# CVEs published 2004-09-01

480 CVEs were published on September 1, 2004: 0 critical, 3 high. Days are UTC.

- [CVE-1999-0718](https://cve.now/CVE-1999-0718.md): IBM GINA, when used for OS/2 domain authentication of Windows NT users, allows local users to gain administrator privileges by changing the (no CVSS)
- [CVE-1999-1189](https://cve.now/CVE-1999-1189.md): Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a denial of service, a (no CVSS)
- [CVE-1999-1199](https://cve.now/CVE-1999-1199.md): Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME he (no CVSS)
- [CVE-1999-1201](https://cve.now/CVE-1999-1201.md): Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to caus (no CVSS)
- [CVE-1999-1217](https://cve.now/CVE-1999-1217.md): The PATH in Windows NT includes the current working directory (.), which could allow local users to gain privileges by placing Trojan horse (no CVSS)
- [CVE-1999-1365](https://cve.now/CVE-1999-1365.md): Windows NT searches a user's home directory (%systemroot% by default) before other directories to find critical programs such as NDDEAGNT.EX (no CVSS)
- [CVE-1999-1397](https://cve.now/CVE-1999-1397.md): Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\\Catalogs subkey of the AllowedPaths registry key, whose per (no CVSS)
- [CVE-1999-1486](https://cve.now/CVE-1999-1486.md): sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary file (no CVSS)
- [CVE-1999-1520](https://cve.now/CVE-1999-1520.md): A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC (no CVSS)
- [CVE-1999-1537](https://cve.now/CVE-1999-1537.md): IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attackers to cause a deni (no CVSS)
- [CVE-1999-1556](https://cve.now/CVE-1999-1556.md): Microsoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec account and stores it in an accessible portion of (no CVSS)
- [CVE-1999-1568](https://cve.now/CVE-1999-1568.md): Off-by-one error in NcFTPd FTP server before 2.4.1 allows a remote attacker to cause a denial of service (crash) via a long PORT command. (CVSS 7.5)
- [CVE-2000-0247](https://cve.now/CVE-2000-0247.md): Unknown vulnerability in Generic-NQS (GNQS) allows local users to gain root privileges. (no CVSS)
- [CVE-2000-0747](https://cve.now/CVE-2000-0747.md): The logrotate script for OpenLDAP before 1.2.11 in Conectiva Linux sends an improper signal to the kernel log daemon (klogd) and kills it. (no CVSS)
- [CVE-2000-0773](https://cve.now/CVE-2000-0773.md): Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant of the dot dot direc (no CVSS)
- [CVE-2000-0781](https://cve.now/CVE-2000-0781.md): uagentsetup in ARCServeIT Client Agent 6.62 does not properly check for the existence or ownership of a temporary file which is moved to the (no CVSS)
- [CVE-2000-0797](https://cve.now/CVE-2000-0797.md): Buffer overflow in gr\_osview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D option. (no CVSS)
- [CVE-2000-0894](https://cve.now/CVE-2000-0894.md): HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooti (no CVSS)
- [CVE-2000-0895](https://cve.now/CVE-2000-0895.md): Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arb (no CVSS)
- [CVE-2000-1203](https://cve.now/CVE-2000-1203.md): Lotus Domino SMTP server 4.63 through 5.08 allows remote attackers to cause a denial of service (CPU consumption) by forging an email messag (no CVSS)
- [CVE-2001-0042](https://cve.now/CVE-2001-0042.md): PHP 3.x (PHP3) on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. (no CVSS)
- [CVE-2001-0375](https://cve.now/CVE-2001-0375.md): Cisco PIX Firewall 515 and 520 with 5.1.4 OS running aaa authentication to a TACACS+ server allows remote attackers to cause a denial of ser (no CVSS)
- [CVE-2001-0423](https://cve.now/CVE-2001-0423.md): Buffer overflow in ipcs in Solaris 7 x86 allows local users to execute arbitrary code via a long TZ (timezone) environmental variable, a dif (no CVSS)
- [CVE-2001-0485](https://cve.now/CVE-2001-0485.md): Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute arbitr (no CVSS)
- [CVE-2001-0548](https://cve.now/CVE-2001-0548.md): Buffer overflow in dtmail in Solaris 2.6 and 7 allows local users to gain privileges via the MAIL environment variable. (no CVSS)
- [CVE-2001-0612](https://cve.now/CVE-2001-0612.md): McAfee Remote Desktop 3.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number of packets to port 504 (no CVSS)
- [CVE-2001-0643](https://cve.now/CVE-2001-0643.md): Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file name, which could allow attackers to trick the (no CVSS)
- [CVE-2001-0741](https://cve.now/CVE-2001-0741.md): Cisco Hot Standby Routing Protocol (HSRP) allows local attackers to cause a denial of service by spoofing HSRP packets. (no CVSS)
- [CVE-2001-0749](https://cve.now/CVE-2001-0749.md): Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to read arbitrary files via a webserver root directory set to system root. (no CVSS)
- [CVE-2001-0792](https://cve.now/CVE-2001-0792.md): Format string vulnerability in XChat 1.2.x allows remote attackers to execute arbitrary code via a malformed nickname. (no CVSS)
- [CVE-2001-0825](https://cve.now/CVE-2001-0825.md): Buffer overflow in internal string handling routines of xinetd before 2.1.8.8 allows remote attackers to execute arbitrary commands via a le (no CVSS)
- [CVE-2001-0837](https://cve.now/CVE-2001-0837.md): DeltaThree Pc-To-Phone 3.0.3 places sensitive data in world-readable locations in the installation directory, which allows local users to re (no CVSS)
- [CVE-2001-0902](https://cve.now/CVE-2001-0902.md): Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed charac (no CVSS)
- [CVE-2001-0907](https://cve.now/CVE-2001-0907.md): Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a series of deeply nested s (no CVSS)
- [CVE-2001-0909](https://cve.now/CVE-2001-0909.md): Buffer overflow in helpctr.exe program in Microsoft Help Center for Windows XP allows remote attackers to execute arbitrary code via a long (no CVSS)
- [CVE-2001-0914](https://cve.now/CVE-2001-0914.md): Linux kernel before 2.4.11pre3 in multiple Linux distributions allows local users to cause a denial of service (crash) by starting the core (no CVSS)
- [CVE-2001-0951](https://cve.now/CVE-2001-0951.md): Windows 2000 allows remote attackers to cause a denial of service (CPU consumption) by flooding Internet Key Exchange (IKE) UDP port 500 wit (no CVSS)
- [CVE-2001-1029](https://cve.now/CVE-2001-1029.md): libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welco (no CVSS)
- [CVE-2001-1055](https://cve.now/CVE-2001-1055.md): The Microsoft Windows network stack allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed ARP requ (no CVSS)
- [CVE-2001-1066](https://cve.now/CVE-2001-1066.md): ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users to overwrite arbitr (no CVSS)
- [CVE-2001-1069](https://cve.now/CVE-2001-1069.md): libCoolType library as used in Adobe Acrobat (acroread) on Linux creates the AdobeFnt.lst file with world-writable permissions, which allows (no CVSS)
- [CVE-2001-1081](https://cve.now/CVE-2001-1081.md): Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers to cause a denial of service a (no CVSS)
- [CVE-2001-1098](https://cve.now/CVE-2001-1098.md): Cisco PIX firewall manager (PFM) 4.3(2)g logs the enable password in plaintext in the pfm.log file, which could allow local users to obtain (no CVSS)
- [CVE-2001-1103](https://cve.now/CVE-2001-1103.md): FTP Voyager ActiveX control before 8.0, when it is marked as safe for scripting (the default) or if allowed by the IObjectSafety interface, (no CVSS)
- [CVE-2001-1186](https://cve.now/CVE-2001-1186.md): Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than t (no CVSS)
- [CVE-2001-1200](https://cve.now/CVE-2001-1200.md): Microsoft Windows XP allows local users to bypass a locked screen and run certain programs that are associated with Hot Keys. (no CVSS)
- [CVE-2001-1267](https://cve.now/CVE-2001-1267.md): Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction v (no CVSS)
- [CVE-2001-1279](https://cve.now/CVE-2001-1279.md): Buffer overflow in print-rx.c of tcpdump 3.x (probably 3.6x) allows remote attackers to cause a denial of service and possibly execute arbit (no CVSS)
- [CVE-2001-1302](https://cve.now/CVE-2001-1302.md): The change password option in the Windows Security interface for Windows 2000 allows attackers to use the option to attempt to change passwo (no CVSS)
- [CVE-2001-1328](https://cve.now/CVE-2001-1328.md): Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code. (no CVSS)
- [CVE-2001-1347](https://cve.now/CVE-2001-1347.md): Windows 2000 allows local users to cause a denial of service and possibly gain privileges by setting a hardware breakpoint that is handled u (no CVSS)
- [CVE-2001-1350](https://cve.now/CVE-2001-1350.md): Cross-site scripting vulnerability in namazu.cgi for Namazu 2.0.7 and earlier allows remote attackers to execute arbitrary Javascript as oth (no CVSS)
- [CVE-2001-1351](https://cve.now/CVE-2001-1351.md): Cross-site scripting vulnerability in Namazu 2.0.8 and earlier allows remote attackers to execute arbitrary Javascript as other web users vi (no CVSS)
- [CVE-2001-1352](https://cve.now/CVE-2001-1352.md): Cross-site scripting vulnerability in Namazu 2.0.9 and earlier allows remote attackers to execute arbitrary Javascript as other web users vi (no CVSS)
- [CVE-2001-1367](https://cve.now/CVE-2001-1367.md): The checkAccess function in PHPSlice 0.1.4, and all other versions between 0.1.1 and 0.1.6, does not properly verify the administrative acce (no CVSS)
- [CVE-2001-1386](https://cve.now/CVE-2001-1386.md): WFTPD 3.00 allows remote attackers to read arbitrary files by uploading a (link) file that ends in a ".lnk." extension, which bypasses WFTPD (no CVSS)
- [CVE-2001-1391](https://cve.now/CVE-2001-1391.md): Off-by-one vulnerability in CPIA driver of Linux kernel before 2.2.19 allows users to modify kernel memory. (no CVSS)
- [CVE-2002-0036](https://cve.now/CVE-2002-0036.md): Integer signedness error in MIT Kerberos V5 ASN.1 decoder before krb5 1.2.5 allows remote attackers to cause a denial of service via a large (no CVSS)
- [CVE-2002-0090](https://cve.now/CVE-2002-0090.md): Buffer overflow in Low BandWidth X proxy (lbxproxy) in Solaris 8 allows local users to execute arbitrary code via a long display command lin (no CVSS)
- [CVE-2002-0158](https://cve.now/CVE-2002-0158.md): Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color database) command line arg (no CVSS)
- [CVE-2002-0188](https://cve.now/CVE-2002-0188.md): Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type (no CVSS)
- [CVE-2002-0193](https://cve.now/CVE-2002-0193.md): Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type (no CVSS)
- [CVE-2002-0275](https://cve.now/CVE-2002-0275.md): Falcon web server 2.0.0.1020 and earlier allows remote attackers to bypass authentication and read restricted files via an extra / (slash) i (no CVSS)
- [CVE-2002-0313](https://cve.now/CVE-2002-0313.md): Buffer overflow in Essentia Web Server 2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a (no CVSS)
- [CVE-2002-0357](https://cve.now/CVE-2002-0357.md): Unknown vulnerability in rpc.passwd in the nfs.sw.nis subsystem of SGI IRIX 6.5.15 and earlier allows local users to gain root privileges. (no CVSS)
- [CVE-2002-0362](https://cve.now/CVE-2002-0362.md): Buffer overflow in AOL Instant Messenger (AIM) 4.2 and later allows remote attackers to execute arbitrary code via a long AddExternalApp req (no CVSS)
- [CVE-2002-0376](https://cve.now/CVE-2002-0376.md): Buffer overflow in Apple QuickTime 5.0 ActiveX component allows remote attackers to execute arbitrary code via a long pluginspage field. (no CVSS)
- [CVE-2002-0380](https://cve.now/CVE-2002-0380.md): Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an (no CVSS)
- [CVE-2002-0384](https://cve.now/CVE-2002-0384.md): Buffer overflow in Jabber plug-in for Gaim client before 0.58 allows remote attackers to execute arbitrary code. (no CVSS)
- [CVE-2002-0387](https://cve.now/CVE-2002-0387.md): Buffer overflow in gxnsapi6.dll NSAPI plugin of the Connector Module for Sun ONE Application Server before 6.5 allows remote attackers to ex (no CVSS)
- [CVE-2002-0395](https://cve.now/CVE-2002-0395.md): The TFTP server for Red-M 1050 (Bluetooth Access Point) can not be disabled and makes it easier for remote attackers to crack the administra (no CVSS)
- [CVE-2002-0396](https://cve.now/CVE-2002-0396.md): The web management server for Red-M 1050 (Bluetooth Access Point) does not use session-based credentials to authenticate users, which allows (no CVSS)
- [CVE-2002-0397](https://cve.now/CVE-2002-0397.md): Red-M 1050 (Bluetooth Access Point) publicizes its name, IP address, and other information in UDP packets to a broadcast address, which allo (no CVSS)
- [CVE-2002-0398](https://cve.now/CVE-2002-0398.md): Red-M 1050 (Bluetooth Access Point) PPP server allows bonded users to cause a denial of service and possibly execute arbitrary code via a lo (no CVSS)
- [CVE-2002-0400](https://cve.now/CVE-2002-0400.md): ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error co (no CVSS)
- [CVE-2002-0443](https://cve.now/CVE-2002-0443.md): Microsoft Windows 2000 allows local users to bypass the policy that prohibits reusing old passwords by changing the current password before (no CVSS)
- [CVE-2002-0444](https://cve.now/CVE-2002-0444.md): Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incom (no CVSS)
- [CVE-2002-0445](https://cve.now/CVE-2002-0445.md): article.php in PHP FirstPost 0.1 allows allows remote attackers to obtain the full pathname of the server via an invalid post number in the (no CVSS)
- [CVE-2002-0546](https://cve.now/CVE-2002-0546.md): Cross-site scripting vulnerability in the mini-browser for Winamp 2.78 and 2.79 allows remote attackers to execute script via an ID3v1 or ID (no CVSS)
- [CVE-2002-0615](https://cve.now/CVE-2002-0615.md): The Windows Media Active Playlist in Microsoft Windows Media Player 7.1 stores information in a well known location on the local file system (no CVSS)
- [CVE-2002-0627](https://cve.now/CVE-2002-0627.md): The Web server for Polycom ViewStation before 7.2.4 allows remote attackers to bypass authentication and read files via Unicode encoded requ (no CVSS)
- [CVE-2002-0630](https://cve.now/CVE-2002-0630.md): The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service (crash) via long or malformed I (no CVSS)
- [CVE-2002-0651](https://cve.now/CVE-2002-0651.md): Buffer overflow in the DNS resolver code used in libc, glibc, and libbind, as derived from ISC BIND, allows remote malicious DNS servers to (no CVSS)
- [CVE-2002-0662](https://cve.now/CVE-2002-0662.md): scrollkeeper-get-cl in ScrollKeeper 0.3 to 0.3.11 allows local users to create and overwrite files via a symlink attack on the scrollkeeper- (no CVSS)
- [CVE-2002-0668](https://cve.now/CVE-2002-0668.md): The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows authenticated users to modify the Call Forw (no CVSS)
- [CVE-2002-0672](https://cve.now/CVE-2002-0672.md): Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to restore the phone to factory de (no CVSS)
- [CVE-2002-0673](https://cve.now/CVE-2002-0673.md): The enrollment process for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to the (no CVSS)
- [CVE-2002-0674](https://cve.now/CVE-2002-0674.md): Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not "time out" an inactive administrator session, which could allow (no CVSS)
- [CVE-2002-0682](https://cve.now/CVE-2002-0682.md): Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users via script in a URL w (no CVSS)
- [CVE-2002-0692](https://cve.now/CVE-2002-0692.md): Buffer overflow in SmartHTML Interpreter (shtml.dll) in Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers t (no CVSS)
- [CVE-2002-0694](https://cve.now/CVE-2002-0694.md): The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, (no CVSS)
- [CVE-2002-0696](https://cve.now/CVE-2002-0696.md): Microsoft Visual FoxPro 6.0 does not register its associated files with Internet Explorer, which allows remote attackers to execute Visual F (no CVSS)
- [CVE-2002-0729](https://cve.now/CVE-2002-0729.md): Microsoft SQL Server 2000 allows remote attackers to cause a denial of service via a malformed 0x08 packet that is missing a colon separator (no CVSS)
- [CVE-2002-0835](https://cve.now/CVE-2002-0835.md): Preboot eXecution Environment (PXE) server allows remote attackers to cause a denial of service (crash) via certain DHCP packets from Voice- (no CVSS)
- [CVE-2002-0836](https://cve.now/CVE-2002-0836.md): dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute a (no CVSS)
- [CVE-2002-0840](https://cve.now/CVE-2002-0840.md): Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalNam (no CVSS)
- [CVE-2002-0842](https://cve.now/CVE-2002-0842.md): Format string vulnerability in certain third party modifications to mod\_dav for logging bad gateway messages (e.g. (no CVSS)
- [CVE-2002-0844](https://cve.now/CVE-2002-0844.md): Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to execute arbitrary code. (no CVSS)
- [CVE-2002-0850](https://cve.now/CVE-2002-0850.md): Buffer overflow in PGP Corporate Desktop 7.1.1 allows remote attackers to execute arbitrary code via an encrypted document that has a long f (no CVSS)
- [CVE-2002-0864](https://cve.now/CVE-2002-0864.md): The Remote Data Protocol (RDP) version 5.1 in Microsoft Windows XP allows remote attackers to cause a denial of service (crash) when Remote (no CVSS)
- [CVE-2002-0865](https://cve.now/CVE-2002-0865.md): A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.o (no CVSS)
- [CVE-2002-0866](https://cve.now/CVE-2002-0866.md): Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and (no CVSS)
- [CVE-2002-0867](https://cve.now/CVE-2002-0867.md): Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to cause a denial of service (crash) in Internet E (no CVSS)
- [CVE-2002-0895](https://cve.now/CVE-2002-0895.md): Buffer overflow in MatuFtpServer 1.1.3.0 (1.1.3) allows remote attackers to cause a denial of service and possibly execute arbitrary code vi (no CVSS)
- [CVE-2002-0969](https://cve.now/CVE-2002-0969.md): Buffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local users to execute arbi (no CVSS)
- [CVE-2002-0970](https://cve.now/CVE-2002-0970.md): The SSL capability for Konqueror in KDE 3.0.2 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, w (no CVSS)
- [CVE-2002-0974](https://cve.now/CVE-2002-0974.md): Help and Support Center for Windows XP allows remote attackers to delete arbitrary files via a link to the hcp: protocol that accesses upldd (no CVSS)
- [CVE-2002-0985](https://cve.now/CVE-2002-0985.md): Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify c (no CVSS)
- [CVE-2002-0986](https://cve.now/CVE-2002-0986.md): The mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments, which could allow remote attackers to mod (no CVSS)
- [CVE-2002-0990](https://cve.now/CVE-2002-0990.md): The web proxy component in Symantec Enterprise Firewall (SEF) 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociRaptor, and Symantec G (no CVSS)
- [CVE-2002-1091](https://cve.now/CVE-2002-1091.md): Netscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and execute arbitrary code via a GIF image with (no CVSS)
- [CVE-2002-1092](https://cve.now/CVE-2002-1092.md): Cisco VPN 3000 Concentrator 3.6(Rel) and earlier, and 2.x.x, when configured to use internal authentication with group accounts and without (no CVSS)
- [CVE-2002-1093](https://cve.now/CVE-2002-1093.md): HTML interface for Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.0.3(B) allows remote attackers to cause a denial of service (CPU con (no CVSS)
- [CVE-2002-1095](https://cve.now/CVE-2002-1095.md): Cisco VPN 3000 Concentrator before 2.5.2(F), with encryption enabled, allows remote attackers to cause a denial of service (reload) via a Wi (no CVSS)
- [CVE-2002-1096](https://cve.now/CVE-2002-1096.md): Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.1, allows restricted administrators to obtain user passwords that are stored in plaint (no CVSS)
- [CVE-2002-1097](https://cve.now/CVE-2002-1097.md): Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.2, allows restricted administrators to obtain certificate passwords that are stored in (no CVSS)
- [CVE-2002-1098](https://cve.now/CVE-2002-1098.md): Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, adds an "HTTPS on Public Inbound (XML-Auto)(forward/in)" rule but sets the protocol (no CVSS)
- [CVE-2002-1099](https://cve.now/CVE-2002-1099.md): Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to obtain potentially sensitive information without authent (no CVSS)
- [CVE-2002-1102](https://cve.now/CVE-2002-1102.md): The LAN-to-LAN IPSEC capability for Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.4, allows remote attackers to cause a denial of se (no CVSS)
- [CVE-2002-1104](https://cve.now/CVE-2002-1104.md): Cisco Virtual Private Network (VPN) Client software 2.x.x and 3.x before 3.0.5 allows remote attackers to cause a denial of service (crash) (no CVSS)
- [CVE-2002-1105](https://cve.now/CVE-2002-1105.md): Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, allows local users to use a utility program to obtain the (no CVSS)
- [CVE-2002-1106](https://cve.now/CVE-2002-1106.md): Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, does not properly verify that certificate DN fields match (no CVSS)
- [CVE-2002-1107](https://cve.now/CVE-2002-1107.md): Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.2B, does not generate sufficiently random numbers, which may m (no CVSS)
- [CVE-2002-1108](https://cve.now/CVE-2002-1108.md): Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.6(Rel), when configured with all tunnel mode, can be forced into (no CVSS)
- [CVE-2002-1109](https://cve.now/CVE-2002-1109.md): securetar, as used in AMaViS shell script 0.2.1 and earlier, allows users to cause a denial of service (CPU consumption) via a malformed TAR (no CVSS)
- [CVE-2002-1111](https://cve.now/CVE-2002-1111.md): print\_all\_bug\_page.php in Mantis 0.17.3 and earlier does not verify the limit\_reporters option, which allows remote attackers to view bug su (no CVSS)
- [CVE-2002-1112](https://cve.now/CVE-2002-1112.md): Mantis before 0.17.4 allows remote attackers to list project bugs without authentication by modifying the cookie that is used by the "View B (no CVSS)
- [CVE-2002-1113](https://cve.now/CVE-2002-1113.md): summary\_graph\_functions.php in Mantis 0.17.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the g\_jpgraph\_pa (no CVSS)
- [CVE-2002-1116](https://cve.now/CVE-2002-1116.md): The "View Bugs" page (view\_all\_bug\_page.php) in Mantis 0.17.4a and earlier includes summaries of private bugs for users that do not have acc (no CVSS)
- [CVE-2002-1117](https://cve.now/CVE-2002-1117.md): Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which e (no CVSS)
- [CVE-2002-1118](https://cve.now/CVE-2002-1118.md): TNS Listener in Oracle Net Services for Oracle 9i 9.2.x and 9.0.x, and Oracle 8i 8.1.x, allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2002-1119](https://cve.now/CVE-2002-1119.md): os.\_execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names, which could allow local users to execute (no CVSS)
- [CVE-2002-1122](https://cve.now/CVE-2002-1122.md): Buffer overflow in the parsing mechanism for ISS Internet Scanner 6.2.1, when using the license banner HTTP check, allows remote attackers t (no CVSS)
- [CVE-2002-1123](https://cve.now/CVE-2002-1123.md): Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attacker (no CVSS)
- [CVE-2002-1126](https://cve.now/CVE-2002-1126.md): Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations (no CVSS)
- [CVE-2002-1132](https://cve.now/CVE-2002-1132.md): SquirrelMail 1.2.7 and earlier allows remote attackers to determine the absolute pathname of the options.php script via a malformed optpage (no CVSS)
- [CVE-2002-1135](https://cve.now/CVE-2002-1135.md): modsecurity.php 1.10 and earlier, in phpWebSite 0.8.2 and earlier, allows remote attackers to execute arbitrary PHP source code via an inc\_p (no CVSS)
- [CVE-2002-1137](https://cve.now/CVE-2002-1137.md): Buffer overflow in the Database Console Command (DBCC) that handles user inputs in Microsoft SQL Server 7.0 and 2000, including Microsoft Da (no CVSS)
- [CVE-2002-1138](https://cve.now/CVE-2002-1138.md): Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000, writes output files (no CVSS)
- [CVE-2002-1139](https://cve.now/CVE-2002-1139.md): The Compressed Folders feature in Microsoft Windows 98 with Plus! Pack, Windows Me, and Windows XP does not properly check the destination f (no CVSS)
- [CVE-2002-1140](https://cve.now/CVE-2002-1140.md): The Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote atta (no CVSS)
- [CVE-2002-1141](https://cve.now/CVE-2002-1141.md): An input validation error in the Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 200 (no CVSS)
- [CVE-2002-1142](https://cve.now/CVE-2002-1142.md): Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Inter (no CVSS)
- [CVE-2002-1146](https://cve.now/CVE-2002-1146.md): The BIND 4 and BIND 8.2.x stub resolver libraries, and other libraries such as glibc 2.2.5 and earlier, libc, and libresolv, use the maximum (no CVSS)
- [CVE-2002-1147](https://cve.now/CVE-2002-1147.md): The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remote administration ena (no CVSS)
- [CVE-2002-1148](https://cve.now/CVE-2002-1148.md): The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read sou (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2002-1151](https://cve.now/CVE-2002-1151.md): The cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 through 3.0.3 does not properly initialize the domains on sub-frames (no CVSS)
- [CVE-2002-1152](https://cve.now/CVE-2002-1152.md): Konqueror in KDE 3.0 through 3.0.2 does not properly detect the "secure" flag in an HTTP cookie, which could cause Konqueror to send the coo (no CVSS)
- [CVE-2002-1153](https://cve.now/CVE-2002-1153.md): IBM Websphere 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request wit (no CVSS)
- [CVE-2002-1154](https://cve.now/CVE-2002-1154.md): anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to cau (no CVSS)
- [CVE-2002-1156](https://cve.now/CVE-2002-1156.md): Apache 2.0.42 allows remote attackers to view the source code of a CGI script via a POST request to a directory with both WebDAV and CGI ena (no CVSS)
- [CVE-2002-1157](https://cve.now/CVE-2002-1157.md): Cross-site scripting vulnerability in the mod\_ssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wildcard DNS is enabled, (no CVSS)
- [CVE-2002-1158](https://cve.now/CVE-2002-1158.md): Buffer overflow in the irw\_through function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as the bin user. (no CVSS)
- [CVE-2002-1159](https://cve.now/CVE-2002-1159.md): Canna 3.6 and earlier does not properly validate requests, which allows remote attackers to cause a denial of service or information leak. (no CVSS)
- [CVE-2002-1160](https://cve.now/CVE-2002-1160.md): The default configuration of the pam\_xauth module forwards MIT-Magic-Cookies to new X sessions, which could allow local users to gain root p (no CVSS)
- [CVE-2002-1169](https://cve.now/CVE-2002-1169.md): IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to cause a denial of service (crash) via an (no CVSS)
- [CVE-2002-1170](https://cve.now/CVE-2002-1170.md): The handle\_var\_requests function in snmp\_agent.c for the SNMP daemon in the Net-SNMP (formerly ucd-snmp) package 5.0.1 through 5.0.5 allows (no CVSS)
- [CVE-2002-1178](https://cve.now/CVE-2002-1178.md): Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands (no CVSS)
- [CVE-2002-1179](https://cve.now/CVE-2002-1179.md): Buffer overflow in the S/MIME Parsing capability in Microsoft Outlook Express 5.5 and 6.0 allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2002-1180](https://cve.now/CVE-2002-1180.md): A typographical error in the script source access permissions for Internet Information Server (IIS) 5.0 does not properly exclude .COM files (no CVSS)
- [CVE-2002-1182](https://cve.now/CVE-2002-1182.md): IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (crash) via malformed WebDAV requests that cause a large amount of memo (no CVSS)
- [CVE-2002-1183](https://cve.now/CVE-2002-1183.md): Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to e (no CVSS)
- [CVE-2002-1184](https://cve.now/CVE-2002-1184.md): The system root folder of Microsoft Windows 2000 has default permissions of Everyone group with Full access (Everyone:F) and is in the searc (no CVSS)
- [CVE-2002-1185](https://cve.now/CVE-2002-1185.md): Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers t (no CVSS)
- [CVE-2002-1186](https://cve.now/CVE-2002-1186.md): Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remo (no CVSS)
- [CVE-2002-1187](https://cve.now/CVE-2002-1187.md): Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and execute files on the loca (no CVSS)
- [CVE-2002-1188](https://cve.now/CVE-2002-1188.md): Internet Explorer 5.01 through 6.0 allows remote attackers to identify the path to the Temporary Internet Files folder and obtain user infor (no CVSS)
- [CVE-2002-1189](https://cve.now/CVE-2002-1189.md): The default configuration of Cisco Unity 2.x and 3.x does not block international operator calls in the predefined restriction tables, which (no CVSS)
- [CVE-2002-1193](https://cve.now/CVE-2002-1193.md): tkmail before 4.0beta9-8.1 allows local users to create or overwrite files as users via a symlink attack on temporary files. (no CVSS)
- [CVE-2002-1195](https://cve.now/CVE-2002-1195.md): Cross-site scripting vulnerability (XSS) in the PHP interface for ht://Check 1.1 allows remote web servers to insert arbitrary HTML, includi (no CVSS)
- [CVE-2002-1196](https://cve.now/CVE-2002-1196.md): editproducts.cgi in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, when the "usebuggroups" feature is enabled and more than 47 gro (no CVSS)
- [CVE-2002-1197](https://cve.now/CVE-2002-1197.md): bugzilla\_email\_append.pl in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, allows remote attackers to execute arbitrary code via s (no CVSS)
- [CVE-2002-1198](https://cve.now/CVE-2002-1198.md): Bugzilla 2.16.x before 2.16.1 does not properly filter apostrophes from an email address during account creation, which allows remote attack (no CVSS)
- [CVE-2002-1199](https://cve.now/CVE-2002-1199.md): The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a dir (no CVSS)
- [CVE-2002-1200](https://cve.now/CVE-2002-1200.md): Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track the size of (no CVSS)
- [CVE-2002-1211](https://cve.now/CVE-2002-1211.md): Prometheus 6.0 and earlier allows remote attackers to execute arbitrary PHP code via a modified PROMETHEUS\_LIBRARY\_BASE that points to code (no CVSS)
- [CVE-2002-1214](https://cve.now/CVE-2002-1214.md): Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of service (hang) and pos (no CVSS)
- [CVE-2002-1219](https://cve.now/CVE-2002-1219.md): Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitra (no CVSS)
- [CVE-2002-1220](https://cve.now/CVE-2002-1220.md): BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via a request for a sub (no CVSS)
- [CVE-2002-1221](https://cve.now/CVE-2002-1221.md): BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid expiry times, which are (no CVSS)
- [CVE-2002-1222](https://cve.now/CVE-2002-1222.md): Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote attackers to cause a den (no CVSS)
- [CVE-2002-1223](https://cve.now/CVE-2002-1223.md): Buffer overflow in DSC 3.0 parser from GSview, as used in KGhostView in KDE 1.1 and KDE 3.0.3a, may allow attackers to cause a denial of ser (no CVSS)
- [CVE-2002-1224](https://cve.now/CVE-2002-1224.md): Directory traversal vulnerability in kpf for KDE 3.0.1 through KDE 3.0.3a allows remote attackers to read arbitrary files as the kpf user vi (no CVSS)
- [CVE-2002-1227](https://cve.now/CVE-2002-1227.md): PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows local and remote attackers to gain privileges as di (no CVSS)
- [CVE-2002-1230](https://cve.now/CVE-2002-1230.md): NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as Lo (no CVSS)
- [CVE-2002-1231](https://cve.now/CVE-2002-1231.md): SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to cause a denial of service via an rcp call on /proc. (no CVSS)
- [CVE-2002-1232](https://cve.now/CVE-2002-1232.md): Memory leak in ypdb\_open in yp\_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of se (no CVSS)
- [CVE-2002-1236](https://cve.now/CVE-2002-1236.md): The remote management web server for Linksys BEFSR41 EtherFast Cable/DSL Router before firmware 1.42.7 allows remote attackers to cause a de (no CVSS)
- [CVE-2002-1239](https://cve.now/CVE-2002-1239.md): QNX Neutrino RTOS 6.2.0 uses the PATH environment variable to find and execute the cp program while operating at raised privileges, which al (no CVSS)
- [CVE-2002-1242](https://cve.now/CVE-2002-1242.md): SQL injection vulnerability in PHP-Nuke before 6.0 allows remote authenticated users to modify the database and gain privileges via the "bio (no CVSS)
- [CVE-2002-1244](https://cve.now/CVE-2002-1244.md): Format string vulnerability in Pablo FTP Server 1.5, 1.3, and possibly other versions, allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2002-1245](https://cve.now/CVE-2002-1245.md): Maped in LuxMan 0.41 uses the user-provided search path to find and execute the gzip program, which allows local users to modify /dev/mem an (no CVSS)
- [CVE-2002-1248](https://cve.now/CVE-2002-1248.md): Northern Solutions Xeneo Web Server 2.1.0.0, 2.0.759.6, and other versions before 2.1.5 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2002-1250](https://cve.now/CVE-2002-1250.md): Buffer overflow in Abuse 2.00 and earlier allows local users to gain root privileges via a long -net command line argument. (no CVSS)
- [CVE-2002-1251](https://cve.now/CVE-2002-1251.md): Buffer overflow in log2mail before 0.2.5.1 allows remote attackers to execute arbitrary code via a long log message. (no CVSS)
- [CVE-2002-1252](https://cve.now/CVE-2002-1252.md): The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, allows remote attackers to read (no CVSS)
- [CVE-2002-1253](https://cve.now/CVE-2002-1253.md): Abuse 2.00 and earlier allows local users to gain privileges via command line arguments that specify alternate Lisp scripts that run at esca (no CVSS)
- [CVE-2002-1255](https://cve.now/CVE-2002-1255.md): Microsoft Outlook 2002 allows remote attackers to cause a denial of service (repeated failure) via an email message with a certain invalid h (no CVSS)
- [CVE-2002-1256](https://cve.now/CVE-2002-1256.md): The SMB signing capability in the Server Message Block (SMB) protocol in Microsoft Windows 2000 and Windows XP allows attackers to disable t (no CVSS)
- [CVE-2002-1257](https://cve.now/CVE-2002-1257.md): Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java appl (no CVSS)
- [CVE-2002-1260](https://cve.now/CVE-2002-1260.md): The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security (no CVSS)
- [CVE-2002-1264](https://cve.now/CVE-2002-1264.md): Buffer overflow in Oracle iSQL\*Plus web application of the Oracle 9 database server allows remote attackers to execute arbitrary code via a (no CVSS)
- [CVE-2002-1265](https://cve.now/CVE-2002-1265.md): The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, whi (no CVSS)
- [CVE-2002-1266](https://cve.now/CVE-2002-1266.md): Mac OS X 10.2.2 allows local users to gain privileges by mounting a disk image file that was created on another system, aka "Local User Priv (no CVSS)
- [CVE-2002-1267](https://cve.now/CVE-2002-1267.md): Mac OS X 10.2.2 allows remote attackers to cause a denial of service by accessing the CUPS Printing Web Administration utility, aka "CUPS Pr (no CVSS)
- [CVE-2002-1268](https://cve.now/CVE-2002-1268.md): Mac OS X 10.2.2 allows local users to gain privileges via a mounted ISO 9600 CD, aka "User Privilege Elevation via Mounting an ISO 9600 CD." (no CVSS)
- [CVE-2002-1270](https://cve.now/CVE-2002-1270.md): Mac OS X 10.2.2 allows local users to read files that only allow write access via the map\_fd() Mach system call. (no CVSS)
- [CVE-2002-1271](https://cve.now/CVE-2002-1271.md): The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers (no CVSS)
- [CVE-2002-1272](https://cve.now/CVE-2002-1272.md): Alcatel OmniSwitch 7700/7800 switches running AOS 5.1.1 contains a back door telnet server that was intended for development but not removed (no CVSS)
- [CVE-2002-1277](https://cve.now/CVE-2002-1277.md): Buffer overflow in Window Maker (wmaker) 0.80.0 and earlier may allow remote attackers to execute arbitrary code via a certain image file th (no CVSS)
- [CVE-2002-1278](https://cve.now/CVE-2002-1278.md): The mailconf module in Linuxconf 1.24, and other versions before 1.28, on Conectiva Linux 6.0 through 8, and possibly other distributions, g (no CVSS)
- [CVE-2002-1284](https://cve.now/CVE-2002-1284.md): The wizard in KGPG 0.6 through 0.8.2 does not properly provide the passphrase to gpg when creating new keys, which causes secret keys to be (no CVSS)
- [CVE-2002-1296](https://cve.now/CVE-2002-1296.md): Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via ".." sequences in (no CVSS)
- [CVE-2002-1307](https://cve.now/CVE-2002-1307.md): Cross-site scripting vulnerability (XSS) in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML via an email message (no CVSS)
- [CVE-2002-1308](https://cve.now/CVE-2002-1308.md): Heap-based buffer overflow in Netscape and Mozilla allows remote attackers to execute arbitrary code via a jar: URL that references a malfor (no CVSS)
- [CVE-2002-1311](https://cve.now/CVE-2002-1311.md): Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbit (no CVSS)
- [CVE-2002-1313](https://cve.now/CVE-2002-1313.md): nullmailer 1.00RC5 and earlier allows local users to cause a denial of service via an email to a local user that does not exist, which gener (no CVSS)
- [CVE-2002-1317](https://cve.now/CVE-2002-1317.md): Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2002-1318](https://cve.now/CVE-2002-1318.md): Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an (no CVSS)
- [CVE-2002-1319](https://cve.now/CVE-2002-1319.md): The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a denial of service (hang) via the (no CVSS)
- [CVE-2002-1320](https://cve.now/CVE-2002-1320.md): Pine 4.44 and earlier allows remote attackers to cause a denial of service (core dump and failed restart) via an email message with a From h (no CVSS)
- [CVE-2002-1323](https://cve.now/CVE-2002-1323.md): Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (no CVSS)
- [CVE-2002-1325](https://cve.now/CVE-2002-1325.md): Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet tha (no CVSS)
- [CVE-2002-1327](https://cve.now/CVE-2002-1327.md): Buffer overflow in the Windows Shell function in Microsoft Windows XP allows remote attackers to execute arbitrary code via an .MP3 or .WMA (no CVSS)
- [CVE-2002-1336](https://cve.now/CVE-2002-1336.md): TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authenticati (no CVSS)
- [CVE-2002-1337](https://cve.now/CVE-2002-1337.md): Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related t (no CVSS)
- [CVE-2002-1348](https://cve.now/CVE-2002-1348.md): w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files (no CVSS)
- [CVE-2002-1349](https://cve.now/CVE-2002-1349.md): Buffer overflow in pop3trap.exe for PC-cillin 2000, 2002, and 2003 allows local users to execute arbitrary code via a long input string to T (no CVSS)
- [CVE-2002-1350](https://cve.now/CVE-2002-1350.md): The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2002-1361](https://cve.now/CVE-2002-1361.md): overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to execute arbitrary c (no CVSS)
- [CVE-2002-1362](https://cve.now/CVE-2002-1362.md): mICQ 0.4.9 and earlier allows remote attackers to cause a denial of service (crash) via malformed ICQ message types without a 0xFE separator (no CVSS)
- [CVE-2002-1363](https://cve.now/CVE-2002-1363.md): Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to caus (no CVSS)
- [CVE-2002-1364](https://cve.now/CVE-2002-1364.md): Buffer overflow in the get\_origin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOIS responses. (no CVSS)
- [CVE-2002-1365](https://cve.now/CVE-2002-1365.md): Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the "@" character when determining buffer lengths for local a (no CVSS)
- [CVE-2002-1366](https://cve.now/CVE-2002-1366.md): Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via fi (no CVSS)
- [CVE-2002-1367](https://cve.now/CVE-2002-1367.md): Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP pa (no CVSS)
- [CVE-2002-1369](https://cve.now/CVE-2002-1369.md): jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the optio (no CVSS)
- [CVE-2002-1371](https://cve.now/CVE-2002-1371.md): filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which al (no CVSS)
- [CVE-2002-1372](https://cve.now/CVE-2002-1372.md): Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, wh (CVSS 7.5)
- [CVE-2002-1373](https://cve.now/CVE-2002-1373.md): Signed integer vulnerability in the COM\_TABLE\_DUMP package for MySQL 3.23.x before 3.23.54 allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2002-1374](https://cve.now/CVE-2002-1374.md): The COM\_CHANGE\_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force (no CVSS)
- [CVE-2002-1375](https://cve.now/CVE-2002-1375.md): The COM\_CHANGE\_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long resp (no CVSS)
- [CVE-2002-1377](https://cve.now/CVE-2002-1377.md): vim 6.0 and 6.1, and possibly other versions, allows attackers to execute arbitrary commands using the libcall feature in modelines, which a (no CVSS)
- [CVE-2002-1380](https://cve.now/CVE-2002-1380.md): Linux kernel 2.2.x allows local users to cause a denial of service (crash) by using the mmap() function with a PROT\_READ parameter to access (no CVSS)
- [CVE-2002-1381](https://cve.now/CVE-2002-1381.md): Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitra (no CVSS)
- [CVE-2002-1382](https://cve.now/CVE-2002-1382.md): Macromedia Flash Player before 6.0.65.0 allows remote attackers to execute arbitrary code via certain malformed data headers in Shockwave Fl (no CVSS)
- [CVE-2002-1384](https://cve.now/CVE-2002-1384.md): Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code (no CVSS)
- [CVE-2002-1385](https://cve.now/CVE-2002-1385.md): openwebmail\_init in Open WebMail 1.81 and earlier allows local users to execute arbitrary code via .. (no CVSS)
- [CVE-2002-1388](https://cve.now/CVE-2002-1388.md): Cross-site scripting (XSS) vulnerability in MHonArc before 2.5.14 allows remote attackers to inject arbitrary HTML into web archive pages vi (no CVSS)
- [CVE-2002-1389](https://cve.now/CVE-2002-1389.md): Buffer overflow in typespeed 0.4.2 and earlier allows local users to gain privileges via long input. (no CVSS)
- [CVE-2002-1390](https://cve.now/CVE-2002-1390.md): The daemon for GeneWeb before 4.09 does not properly handle requested paths, which allows remote attackers to read arbitrary files via a cra (no CVSS)
- [CVE-2002-1391](https://cve.now/CVE-2002-1391.md): Buffer overflow in cnd-program for mgetty before 1.1.29 allows remote attackers to cause a denial of service and possibly execute arbitrary (no CVSS)
- [CVE-2002-1392](https://cve.now/CVE-2002-1392.md): faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which allows local users to modify fax transmissi (no CVSS)
- [CVE-2002-1394](https://cve.now/CVE-2002-1394.md): Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code fo (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2002-1396](https://cve.now/CVE-2002-1396.md): Heap-based buffer overflow in the wordwrap function in PHP after 4.1.2 and before 4.3.0 may allow attackers to cause a denial of service or (no CVSS)
- [CVE-2002-1403](https://cve.now/CVE-2002-1403.md): dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd (no CVSS)
- [CVE-2002-1405](https://cve.now/CVE-2002-1405.md): CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTTP request that is pro (no CVSS)
- [CVE-2002-1407](https://cve.now/CVE-2002-1407.md): TinySSL 1.02 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to s (no CVSS)
- [CVE-2002-1412](https://cve.now/CVE-2002-1412.md): Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a modified GALLERY\_BASEDIR (no CVSS)
- [CVE-2002-1413](https://cve.now/CVE-2002-1413.md): RCONAG6 for Novell Netware SP2, while running RconJ in secure mode, allows remote attackers to bypass authentication using the RconJ "Secure (no CVSS)
- [CVE-2002-1414](https://cve.now/CVE-2002-1414.md): Buffer overflow in qmailadmin allows local users to gain privileges via a long QMAILADMIN\_TEMPLATEDIR environment variable. (no CVSS)
- [CVE-2002-1417](https://cve.now/CVE-2002-1417.md): Directory traversal vulnerability in Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6 (no CVSS)
- [CVE-2002-1418](https://cve.now/CVE-2002-1418.md): Buffer overflow in the interpreter for Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and (no CVSS)
- [CVE-2002-1419](https://cve.now/CVE-2002-1419.md): The upgrade of IRIX on Origin 3000 to 6.5.13 through 6.5.16 changes the MAC address of the system, which could modify intended access restri (no CVSS)
- [CVE-2002-1420](https://cve.now/CVE-2002-1420.md): Integer signedness error in select() on OpenBSD 3.1 and earlier allows local users to overwrite arbitrary kernel memory via a negative value (no CVSS)
- [CVE-2002-1424](https://cve.now/CVE-2002-1424.md): Buffer overflow in munpack in mpack 1.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code (no CVSS)
- [CVE-2002-1425](https://cve.now/CVE-2002-1425.md): Directory traversal vulnerability in munpack in mpack 1.5 and earlier allows remote attackers to create new files in the parent directory vi (no CVSS)
- [CVE-2002-1430](https://cve.now/CVE-2002-1430.md): Unknown vulnerability in Sympoll 1.2 allows remote attackers to read arbitrary files when register\_globals is enabled, possibly by modifying (no CVSS)
- [CVE-2002-1435](https://cve.now/CVE-2002-1435.md): class.atkdateattribute.js.php in Achievo 0.7.0 through 0.9.1, except 0.8.2, allows remote attackers to execute arbitrary PHP code when the ' (no CVSS)
- [CVE-2002-1436](https://cve.now/CVE-2002-1436.md): The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary Perl code via an HTTP POST r (no CVSS)
- [CVE-2002-1437](https://cve.now/CVE-2002-1437.md): Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to read arbi (no CVSS)
- [CVE-2002-1438](https://cve.now/CVE-2002-1438.md): The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to obtain Perl version information via the -v opt (no CVSS)
- [CVE-2002-1443](https://cve.now/CVE-2002-1443.md): The Google toolbar 1.1.58 and earlier allows remote web sites to monitor a user's input into the toolbar via an "onkeydown" event handler. (no CVSS)
- [CVE-2002-1446](https://cve.now/CVE-2002-1446.md): The error checking routine used for the C\_Verify call on a symmetric verification key in the nCipher PKCS#11 library 1.2.0 and later returns (no CVSS)
- [CVE-2002-1447](https://cve.now/CVE-2002-1447.md): Buffer overflow in the vpnclient program for UNIX VPN Client before 3.5.2 allows local users to gain administrative privileges via a long pr (no CVSS)
- [CVE-2002-1448](https://cve.now/CVE-2002-1448.md): An undocumented SNMP read/write community string ('NoGaH$@!') in Avaya P330, P130, and M770-ATM Cajun products allows remote attackers to ga (no CVSS)
- [CVE-2002-1463](https://cve.now/CVE-2002-1463.md): Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway (no CVSS)
- [CVE-2002-1468](https://cve.now/CVE-2002-1468.md): Buffer overflow in errpt in AIX 4.3.3 allows local users to execute arbitrary code as root. (no CVSS)
- [CVE-2002-1469](https://cve.now/CVE-2002-1469.md): scponly does not properly verify the path when finding the (1) scp or (2) sftp-server programs, which could allow remote authenticated users (no CVSS)
- [CVE-2002-1471](https://cve.now/CVE-2002-1471.md): The camel component for Ximian Evolution 1.0.x and earlier does not verify certificates when it establishes a new SSL connection after previ (no CVSS)
- [CVE-2002-1472](https://cve.now/CVE-2002-1472.md): Untrusted search path vulnerability in libX11.so in xfree86, when used in setuid or setgid programs, allows local users to gain root privile (no CVSS)
- [CVE-2002-1476](https://cve.now/CVE-2002-1476.md): Buffer overflow in setlocale in libc on NetBSD 1.4.x through 1.6, and possibly other operating systems, when called with the LC\_ALL category (no CVSS)
- [CVE-2002-1477](https://cve.now/CVE-2002-1477.md): graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in (no CVSS)
- [CVE-2002-1478](https://cve.now/CVE-2002-1478.md): Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode. (no CVSS)
- [CVE-2002-1479](https://cve.now/CVE-2002-1479.md): Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local (no CVSS)
- [CVE-2002-1490](https://cve.now/CVE-2002-1490.md): NetBSD 1.4 through 1.6 beta allows local users to cause a denial of service (kernel panic) via a series of calls to the TIOCSCTTY ioctl, whi (no CVSS)
- [CVE-2002-1491](https://cve.now/CVE-2002-1491.md): The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving "Default Connection" (no CVSS)
- [CVE-2002-1493](https://cve.now/CVE-2002-1493.md): Cross-site scripting (XSS) vulnerability in Lycos HTMLGear guestbook allows remote attackers to inject arbitrary script via (1) STYLE attrib (no CVSS)
- [CVE-2002-1494](https://cve.now/CVE-2002-1494.md): Cross-site scripting (XSS) vulnerabilities in Aestiva HTML/OS allows remote attackers to insert arbitrary HTML or script by inserting the sc (no CVSS)
- [CVE-2002-1496](https://cve.now/CVE-2002-1496.md): Heap-based buffer overflow in Null HTTP Server 0.5.0 and earlier allows remote attackers to execute arbitrary code via a negative value in t (no CVSS)
- [CVE-2002-1497](https://cve.now/CVE-2002-1497.md): Cross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and earlier allows remote attackers to insert arbitrary HTML into a "404 (no CVSS)
- [CVE-2002-1501](https://cve.now/CVE-2002-1501.md): The MPS functionality in Enterasys SSR8000 (Smart Switch Router) before firmware 8.3.0.10 allows remote attackers to cause a denial of servi (no CVSS)
- [CVE-2002-1502](https://cve.now/CVE-2002-1502.md): Symbolic link vulnerability in xbreaky before 0.5.5 allows local users to overwrite arbitrary files via a symlink from the user's .breakyhig (no CVSS)
- [CVE-2002-1505](https://cve.now/CVE-2002-1505.md): SQL injection vulnerability in board.php for WoltLab Burning Board (wBB) 2.0 RC 1 and earlier allows remote attackers to modify the database (no CVSS)
- [CVE-2002-1509](https://cve.now/CVE-2002-1509.md): A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of the new user's group (no CVSS)
- [CVE-2002-1510](https://cve.now/CVE-2002-1510.md): xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth directory does not e (no CVSS)
- [CVE-2002-1511](https://cve.now/CVE-2002-1511.md): The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies (no CVSS)
- [CVE-2002-1513](https://cve.now/CVE-2002-1513.md): The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command (no CVSS)
- [CVE-2002-1514](https://cve.now/CVE-2002-1514.md): gds\_lock\_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc\_init1.X" temporar (no CVSS)
- [CVE-2002-1516](https://cve.now/CVE-2002-1516.md): rpcbind in SGI IRIX, when using the -w command line switch, allows local users to overwrite arbitrary files via a symlink attack. (no CVSS)
- [CVE-2002-1517](https://cve.now/CVE-2002-1517.md): fsr\_efs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink attack, possibly via the .fsrlast file. (no CVSS)
- [CVE-2002-1518](https://cve.now/CVE-2002-1518.md): mv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory, which could allow local users to modify files a (no CVSS)
- [CVE-2002-1519](https://cve.now/CVE-2002-1519.md): Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote atta (no CVSS)
- [CVE-2002-1520](https://cve.now/CVE-2002-1520.md): The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a (no CVSS)
- [CVE-2002-1521](https://cve.now/CVE-2002-1521.md): Web Server 4D (WS4D) 3.6 stores passwords in plaintext in the Ws4d.4DD file, which allows attackers to gain privileges. (no CVSS)
- [CVE-2002-1524](https://cve.now/CVE-2002-1524.md): Buffer overflow in XML parser in wsabi.dll of Winamp 3 (1.0.0.488) allows remote attackers to execute arbitrary code via a skin file (.wal) (no CVSS)
- [CVE-2002-1528](https://cve.now/CVE-2002-1528.md): MsmMask.exe in MondoSearch 4.4 allows remote attackers to obtain the source code of scripts via the mask parameter. (no CVSS)
- [CVE-2002-1529](https://cve.now/CVE-2002-1529.md): Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Fi (no CVSS)
- [CVE-2002-1530](https://cve.now/CVE-2002-1530.md): The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords (no CVSS)
- [CVE-2002-1531](https://cve.now/CVE-2002-1531.md): The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (cr (no CVSS)
- [CVE-2002-1532](https://cve.now/CVE-2002-1532.md): The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (re (no CVSS)
- [CVE-2002-1534](https://cve.now/CVE-2002-1534.md): Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share. (no CVSS)
- [CVE-2002-1537](https://cve.now/CVE-2002-1537.md): admin\_ug\_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin\_ug\_auth.php with modifed form (no CVSS)
- [CVE-2002-1538](https://cve.now/CVE-2002-1538.md): Acuma Acusend 4, and possibly earlier versions, allows remote authenticated users to read the reports of other users by inferring the full U (no CVSS)
- [CVE-2002-1540](https://cve.now/CVE-2002-1540.md): The client for Symantec Norton AntiVirus Corporate Edition 7.5.x before 7.5.1 Build 62 and 7.6.x before 7.6.1 Build 35a runs winhlp32 with r (no CVSS)
- [CVE-2002-1541](https://cve.now/CVE-2002-1541.md): BadBlue 1.7 allows remote attackers to bypass password protections for directories and files via an HTTP request containing an extra / (slas (no CVSS)
- [CVE-2002-1543](https://cve.now/CVE-2002-1543.md): Buffer overflow in trek on NetBSD 1.5 through 1.5.3 allows local users to gain privileges via long keyboard input. (no CVSS)
- [CVE-2002-1547](https://cve.now/CVE-2002-1547.md): Netscreen running ScreenOS 4.0.0r6 and earlier allows remote attackers to cause a denial of service via a malformed SSH packet to the Secure (no CVSS)
- [CVE-2002-1548](https://cve.now/CVE-2002-1548.md): Unknown vulnerability in autofs on AIX 4.3.0, when using executable maps, allows attackers to execute arbitrary commands as root, possibly r (no CVSS)
- [CVE-2002-1549](https://cve.now/CVE-2002-1549.md): Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request. (no CVSS)
- [CVE-2002-1550](https://cve.now/CVE-2002-1550.md): dump\_smutil.sh in IBM AIX allows local users to overwrite arbitrary files via a symlink attack on temporary files. (no CVSS)
- [CVE-2002-1552](https://cve.now/CVE-2002-1552.md): Novell eDirectory (eDir) 8.6.2 and Netware 5.1 eDir 85.x allows users with expired passwords to gain inappropriate permissions when logging (no CVSS)
- [CVE-2002-1560](https://cve.now/CVE-2002-1560.md): index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by setting the login parameter to (no CVSS)
- [CVE-2002-1574](https://cve.now/CVE-2002-1574.md): Buffer overflow in the ixj telephony card driver in Linux before 2.4.20 has unknown impact and attack vectors. (no CVSS)
- [CVE-2003-0002](https://cve.now/CVE-2003-0002.md): Cross-site scripting vulnerability (XSS) in ManualLogin.asp script for Microsoft Content Management Server (MCMS) 2001 allows remote attacke (no CVSS)
- [CVE-2003-0003](https://cve.now/CVE-2003-0003.md): Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows X (no CVSS)
- [CVE-2003-0004](https://cve.now/CVE-2003-0004.md): Buffer overflow in the Windows Redirector function in Microsoft Windows XP allows local users to execute arbitrary code via a long parameter (no CVSS)
- [CVE-2003-0007](https://cve.now/CVE-2003-0007.md): Microsoft Outlook 2002 does not properly handle requests to encrypt email messages with V1 Exchange Server Security certificates, which caus (no CVSS)
- [CVE-2003-0009](https://cve.now/CVE-2003-0009.md): Cross-site scripting (XSS) vulnerability in Help and Support Center for Microsoft Windows Me allows remote attackers to execute arbitrary sc (no CVSS)
- [CVE-2003-0012](https://cve.now/CVE-2003-0012.md): The data collection script for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 sets world-writable permissions (no CVSS)
- [CVE-2003-0013](https://cve.now/CVE-2003-0013.md): The default .htaccess scripts for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 do not include filenames for (no CVSS)
- [CVE-2003-0015](https://cve.now/CVE-2003-0015.md): Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code (no CVSS)
- [CVE-2003-0016](https://cve.now/CVE-2003-0016.md): Apache before 2.0.44, when running on unpatched Windows 9x and Me operating systems, allows remote attackers to cause a denial of service or (no CVSS)
- [CVE-2003-0017](https://cve.now/CVE-2003-0017.md): Apache 2.0 before 2.0.44 on Windows platforms allows remote attackers to obtain certain files via an HTTP request that ends in certain illeg (no CVSS)
- [CVE-2003-0018](https://cve.now/CVE-2003-0018.md): Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the O\_DIRECT feature, which allows local attackers with write privileges to (no CVSS)
- [CVE-2003-0019](https://cve.now/CVE-2003-0019.md): uml\_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users to modify network i (no CVSS)
- [CVE-2003-0020](https://cve.now/CVE-2003-0020.md): Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to insert those sequences int (no CVSS)
- [CVE-2003-0021](https://cve.now/CVE-2003-0021.md): The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence w (no CVSS)
- [CVE-2003-0022](https://cve.now/CVE-2003-0022.md): The "screen dump" feature in rxvt 2.7.8 allows attackers to overwrite arbitrary files via a certain character escape sequence when it is ech (no CVSS)
- [CVE-2003-0023](https://cve.now/CVE-2003-0023.md): The menuBar feature in rxvt 2.7.8 allows attackers to modify menu options and execute arbitrary commands via a certain character escape sequ (no CVSS)
- [CVE-2003-0024](https://cve.now/CVE-2003-0024.md): The menuBar feature in aterm 0.42 allows attackers to modify menu options and execute arbitrary commands via a certain character escape sequ (no CVSS)
- [CVE-2003-0027](https://cve.now/CVE-2003-0027.md): Directory traversal vulnerability in Sun Kodak Color Management System (KCMS) library service daemon (kcms\_server) allows remote attackers t (no CVSS)
- [CVE-2003-0032](https://cve.now/CVE-2003-0032.md): Memory leak in libmcrypt before 2.5.5 allows attackers to cause a denial of service (memory exhaustion) via a large number of requests to th (no CVSS)
- [CVE-2003-0033](https://cve.now/CVE-2003-0033.md): Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmente (no CVSS)
- [CVE-2003-0039](https://cve.now/CVE-2003-0039.md): ISC dhcrelay (dhcp-relay) 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (packet stor (no CVSS)
- [CVE-2003-0040](https://cve.now/CVE-2003-0040.md): SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows remote attackers to execute SQL code via the u (no CVSS)
- [CVE-2003-0043](https://cve.now/CVE-2003-0043.md): Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could all (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2003-0045](https://cve.now/CVE-2003-0045.md): Jakarta Tomcat before 3.3.1a on certain Windows systems may allow remote attackers to cause a denial of service (thread hang and resource co (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2003-0050](https://cve.now/CVE-2003-0050.md): parse\_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute (no CVSS)
- [CVE-2003-0051](https://cve.now/CVE-2003-0051.md): parse\_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to obtain t (no CVSS)
- [CVE-2003-0052](https://cve.now/CVE-2003-0052.md): parse\_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to list arb (no CVSS)
- [CVE-2003-0053](https://cve.now/CVE-2003-0053.md): Cross-site scripting (XSS) vulnerability in parse\_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Serv (no CVSS)
- [CVE-2003-0054](https://cve.now/CVE-2003-0054.md): Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute certain code via (no CVSS)
- [CVE-2003-0055](https://cve.now/CVE-2003-0055.md): Buffer overflow in the MP3 broadcasting module of Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 al (no CVSS)
- [CVE-2003-0058](https://cve.now/CVE-2003-0058.md): MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers to cause a denial of service (crash) on KDC (no CVSS)
- [CVE-2003-0059](https://cve.now/CVE-2003-0059.md): Unknown vulnerability in the chk\_trans.c of the libkrb5 library for MIT Kerberos V5 before 1.2.5 allows users from one realm to impersonate (no CVSS)
- [CVE-2003-0062](https://cve.now/CVE-2003-0062.md): Buffer overflow in Eset Software NOD32 for UNIX before 1.013 allows local users to execute arbitrary code via a long path name. (no CVSS)
- [CVE-2003-0063](https://cve.now/CVE-2003-0063.md): The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a certain character escape sequence (CVSS 7.3)
- [CVE-2003-0064](https://cve.now/CVE-2003-0064.md): The dtterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to (no CVSS)
- [CVE-2003-0065](https://cve.now/CVE-2003-0065.md): The uxterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to (no CVSS)
- [CVE-2003-0066](https://cve.now/CVE-2003-0066.md): The rxvt terminal emulator 2.7.8 and earlier allows attackers to modify the window title via a certain character escape sequence and then in (no CVSS)
- [CVE-2003-0067](https://cve.now/CVE-2003-0067.md): The aterm terminal emulator 0.42 allows attackers to modify the window title via a certain character escape sequence and then insert it back (no CVSS)
- [CVE-2003-0068](https://cve.now/CVE-2003-0068.md): The Eterm terminal emulator 0.9.1 and earlier allows attackers to modify the window title via a certain character escape sequence and then i (no CVSS)
- [CVE-2003-0069](https://cve.now/CVE-2003-0069.md): The PuTTY terminal emulator 0.53 allows attackers to modify the window title via a certain character escape sequence and then insert it back (no CVSS)
- [CVE-2003-0070](https://cve.now/CVE-2003-0070.md): VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attackers to modify the windo (no CVSS)
- [CVE-2003-0071](https://cve.now/CVE-2003-0071.md): The DEC UDK processing feature in the xterm terminal emulator in XFree86 4.2.99.4 and earlier allows attackers to cause a denial of service (no CVSS)
- [CVE-2003-0073](https://cve.now/CVE-2003-0073.md): Double-free vulnerability in mysqld for MySQL before 3.23.55 allows attackers with MySQL access to cause a denial of service (crash) via mys (no CVSS)
- [CVE-2003-0075](https://cve.now/CVE-2003-0075.md): Integer signedness error in the myFseek function of samplein.c for Blade encoder (BladeEnc) 0.94.2 and earlier allows remote attackers to ex (no CVSS)
- [CVE-2003-0077](https://cve.now/CVE-2003-0077.md): The hanterm (hanterm-xf) terminal emulator 2.0.5 and earlier, and possibly later versions, allows attackers to modify the window title via a (no CVSS)
- [CVE-2003-0078](https://cve.now/CVE-2003-0078.md): ssl3\_get\_record in s3\_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block ciphe (no CVSS)
- [CVE-2003-0079](https://cve.now/CVE-2003-0079.md): The DEC UDK processing feature in the hanterm (hanterm-xf) terminal emulator before 2.0.5 allows attackers to cause a denial of service via (no CVSS)
- [CVE-2003-0081](https://cve.now/CVE-2003-0081.md): Format string vulnerability in packet-socks.c of the SOCKS dissector for Ethereal 0.8.7 through 0.9.9 allows remote attackers to execute arb (no CVSS)
- [CVE-2003-0087](https://cve.now/CVE-2003-0087.md): Buffer overflow in libIM library (libIM.a) for National Language Support (NLS) on AIX 4.3 through 5.2 allows local users to gain privileges (no CVSS)
- [CVE-2003-0088](https://cve.now/CVE-2003-0088.md): TruBlueEnvironment for MacOS 10.2.3 and earlier allows local users to overwrite or create arbitrary files and gain root privileges by settin (no CVSS)
- [CVE-2003-0093](https://cve.now/CVE-2003-0093.md): The RADIUS decoder in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service (crash) via an invalid RADIUS packet wi (no CVSS)
- [CVE-2003-0094](https://cve.now/CVE-2003-0094.md): A patch for mcookie in the util-linux package for Mandrake Linux 8.2 and 9.0 uses /dev/urandom instead of /dev/random, which causes mcookie (no CVSS)
- [CVE-2003-0095](https://cve.now/CVE-2003-0095.md): Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary code via a lo (no CVSS)
- [CVE-2003-0097](https://cve.now/CVE-2003-0097.md): Unknown vulnerability in CGI module for PHP 4.3.0 allows attackers to access arbitrary files as the PHP user, and possibly execute PHP code, (no CVSS)
- [CVE-2003-0100](https://cve.now/CVE-2003-0100.md): Buffer overflow in Cisco IOS 11.2.x to 12.0.x allows remote attackers to cause a denial of service and possibly execute commands via a large (no CVSS)
- [CVE-2003-0102](https://cve.now/CVE-2003-0102.md): Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly v (no CVSS)
- [CVE-2003-0103](https://cve.now/CVE-2003-0103.md): Format string vulnerability in Nokia 6210 handset allows remote attackers to cause a denial of service (crash, lockup, or restart) via a Mul (no CVSS)
- [CVE-2003-0104](https://cve.now/CVE-2003-0104.md): Directory traversal vulnerability in PeopleTools 8.10 through 8.18, 8.40, and 8.41 allows remote attackers to overwrite arbitrary files via (no CVSS)
- [CVE-2003-0107](https://cve.now/CVE-2003-0107.md): Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnp (no CVSS)
- [CVE-2003-0108](https://cve.now/CVE-2003-0108.md): isakmp\_sub\_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed (no CVSS)
- [CVE-2003-0120](https://cve.now/CVE-2003-0120.md): adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local users to overwrite arbitrary files via a symlink attack on a default (no CVSS)
- [CVE-2003-0122](https://cve.now/CVE-2003-0122.md): Buffer overflow in Notes server before Lotus Notes R4, R5 before 5.0.11, and early R6 allows remote attackers to execute arbitrary code via (no CVSS)
- [CVE-2003-0123](https://cve.now/CVE-2003-0123.md): Buffer overflow in Web Retriever client for Lotus Notes/Domino R4.5 through R6 allows remote malicious web servers to cause a denial of serv (no CVSS)
- [CVE-2003-0124](https://cve.now/CVE-2003-0124.md): man before 1.5l allows attackers to execute arbitrary code via a malformed man file with improper quotes, which causes the my\_xsprintf funct (no CVSS)
- [CVE-2003-0125](https://cve.now/CVE-2003-0125.md): Buffer overflow in the web interface for SOHO Routefinder 550 before firmware 4.63 allows remote attackers to cause a denial of service (reb (no CVSS)
- [CVE-2003-0143](https://cve.now/CVE-2003-0143.md): The pop\_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprintf, which could allow (no CVSS)
- [CVE-2003-0145](https://cve.now/CVE-2003-0145.md): Unknown vulnerability in tcpdump before 3.7.2 related to an inability to "Handle unknown RADIUS attributes properly," allows remote attacker (no CVSS)
- [CVE-2003-0825](https://cve.now/CVE-2003-0825.md): The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly val (no CVSS)
- [CVE-2003-0903](https://cve.now/CVE-2003-0903.md): Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2003-0905](https://cve.now/CVE-2003-0905.md): Unknown vulnerability in Windows Media Station Service and Windows Media Monitor Service components of Windows Media Services 4.1 allows rem (no CVSS)
- [CVE-2003-0924](https://cve.now/CVE-2003-0924.md): netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files. (no CVSS)
- [CVE-2003-0966](https://cve.now/CVE-2003-0966.md): Buffer overflow in the frm command in elm 2.5.6 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2003-0969](https://cve.now/CVE-2003-0969.md): mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to (no CVSS)
- [CVE-2003-0985](https://cve.now/CVE-2003-0985.md): The mremap system call (do\_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform (no CVSS)
- [CVE-2003-0988](https://cve.now/CVE-2003-0988.md): Buffer overflow in the VCF file information reader for KDE Personal Information Management (kdepim) suite in KDE 3.1.0 through 3.1.4 allows (no CVSS)
- [CVE-2003-0991](https://cve.now/CVE-2003-0991.md): Unknown vulnerability in the mail command handler in Mailman before 2.0.14 allows remote attackers to cause a denial of service (crash) via (no CVSS)
- [CVE-2003-0993](https://cve.now/CVE-2003-0993.md): mod\_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresse (no CVSS)
- [CVE-2003-0994](https://cve.now/CVE-2003-0994.md): The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Internet Security 2001 thro (no CVSS)
- [CVE-2003-1022](https://cve.now/CVE-2003-1022.md): Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory. (no CVSS)
- [CVE-2003-1326](https://cve.now/CVE-2003-1326.md): Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model to run malicious script or arbitra (no CVSS)
- [CVE-2003-1328](https://cve.now/CVE-2003-1328.md): The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote at (no CVSS)
- [CVE-2004-0001](https://cve.now/CVE-2004-0001.md): Unknown vulnerability in the eflags checking in the 32-bit ptrace emulation for the Linux kernel on AMD64 systems allows local users to gain (no CVSS)
- [CVE-2004-0004](https://cve.now/CVE-2004-0004.md): The libCheckSignature function in crypto-utils.lib for OpenCA 0.9.1.6 and earlier only compares the serial of the signer's certificate and t (no CVSS)
- [CVE-2004-0009](https://cve.now/CVE-2004-0009.md): Apache-SSL 1.3.28+1.52 and earlier, with SSLVerifyClient set to 1 or 3 and SSLFakeBasicAuth enabled, allows remote attackers to forge a clie (no CVSS)
- [CVE-2004-0011](https://cve.now/CVE-2004-0011.md): Buffer overflow in fsp before 2.81.b18 allows remote users to execute arbitrary code. (no CVSS)
- [CVE-2004-0013](https://cve.now/CVE-2004-0013.md): jabber 1.4.2, 1.4.2a, and possibly earlier versions, does not properly handle SSL connections, which allows remote attackers to cause a deni (no CVSS)
- [CVE-2004-0015](https://cve.now/CVE-2004-0015.md): vbox3 0.1.8 and earlier does not properly drop privileges before executing a user-provided TCL script, which allows local users to gain priv (no CVSS)
- [CVE-2004-0016](https://cve.now/CVE-2004-0016.md): The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for holiday files, which allows remote attackers t (no CVSS)
- [CVE-2004-0028](https://cve.now/CVE-2004-0028.md): jitterbug 1.6.2 does not properly sanitize inputs, which allows remote authenticated users to execute arbitrary commands. (no CVSS)
- [CVE-2004-0031](https://cve.now/CVE-2004-0031.md): PHPGEDVIEW 2.61 allows remote attackers to reinstall the software and change the administrator password via a direct HTTP request to editcon (no CVSS)
- [CVE-2004-0032](https://cve.now/CVE-2004-0032.md): Cross-site scripting (XSS) vulnerability in search.php in PHPGEDVIEW 2.61 allows remote attackers to inject arbitrary HTML and web script vi (no CVSS)
- [CVE-2004-0033](https://cve.now/CVE-2004-0033.md): admin.php in PHPGEDVIEW 2.61 allows remote attackers to obtain sensitive information via an action parameter with a phpinfo command. (no CVSS)
- [CVE-2004-0035](https://cve.now/CVE-2004-0035.md): SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the h (no CVSS)
- [CVE-2004-0036](https://cve.now/CVE-2004-0036.md): SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote attackers to steal sensitive information vi (no CVSS)
- [CVE-2004-0040](https://cve.now/CVE-2004-0040.md): Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 42 (no CVSS)
- [CVE-2004-0044](https://cve.now/CVE-2004-0044.md): Cisco Personal Assistant 1.4(1) and 1.4(2) disables password authentication when "Allow Only Cisco CallManager Users" is enabled and the Cor (no CVSS)
- [CVE-2004-0045](https://cve.now/CVE-2004-0045.md): Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute ar (no CVSS)
- [CVE-2004-0049](https://cve.now/CVE-2004-0049.md): Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to th (no CVSS)
- [CVE-2004-0063](https://cve.now/CVE-2004-0063.md): The SPP\_VerifyPVV function in nCipher payShield SPP library 1.3.12, 1.5.18 and 1.6.18 returns a Status\_OK value even if the HSM returns a di (no CVSS)
- [CVE-2004-0068](https://cve.now/CVE-2004-0068.md): PHP remote file inclusion vulnerability in config.php for PhpDig 1.6.5 and earlier allows remote attackers to execute arbitrary PHP code by (no CVSS)
- [CVE-2004-0070](https://cve.now/CVE-2004-0070.md): PHP remote file inclusion vulnerability in module.php for ezContents allows remote attackers to execute arbitrary PHP code by modifying the (no CVSS)
- [CVE-2004-0075](https://cve.now/CVE-2004-0075.md): The Vicam USB driver in Linux before 2.4.25 does not use the copy\_from\_user function when copying data from userspace to kernel space, which (no CVSS)
- [CVE-2004-0077](https://cve.now/CVE-2004-0077.md): The do\_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the retur (no CVSS)
- [CVE-2004-0078](https://cve.now/CVE-2004-0078.md): Buffer overflow in the index menu code (menu\_pad\_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2004-0080](https://cve.now/CVE-2004-0080.md): The login program in util-linux 2.11 and earlier uses a pointer after it has been freed and reallocated, which could cause login to leak sen (no CVSS)
- [CVE-2004-0082](https://cve.now/CVE-2004-0082.md): The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite t (no CVSS)
- [CVE-2004-0089](https://cve.now/CVE-2004-0089.md): Buffer overflow in TruBlueEnvironment in Mac OS X 10.3.x and 10.2.x allows local users to gain privileges via a long environment variable. (no CVSS)
- [CVE-2004-0093](https://cve.now/CVE-2004-0093.md): XFree86 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an out-of-bounds array index when (no CVSS)
- [CVE-2004-0094](https://cve.now/CVE-2004-0094.md): Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code when usin (no CVSS)
- [CVE-2004-0095](https://cve.now/CVE-2004-0095.md): McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service (memory consumption and crash) and possibly execute a (no CVSS)
- [CVE-2004-0096](https://cve.now/CVE-2004-0096.md): Unknown vulnerability in mod\_python 2.7.9 allows remote attackers to cause a denial of service (httpd crash) via a certain query string, a v (no CVSS)
- [CVE-2004-0099](https://cve.now/CVE-2004-0099.md): mksnap\_ffs in FreeBSD 5.1 and 5.2 only sets the snapshot flag when creating a snapshot for a file system, which causes default values for ot (no CVSS)
- [CVE-2004-0108](https://cve.now/CVE-2004-0108.md): The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a d (no CVSS)
- [CVE-2004-0111](https://cve.now/CVE-2004-0111.md): gdk-pixbuf before 0.20 allows attackers to cause a denial of service (crash) via a malformed bitmap (BMP) file. (no CVSS)
- [CVE-2004-0113](https://cve.now/CVE-2004-0113.md): Memory leak in ssl\_engine\_io.c for mod\_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumptio (no CVSS)
- [CVE-2004-0114](https://cve.now/CVE-2004-0114.md): The shmat system call in the System V Shared Memory interface for FreeBSD 5.2 and earlier, NetBSD 1.3 and earlier, and OpenBSD 2.6 and earli (no CVSS)
- [CVE-2004-0115](https://cve.now/CVE-2004-0115.md): VirtualPC\_Services in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arbitrary files, and exe (no CVSS)
- [CVE-2004-0121](https://cve.now/CVE-2004-0121.md): Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as argume (no CVSS)
- [CVE-2004-0122](https://cve.now/CVE-2004-0122.md): Microsoft MSN Messenger 6.0 and 6.1 does not properly handle certain requests, which allows remote attackers to read arbitrary files. (no CVSS)
- [CVE-2004-0126](https://cve.now/CVE-2004-0126.md): The jail\_attach system call in FreeBSD 5.1 and 5.2 changes the directory of a calling process even if the process doesn't have permission to (no CVSS)
- [CVE-2004-0128](https://cve.now/CVE-2004-0128.md): PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and earlier allows remote attackers to exec (no CVSS)
- [CVE-2004-0129](https://cve.now/CVE-2004-0129.md): Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary files via .. (no CVSS)
- [CVE-2004-0131](https://cve.now/CVE-2004-0131.md): The rad\_print\_request function in logger.c for GNU Radius daemon (radiusd) before 1.2 allows remote attackers to cause a denial of service ( (no CVSS)
- [CVE-2004-0148](https://cve.now/CVE-2004-0148.md): wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissi (no CVSS)
- [CVE-2004-0150](https://cve.now/CVE-2004-0150.md): Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is disabled, allows remote attackers to execute ar (no CVSS)
- [CVE-2004-0159](https://cve.now/CVE-2004-0159.md): Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code (no CVSS)
- [CVE-2004-0160](https://cve.now/CVE-2004-0160.md): Synaesthesia 2.2 and earlier allows local users to execute arbitrary code via a symlink attack on the configuration file. (no CVSS)
- [CVE-2004-0165](https://cve.now/CVE-2004-0165.md): Format string vulnerability in Point-to-Point Protocol (PPP) daemon (pppd) 2.4.0 for Mac OS X 10.3.2 and earlier allows remote attackers to (no CVSS)
- [CVE-2004-0167](https://cve.now/CVE-2004-0167.md): DiskArbitration in Mac OS X 10.2.8 and 10.3.2 does not properly initialize writeable removable media. (no CVSS)
- [CVE-2004-0169](https://cve.now/CVE-2004-0169.md): QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (crash) via DESCRIBE requests w (no CVSS)
- [CVE-2004-0171](https://cve.now/CVE-2004-0171.md): FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote attackers to cause a denial of service (resource exhaustion of memory buf (no CVSS)
- [CVE-2004-0173](https://cve.now/CVE-2004-0173.md): Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, allows remote attacke (no CVSS)
- [CVE-2004-0185](https://cve.now/CVE-2004-0185.md): Buffer overflow in the skey\_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2004-0186](https://cve.now/CVE-2004-0186.md): smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that c (no CVSS)
- [CVE-2004-0188](https://cve.now/CVE-2004-0188.md): Heap-based buffer overflow in Calife 2.8.5 and earlier may allow local users to execute arbitrary code via a long password. (no CVSS)
- [CVE-2004-0189](https://cve.now/CVE-2004-0189.md): The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url\_regex ACLs via a URL with a NULL ("%00 (no CVSS)
- [CVE-2004-0190](https://cve.now/CVE-2004-0190.md): Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the admi (no CVSS)
- [CVE-2004-0191](https://cve.now/CVE-2004-0191.md): Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the prev (no CVSS)
- [CVE-2004-0193](https://cve.now/CVE-2004-0193.md): Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Senso (no CVSS)
- [CVE-2004-0194](https://cve.now/CVE-2004-0194.md): Stack-based buffer overflow in the OutputDebugString function for Adobe Acrobat Reader 5.1 allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2004-0256](https://cve.now/CVE-2004-0256.md): GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on libtool directories i (no CVSS)
- [CVE-2004-0257](https://cve.now/CVE-2004-0257.md): OpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a denial of service (crash) by sending an IPv6 packet with a small MTU (no CVSS)
- [CVE-2004-0261](https://cve.now/CVE-2004-0261.md): oj.cgi in OpenJournal 2.0 through 2.0.5 allows remote attackers to bypass authentication and access the control panel via a 0 in the uid par (no CVSS)
- [CVE-2004-0263](https://cve.now/CVE-2004-0263.md): PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod\_php) can leak global variables between virtual hosts that are handled by the same Apache ch (no CVSS)
- [CVE-2004-0270](https://cve.now/CVE-2004-0270.md): libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail message with an invalid (no CVSS)
- [CVE-2004-0273](https://cve.now/CVE-2004-0273.md): Directory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise Desktop allows remote attackers to upload ar (no CVSS)
- [CVE-2004-0274](https://cve.now/CVE-2004-0274.md): Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STAT\_OFFERED status to a bot that is not a sharebot, which (no CVSS)
- [CVE-2004-0276](https://cve.now/CVE-2004-0276.md): The get\_real\_string function in Monkey HTTP Daemon (monkeyd) 0.8.1 and earlier allows remote attackers to cause a denial of service (crash) (no CVSS)
- [CVE-2004-0297](https://cve.now/CVE-2004-0297.md): Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote (no CVSS)
- [CVE-2004-0306](https://cve.now/CVE-2004-0306.md): Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS 15600 before 1.3(0) enable TFTP service on (no CVSS)
- [CVE-2004-0307](https://cve.now/CVE-2004-0307.md): Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), and ONS 15454 SD before 4.1(3) allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2004-0309](https://cve.now/CVE-2004-0309.md): Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLabs Integrity client 4. (no CVSS)
- [CVE-2004-0320](https://cve.now/CVE-2004-0320.md): Unknown vulnerability in nCipher Hardware Security Modules (HSM) 1.67.x through 1.99.x allows local users to access secrets stored in the mo (no CVSS)
- [CVE-2004-0336](https://cve.now/CVE-2004-0336.md): LAN SUITE Web Mail 602Pro allows remote attackers to gain sensitive information via the mail login form, which contains the path to the mail (no CVSS)
- [CVE-2004-0347](https://cve.now/CVE-2004-0347.md): Cross-site scripting (XSS) vulnerability in delhomepage.cgi in NetScreen-SA 5000 Series running firmware 3.3 Patch 1 (build 4797) allows rem (no CVSS)
- [CVE-2004-0356](https://cve.now/CVE-2004-0356.md): Stack-based buffer overflow in Supervisor Report Center in SL Mail Pro 2.0.9 and earlier allows remote attackers to execute arbitrary code v (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-09-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.