CVE-2004-0202

IDirectPlay4 Application Programming Interface API of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2003-0202

CVE-2003-0202 affects the metrics package (version 1.0); the halstead and gather_stats scripts open temporary files insecurely, enabling a local attacker to overwrite files via a symlink attack. Debian advisory DSA-279-1 fixes insecure temporary file creation (metrics 1.0-1.1). OpenVAS entries an...

CVE-2003-0202

The 1 halstead and 2 gatherstats scripts in metrics 1.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2002-0202

PaintBBS 1.2 installs certain files and directories with insecure permissions, which allows local users to 1 obtain the encrypted server password via the world-readable oekakibbs.conf file, or 2 modify the server configuration via the world-writeable /oekaki/ folder...

CVE-2002-0202

CVE-2002-0202 affects PaintBBS 1.2. The vulnerability arises from insecure permissions on installed files/directories, enabling local users to access the encrypted server password via the world-readable oekakibbs.conf and to modify the server configuration through the world-writable /oekaki/ dire...

CVE-2001-0202

Picserver web server allows remote attackers to read arbitrary files via a .. dot dot attack in an HTTP GET request...

CVE-2001-0202

The CVE-2001-0202 entry affects the Picserver web server, where a directory traversal (..) in an HTTP GET request allows an attacker to read arbitrary files. This root cause is described across multiple sources (e.g., NVD/NVD entry and CVE record) as a remote-access vulnerability with a notable i...

CVE-2001-0202

Picserver web server allows remote attackers to read arbitrary files via a .. dot dot attack in an HTTP GET request...

CVE-2000-0202

CVE-2000-0202 affects Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0. A malformed SELECT statement in an SQL query allows remote attackers to gain privileges. The connected OpenVAS entry corroborates multiple MSSQL vulnerabilities; however, exploitation details, affected versions b...

CVE-2000-0202

Microsoft SQL Server 7.0 and Microsoft Data Engine MSDE 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query...

CVE-1999-0202

CVE-1999-0202 affects the GNU tar command when used in FTP sessions, enabling an attacker to execute arbitrary commands via the tar process. The connected records consistently describe this as a vulnerability in GNU tar in FTP contexts with potential for remote command execution; however, explici...