CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
6365 | CVE-2002-1983 | Candidate | The timer implementation in QNX RTOS 6.1.0 allows local users to cause a denial of service (hang) and possibly execute arbitrary code by creating multiple timers with a 1-ms tick. | Assigned (20050629) | None (candidate not yet proposed) | View | |
6364 | CVE-2002-1982 | Candidate | Directory traversal vulnerability in the list_directory function in Icecast 1.3.12 allows remote attackers to determine if a directory exists via a .. (dot dot) in the GET request, which returns different error messages depending on whether the directory exists or not. | Assigned (20050629) | None (candidate not yet proposed) | View | |
6363 | CVE-2002-1981 | Candidate | Microsoft SQL Server 2000 through SQL Server 2000 SP2 allows the "public" role to execute the (1) sp_MSSetServerProperties or (2) sp_MSsetalertinfo stored procedures, which allows attackers to modify configuration including SQL server startup and alert settings. | Assigned (20050629) | None (candidate not yet proposed) | View | |
6362 | CVE-2002-1980 | Candidate | Buffer overflow in Volume Manager daemon (vold) of Sun Solaris 2.5.1 through 8 allows local users to execute arbitrary code via unknown attack vectors. | Assigned (20050629) | None (candidate not yet proposed) | View | |
6361 | CVE-2002-1979 | Candidate | WatchGuard SOHO products running firmware 5.1.6 and earlier, and Vclass/RSSA using 3.2 SP1 and earlier, allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP server, which generates a response that contains the string, causing IPFilter to treat the response as if it were a legitimate PASV command from the server. | Assigned (20050629) | None (candidate not yet proposed) | View |
Page 19671 of 20943, showing 5 records out of 104715 total, starting on record 98351, ending on 98355