CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 4482 | CVE-2002-0088 | Candidate | Buffer overflow in admintool in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long media installation path. | Modified (20061101) | ACCEPT(3) Cole, Green, Wall | NOOP(3) Christey, Foat, Ziese | Christey> BUGTRAQ:20020429 eSecurityOnline Security Advisory 4123 - Sun Solaris admintool media installation path buffer overflow vulnerability | URL:http://online.securityfocus.com/archive/1/270137 | BID:4632 | URL:http://www.securityfocus.com/bid/4632 | VULNWATCH:20020429 [VulnWatch] eSecurityOnline Security Advisory 4123 - Sun Solaris admintool me dia installation path buffer overflow vulnerability | URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0043.html | Christey> CONFIRM:http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fsalert%2F44541&zone_32=category%3Asecurity%20admintool | | (thanks to Matt Wojcik for this info) | View |
| 4483 | CVE-2002-0089 | Candidate | Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to (1) the -d command line option, or (2) the PRODVERS argument in the .cdtoc file. | Modified (20061101) | ACCEPT(3) Cole, Green, Ziese | NOOP(3) Christey, Foat, Wall | Christey> VULNWATCH:20020429 [VulnWatch] eSecurityOnline Security Advisory 2397 - Sun Solaris admintool -d and PRODVERS buffer overflow vulnerabilities | URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0035.html | BUGTRAQ:20020429 eSecurityOnline Security Advisory 2397 - Sun Solaris admintool -d and PRODVERS buffer overflow vulnerabilities | URL:http://online.securityfocus.com/archive/1/270122 | BID:4624 | URL:http://www.securityfocus.com/bid/4624 | Christey> CONFIRM:http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F27353 | View |
| 5252 | CVE-2002-0862 | Candidate | The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac, Internet Explorer for Mac, and Outlook Express for Mac, do not properly verify the Basic Constraints of intermediate CA-signed X.509 certificates, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack for SSL sessions, as originally reported for Internet Explorer and IIS. | Modified (20061101) | ACCEPT(3) Cole, Green, Wall | NOOP(2) Christey, Cox | Christey> Note: CVE-2002-0828 is an earlier discovery of this candidate. | That candidate will be REJECTED in favor of this one, | which comes from a more authoritative source and is | more accurate. | View |
| 5253 | CVE-2002-0863 | Candidate | Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol." | Modified (20061101) | ACCEPT(3) Cole, Green, Wall | NOOP(2) Christey, Cox | Christey> ADDREF CERT-VN:VU#865833 | URL:http://www.kb.cert.org/vuls/id/865833 | View |
| 5259 | CVE-2002-0869 | Candidate | Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation." | Modified (20061101) | ACCEPT(3) Cole, Green, Wall | NOOP(1) Cox | View |
Page 482 of 20943, showing 5 records out of 104715 total, starting on record 2406, ending on 2410
