По дате публикации
Эксплуатируемые и новые серьёзные CVE: июнь 2002 г.
11 записей · 1 KEV. В порядке публикации.
В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.
Границы месяца считаются по UTC, как и дата публикации на странице записи.
| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
25Наблюдать | CVE-2002-0368Эксплойта нет | The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service (CPU consumption) via a mail message with microsoft · exchange server · CWE-400 | Средняя5,0 | — | 15,2 % | 18 июн. 2002 г. |
24Наблюдать | CVE-2002-0400Эксплойта нет | ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error coisc · bind | Средняя5,0 | — | 14,2 % | 18 июн. 2002 г. |
23Наблюдать | CVE-2002-0591Proof of concept | Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and aol · instant messenger | Средняя5,0 | — | 11,6 % | 18 июн. 2002 г. |
33Наблюдать | CVE-2002-0595Proof of concept | Buffer overflow in WTRS_UI.EXE (WTX_REMOTE.DLL) for WebTrends Reporting Center 4.0d allows remote attackers to execute arbitrary code via a webtrends · reporting center | Высокая7,5 | — | 10,7 % | 18 июн. 2002 г. |
34Наблюдать | CVE-2002-0597Proof of concept | LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service (CPU/memory exhaustion) via a stream of malformicrosoft · windows 2000 | Средняя5,0 | — | 46,5 % | 18 июн. 2002 г. |
43В плане | CVE-2002-0599Proof of concept | Blahz-DNS 0.2 and earlier allows remote attackers to bypass authentication and modify configuration by directly requesting CGI programs suchblahz-dns · blahz-dns | Критическая10,0 | — | 11,5 % | 18 июн. 2002 г. |
33Наблюдать | CVE-2002-0606Proof of concept | Buffer overflow in 3Cdaemon 2.0 FTP server allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code 3com · 3cdaemon | Высокая7,5 | — | 10,6 % | 18 июн. 2002 г. |
43В плане | CVE-2002-0613Proof of concept | dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user_lodnstools software · dnstools | Критическая10,0 | — | 11,2 % | 18 июн. 2002 г. |
31Наблюдать | CVE-2002-0325Proof of concept | Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ...working resources inc. · badblue | Средняя5,0 | — | 37,7 % | 25 июн. 2002 г. |
62На этой неделе | CVE-2002-0367Готовый эксплойт | smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which almicrosoft · windows 2000 · CWE-269 | Высокая7,8 | KEV | 4,9 % | 25 июн. 2002 г. |
36Наблюдать | CVE-2002-0379Proof of concept | Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 2001.315) with legacy RFuniversity of washington · uw-imap | Высокая7,5 | — | 19,3 % | 25 июн. 2002 г. |
- CVE-2002-036825Наблюдать
The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service (CPU consumption) via a mail message with
СредняяCVSS 5,0Эксплойта нетEPSS 15 %microsoft · exchange server18 июн. 2002 г.
- CVE-2002-040024Наблюдать
ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error co
СредняяCVSS 5,0Эксплойта нетEPSS 14 %isc · bind18 июн. 2002 г.
- CVE-2002-059123Наблюдать
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and
СредняяCVSS 5,0Proof of conceptEPSS 11 %aol · instant messenger18 июн. 2002 г.
- CVE-2002-059533Наблюдать
Buffer overflow in WTRS_UI.EXE (WTX_REMOTE.DLL) for WebTrends Reporting Center 4.0d allows remote attackers to execute arbitrary code via a
ВысокаяCVSS 7,5Proof of conceptEPSS 10 %webtrends · reporting center18 июн. 2002 г.
- CVE-2002-059734Наблюдать
LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service (CPU/memory exhaustion) via a stream of malfor
СредняяCVSS 5,0Proof of conceptEPSS 46 %microsoft · windows 200018 июн. 2002 г.
- CVE-2002-059943В плане
Blahz-DNS 0.2 and earlier allows remote attackers to bypass authentication and modify configuration by directly requesting CGI programs such
КритическаяCVSS 10,0Proof of conceptEPSS 11 %blahz-dns · blahz-dns18 июн. 2002 г.
- CVE-2002-060633Наблюдать
Buffer overflow in 3Cdaemon 2.0 FTP server allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code
ВысокаяCVSS 7,5Proof of conceptEPSS 10 %3com · 3cdaemon18 июн. 2002 г.
- CVE-2002-061343В плане
dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user_lo
КритическаяCVSS 10,0Proof of conceptEPSS 11 %dnstools software · dnstools18 июн. 2002 г.
- CVE-2002-032531Наблюдать
Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ...
СредняяCVSS 5,0Proof of conceptEPSS 37 %working resources inc. · badblue25 июн. 2002 г.
- CVE-2002-036762На этой неделе
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which al
ВысокаяCVSS 7,8KEVГотовый эксплойтEPSS 4 %microsoft · windows 200025 июн. 2002 г.
- CVE-2002-037936Наблюдать
Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 2001.315) with legacy RF
ВысокаяCVSS 7,5Proof of conceptEPSS 19 %university of washington · uw-imap25 июн. 2002 г.