CVE List

Id CVE No. Status Description Phase Votes Comments Actions
5508  CVE-2002-1121  Candidate  SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 ("Message Fragmentation and Reassembly") and supported in such products as Outlook Express, which allows remote attackers to bypass content filtering, including virus checking, via fragmented emails of the message/partial content type.  Modified (20050510)  ACCEPT(2) Baker, Cole | NOOP(2) Cox, Wall    View
5016  CVE-2002-0626  Candidate  Polycom ViewStation before 7.2.4 has a default null password for the administrator account, which allows arbitrary users to conduct unauthorized activities.  Proposed (20030317)  ACCEPT(2) Baker, Cole | NOOP(2) Cox, Wall    View
5018  CVE-2002-0628  Candidate  The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute force attack.  Modified (20080808)  ACCEPT(2) Baker, Cole | NOOP(2) Cox, Wall    View
5019  CVE-2002-0629  Candidate  The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service (crash) via multiple connections to the server.  Proposed (20030317)  ACCEPT(2) Baker, Cole | NOOP(2) Cox, Wall    View
5536  CVE-2002-1149  Candidate  The installation procedure for Invision Board suggests that users install the phpinfo.php program under the web root, which leaks sensitive information such as absolute pathnames, OS information, and PHP settings.  Modified (20050610)  ACCEPT(2) Baker, Cole | NOOP(2) Cox, Wall    View

Page 776 of 20943, showing 5 records out of 104715 total, starting on record 3876, ending on 3880

Actions