CVE List

Id CVE No. Status Description Phase Votes Comments Actions
5314  CVE-2002-0925  Candidate  Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via (1) the USER command to mmpop3d for mmmail 0.0.13 and earlier, (2) the HELO command to mmsmtpd for mmmail 0.0.13 and earlier, or (3) the USER command to mmftpd 0.0.7 and earlier.  Proposed (20020830)  ACCEPT(4) Baker, Cole, Frech, Green | NOOP(3) Cox, Foat, Wall    View
5316  CVE-2002-0928  Candidate  Buffer overflow in the Pirch 98 IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hyperlink in a channel or private message.  Proposed (20020830)  ACCEPT(2) Frech, Green | NOOP(4) Cole, Cox, Foat, Wall    View
5317  CVE-2002-0929  Candidate  Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service (reboot) via long DHCP requests.  Proposed (20020830)  ACCEPT(4) Baker, Cole, Frech, Green | NOOP(3) Cox, Foat, Wall    View
5318  CVE-2002-0930  Candidate  Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 (NWFTPD) allows remote attackers to cause a denial of service (ABEND) via format strings in the USER command.  Proposed (20020830)  ACCEPT(2) Frech, Green | NOOP(4) Cole, Cox, Foat, Wall    View
5319  CVE-2002-0931  Candidate  Cross-site scripting vulnerabilities in MyHelpDesk 20020509, and possibly other versions, allows remote attackers to execute script as other users via a (1) Title or (2) Description when a new ticket is created by a support assistant, via the "id" parameter to the index.php script with the (3) tickettime, (4) ticketfiles, or (5) updateticketlog operations, or (6) via the update section when a ticket is edited.  Proposed (20020830)  ACCEPT(2) Cole, Frech | NOOP(2) Foat, Wall    View

Page 72 of 20943, showing 5 records out of 104715 total, starting on record 356, ending on 360

Actions