Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: March 2002

27 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2002-0018
    45Plan

    In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domain does not verify th

    CriticalCVSS 10.0No exploitEPSS 16%

    microsoft · windows 2000Mar 8, 2002

  • CVE-2002-0020
    35Monitor

    Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via malformed protocol op

    HighCVSS 7.5No exploitEPSS 16%

    microsoft · interixMar 8, 2002

  • CVE-2002-0021
    25Monitor

    Network Product Identification (PID) Checker in Microsoft Office v.

    MediumCVSS 5.0No exploitEPSS 17%

    microsoft · officeMar 8, 2002

  • CVE-2002-0022
    42Plan

    Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5 and 6.0 allows remote attackers to execute

    HighCVSS 7.5No exploitEPSS 39%

    microsoft · internet explorerMar 8, 2002

  • CVE-2002-0023
    32Monitor

    Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function, which

    MediumCVSS 5.0Proof of conceptEPSS 38%

    microsoft · internet explorerMar 8, 2002

  • CVE-2002-0025
    24Monitor

    Internet Explorer 5.01, 5.5 and 6.0 does not properly handle the Content-Type HTML header field, which allows remote attackers to modify whi

    MediumCVSS 5.0No exploitEPSS 14%

    microsoft · internet explorerMar 8, 2002

  • CVE-2002-0026
    34Monitor

    Internet Explorer 5.5 and 6.0 allows remote attackers to bypass restrictions for executing scripts via an object that processes asynchronous

    HighCVSS 7.5No exploitEPSS 13%

    microsoft · internet explorerMar 8, 2002

  • CVE-2002-0027
    36Monitor

    Internet Explorer 5.5 and 6.0 allows remote attackers to read certain files and spoof the URL in the address bar by using the Document.open

    HighCVSS 7.5No exploitEPSS 19%

    microsoft · internet explorerMar 8, 2002

  • CVE-2002-0049
    29Monitor

    Microsoft Exchange Server 2000 System Attendant gives "Everyone" group privileges to the WinReg key, which could allow remote attackers to r

    MediumCVSS 6.4No exploitEPSS 13%

    microsoft · exchange serverMar 8, 2002

  • CVE-2002-0050
    34Monitor

    Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitrary code via long auth

    HighCVSS 7.5No exploitEPSS 13%

    microsoft · commerce serverMar 8, 2002

  • CVE-2002-0052
    27Monitor

    Internet Explorer 6.0 and earlier does not properly handle VBScript in certain domain security checks, which allows remote attackers to read

    MediumCVSS 5.0No exploitEPSS 22%

    microsoft · internet explorerMar 8, 2002

  • CVE-2002-0053
    41Plan

    Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a

    HighCVSS 7.5No exploitEPSS 35%

    microsoft · windows 2000Mar 8, 2002

  • CVE-2002-0054
    37Monitor

    SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses t

    HighCVSS 7.5No exploitEPSS 22%

    microsoft · exchange serverMar 8, 2002

  • CVE-2002-0055
    31Monitor

    SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via

    MediumCVSS 5.0No exploitEPSS 37%

    microsoft · exchange serverMar 8, 2002

  • CVE-2002-0056
    37Monitor

    Buffer overflow in SQL Server 7.0 and 2000 allows remote attackers to execute arbitrary code via a long OLE DB provider name to (1) OpenData

    HighCVSS 7.5No exploitEPSS 24%

    microsoft · sql serverMar 8, 2002

  • CVE-2002-0057
    27Monitor

    XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attacke

    MediumCVSS 5.0No exploitEPSS 23%

    microsoft · internet explorerMar 8, 2002

  • CVE-2002-0081
    37Monitor

    Buffer overflows in (1) php_mime_split in PHP 4.1.0, 4.1.1, and 4.0.6 and earlier, and (2) php3_mime_split in PHP 3.0.x allows remote attack

    HighCVSS 7.5No exploitEPSS 24%

    php · phpMar 8, 2002

  • CVE-2002-0070
    36Monitor

    Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute arbitrary code via a cu

    HighCVSS 7.6No exploitEPSS 18%

    microsoft · windows 2000Mar 15, 2002

  • CVE-2002-0082
    39Monitor

    The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory us

    HighCVSS 7.5Proof of conceptEPSS 29%

    apache-ssl · apache-sslMar 15, 2002

  • CVE-2002-0083
    43Plan

    Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.

    CriticalCVSS 9.8Proof of conceptEPSS 14%

    immunix · immunixMar 15, 2002

  • CVE-2002-0084
    34Monitor

    Buffer overflow in the fscache_setup function of cachefsd in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long mou

    HighCVSS 7.2No exploitEPSS 20%

    sun · solarisMar 15, 2002

  • CVE-2002-0076
    38Monitor

    Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet conta

    HighCVSS 7.5No exploitEPSS 26%

    hp · java jre-jdkMar 19, 2002

  • CVE-2002-0061
    45Plan

    Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacters

    HighCVSS 7.5Proof of conceptEPSS 50%

    apache · http serverMar 21, 2002

  • CVE-2002-0101
    24Monitor

    Microsoft Internet Explorer 6.0 and earlier allows local users to cause a denial of service via an infinite loop for modeless dialogs showMo

    MediumCVSS 5.0No exploitEPSS 12%

    microsoft · internet explorerMar 25, 2002

  • CVE-2002-0128
    33Monitor

    cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, vi

    HighCVSS 7.5Proof of conceptEPSS 10%

    sambar · sambar serverMar 25, 2002

  • CVE-2002-0163
    35Monitor

    Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows remote attackers to

    HighCVSS 7.5Proof of conceptEPSS 15%

    squid · squidMar 26, 2002

  • CVE-2002-0078
    37Monitor

    The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone

    HighCVSS 7.5No exploitEPSS 21%

    microsoft · internet explorerMar 29, 2002