CVE List

Id CVE No. Status Description Phase Votes Comments Actions
4506  CVE-2002-0112  Candidate  Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL.  Modified (20050707)  ACCEPT(1) Green | MODIFY(1) Frech | NOOP(3) Cole, Foat, Wall  Green> Vendor has released upgrades | Frech> XF:eserv-protected-file-access(7849) | ADDREF:http://online.securityfocus.com/archive/1/249210  View
4534  CVE-2002-0140  Candidate  Domain Name Relay Daemon (dnrd) 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parse_query, get_objectname, and possibly other functions.  Modified (20050707)  ACCEPT(2) Foat, Green | MODIFY(1) Frech | NOOP(2) Cole, Wall  Frech> XF:dnrd-dns-dos(7957)  View
4832  CVE-2002-0440  Candidate  Trend Micro InterScan VirusWall HTTP proxy 3.6 with the "Skip scanning if Content-length equals 0" option enabled allows malicious web servers to bypass content scanning via a Content-length header set to 0, which is often ignored by HTTP clients.  Modified (20050707)  MODIFY(1) Frech | NOOP(5) Cole, Cox, Foat, Green, Wall  Frech> XF:interscan-viruswall-http-proxy-bypass(8425)  View
4842  CVE-2002-0450  Candidate  Buffer overflow in Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long Web Markup Language (wml) file name to (1) webplus.dll or (2) webplus.exe.  Modified (20050707)  ACCEPT(3) Alderson, Baker, Cole | MODIFY(1) Frech | NOOP(3) Cox, Foat, Wall  Frech> XF:webplus-wml-bo(8446)  View
3590  CVE-2001-0783  Candidate  Cisco TFTP server 1.1 allows remote attackers to read arbitrary files via a ..(dot dot) attack in the GET command.  Modified (20050706)  ACCEPT(1) Foat | MODIFY(1) Frech | NOOP(4) Armstrong, Cole, Oliver, Wall  Frech> XF:cisco-tftp-directory-traversal(6722)  View

Page 501 of 20943, showing 5 records out of 104715 total, starting on record 2501, ending on 2505

Actions