Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: август 2002 г.

36 записей · 0 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2000-1209
    66На этой неделе

    The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE)

    КритическаяCVSS 10,0Готовый эксплойтEPSS 87 %

    microsoft · data engine12 авг. 2002 г.

  • CVE-2002-0391
    56В плане

    Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including di

    КритическаяCVSS 9,8Эксплойта нетEPSS 58 %

    sun · solaris12 авг. 2002 г.

  • CVE-2002-0419
    31Наблюдать

    Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easily conduct brute force

    СредняяCVSS 5,0Proof of conceptEPSS 37 %

    microsoft · internet information server12 авг. 2002 г.

  • CVE-2002-0421
    26Наблюдать

    IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr password changing prog

    СредняяCVSS 5,0Эксплойта нетEPSS 20 %

    microsoft · windows nt12 авг. 2002 г.

  • CVE-2002-0422
    25Наблюдать

    IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (which may be obscured by

    НизкаяCVSS 2,6Готовый эксплойтEPSS 51 %

    microsoft · internet information services12 авг. 2002 г.

  • CVE-2002-0461
    27Наблюдать

    Internet Explorer 5.01 through 6 allows remote attackers to cause a denial of service (application crash) via Javascript in a web page that

    СредняяCVSS 5,0Proof of conceptEPSS 23 %

    microsoft · internet explorer12 авг. 2002 г.

  • CVE-2002-0472
    24Наблюдать

    MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remo

    СредняяCVSS 5,0Эксплойта нетEPSS 11 %

    microsoft · msn messenger12 авг. 2002 г.

  • CVE-2002-0481
    23Наблюдать

    An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security settings and execute J

    СредняяCVSS 5,1Эксплойта нетEPSS 10 %

    microsoft · outlook12 авг. 2002 г.

  • CVE-2002-0495
    44В плане

    csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup command and the setup para

    КритическаяCVSS 10,0Proof of conceptEPSS 13 %

    cgiscript · cssearch professional12 авг. 2002 г.

  • CVE-2002-0500
    25Наблюдать

    Internet Explorer 5.0 through 6.0 allows remote attackers to determine the existence of files on the client via an IMG tag with a dynsrc pro

    СредняяCVSS 5,0Эксплойта нетEPSS 16 %

    microsoft · internet explorer12 авг. 2002 г.

  • CVE-2002-0516
    43В плане

    SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the THEME variable in a co

    КритическаяCVSS 10,0Proof of conceptEPSS 10 %

    squirrelmail · squirrelmail12 авг. 2002 г.

  • CVE-2002-0617
    23Наблюдать

    The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creating a hyperlink on a d

    СредняяCVSS 5,1Эксплойта нетEPSS 10 %

    microsoft · excel12 авг. 2002 г.

  • CVE-2002-0618
    34Наблюдать

    The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code in the Local Computer zone by

    ВысокаяCVSS 7,5Эксплойта нетEPSS 14 %

    microsoft · excel12 авг. 2002 г.

  • CVE-2002-0619
    35Наблюдать

    The Mail Merge Tool in Microsoft Word 2002 for Windows, when Microsoft Access is present on a system, allows remote attackers to execute Vis

    ВысокаяCVSS 7,5Эксплойта нетEPSS 16 %

    microsoft · office12 авг. 2002 г.

  • CVE-2002-0644
    33Наблюдать

    Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allo

    ВысокаяCVSS 7,5Proof of conceptEPSS 11 %

    microsoft · data engine12 авг. 2002 г.

  • CVE-2002-0649
    55В плане

    Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote atta

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 84 %

    microsoft · data engine12 авг. 2002 г.

  • CVE-2002-0650
    25Наблюдать

    The keep-alive mechanism for Microsoft SQL Server 2000 allows remote attackers to cause a denial of service (bandwidth consumption) via a "p

    СредняяCVSS 5,0Эксплойта нетEPSS 18 %

    microsoft · sql server12 авг. 2002 г.

  • CVE-2002-0656
    57В плане

    Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a larg

    ВысокаяCVSS 7,5Proof of conceptEPSS 89 %

    openssl · openssl12 авг. 2002 г.

  • CVE-2002-0659
    31Наблюдать

    The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invali

    СредняяCVSS 5,0Proof of conceptEPSS 36 %

    openssl · openssl12 авг. 2002 г.

  • CVE-2002-0661
    51В плане

    Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to read arbitrary files

    ВысокаяCVSS 7,5Proof of conceptEPSS 69 %

    apache · http server12 авг. 2002 г.

  • CVE-2002-0695
    35Наблюдать

    Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7

    ВысокаяCVSS 7,5Эксплойта нетEPSS 16 %

    microsoft · data access components12 авг. 2002 г.

  • CVE-2002-0697
    45В плане

    Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP clien

    КритическаяCVSS 10,0Эксплойта нетEPSS 17 %

    microsoft · metadirectory services12 авг. 2002 г.

  • CVE-2002-0698
    36Наблюдать

    Buffer overflow in Internet Mail Connector (IMC) for Microsoft Exchange Server 5.5 allows remote attackers to execute arbitrary code via an

    ВысокаяCVSS 7,5Эксплойта нетEPSS 20 %

    microsoft · exchange server12 авг. 2002 г.

  • CVE-2002-0719
    33Наблюдать

    SQL injection vulnerability in the function that services for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to exe

    ВысокаяCVSS 7,5Эксплойта нетEPSS 10 %

    microsoft · content management server12 авг. 2002 г.

  • CVE-2002-0729
    23Наблюдать

    Microsoft SQL Server 2000 allows remote attackers to cause a denial of service via a malformed 0x08 packet that is missing a colon separator

    СредняяCVSS 5,0Эксплойта нетEPSS 10 %

    microsoft · sql server12 авг. 2002 г.

  • CVE-2002-0736
    49В плане

    Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and ac

    КритическаяCVSS 10,0Эксплойта нетEPSS 31 %

    microsoft · backoffice12 авг. 2002 г.

  • CVE-2002-0748
    23Наблюдать

    LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request that ends in two n

    СредняяCVSS 5,0Proof of conceptEPSS 10 %

    national instruments · labview12 авг. 2002 г.

  • CVE-2002-0749
    33Наблюдать

    CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the form-attachment field.

    ВысокаяCVSS 7,5Proof of conceptEPSS 11 %

    cgiscript.net · csmailto12 авг. 2002 г.

  • CVE-2002-0764
    41В плане

    Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php tha

    ВысокаяCVSS 7,5Proof of conceptEPSS 38 %

    phorum · phorum12 авг. 2002 г.

  • CVE-2002-0777
    43В плане

    Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary code via a long "bind D

    КритическаяCVSS 10,0Эксплойта нетEPSS 10 %

    ipswitch · imail12 авг. 2002 г.

  • CVE-2002-0799
    34Наблюдать

    Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argument.

    ВысокаяCVSS 7,5Proof of conceptEPSS 13 %

    youngzsoft · cmailserver12 авг. 2002 г.

  • CVE-2002-0814
    34Наблюдать

    Buffer overflow in VMware Authorization Service for VMware GSX Server 2.0.0 build-2050 allows remote authenticated users to execute arbitrar

    ВысокаяCVSS 7,5Proof of conceptEPSS 13 %

    vmware · gsx server12 авг. 2002 г.

  • CVE-2002-0823
    38Наблюдать

    Buffer overflow in Winhlp32.exe allows remote attackers to execute arbitrary code via an HTML document that calls the HTML Help ActiveX cont

    ВысокаяCVSS 7,5Proof of conceptEPSS 26 %

    microsoft · windows help12 авг. 2002 г.

  • CVE-2002-0826
    34Наблюдать

    Buffer overflow in WS_FTP FTP Server 3.1.1 allows remote authenticated users to execute arbitrary code via a long SITE CPWD command.

    ВысокаяCVSS 7,5Эксплойта нетEPSS 12 %

    progress · ws ftp server12 авг. 2002 г.

  • CVE-2002-0845
    34Наблюдать

    Buffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HTTP request using chun

    ВысокаяCVSS 7,5Эксплойта нетEPSS 13 %

    iplanet · iplanet web server12 авг. 2002 г.

  • CVE-2002-1444
    14Наблюдать

    The Google toolbar 1.1.60, when running on Internet Explorer 5.5 and 6.0, allows remote attackers to cause a denial of service (crash with a

    НизкаяCVSS 2,6Proof of conceptEPSS 13 %

    google · toolbar15 авг. 2002 г.