Vulnerabilities > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2002-09-05 | CVE-2002-0857 | Unspecified vulnerability in Oracle Database Server and Oracle8I Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file. | 7.5 |
| 2002-09-05 | CVE-2002-0855 | Cross-Site Scripting vulnerability in GNU Mailman 2.0.12 Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the (1) adminpw or (2) info parameters to the ml-name feature. | 7.5 |
| 2002-09-05 | CVE-2002-0854 | Local Security vulnerability in Linux 7.3/8.0 Buffer overflows in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the i4l package on SuSE 7.3, 8.0, and possibly other operating systems, may allow local users to gain privileges. | 7.2 |
| 2002-09-05 | CVE-2002-0851 | Unspecified vulnerability in Isdn4Linux 3.1Pre1 Format string vulnerability in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the ISDN4Linux (i4l) package allows local users to gain root privileges via format strings in the device name command line argument, which is not properly handled in a call to syslog. | 7.2 |
| 2002-09-05 | CVE-2002-0720 | Unspecified vulnerability in Microsoft Windows 2000 and Windows 2000 Terminal Services A handler routine for the Network Connection Manager (NCM) in Windows 2000 allows local users to gain privileges via a complex attack that causes the handler to run in the LocalSystem context with user-specified code. | 7.2 |
| 2002-09-05 | CVE-2002-0093 | Buffer Overflow vulnerability in Tru64 IPCS Buffer overflow in ipcs for HP Tru64 UNIX 4.0f through 5.1a may allow attackers to execute arbitrary code, a different vulnerability than CVE-2001-0423. | 7.2 |
| 2002-09-02 | CVE-2002-1605 | Unspecified vulnerability in HP Hp-Ux and Tru64 Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable to (1) dxpause, (2) dxconsole, or (3) dtsession. | 7.5 |
| 2002-09-02 | CVE-2002-1604 | Local Buffer Overflow vulnerability in HP Tru64 NLSPATH Environment Variable Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliver. | 7.5 |
| 2002-08-14 | CVE-2002-1452 | Remote Buffer Overflow vulnerability in Mywebserver 1.0.2 Buffer overflow in the search capability for MyWebServer 1.0.2 allows remote attackers to execute arbitrary code via a long searchTarget parameter. | 7.5 |
| 2002-08-12 | CVE-2002-0847 | Unspecified vulnerability in Tinyproxy 1.3.2/1.3.3/1.4.3 tinyproxy HTTP proxy 1.5.0, 1.4.3, and earlier allows remote attackers to execute arbitrary code via memory that is freed twice (double-free). | 7.5 |