CVE-2002-2310

Technical details about CVE-2002-2310 are not publicly available in the provided documents. No affected products/versions or remediation specifics are described here. Monitor for updates from connected sources.

CVE-2002-2326

The CVE concerns Mail.app in macOS X 10.0–10.0.4 and 10.1–10.1.5, where iDisk credentials are sent in cleartext when connecting to Mac.com. The root cause is the default Mail.app configuration allowing unencrypted authentication, enabling an attacker on the network to sniff passwords. The provide...

CVE-2002-2323

CVE-2002-2323 affects Sun PC NetLink 1.0–1.2. The issue is an improper setting of ACLs for files/directories that use symbolic links and have been restored from backup, potentially allowing bypass of access restrictions for local or remote attackers. Connected advisories (Red Hat, PT Security) re...

CVE-2002-2318

Cross-site scripting XSS vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and executed by 404 error messages...

CVE-2002-2334

CVE-2002-2334 affects Joe text editor versions 2.8–2.9.7. Backup files do not have their group and user setuid bits removed, which could allow local users to execute arbitrary setuid/setgid root programs when root edits scripts owned by other users. The NVD CVSS score is 3.6 (LOW) with local atta...

CVE-2003-1451: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Symantec Norton AntiVirus 2002 allows remote attackers to execute arbitrary code via an e-mail attachment with a compressed ZIP file that contains a file with a long filename...

CVE-2002-2306

The vulnerability CVE-2002-2306 affects Sharman Networks KaZaA Media Desktop 1.7.1. It allows remote attackers to cause a Denial of Service by sending several large messages, leading to CPU consumption on the affected host. The available documents identify the affected software and the impact (av...

CVE-2002-2297

PHP remote file inclusion vulnerability in artlist.php in Thatware 0.5.2 and 0.5.3 allows remote attackers to execute arbitrary PHP code via the rootpath parameter...

CVE-2002-2305

The connected records confirm a concrete vulnerability: SQL injection in Immobilier’s agentadmin.php, exploitable via the (1) agentname or (2) agentpassword parameters. This allows remote attackers to execute arbitrary SQL commands. Per the CVSS data, impact includes partial confidentiality, part...

CVE-2002-2305

SQL injection vulnerability in agentadmin.php in Immobilier allows remote attackers to execute arbitrary SQL commands via the 1 agentname or 2 agentpassword parameter...

CVE-2002-2285

Vulnerability summary: In eTrust InoculateIT 6.0, enabling the "Incremental Scan" option may certify a file as virus-free before it is fully downloaded, allowing a bypass of virus detection. Affected product/version: eTrust InoculateIT 6.0. Root cause / behavior: premature virus validation during...

CVE-2002-2290

Mambo Site Server 4.0.11 installs with a default username and password of admin, which allows remote attackers to gain privileges...

CVE-2002-2259

CVE-2002-2259 describes a buffer overflow in the French documentation patch for Gnuplot 3.7 in SuSE Linux before 8.0, enabling local users to execute arbitrary code as root via unknown attack vectors. The public records indicate the vulnerable component is the patch used in SuSE Linux packaging f...

CVE-2002-2260

Vulnerability context (CVE-2002-2260) : Mozilla Bugzilla's quips feature is affected in versions 2.10–2.17, where an XSS vulnerability exists that lets remote attackers inject arbitrary script/HTML via the “show all quips” page. Several connected sources (including Debian’s DSA-218-1 and OpenVAS ...

CVE-2002-2264

Technical details for CVE-2002-2264 are not publicly provided in the supplied documents; the connected entries do not specify the affected product, impact, or fix for this CVE. Monitor for updates.

CVE-2002-2265

CVE-2002-2265 affects Open Source Internet Solutions OSIS 5.4 on Tru64 UNIX 4.0G/4.0F, specifically the LDAP Module in System Authentication. The description states a vulnerability allowing remote attackers to gain access to arbitrary files or privileges via unknown attack vectors. No explicit ro...

CVE-2002-2270

The CVE-2002-2270 entry concerns HP-UX (versions 10.10, 10.20, 11.0) with an unspecified vulnerability in the built‑in ied command that allows local users to view normally invisible data via unknown attack vectors. The affected component is the ied command on those HP-UX releases; the underlying ...

CVE-2002-2271

The CVE concerns BigFun 1.51b IRC client with Direct Client Connection (DCC) enabled. A buffer overflow is triggered by a long string, allowing a remote attacker to cause a denial of service (crash). No additional technical details (versions beyond 1.51b, specific vulnerable file/byte offset, or ...

CVE-2002-2273

CVE-2002-2273 : Cross-site scripting (XSS) in the Webster HTTP Server allows remote attackers to inject arbitrary web script or HTML via the URL. The provided documents do not specify affected versions, exact component, root cause details, or remediation steps. No exploitation details are include...

CVE-2002-2280

This CVE affects syslogd on OpenBSD 2.9–3.2 . The vulnerability occurs because the daemon does not update the source IP address of syslog packets when the host’s IP is changed (e.g., via ifconfig) without rebooting. As a result, the syslog server may receive messages with an outdated or incorrect...