CVE List

Id CVE No. Status Description Phase Votes Comments Actions
4829  CVE-2002-0437  Entry  Smsd in SMS Server Tools (SMStools) before 1.4.8 allows remote attackers to execute arbitrary commands via shell metacharacters (backquotes) in message text, as described with the term "string format vulnerability" by some sources.        View
5085  CVE-2002-0695  Entry  Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code via a query that calls the OpenRowSet command.        View
5341  CVE-2002-0953  Entry  globals.php in PHP Address before 0.2f, with the PHP allow_url_fopen and register_globals variables enabled, allows remote attackers to execute arbitrary PHP code via a URL to the code in the LangCookie parameter.        View
5853  CVE-2002-1469  Entry  scponly does not properly verify the path when finding the (1) scp or (2) sftp-server programs, which could allow remote authenticated users to bypass access controls by uploading malicious programs and modifying the PATH variable in $HOME/.ssh/environment to locate those programs.        View
222  CVE-1999-0223  Entry  Solaris syslogd crashes when receiving a message from a host that doesn"t have an inverse DNS entry.        View

Page 534 of 20943, showing 5 records out of 104715 total, starting on record 2666, ending on 2670

Actions