CVE-2002-2233

CVE-2002-2233 affects Enceladus Server Suite 3.9. It is a directory traversal vulnerability that lets remote attackers list arbitrary directories and may cause a denial of service through misused @ characters in a CD (CWD) command (e.g., @/...., @@@/..c:, @/..@/..). The provided sources confirm t...

CVE-2002-2257

CVE-2002-2257 affects LIBCGI 1.0.2 and 1.0.3. A stack-based overflow in the parse_field function (cgi_lib.c) allows remote attackers to execute arbitrary code by sending a long argument. Documented impact is remote code execution with a CVSSv2 base score of 10.0 (HIGH). No remediation or patch de...

CVE-2002-2256

The CVE-2002-2256 entry concerns the pWins Webserver (versions 0.2.5 and earlier). Affected component: the webserver’s handling of Unicode characters enables a directory traversal vulnerability, allowing remote attackers to read arbitrary files. The public records describe the vulnerability as a ...

CVE-2002-2251

Technical details about CVE-2002-2251 are not publicly available in the provided documents. Monitor for updates.

CVE-2002-2241

CVE-2002-2241 describes a buffer overflow in Deerfield VisNetic WebSite’s httpd32.exe prior to 3.5.15, exploitable by sending a long HTTP OPTIONS request to crash the service (denial of service). The affected component is the httpd32.exe web server used by VisNetic WebSite; root cause is a buffer...

CVE-2002-2234

NetScreen ScreenOS pre-4.0.1 is affected: remote attackers can bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests. The available documents confirm the vulnerability and affected version, but do not provide remediation steps or exploit details.

CVE-2002-2248

CVE-2002-2248 describes a buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation used by Netscape 4.0. An applet that passes a long string to the WDefaultFontCharset constructor and calls canConvert can trigger the overflow, enabling remote code execution. The NVD en...

CVE-2002-2249

CVE-2002-2249 affects News Evolution 2.0 and describes a PHP remote file inclusion vulnerability. The issue allows an attacker to execute arbitrary PHP commands by supplying a crafted neurl parameter to one of three scripts: backend.php, screen.php, or admin/modules/comment.php. The documents do ...

CVE-2002-2247

The CVE-2002-2247 entry concerns Mambo Site Server 4.0.11 where the administrator/phpinfo.php script calls phpinfo(), enabling remote attackers to reveal sensitive information such as the full web root path. This is an information-disclosure flaw attributed to phpinfo() usage in that script. The ...

Microsoft Word工作区内存破坏远程代码执行漏洞（MS07-060）

BUGTRAQ ID: 25906 CVECAN ID: CVE-2007-3899 Word是Office办公套件中的文字处理软件。 Word处理特制Word文件的方式中存在一个远程执行代码漏洞，远程攻击者可能利用此漏洞通过诱使用户处理恶意文件控制用户系统。 如果用户打开带有畸形字符串的特制Word文件，该漏洞就可能允许远程执行指令。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft Office 2004 for Mac Microsoft Word 2002 SP3 Microsoft Word 2000 SP3 临时解决方法：...

CVE-2007-3899

CVE-2007-3899 concerns memory corruption in Word affecting Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac. The root cause is a malformed string in a Word file that can be processed by Word, enabling user-assisted remote code execution on vulnerable hosts. The Mac variant is reported in the...

Security Update for Word 2002 (KB942670)

A security vulnerability exists in Microsoft Word 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

VulnCheck KEV: CVE-2007-3899

Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string in a Word file, aka "Word Memory Corruption Vulnerability."...

Savant 3.1 Web Server Overflow

This module exploits a stack buffer overflow in Savant 3.1 Web Server. The service supports a maximum of 10 threads for a default install. Each exploit attempt generally causes a thread to die whether successful or not. Therefore, in a default configuration, you only have 10 chances. Due to the...

HP-UX Security Patch : PHSS_28095

X OV NNM6.2 Intermediate Patch, Oct 2002 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26653; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2002-2227

CVE-2002-2227 affects ssldump up to version 0.9b2, where a buffer underflow in SSLv2 challenge handling allows a remote attacker to trigger memory corruption and cause a denial of service . Exploitation is remote and depends on sending a crafted SSLv2 challenge value. Impact is described as memor...

CVE-2002-2226

CVE-2002-2226 describes a buffer overflow in TFTPD32’s tftpd (versions 2.21 and earlier) that lets a remote attacker corrupt the stack by sending a long filename, enabling arbitrary code execution. Public references document a Metasploit module exploiting TFTPD32

AtomixMP3 2.3 - .pls Local Buffer Overflow

AtomixMP3 2.3 - .pls Local Buffer Overflow 0x77394540 jmp esp in mswsock.dll Winxp Pro Version 2002 exploit : A x 516 +EIP - jmp esp - 4 + Nops -10 + Shellcode By : 0x58 greetz : miyyet,,diablos5s5,,vxroot,,Str0ke,,Metasploit Moroccan Hackers ! / win32exec - EXITFUNC=seh CMD=calc.exe Size=164...

Design/Logic Flaw

Unspecified vulnerability in SSHield 1.6.1 with OpenSSH 3.0.2p1 on Cisco WebNS 8.20.0.1 on Cisco Content Services Switch CSS series 11000 devices allows remote attackers to cause a denial of service connection slot exhaustion and device crash via a series of large packets designed to exploit the...

CVE-2007-4654

Unspecified vulnerability in SSHield 1.6.1 with OpenSSH 3.0.2p1 on Cisco WebNS 8.20.0.1 on Cisco Content Services Switch CSS series 11000 devices allows remote attackers to cause a denial of service connection slot exhaustion and device crash via a series of large packets designed to exploit the...