5507 matches found
CVE-2002-2309
Summary: CVE-2002-2309 affects PHP 3.0–4.2.2 when running on Apache, where php.exe does not terminate properly, enabling a remote attacker to cause a denial of service via a direct request without arguments. The linked Red Hat and CVE records corroborate the vulnerability description across multi...
CVE-2002-2313
The vulnerability CVE-2002-2313 affects Eudora email client 5.1.1 when the “use Microsoft viewer” option is enabled. An HTML email containing a META refresh tag that references an embedded .mhtml file with ActiveX controls can trigger execution of a second embedded program processed by Internet E...
CVE-2002-2314
CVE-2002-2314 affects Mozilla 1.0. Remote attackers could steal cookies from other domains using a crafted javascript: URL that begins with // and ends in a newline, causing a host/path check to fail. The issue is addressed in Mozilla security fixes for 1.0.1; advisories also reference updates to...
CVE-2002-2315
The vulnerability CVE-2002-2315 affects Cisco IOS 11.2.x and 12.0.x, where the redirect table can grow without bound, enabling remote DoS via spoofed ICMP redirect packets to the router. Connected sources corroborate the issue and indicate a memory exhaustion vector caused by ICMP redirects. Impa...
CVE-2002-2316
Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 may fail to learn MAC addresses from a single initial packet, causing unicast traffic to be broadcast and allowing remote attackers to sniff sensitive network information. The connected Red Hat and CVE registries confirm th...
CVE-2002-2324
The CVE-2002-2324 entry concerns Windows XP Professional, where the System Restore directory and possibly other subdirectories within System Volume Information have insecure ACL permissions. The underlying issue is insufficient access controls, allowing local users to access restricted files and ...
CVE-2002-2330
CVE-2002-2330 is a documented XSS vulnerability in StatsPlus 1.25, affecting the stat.pl script. The issue allows remote attackers to inject arbitrary script/HTML by manipulating HTTP_USER_AGENT or HTTP_REFERER, which is written to stats.html and executed in client browsers. The vulnerability is ...
CVE-2002-2333
CVE-2002-2333 affects Konqueror in KDE 2.1–3.0, including 3.0.2. A buffer overflow in the image handling (IMG tag with oversized width/height) allows a remote attacker to crash the application, causing a denial of service. The connected Red Hat and CVE records confirm the same vulnerability descr...
CVE-2002-2334
CVE-2002-2334 affects Joe text editor versions 2.8–2.9.7. Backup files do not have their group and user setuid bits removed, which could allow local users to execute arbitrary setuid/setgid root programs when root edits scripts owned by other users. The NVD CVSS score is 3.6 (LOW) with local atta...
CVE-2002-2335
CVE-2002-2335 affects Killer Protection 1.0, where the vars.inc include file is stored under the web root with insufficient access control. This allows remote attackers to obtain user names and passwords and to log in using protection.php. The connected documents confirm the vulnerability descrip...
CVE-2002-2317
CVE-2002-2317 concerns VelociRaptor 1.0, indicating a memory leak in three components: httpd, nntpd, and the vpn driver. The underlying issue is a memory consumption DoS that can be triggered by remote attackers using an unknown method. Referenced sources (NVD, Red Hat, CVE listings) confirm the ...
CVE-2002-2311
Microsoft Internet Explorer 6.0 (and possibly others) is affected by CVE-2002-2311. The issue arises when a webpage contains a onkeydown handler that checks event.ctrlKey or event.shiftKey; with those keys pressed, a remote attacker can upload arbitrary file contents. This is the underlying vulne...
CVE-2002-2319
CVE-2002-2319 affects MySimpleNews: a static code injection vulnerability in users.php allows remote attackers to inject arbitrary PHP code and HTML via the LOGIN, DATA, and MESS parameters, which are inserted into news.php3. This indicates input handling flaws that enable arbitrary code executio...
CVE-2002-2318
Cross-site scripting XSS vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and executed by 404 error messages...
CVE-2002-2321
CVE-2002-2321 is a cross-site scripting (XSS) vulnerability affecting phpLinkat 0.1.0, exploitable via the catid parameter in showcat.php and addyoursite.php. The provided documents identify remote injection of arbitrary web script or HTML, but do not include explicit exploit details, affected ve...
CVE-2002-2332
CVE-2002-2332 concerns a buffer overflow in Opera 6.01 triggered by an IMG tag with oversized width/height attributes, enabling a remote attacker to cause a denial-of-service crash. The connected documents confirm the issue but do not provide exploitation details or a fix. No remediation is speci...
CVE-2002-2318
CVE-2002-2318 affects Falcon Web Server 2.0.0.1009 through 2.0.0.1021. The vulnerability is a cross-site scripting (XSS) flaw where an attacker can inject arbitrary script/HTML via the request URI, which is then embedded in 301 error messages and rendered by 404 error responses. The underlying ca...
CVE-2002-2328
Technical details for CVE-2002-2328 are not publicly available in the provided documents. No affected products, versions, or remediation are specified here. Monitor for updates from Red Hat/NVD/CVE sources.
CVE-2002-2322
CVE-2002-2322 affects Ultimate PHP Board (UPB) 1.0b, where the users.dat data file is stored under the web root with insufficient access control. This exposes usernames and passwords to remote attackers via the exposed file. The vulnerability is caused by improper access control rather than code ...