CVE-2002-2280

This CVE affects syslogd on OpenBSD 2.9–3.2 . The vulnerability occurs because the daemon does not update the source IP address of syslog packets when the host’s IP is changed (e.g., via ifconfig) without rebooting. As a result, the syslog server may receive messages with an outdated or incorrect...

CVE-2002-2282

McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for specific DLLs in the user’s home directory even while browsing the local hard drive, enabling local users to run arbitrary code through malicious DLLs. This is described as a local-privilege impact with potential comple...

CVE-2002-2286

Technical details for CVE-2002-2286 are not publicly provided in the supplied documents. No affected product/version or root cause is specified beyond the general description. Monitor for updates.

CVE-2002-2291

The CVE-2002-2291 entry affects Calisto Internet Talker 0.04 and earlier. The vulnerability is a remote denial-of-service risk caused by a long request that could trigger a buffer overflow in the affected component. No explicit exploitation details, affected versions beyond those listed, or remed...

CVE-2002-2292

The CVE-2002-2292 entry describes a directory traversal vulnerability in the Remote Console Applet of Halycon Software iASP 1.0.9, where an attacker can read arbitrary files by using a .. sequence in an HTTP request to port 9095. The affected component is the Remote Console Applet within Halycon ...

CVE-2002-2298

Thatware prior to version 0.5.3 is affected by a PHP remote file inclusion vulnerability in config.php, exploitable via the root_path parameter. This allows an attacker to potentially execute arbitrary PHP code on the server. Affected versions: 0.3 through 0.5.3. The vulnerability is described in...

CVE-2002-2303

3D3.Com ShopFactory 5.8 is affected by a vulnerability where client-side encryption and decryption of sensitive price data enables remote attackers to modify shopping cart prices by using JavaScript to decrypt the cookie containing the data. This indicates a weakness in where price data is stored...

CVE-2002-2262

CVE-2002-2262 describes an unspecified vulnerability in xntpd for HP-UX 10.20–11.11 that can be exploited remotely to cause a denial of service (hang) via unknown attack vectors. The NVD CVSS metrics indicate a network-exposed issue with low attack complexity and no authentication, yielding a Ava...

CVE-2002-2295

CVE-2002-2295 affects Pico Server (pServ) 2.0 beta 1–beta 5. The issue is a buffer overflow in the HTTP handling path, triggered by: (1) a 1024-byte TCP stream message (off-by-one overflow), (2) long method name, (3) long version number, (4) long User-Agent header, or (5) long file path. This can...

CVE-2002-2276

Ultimate PHP Board (UPB) 1.0 exposes a path disclosure: a direct request to add.php allows remote attackers to view the physical path of the message board via the error message. This is a remote information-disclosure vulnerability (CVE-2002-2276). Exploitation details are described across multip...

CVE-2002-2267

CVE-2002-2267 affects bogofilter 0.9.0.4 through a symlink attack on the bogopass temporary file, enabling local users to overwrite arbitrary files. Root cause: symlink race allowing file overwrite. Impact: local privilege/ integrity concerns as described (no public details on exploits). Remediat...

CVE-2002-2269

The CVE-2002-2269 entry concerns a directory traversal vulnerability in Webster HTTP Server. The vulnerability allows remote attackers to read arbitrary files by using a .. (dot dot) in the URL path. The provided documents state the issue and its impact (read access to arbitrary files) but do not...

CVE-2002-2288

CVE-2002-2288 affects Mambo Site Server 4.0.11. The vulnerability allows a remote attacker to disclose the server’s physical path by issuing an HTTP request to index.php containing a non-existent parameter, which triggers an error message revealing the path. No explicit remediation or patch detai...

CVE-2002-2293

CVE-2002-2293 concerns the Webshots Desktop screensaver, where local users can bypass the screensaver password by pressing CTRL-ALT-DELETE and either cancelling the dialog or terminating the screensaver process. The description in the provided records (NVD/CVE entries) confirms a local-privilege-...

CVE-2002-2302

ShopFactory 5.5–5.8 (3D3.Com) is affected by CVE-2002-2302: remote attackers can modify prices in shopping carts by altering the price value in a hidden form field. The vulnerability arises from client-side price manipulation in the cart, enabling potential price integrity issues. The available s...

CVE-2002-2272

CVE-2002-2272 affects Tomcat 4.0–4.1.12 when using mod_jk 1.2.1 with Apache 1.3–1.3.27. A remote attacker can cause a denial of service by sending an HTTP GET request that uses a Transfer-Encoding chunked field with invalid values, leading to desynchronized communications between Apache and Tomca...

CVE-2002-2299

Thatware versions 0.3 through 0.5.2 are affected by a PHP remote file inclusion vulnerability. The flaw allows remote attackers to execute arbitrary PHP code via the root_path parameter, enabling code execution on the server. The affected component is thatfile.php in Thatware, and exploitation le...

CVE-2002-2301

CVE-2002-2301 affects Lawson Financials 8.0 when configured to use a third‑party relational database. The underlying issue is that usernames and passwords are stored in a world‑readable file, enabling local users to obtain credentials and log onto the database. The description does not provide ve...

CVE-2002-2300

CVE-2002-2300: Buffer overflow in VxWorks ftpd (5.4) on 3Com NBX, affecting NBX 4.0.17 and 4.1.4 with CEL command; remote attacker can crash the FTP server (DoS). Root cause: overflow triggered by a long CEL command. Affected products/components: VxWorks ftpd, 3Com NBX NBX 4.x; exploit details an...

CVE-2002-2289

The CVE concerns BadBlue 1.7.1 where soinfo.php calls the PHP phpinfo function, exposing sensitive information and potentially ODBC passwords. The root cause is the phpinfo output being exposed remotely, enabling information disclosure. Publicly documented details are limited to this information;...