|
290111
|
- |
|
cisco
|
vpn_client
|
Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.2B, does not generate sufficiently random numbers, which may make it vulnerable to certain attacks such as spoofing.
|
NVD-CWE-Other
|
CVE-2002-1107
|
2017-10-10 10:30 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290112
|
- |
|
cisco
|
vpn_client
|
Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.6(Rel), when configured with all tunnel mode, can be forced into acknowledging a TCP packet from outside the tunnel.
|
NVD-CWE-Other
|
CVE-2002-1108
|
2017-10-10 10:30 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290113
|
- |
|
mantis
|
mantis
|
print_all_bug_page.php in Mantis 0.17.3 and earlier does not verify the limit_reporters option, which allows remote attackers to view bug summaries for bugs that would otherwise be restricted.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2002-1111
|
2017-10-10 10:30 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290114
|
- |
|
mantis
|
mantis
|
Mantis before 0.17.4 allows remote attackers to list project bugs without authentication by modifying the cookie that is used by the "View Bugs" page.
|
NVD-CWE-Other
|
CVE-2002-1112
|
2017-10-10 10:30 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290115
|
- |
|
mantis
|
mantis
|
summary_graph_functions.php in Mantis 0.17.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the g_jpgraph_path parameter to reference the location of the PHP code.
|
NVD-CWE-Other
|
CVE-2002-1113
|
2017-10-10 10:30 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290116
|
- |
|
mantis
|
mantis
|
The "View Bugs" page (view_all_bug_page.php) in Mantis 0.17.4a and earlier includes summaries of private bugs for users that do not have access to any projects.
|
NVD-CWE-Other
|
CVE-2002-1116
|
2017-10-10 10:30 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290117
|
- |
|
symantec_veritas
|
backup_exec
|
Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares.
|
NVD-CWE-Other
|
CVE-2002-1117
|
2017-10-10 10:30 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290118
|
- |
|
gnu sgi apple
|
glibc irix mac_os_x mac_os_x_server
|
The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote attackers to cause a denial of service (ha…
|
NVD-CWE-Other
|
CVE-2002-1265
|
2017-10-10 10:30 |
2002-11-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290119
|
- |
|
apple
|
mac_os_x
|
Mac OS X 10.2.2 allows local users to gain privileges by mounting a disk image file that was created on another system, aka "Local User Privilege Elevation via Disk Image File."
|
NVD-CWE-Other
|
CVE-2002-1266
|
2017-10-10 10:30 |
2002-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
290120
|
- |
|
apple
|
mac_os_x
|
Mac OS X 10.2.2 allows remote attackers to cause a denial of service by accessing the CUPS Printing Web Administration utility, aka "CUPS Printing Web Administration is Remotely Accessible."
|
NVD-CWE-Other
|
CVE-2002-1267
|
2017-10-10 10:30 |
2002-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|