Vulnerabilities > Critical

DATE CVE VULNERABILITY TITLE RISK
2002-07-26 CVE-2002-0393 Denial of Service vulnerability in Red-M 1050AP Lan Access Point Web Administration Interface
Buffer overflow in Red-M 1050 (Bluetooth Access Point) management web interface allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long administration password.
network
low complexity
red-m
critical
 10.0
10
2002-07-26 CVE-2002-0369 Buffer Overflow vulnerability in Microsoft .Net Framework 1.0
Buffer overflow in ASP.NET Worker Process allows remote attackers to cause a denial of service (restart) and possibly execute arbitrary code via a routine that processes cookies while in StateServer mode.
network
low complexity
microsoft
critical
 10.0
10
2002-07-23 CVE-2002-0671 Download of Code Without Integrity Check vulnerability in Pingtel Xpressa Firmware 1.2.5/1.2.7.4
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the integrity of the applications, which could allow remote attackers to install Trojan horse applications via DNS spoofing.
network
low complexity
pingtel CWE-494
critical
 9.8
9.8
2002-07-23 CVE-2002-0667 Unspecified vulnerability in Pingtel Xpressa 1.2.5/1.2.7.4
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 has a default null administrator password, which could allow remote attackers to gain access to the phone.
network
low complexity
pingtel
critical
 10.0
10
2002-07-11 CVE-2002-0665 Authentication Bypass vulnerability in Macromedia Jrun 3.0/3.1/4.0
Macromedia JRun Administration Server allows remote attackers to bypass authentication on the login form via an extra slash (/) in the URL.
network
low complexity
macromedia
critical
 10.0
10
2002-07-03 CVE-2002-0639 Integer Overflow or Wraparound vulnerability in Openbsd Openssh
Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication (ChallengeResponseAuthentication) when OpenSSH is using SKEY or BSD_AUTH authentication.
network
low complexity
openbsd CWE-190
critical
 9.8
9.8
2002-07-03 CVE-2002-0539 SQL Injection vulnerability in Demarc PureSecure Authentication Check
Demarc PureSecure 1.05 allows remote attackers to gain administrative privileges via a SQL injection attack in a session ID that is stored in the s_key cookie.
network
low complexity
demarc-security
critical
 10.0
10
2002-07-03 CVE-2002-0537 Unspecified vulnerability in Stepweb SWS 2.5
The admin.html file in StepWeb Search Engine (SWS) 2.5 stores passwords in links to manager.pl, which allows remote attackers who can access the admin.html file to gain administrative privileges to SWS.
network
low complexity
stepweb
critical
 10.0
10
2002-07-03 CVE-2002-0359 Authentication vulnerability in SGI IRIX rpc.xfsmd Weak
xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC functions, including those that can mount or unmount xfs file systems, to gain root privileges.
network
low complexity
sgi
critical
 10.0
10
2002-06-25 CVE-2002-0335 Remote Web Server Denial of Service vulnerability in Galacticomm Worldgroup
Buffer overflow in Galacticomm Worldgroup web server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long HTTP GET request.
network
low complexity
galacticomm-technologies
critical
 10.0
10