# CVEs published 2002-10-25

5 CVEs were published on October 25, 2002: 0 critical, 0 high. Days are UTC.

- [CVE-2002-0666](https://cve.now/CVE-2002-0666.md): IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote (no CVSS)
- [CVE-2002-1167](https://cve.now/CVE-2002-1167.md): Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers (no CVSS)
- [CVE-2002-1168](https://cve.now/CVE-2002-1168.md): Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers (no CVSS)
- [CVE-2002-1233](https://cve.now/CVE-2002-1233.md): A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0), for (no CVSS)
- [CVE-2002-1235](https://cve.now/CVE-2002-1235.md): The kadm\_ser\_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and ea (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2002-10-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.