# CVEs published 2002-08-20

8 CVEs were published on August 20, 2002: 0 critical, 0 high. Days are UTC.

- [CVE-2002-0093](https://cve.now/CVE-2002-0093.md): Buffer overflow in ipcs for HP Tru64 UNIX 4.0f through 5.1a may allow attackers to execute arbitrary code, a different vulnerability than CV (no CVSS)
- [CVE-2002-0654](https://cve.now/CVE-2002-0654.md): Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a reques (no CVSS)
- [CVE-2002-0721](https://cve.now/CVE-2002-0721.md): Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, w (no CVSS)
- [CVE-2002-0725](https://cve.now/CVE-2002-0725.md): NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard link to the target f (no CVSS)
- [CVE-2002-0857](https://cve.now/CVE-2002-0857.md): Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to (no CVSS)
- [CVE-2002-0858](https://cve.now/CVE-2002-0858.md): catsnmp in Oracle 9i and 8i is installed with a dbsnmp user with a default dbsnmp password, which allows attackers to perform restricted dat (no CVSS)
- [CVE-2002-0870](https://cve.now/CVE-2002-0870.md): The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability (CVE-2001-0622) was incomplete, whi (no CVSS)
- [CVE-2002-0874](https://cve.now/CVE-2002-0874.md): Vulnerability in Interchange 4.8.6, 4.8.3, and other versions, when running in INET mode, allows remote attackers to read arbitrary files. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2002-08-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.