0057.md): XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attacke (no CVSS)
- [CVE-2002-0059](https://cve.now/CVE-2002-0059.md): The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certai (no CVSS)
- [CVE-2002-0060](https://cve.now/CVE-2002-0060.md): IRC connection tracking helper module in the netfilter subsystem for Linux 2.4.18-pre9 and earlier does not properly set the mask for conntr (no CVSS)
- [CVE-2002-0063](https://cve.now/CVE-2002-0063.md): Buffer overflow in ippRead function of CUPS before 1.1.14 may allow attackers to execute arbitrary code via long attribute names or language (no CVSS)
- [CVE-2002-0064](https://cve.now/CVE-2002-0064.md): Funk Software Proxy Host 3.x is installed with insecure permissions for the registry and the file system. (no CVSS)
- [CVE-2002-0065](https://cve.now/CVE-2002-0065.md): Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local users to gain privileges by recovering the (no CVSS)
- [CVE-2002-0066](https://cve.now/CVE-2002-0066.md): Funk Software Proxy Host 3.x before 3.09A creates a Named Pipe that does not require authentication and is installed with insecure access co (no CVSS)
- [CVE-2002-0070](https://cve.now/CVE-2002-0070.md): Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute arbitrary code via a cu (no CVSS)
- [CVE-2002-0078](https://cve.now/CVE-2002-0078.md): The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone (no CVSS)
- [CVE-2002-0080](https://cve.now/CVE-2002-0080.md): rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group priv (no CVSS)
- [CVE-2002-0081](https://cve.now/CVE-2002-0081.md): Buffer overflows in (1) php\_mime\_split in PHP 4.1.0, 4.1.1, and 4.0.6 and earlier, and (2) php3\_mime\_split in PHP 3.0.x allows remote attack (no CVSS)
- [CVE-2002-0082](https://cve.now/CVE-2002-0082.md): The dbm and shm session cache code in mod\_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory us (no CVSS)
- [CVE-2002-0083](https://cve.now/CVE-2002-0083.md): Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges. (no CVSS)
- [CVE-2002-0092](https://cve.now/CVE-2002-0092.md): CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (server crash) (no CVSS)
- [CVE-2002-0096](https://cve.now/CVE-2002-0096.md): The installation of Geeklog 1.3 creates an extra group\_assignments record which is not properly deleted, which causes the first newly create (no CVSS)
- [CVE-2002-0097](https://cve.now/CVE-2002-0097.md): Geeklog 1.3 allows remote attackers to hijack user accounts, including the administrator account, by modifying the UID of a user's permanent (no CVSS)
- [CVE-2002-0098](https://cve.now/CVE-2002-0098.md): Buffer overflow in index.cgi administration interface for Boozt! Standard 0.9.8 allows local users to execute arbitrary code via a long name (no CVSS)
- [CVE-2002-0107](https://cve.now/CVE-2002-0107.md): Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of (no CVSS)
- [CVE-2002-0111](https://cve.now/CVE-2002-0111.md): Directory traversal vulnerability in Funsoft Dino's Webserver 1.2 and earlier allows remote attackers to read files or execute arbitrary com (no CVSS)
- [CVE-2002-0115](https://cve.now/CVE-2002-0115.md): Snort 1.8.3 does not properly define the minimum ICMP header size, which allows remote attackers to cause a denial of service (crash and cor (no CVSS)
- [CVE-2002-0117](https://cve.now/CVE-2002-0117.md): Cross-site scripting vulnerability in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 and earlier allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2002-0121](https://cve.now/CVE-2002-0121.md): PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web conne (no CVSS)
- [CVE-2002-0128](https://cve.now/CVE-2002-0128.md): cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, vi (no CVSS)
- [CVE-2002-0139](https://cve.now/CVE-2002-0139.md): Pi-Soft SpoonFTP 1.1 and earlier allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command. (no CVSS)
- [CVE-2002-0143](https://cve.now/CVE-2002-0143.md): Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary code via a long HOME environment (no CVSS)
- [CVE-2002-0151](https://cve.now/CVE-2002-0151.md): Buffer overflow in Multiple UNC Provider (MUP) in Microsoft Windows operating systems allows local users to cause a denial of service or pos (no CVSS)
- [CVE-2002-0152](https://cve.now/CVE-2002-0152.md): Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbi (no CVSS)
- [CVE-2002-0153](https://cve.now/CVE-2002-0153.md): Internet Explorer 5.1 for Macintosh allows remote attackers to bypass security checks and invoke local AppleScripts within a specific HTML e (no CVSS)
- [CVE-2002-0159](https://cve.now/CVE-2002-0159.md): Format string vulnerability in the administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3. (no CVSS)
- [CVE-2002-0160](https://cve.now/CVE-2002-0160.md): The administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allo (no CVSS)
- [CVE-2002-0166](https://cve.now/CVE-2002-0166.md): Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute Javascript via an HTTP request containing the sc (no CVSS)
- [CVE-2002-0167](https://cve.now/CVE-2002-0167.md): Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service (cras (no CVSS)
- [CVE-2002-0168](https://cve.now/CVE-2002-0168.md): Vulnerability in Imlib before 1.9.13 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by manipulati (no CVSS)
- [CVE-2002-0175](https://cve.now/CVE-2002-0175.md): libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" a (no CVSS)
- [CVE-2002-0176](https://cve.now/CVE-2002-0176.md): The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploi (no CVSS)
- [CVE-2002-0179](https://cve.now/CVE-2002-0179.md): Buffer overflow in xpilot-server for XPilot 4.5.0 and earlier allows remote attackers to execute arbitrary code. (no CVSS)
- [CVE-2002-0196](https://cve.now/CVE-2002-0196.md): GetRelativePath in ACD Incorporated CwpAPI 1.1 only verifies if the server root is somewhere within the path, which could allow remote attac (no CVSS)
- [CVE-2002-0197](https://cve.now/CVE-2002-0197.md): psyBNC 2.3 beta and earlier allows remote attackers to spoof encrypted, trusted messages by sending lines that begin with the "\[B\]" sequence (no CVSS)
- [CVE-2002-0207](https://cve.now/CVE-2002-0207.md): Buffer overflow in Real Networks RealPlayer 8.0 and earlier allows remote attackers to execute arbitrary code via a header length value that (no CVSS)
- [CVE-2002-0209](https://cve.now/CVE-2002-0209.md): Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing (SLB) and Cookie-Based Persistence features enabled, allows remote attac (no CVSS)
- [CVE-2002-0211](https://cve.now/CVE-2002-0211.md): Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary "gunzip" program (no CVSS)
- [CVE-2002-0226](https://cve.now/CVE-2002-0226.md): retrieve\_password.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remote attackers to requ (no CVSS)
- [CVE-2002-0237](https://cve.now/CVE-2002-0237.md): Buffer overflow in ISS BlackICE Defender 2.9 and earlier, BlackICE Agent 3.0 and 3.1, and RealSecure Server Sensor 6.0.1 and 6.5 allow remot (no CVSS)
- [CVE-2002-0251](https://cve.now/CVE-2002-0251.md): Buffer overflow in licq 1.0.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code v (no CVSS)
- [CVE-2002-0265](https://cve.now/CVE-2002-0265.md): Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows local users to gain priv (no CVSS)
- [CVE-2002-1056](https://cve.now/CVE-2002-1056.md): Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2002-06-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.