Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: August 2002

36 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2000-1209
    66This week

    The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE)

    CriticalCVSS 10.0WeaponizedEPSS 87%

    microsoft · data engineAug 12, 2002

  • CVE-2002-0391
    56Plan

    Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including di

    CriticalCVSS 9.8No exploitEPSS 58%

    sun · solarisAug 12, 2002

  • CVE-2002-0419
    31Monitor

    Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easily conduct brute force

    MediumCVSS 5.0Proof of conceptEPSS 37%

    microsoft · internet information serverAug 12, 2002

  • CVE-2002-0421
    26Monitor

    IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr password changing prog

    MediumCVSS 5.0No exploitEPSS 20%

    microsoft · windows ntAug 12, 2002

  • CVE-2002-0422
    40Plan

    IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (which may be obscured by

    LowCVSS 2.6WeaponizedEPSS 51%

    microsoft · internet information servicesAug 12, 2002

  • CVE-2002-0461
    27Monitor

    Internet Explorer 5.01 through 6 allows remote attackers to cause a denial of service (application crash) via Javascript in a web page that

    MediumCVSS 5.0Proof of conceptEPSS 23%

    microsoft · internet explorerAug 12, 2002

  • CVE-2002-0472
    24Monitor

    MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remo

    MediumCVSS 5.0No exploitEPSS 11%

    microsoft · msn messengerAug 12, 2002

  • CVE-2002-0481
    23Monitor

    An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security settings and execute J

    MediumCVSS 5.1No exploitEPSS 10%

    microsoft · outlookAug 12, 2002

  • CVE-2002-0495
    44Plan

    csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup command and the setup para

    CriticalCVSS 10.0Proof of conceptEPSS 13%

    cgiscript · cssearch professionalAug 12, 2002

  • CVE-2002-0500
    25Monitor

    Internet Explorer 5.0 through 6.0 allows remote attackers to determine the existence of files on the client via an IMG tag with a dynsrc pro

    MediumCVSS 5.0No exploitEPSS 16%

    microsoft · internet explorerAug 12, 2002

  • CVE-2002-0516
    43Plan

    SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the THEME variable in a co

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    squirrelmail · squirrelmailAug 12, 2002

  • CVE-2002-0617
    23Monitor

    The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creating a hyperlink on a d

    MediumCVSS 5.1No exploitEPSS 10%

    microsoft · excelAug 12, 2002

  • CVE-2002-0618
    34Monitor

    The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code in the Local Computer zone by

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · excelAug 12, 2002

  • CVE-2002-0619
    35Monitor

    The Mail Merge Tool in Microsoft Word 2002 for Windows, when Microsoft Access is present on a system, allows remote attackers to execute Vis

    HighCVSS 7.5No exploitEPSS 16%

    microsoft · officeAug 12, 2002

  • CVE-2002-0644
    33Monitor

    Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allo

    HighCVSS 7.5Proof of conceptEPSS 11%

    microsoft · data engineAug 12, 2002

  • CVE-2002-0649
    55Plan

    Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote atta

    HighCVSS 7.5WeaponizedEPSS 84%

    microsoft · data engineAug 12, 2002

  • CVE-2002-0650
    25Monitor

    The keep-alive mechanism for Microsoft SQL Server 2000 allows remote attackers to cause a denial of service (bandwidth consumption) via a "p

    MediumCVSS 5.0No exploitEPSS 18%

    microsoft · sql serverAug 12, 2002

  • CVE-2002-0656
    57Plan

    Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a larg

    HighCVSS 7.5Proof of conceptEPSS 89%

    openssl · opensslAug 12, 2002

  • CVE-2002-0659
    31Monitor

    The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invali

    MediumCVSS 5.0Proof of conceptEPSS 36%

    openssl · opensslAug 12, 2002

  • CVE-2002-0661
    51Plan

    Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to read arbitrary files

    HighCVSS 7.5Proof of conceptEPSS 69%

    apache · http serverAug 12, 2002

  • CVE-2002-0695
    35Monitor

    Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7

    HighCVSS 7.5No exploitEPSS 16%

    microsoft · data access componentsAug 12, 2002

  • CVE-2002-0697
    45Plan

    Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP clien

    CriticalCVSS 10.0No exploitEPSS 17%

    microsoft · metadirectory servicesAug 12, 2002

  • CVE-2002-0698
    36Monitor

    Buffer overflow in Internet Mail Connector (IMC) for Microsoft Exchange Server 5.5 allows remote attackers to execute arbitrary code via an

    HighCVSS 7.5No exploitEPSS 20%

    microsoft · exchange serverAug 12, 2002

  • CVE-2002-0719
    33Monitor

    SQL injection vulnerability in the function that services for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to exe

    HighCVSS 7.5No exploitEPSS 10%

    microsoft · content management serverAug 12, 2002

  • CVE-2002-0729
    23Monitor

    Microsoft SQL Server 2000 allows remote attackers to cause a denial of service via a malformed 0x08 packet that is missing a colon separator

    MediumCVSS 5.0No exploitEPSS 10%

    microsoft · sql serverAug 12, 2002

  • CVE-2002-0736
    49Plan

    Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and ac

    CriticalCVSS 10.0No exploitEPSS 31%

    microsoft · backofficeAug 12, 2002

  • CVE-2002-0748
    23Monitor

    LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request that ends in two n

    MediumCVSS 5.0Proof of conceptEPSS 10%

    national instruments · labviewAug 12, 2002

  • CVE-2002-0749
    33Monitor

    CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the form-attachment field.

    HighCVSS 7.5Proof of conceptEPSS 11%

    cgiscript.net · csmailtoAug 12, 2002

  • CVE-2002-0764
    41Plan

    Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php tha

    HighCVSS 7.5Proof of conceptEPSS 38%

    phorum · phorumAug 12, 2002

  • CVE-2002-0777
    43Plan

    Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary code via a long "bind D

    CriticalCVSS 10.0No exploitEPSS 10%

    ipswitch · imailAug 12, 2002

  • CVE-2002-0799
    34Monitor

    Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argument.

    HighCVSS 7.5Proof of conceptEPSS 13%

    youngzsoft · cmailserverAug 12, 2002

  • CVE-2002-0814
    34Monitor

    Buffer overflow in VMware Authorization Service for VMware GSX Server 2.0.0 build-2050 allows remote authenticated users to execute arbitrar

    HighCVSS 7.5Proof of conceptEPSS 13%

    vmware · gsx serverAug 12, 2002

  • CVE-2002-0823
    38Monitor

    Buffer overflow in Winhlp32.exe allows remote attackers to execute arbitrary code via an HTML document that calls the HTML Help ActiveX cont

    HighCVSS 7.5Proof of conceptEPSS 26%

    microsoft · windows helpAug 12, 2002

  • CVE-2002-0826
    34Monitor

    Buffer overflow in WS_FTP FTP Server 3.1.1 allows remote authenticated users to execute arbitrary code via a long SITE CPWD command.

    HighCVSS 7.5No exploitEPSS 12%

    progress · ws ftp serverAug 12, 2002

  • CVE-2002-0845
    34Monitor

    Buffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HTTP request using chun

    HighCVSS 7.5No exploitEPSS 13%

    iplanet · iplanet web serverAug 12, 2002

  • CVE-2002-1444
    14Monitor

    The Google toolbar 1.1.60, when running on Internet Explorer 5.5 and 6.0, allows remote attackers to cause a denial of service (crash with a

    LowCVSS 2.6Proof of conceptEPSS 13%

    google · toolbarAug 15, 2002