CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 5609 | CVE-2002-1225 | Candidate | Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access. | Proposed (20030317) | ACCEPT(3) Armstrong, Cole, Green | NOOP(1) Cox | View | |
| 5101 | CVE-2002-0711 | Candidate | Unknown vulnerability in Cluster Interconnect for HP TruCluster Server 5.0A, 5.1, and 5.1A may allow local and remote attackers to cause a denial of service. | Proposed (20030317) | ACCEPT(3) Armstrong, Cole, Green | NOOP(1) Cox | View | |
| 5617 | CVE-2002-1233 | Candidate | A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0), for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs (1) htpasswd or (2) htdigest, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2001-0131. | Modified (20050529) | ACCEPT(3) Armstrong, Cole, Green | NOOP(1) Cox | Cox> Many vendors have included fixes for CVE-2001-0131 in their distributions | of Apache even though this has not been fixed upstream. I still believe | that this is not worthy of a separate CVE name since this is just Debian | forgetting to include their fix for CVE-2001-0131 in one of their versions, | and then correcting it. | View |
| 5884 | CVE-2002-1500 | Candidate | Buffer overflow in (1) mrinfo, (2) mtrace, and (3) pppd in NetBSD 1.4.x through 1.6 allows local users to gain privileges by executing the programs after filling the file descriptor tables, which produces file descriptors larger than FD_SETSIZE, which are not checked by FD_SET(). | Proposed (20030317) | ACCEPT(3) Armstrong, Cole, Green | NOOP(1) Cox | View | |
| 5857 | CVE-2002-1473 | Candidate | Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 (11i) allow local users to cause a denial of service and possibly execute arbitrary code. | Proposed (20030317) | ACCEPT(3) Armstrong, Cole, Green | NOOP(1) Cox | REVIEWING(1) Christey | Christey> In 2003, the "disable" command was reported to have a | vuln. that was fixed by the HP advisory in this candidate: | | BUGTRAQ:20030213 HPUX disable buffer overflow vulnerability | URL:http://www.securityfocus.com/archive/1/311791 | | BUGTRAQ:20030214 HPUX disable buffer overflow vulnerability | URL:http://www.securityfocus.com/archive/1/311915 | | Should CVE-2002-1473 be updated to include this later-reported | issue? Or should it gets its own ID? | View |
Page 916 of 20943, showing 5 records out of 104715 total, starting on record 4576, ending on 4580
