Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting the information, e.g., with the Disengage tool.
Max CVSS
4.6
EPSS Score
0.04%
Published
2002-04-01
Updated
2008-09-05
Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, which could allow local users to gain privileges or modify the firewall policy.
Max CVSS
7.2
EPSS Score
0.04%
Published
2002-04-01
Updated
2008-09-05
Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header.
Max CVSS
7.5
EPSS Score
5.26%
Published
2002-04-01
Updated
2017-10-10
vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing.
Max CVSS
7.2
EPSS Score
0.04%
Published
2002-04-01
Updated
2017-10-10
Buffer overflow in SNMP daemon (snmpd) on SGI IRIX 6.5 through 6.5.15m allows remote attackers to execute arbitrary code via an SNMP request.
Max CVSS
7.5
EPSS Score
4.85%
Published
2002-04-03
Updated
2008-09-05
Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NSFDbReadObject) that directly accesses the object.
Max CVSS
7.5
EPSS Score
2.20%
Published
2002-04-22
Updated
2008-09-05
Unknown vulnerability in Mail for SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, when running with the -R option, allows local and remote attackers to cause a core dump.
Max CVSS
5.0
EPSS Score
0.92%
Published
2002-04-22
Updated
2008-09-05
Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access.
Max CVSS
7.8
EPSS Score
0.68%
Published
2002-04-04
Updated
2024-02-08
Funk Software Proxy Host 3.x is installed with insecure permissions for the registry and the file system.
Max CVSS
7.2
EPSS Score
0.05%
Published
2002-04-22
Updated
2008-09-10
Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local users to gain privileges by recovering the passwords from the PHOST.INI file or the Windows registry.
Max CVSS
7.2
EPSS Score
0.04%
Published
2002-04-22
Updated
2008-09-10
Funk Software Proxy Host 3.x before 3.09A creates a Named Pipe that does not require authentication and is installed with insecure access control, which allows local and possibly remote users to use the Proxy Host's configuration utilities and gain privileges.
Max CVSS
7.5
EPSS Score
0.61%
Published
2002-04-22
Updated
2008-09-10
Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows attackers to cause a denial of service or execute arbitrary code via HTR requests with long variable names.
Max CVSS
7.5
EPSS Score
34.45%
Published
2002-04-22
Updated
2018-10-30
The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote attackers to cause a denial of service (crash) when the URL parser accesses a null pointer.
Max CVSS
5.0
EPSS Score
10.74%
Published
2002-04-22
Updated
2020-11-23
The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have established an FTP session to cause a denial of service via a specially crafted status request containing glob characters.
Max CVSS
5.0
EPSS Score
96.62%
Published
2002-04-22
Updated
2020-11-23
Cross-site scripting vulnerability in Help File search facility for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to embed scripts into another user's session.
Max CVSS
7.5
EPSS Score
8.52%
Published
2002-04-22
Updated
2020-11-23
Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other web users via the error message used in a URL redirect (""302 Object Moved") message.
Max CVSS
7.5
EPSS Score
6.76%
Published
2002-04-22
Updated
2020-11-23
Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code.
Max CVSS
7.5
EPSS Score
96.48%
Published
2002-04-22
Updated
2018-10-30
Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service or execute code, aka "Microsoft-discovered variant of Chunked Encoding buffer overrun."
Max CVSS
7.5
EPSS Score
21.50%
Published
2002-04-22
Updated
2020-11-23
Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page.
Max CVSS
7.5
EPSS Score
40.36%
Published
2002-04-22
Updated
2020-11-23
Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via long file names.
Max CVSS
7.5
EPSS Score
21.50%
Published
2002-04-22
Updated
2020-11-23
Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values.
Max CVSS
7.5
EPSS Score
94.33%
Published
2002-04-22
Updated
2020-11-23
Buffer overflow in Multiple UNC Provider (MUP) in Microsoft Windows operating systems allows local users to cause a denial of service or possibly gain SYSTEM privileges via a long UNC request.
Max CVSS
7.2
EPSS Score
0.10%
Published
2002-04-04
Updated
2019-04-30
Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large number of / characters, which affects Internet Explorer 5.1, Outlook Express 5.0 through 5.0.2, Entourage v. X and 2001, PowerPoint v. X, 2001, and 98, and Excel v. X and 2001 for Macintosh.
Max CVSS
7.5
EPSS Score
4.72%
Published
2002-04-22
Updated
2018-10-12
Internet Explorer 5.1 for Macintosh allows remote attackers to bypass security checks and invoke local AppleScripts within a specific HTML element, aka the "Local Applescript Invocation" vulnerability.
Max CVSS
7.5
EPSS Score
8.02%
Published
2002-04-22
Updated
2018-10-12
Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color database) command line argument.
Max CVSS
7.2
EPSS Score
0.04%
Published
2002-04-02
Updated
2018-10-30
45 vulnerabilities found
1 2
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!