By publication date
Exploited and new serious CVEs: June 2002
11 records · 1 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
25Monitor | CVE-2002-0368No exploit | The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service (CPU consumption) via a mail message with microsoft · exchange server · CWE-400 | Medium5.0 | — | 15.2% | Jun 18, 2002 |
24Monitor | CVE-2002-0400No exploit | ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error coisc · bind | Medium5.0 | — | 14.2% | Jun 18, 2002 |
23Monitor | CVE-2002-0591Proof of concept | Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and aol · instant messenger | Medium5.0 | — | 11.6% | Jun 18, 2002 |
33Monitor | CVE-2002-0595Proof of concept | Buffer overflow in WTRS_UI.EXE (WTX_REMOTE.DLL) for WebTrends Reporting Center 4.0d allows remote attackers to execute arbitrary code via a webtrends · reporting center | High7.5 | — | 10.7% | Jun 18, 2002 |
34Monitor | CVE-2002-0597Proof of concept | LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service (CPU/memory exhaustion) via a stream of malformicrosoft · windows 2000 | Medium5.0 | — | 46.5% | Jun 18, 2002 |
43Plan | CVE-2002-0599Proof of concept | Blahz-DNS 0.2 and earlier allows remote attackers to bypass authentication and modify configuration by directly requesting CGI programs suchblahz-dns · blahz-dns | Critical10.0 | — | 11.5% | Jun 18, 2002 |
33Monitor | CVE-2002-0606Proof of concept | Buffer overflow in 3Cdaemon 2.0 FTP server allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code 3com · 3cdaemon | High7.5 | — | 10.6% | Jun 18, 2002 |
43Plan | CVE-2002-0613Proof of concept | dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user_lodnstools software · dnstools | Critical10.0 | — | 11.2% | Jun 18, 2002 |
31Monitor | CVE-2002-0325Proof of concept | Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ...working resources inc. · badblue | Medium5.0 | — | 37.7% | Jun 25, 2002 |
62This week | CVE-2002-0367Weaponized | smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which almicrosoft · windows 2000 · CWE-269 | High7.8 | KEV | 4.9% | Jun 25, 2002 |
36Monitor | CVE-2002-0379Proof of concept | Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 2001.315) with legacy RFuniversity of washington · uw-imap | High7.5 | — | 19.3% | Jun 25, 2002 |
- CVE-2002-036825Monitor
The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service (CPU consumption) via a mail message with
MediumCVSS 5.0No exploitEPSS 15%microsoft · exchange serverJun 18, 2002
- CVE-2002-040024Monitor
ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error co
MediumCVSS 5.0No exploitEPSS 14%isc · bindJun 18, 2002
- CVE-2002-059123Monitor
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and
MediumCVSS 5.0Proof of conceptEPSS 11%aol · instant messengerJun 18, 2002
- CVE-2002-059533Monitor
Buffer overflow in WTRS_UI.EXE (WTX_REMOTE.DLL) for WebTrends Reporting Center 4.0d allows remote attackers to execute arbitrary code via a
HighCVSS 7.5Proof of conceptEPSS 10%webtrends · reporting centerJun 18, 2002
- CVE-2002-059734Monitor
LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service (CPU/memory exhaustion) via a stream of malfor
MediumCVSS 5.0Proof of conceptEPSS 46%microsoft · windows 2000Jun 18, 2002
- CVE-2002-059943Plan
Blahz-DNS 0.2 and earlier allows remote attackers to bypass authentication and modify configuration by directly requesting CGI programs such
CriticalCVSS 10.0Proof of conceptEPSS 11%blahz-dns · blahz-dnsJun 18, 2002
- CVE-2002-060633Monitor
Buffer overflow in 3Cdaemon 2.0 FTP server allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code
HighCVSS 7.5Proof of conceptEPSS 10%3com · 3cdaemonJun 18, 2002
- CVE-2002-061343Plan
dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user_lo
CriticalCVSS 10.0Proof of conceptEPSS 11%dnstools software · dnstoolsJun 18, 2002
- CVE-2002-032531Monitor
Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ...
MediumCVSS 5.0Proof of conceptEPSS 37%working resources inc. · badblueJun 25, 2002
- CVE-2002-036762This week
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which al
HighCVSS 7.8KEVWeaponizedEPSS 4%microsoft · windows 2000Jun 25, 2002
- CVE-2002-037936Monitor
Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 2001.315) with legacy RF
HighCVSS 7.5Proof of conceptEPSS 19%university of washington · uw-imapJun 25, 2002