# CVEs published 2002-08-10

5 CVEs were published on August 10, 2002: 0 critical, 0 high. Days are UTC.

- [CVE-2000-1209](https://cve.now/CVE-2000-1209.md): The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) (no CVSS)
- [CVE-2002-0660](https://cve.now/CVE-2002-0660.md): Buffer overflow in libpng 1.0.12-3.woody.2 and libpng3 1.2.1-1.1.woody.2 on Debian GNU/Linux 3.0, and other operating systems, may allow att (no CVSS)
- [CVE-2002-0661](https://cve.now/CVE-2002-0661.md): Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to read arbitrary files (no CVSS)
- [CVE-2002-0812](https://cve.now/CVE-2002-0812.md): Information leak in Compaq WL310, and the Orinoco Residential Gateway access point it is based on, uses a system identification string as a (no CVSS)
- [CVE-2002-0849](https://cve.now/CVE-2002-0849.md): Linux-iSCSI iSCSI implementation installs the iscsi.conf file with world-readable permissions on some operating systems, including Red Hat L (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2002-08-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.