CVE List

Id CVE No. Status Description Phase Votes Comments Actions
4806  CVE-2002-0414  Entry  KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database (SPD), which could cause a Security Gateway (SG) that does not use Encapsulating Security Payload (ESP) to forward forged IPv4 packets.        View
4807  CVE-2002-0415  Candidate  Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow local users to read files that are accessible to RealPlayer via a .. (dot dot) in an HTTP GET request to port 1275.  Proposed (20020611)  ACCEPT(2) Alderson, Frech | NOOP(4) Cole, Cox, Foat, Wall    View
4808  CVE-2002-0416  Candidate  Buffer overflow in SH39 MailServer 1.21 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long command to the SMTP port.  Proposed (20020611)  ACCEPT(2) Alderson, Frech | NOOP(4) Cole, Cox, Foat, Wall  Frech> Article title for BUGTRAQ:20020305 is "Buffer Overflows in | sh39.com"s mailserver 1.21".  View
4809  CVE-2002-0417  Candidate  Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the ALTERNATE_TEMPLATES parameter for various mmstdo*.cgi programs.  Proposed (20020611)  ACCEPT(4) Alderson, Baker, Cole, Frech | NOOP(3) Cox, Foat, Wall    View
4810  CVE-2002-0418  Candidate  Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.36 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the param_name parameter.  Proposed (20020611)  ACCEPT(2) Alderson, Frech | NOOP(4) Cole, Cox, Foat, Wall    View

Page 962 of 20943, showing 5 records out of 104715 total, starting on record 4806, ending on 4810

Actions