CVE-2002-2326

The CVE concerns Mail.app in macOS X 10.0–10.0.4 and 10.1–10.1.5, where iDisk credentials are sent in cleartext when connecting to Mac.com. The root cause is the default Mail.app configuration allowing unencrypted authentication, enabling an attacker on the network to sniff passwords. The provide...

CVE-2002-2323

CVE-2002-2323 affects Sun PC NetLink 1.0–1.2. The issue is an improper setting of ACLs for files/directories that use symbolic links and have been restored from backup, potentially allowing bypass of access restrictions for local or remote attackers. Connected advisories (Red Hat, PT Security) re...

CVE-2002-2318

Cross-site scripting XSS vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and executed by 404 error messages...

CVE-2002-2328

Technical details for CVE-2002-2328 are not publicly available in the provided documents. No affected products, versions, or remediation are specified here. Monitor for updates from Red Hat/NVD/CVE sources.

CVE-2002-2307

The CVE-2002-2307 entry describes a vulnerability in BenHur Firewall release 3 update 066 fix 2 where remote attackers can access services by connecting from source port 20, due to an ACL restriction bypass. Connected documents corroborate a port-20 bypass vulnerability and reference published ad...

CVE-2003-1451: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Symantec Norton AntiVirus 2002 allows remote attackers to execute arbitrary code via an e-mail attachment with a compressed ZIP file that contains a file with a long filename...

CVE-2002-2306

The vulnerability CVE-2002-2306 affects Sharman Networks KaZaA Media Desktop 1.7.1. It allows remote attackers to cause a Denial of Service by sending several large messages, leading to CPU consumption on the affected host. The available documents identify the affected software and the impact (av...

CVE-2002-2305

The connected records confirm a concrete vulnerability: SQL injection in Immobilier’s agentadmin.php, exploitable via the (1) agentname or (2) agentpassword parameters. This allows remote attackers to execute arbitrary SQL commands. Per the CVSS data, impact includes partial confidentiality, part...

CVE-2002-2305

SQL injection vulnerability in agentadmin.php in Immobilier allows remote attackers to execute arbitrary SQL commands via the 1 agentname or 2 agentpassword parameter...

CVE-2002-2285

Vulnerability summary: In eTrust InoculateIT 6.0, enabling the "Incremental Scan" option may certify a file as virus-free before it is fully downloaded, allowing a bypass of virus detection. Affected product/version: eTrust InoculateIT 6.0. Root cause / behavior: premature virus validation during...

CVE-2002-2275

Fortres 101 4.1 is affected. A local bypass allows a user to press Windows+F for about 30 seconds, opening multiple windows and ultimately crashing explorer.exe, which then launches an unrestricted explorer.exe. The material does not provide remediation details.

CVE-2002-2290

Mambo Site Server 4.0.11 installs with a default username and password of admin, which allows remote attackers to gain privileges...

CVE-2002-2259

CVE-2002-2259 describes a buffer overflow in the French documentation patch for Gnuplot 3.7 in SuSE Linux before 8.0, enabling local users to execute arbitrary code as root via unknown attack vectors. The public records indicate the vulnerable component is the patch used in SuSE Linux packaging f...

CVE-2002-2264

Technical details for CVE-2002-2264 are not publicly provided in the supplied documents; the connected entries do not specify the affected product, impact, or fix for this CVE. Monitor for updates.

CVE-2002-2265

CVE-2002-2265 affects Open Source Internet Solutions OSIS 5.4 on Tru64 UNIX 4.0G/4.0F, specifically the LDAP Module in System Authentication. The description states a vulnerability allowing remote attackers to gain access to arbitrary files or privileges via unknown attack vectors. No explicit ro...

CVE-2002-2271

The CVE concerns BigFun 1.51b IRC client with Direct Client Connection (DCC) enabled. A buffer overflow is triggered by a long string, allowing a remote attacker to cause a denial of service (crash). No additional technical details (versions beyond 1.51b, specific vulnerable file/byte offset, or ...

CVE-2002-2273

CVE-2002-2273 : Cross-site scripting (XSS) in the Webster HTTP Server allows remote attackers to inject arbitrary web script or HTML via the URL. The provided documents do not specify affected versions, exact component, root cause details, or remediation steps. No exploitation details are include...

CVE-2002-2280

This CVE affects syslogd on OpenBSD 2.9–3.2 . The vulnerability occurs because the daemon does not update the source IP address of syslog packets when the host’s IP is changed (e.g., via ifconfig) without rebooting. As a result, the syslog server may receive messages with an outdated or incorrect...

CVE-2002-2282

McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for specific DLLs in the user’s home directory even while browsing the local hard drive, enabling local users to run arbitrary code through malicious DLLs. This is described as a local-privilege impact with potential comple...

CVE-2002-2286

Technical details for CVE-2002-2286 are not publicly provided in the supplied documents. No affected product/version or root cause is specified beyond the general description. Monitor for updates.