Vulnerabilities > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2002-09-24 | CVE-2002-1123 | Remote Buffer Overflow vulnerability in Microsoft Data Engine and SQL Server Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the "Hello" overflow. | 7.5 |
| 2002-09-24 | CVE-2002-1122 | Buffer Overflow vulnerability in ISS Internet Scanner 6.2.1 Buffer overflow in the parsing mechanism for ISS Internet Scanner 6.2.1, when using the license banner HTTP check, allows remote attackers to execute arbitrary code via a long web server response. | 7.5 |
| 2002-09-24 | CVE-2002-1121 | SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 ("Message Fragmentation and Reassembly") and supported in such products as Outlook Express, which allows remote attackers to bypass content filtering, including virus checking, via fragmented emails of the message/partial content type. | 7.5 |
| 2002-09-24 | CVE-2002-1120 | Buffer Overflow vulnerability in Savant Webserver Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request. | 7.5 |
| 2002-09-24 | CVE-2002-0989 | Unspecified vulnerability in ROB Flynn Gaim The URL handler in the manual browser option for Gaim before 0.59.1 allows remote attackers to execute arbitrary script via shell metacharacters in a link. | 7.5 |
| 2002-09-24 | CVE-2002-0987 | Unspecified vulnerability in Caldera Openunix and Unixware X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges. | 7.2 |
| 2002-09-24 | CVE-2002-0984 | Unspecified vulnerability in Light 2.7.30P4/2.8Pre9 The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC allows remote attackers to execute arbitrary code if the user joins a channel whose topic includes EPIC4 code. | 7.5 |
| 2002-09-24 | CVE-2002-0982 | Remote Security vulnerability in Microsoft SQL Server 2000 Microsoft SQL Server 2000 SP2, when configured as a distributor, allows attackers to execute arbitrary code via the @scriptfile parameter to the sp_MScopyscript stored procedure. | 7.5 |
| 2002-09-24 | CVE-2002-0981 | Buffer Overflow vulnerability in Caldera Openunix and Unixware Buffer overflow in ndcfg command for UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to execute arbitrary code via a long command line. | 7.2 |
| 2002-09-24 | CVE-2002-0980 | Unspecified vulnerability in Microsoft Internet Explorer 5.5/6.0 The Web Folder component for Internet Explorer 5.5 and 6.0 writes an error message to a known location in the temporary folder, which allows remote attackers to execute arbitrary code by injecting it into the error message, then referring to the error message file via a mhtml: URL. | 7.5 |