CVE List

Id CVE No. Status Description Phase Votes Comments Actions
5510  CVE-2002-1123  Entry  Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the "Hello" overflow.        View
5509  CVE-2002-1122  Entry  Buffer overflow in the parsing mechanism for ISS Internet Scanner 6.2.1, when using the license banner HTTP check, allows remote attackers to execute arbitrary code via a long web server response.        View
5508  CVE-2002-1121  Candidate  SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 ("Message Fragmentation and Reassembly") and supported in such products as Outlook Express, which allows remote attackers to bypass content filtering, including virus checking, via fragmented emails of the message/partial content type.  Modified (20050510)  ACCEPT(2) Baker, Cole | NOOP(2) Cox, Wall    View
5507  CVE-2002-1120  Candidate  Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.  Modified (20040804)  ACCEPT(2) Baker, Cole | NOOP(2) Cox, Wall    View
5506  CVE-2002-1119  Entry  os._execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names, which could allow local users to execute arbitrary code via a symlink attack.        View

Page 19842 of 20943, showing 5 records out of 104715 total, starting on record 99206, ending on 99210

Actions