CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
4208 | CVE-2001-1405 | Candidate | Bugzilla before 2.14 does not restrict access to sanitycheck.cgi, which allows local users to cause a denial of service (CPU consumption) via a flood of requests to sanitycheck.cgi. | Proposed (20020830) | ACCEPT(6) Armstrong, Baker, Cole, Cox, Green, Wall | MODIFY(1) Frech | NOOP(1) Foat | Cox> Right CD? | Frech> XF:bugzilla-sanitycheck-dos(10481) | View |
4211 | CVE-2001-1408 | Candidate | Directory traversal vulnerability in readmsg.php in WebMail 2.0.1 in Cobalt Qube 3 allows remote attackers to read arbitrary files via a .. (dot dot) in the mailbox parameter. | Proposed (20020830) | ACCEPT(2) Frech, Green | NOOP(5) Armstrong, Cole, Cox, Foat, Wall | View | |
5242 | CVE-2002-0852 | Candidate | Buffer overflows in Cisco Virtual Private Network (VPN) Client 3.5.4 and earlier allows remote attackers to cause a denial of service via (1) an Internet Key Exchange (IKE) with a large Security Parameter Index (SPI) payload, or (2) an IKE packet with a large number of valid payloads. | Proposed (20020830) | ACCEPT(5) Armstrong, Baker, Cole, Foat, Wall | MODIFY(1) Frech | NOOP(2) Christey, Cox | Christey> "allows" should be "allow" | Christey> CERT-VN:VU#287771 | URL:http://www.kb.cert.org/vuls/id/287771 | XF:cisco-vpn-spi-bo(9819) | URL:http://www.iss.net/security_center/static/9819.php | XF:cisco-vpn-ike-payload-bo(9820) | URL:http://www.iss.net/security_center/static/9820.php | BID:5441 | URL:http://www.securityfocus.com/bid/5441 | BID:5443 | URL:http://www.securityfocus.com/bid/5443 | Frech> XF:cisco-vpn-spi-bo(9819) | XF:cisco-vpn-ike-payload-bo(9820) | View |
5244 | CVE-2002-0854 | Candidate | Buffer overflows in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the i4l package on SuSE 7.3, 8.0, and possibly other operating systems, may allow local users to gain privileges. | Proposed (20020830) | ACCEPT(2) Baker, Cole | MODIFY(1) Frech | NOOP(4) Armstrong, Cox, Foat, Wall | Frech> XF:isdn4linux-ipppd-bo(10471) | View |
5251 | CVE-2002-0861 | Candidate | Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy method of the Cell object or (2) the Paste method of the Range object. | Proposed (20020830) | ACCEPT(5) Armstrong, Baker, Cole, Frech, Wall | NOOP(2) Cox, Foat | View |
Page 20884 of 20943, showing 5 records out of 104715 total, starting on record 104416, ending on 104420