CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 5011 | CVE-2002-0620 | Candidate | Buffer overflow in the Profile Service of Microsoft Commerce Server 2000 allows remote attackers to cause the server to fail or run arbitrary code in the LocalSystem security context via an input field using an affected API. | Proposed (20020726) | ACCEPT(4) Baker, Cole, Foat, Wall | NOOP(2) Christey, Cox | Christey> XF:mscs-profile-service-bo(9423) | URL:http://www.iss.net/security_center/static/9423.php | View |
| 4763 | CVE-2002-0371 | Candidate | Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a gopher:// URL that redirects the user to a real or simulated gopher server that sends a long response. | Modified (20061101) | ACCEPT(4) Baker, Cole, Foat, Wall | NOOP(2) Christey, Cox | Christey> XF:ie-gopher-bo(9247) | URL:http://www.iss.net/security_center/static/9247.php | CERT-VN:VU#440275 | URL:http://www.kb.cert.org/vuls/id/440275 | BID:4930 | URL:http://www.securityfocus.com/bid/4930 | Christey> Investigate: should this include IE 5.01? | Christey> Note: CVE-2002-0646 was accidentally assigned to this issue. | That candidate will be rejected in favor of this one. | | ADDREF MS:MS02-047 | | ADDREF BUGTRAQ:20020729 Re: Eat gopher! | URL:http://marc.theaimsgroup.com/?l=bugtraq&m=102796732424646&w=2 | View |
| 3753 | CVE-2001-0947 | Candidate | Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to determine the real pathname of the server by requesting an invalid extension, which produces an error page that includes the path. | Proposed (20020131) | ACCEPT(4) Baker, Cole, Frech, Green | NOOP(2) Foat, Wall | View | |
| 3754 | CVE-2001-0948 | Candidate | Cross-site scripting (CSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to execute arbitrary code or display false information by including HTML or script in the certificate"s description, which is executed when the certificate is viewed. | Proposed (20020131) | ACCEPT(4) Baker, Cole, Frech, Green | NOOP(2) Foat, Wall | View | |
| 3755 | CVE-2001-0949 | Candidate | Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 allows remote attackers to execute arbitrary code via long arguments to the parameters (1) Mode, (2) Certificate_File, (3) useExpiredCRLs, (4) listenLength, (5) maxThread, (6) maxConnPerSite, (7) maxMsgLen, (8) exitTime, (9) blockTime, (10) nextUpdatePeriod, (11) buildLocal, (12) maxOCSPValidityPeriod, (13) extension, and (14) a particular combination of parameters associated with private key generation that form a string of a certain length. | Proposed (20020131) | ACCEPT(4) Baker, Cole, Frech, Green | NOOP(2) Foat, Wall | View |
Page 1018 of 20943, showing 5 records out of 104715 total, starting on record 5086, ending on 5090
