Vulnerabilities > Medium

DATE CVE VULNERABILITY TITLE RISK
2002-06-18 CVE-2002-0609 Denial of Service vulnerability in HP MPE IX 6.0/6.5/7.0
Vulnerability in HP MPE/iX 6.0 through 7.0 allows attackers to cause a denial of service (system failure with "SA1457 out of i_port_timeout.fix_up_message_frame") via malformed IP packets.
network
low complexity
hp
5.0
2002-06-18 CVE-2002-0604 Denial of Service vulnerability in Snapgear Lite+ Firewall 1.5.3/1.5.4
Snapgear Lite+ firewall 1.5.3 and 1.5.4 allows remote attackers to cause a denial of service (crash) via a large number of packets with malformed IP options.
network
low complexity
snapgear
5.0
2002-06-18 CVE-2002-0603 Denial of Service vulnerability in Snapgear Lite+ Firewall 1.5.3
Snapgear Lite+ firewall 1.5.3 allows remote attackers to cause a denial of service (IPSEC crash) via a zero length packet to UDP port 500.
network
low complexity
snapgear
5.0
2002-06-18 CVE-2002-0602 Denial of Service vulnerability in Snapgear Lite+ Firewall 1.5.3/1.5.4
Snapgear Lite+ firewall 1.5.4 and 1.5.3 allows remote attackers to cause a denial of service (crash) via a large number of connections to (1) the HTTP web management port, or (2) the PPTP port.
network
low complexity
snapgear
5.0
2002-06-18 CVE-2002-0601 Remote Denial Of Service vulnerability in ISS RealSecure DHCP Signature
ISS RealSecure Network Sensor 5.x through 6.5 allows remote attackers to cause a denial of service (crash) via malformed DHCP packets that cause RealSecure to dereference a null pointer.
network
low complexity
information-security-systems
5.0
2002-06-18 CVE-2002-0596 Information Exposure vulnerability in Webtrends Reporting Center 4.0D
WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request to get_od_toc.pl with an empty Profile parameter, which leaks the pathname in an error message.
network
low complexity
webtrends CWE-200
5.0
2002-06-18 CVE-2002-0594 Local File Detection vulnerability in Netscape/Mozilla/Galeon
Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet (CSS) page that causes an HTTP redirect.
network
low complexity
galeon mozilla netscape
5.0
2002-06-18 CVE-2002-0591 Unspecified vulnerability in AOL Instant Messenger
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename.
network
low complexity
aol
5.0
2002-06-18 CVE-2002-0588 Unspecified vulnerability in Steve Korbett Pvote
PVote before 1.9 does not authenticate users for restricted operations, which allows remote attackers to add or delete polls by modifying parameters to (1) add.php or (2) del.php.
network
low complexity
steve-korbett
5.0
2002-06-18 CVE-2002-0585 Denial of Service vulnerability in HP Hp-Ux 11.11
Unknown vulnerability in ndd for HP-UX 11.11 with certain TRANSPORT patches allows attackers to cause a denial of service.
network
low complexity
hp
5.0