CVE-2002-2266

CVE-2002-2266 affects NetScreen ScreenOS versions 2.8 through 4.0. The issue occurs when forwarding H.323 or Netmeeting traffic, where remote attackers can trigger a denial of service by establishing multiple half‑open H.323 sessions that are not cleaned up and do not time out for 36 hours, leadi...

CVE-2002-2279

CVE-2002-2279 affects aldap 0.09, with a vulnerability in the bind function in config.inc. This flaw could allow remote attackers to authenticate with Manager permissions. The connected documents provide the affected component and impact but do not specify a fix/patch version or remediation steps...

CVE-2002-2278

CVE-2002-2278 is a cross-site scripting (XSS) vulnerability in PortailPHP 0.99, specifically in mod_search/index.php. The issue arises from injecting arbitrary web script or HTML via six user-controllable variables: $App_Theme, $Rub_Search, $Rub_News, $Rub_File, $Rub_Liens, and $Rub_Faq. The prov...

CVE-2002-2277

PortailPHP 0.99 contains an SQL injection in mod_search/index.php. The vulnerability allows remote attackers to inject SQL via (1) $rech, (2) $BD_Tab_docs, (3) $BD_Tab_file, (4) $BD_Tab_liens, (5) $BD_Tab_faq, or (6) $chemin, potentially affecting confidentiality, integrity, and availability as i...

CVE-2002-2284

The CVE-2002-2284 entry concerns Netscape Communicator 4.0–4.79, where an applet loading user-supplied Java classes can bypass the JVM security model and allow remote arbitrary Java code execution. The vulnerability affects the applet/JVM interaction and is exploitable via a remote attacker, as i...

CVE-2002-2268

CVE-2002-2268 refers to a buffer overflow in the Webster HTTP Server that enables remote code execution through a long URL. The connected documents corroborate an exploitation path via buffer overflows (e.g., Webster HTTP Server GET Buffer Overflow) and show associated exploit activities in Metas...

CVE-2002-2281

Technical details about CVE-2002-2281 are not publicly available in the provided connected documents. Monitor for updates from authoritative sources.

CVE-2002-2297

Technical details about CVE-2002-2297 are not publicly available in the provided connected documents. Monitor for updates for any affected software, versions, impact, or remediation information.

CVE-2002-2290

CVE-2002-2290 affects Mambo Site Server 4.0.11, where a default username/password of admin enables remote attackers to gain privileges. The description across sources repeats that a default credential leads to privilege escalation, but no concrete exploit vectors or patched versions are provided ...

CVE-2002-2275

Fortres 101 4.1 is affected. A local bypass allows a user to press Windows+F for about 30 seconds, opening multiple windows and ultimately crashing explorer.exe, which then launches an unrestricted explorer.exe. The material does not provide remediation details.

CVE-2002-2243

CVE-2002-2243 affects akfingerd (0.5 and possibly earlier). The issue is a denial-of-service vulnerability where the daemon allows only one connection at a time and does not time out connections, enabling an attacker to cause refused connections by opening a connection and not closing it. Connect...

CVE-2002-2250

Multiple buffer overflows in Sybase Adaptive Server 12.0 and 12.5 allow remote attackers to execute arbitrary code via 1 a long parameter to the xpfreedll extended stored procedure or 2 a long database name argument to the DBCC CHECKVERIFY function...

CVE-2002-2229

The vulnerability CVE-2002-2229 affects Sapio Design Ltd. WebReflex 1.53. A directory traversal flaw allows remote attackers to read arbitrary files by manipulating … in an HTTP request. The issue is caused by improper validation of path components, enabling access beyond the web root. Impact is ...

CVE-2002-2233

CVE-2002-2233 affects Enceladus Server Suite 3.9. It is a directory traversal vulnerability that lets remote attackers list arbitrary directories and may cause a denial of service through misused @ characters in a CD (CWD) command (e.g., @/...., @@@/..c:, @/..@/..). The provided sources confirm t...

CVE-2002-2238

CVE-2002-2238 describes a directory traversal vulnerability in Kunani ODBC FTP Server 1.0.10 that allows remote attackers to read arbitrary files by supplying a ..\ in a GET request. The affected component is the server software; the underlying issue is improper path validation enabling access ou...

CVE-2002-2250

CVE-2002-2250 affects Sybase Adaptive Server 12.0 and 12.5, with two described vectors causing remote arbitrary code execution via (1) a long parameter to xp_freedll and (2) a long database name argument to DBCC CHECKVERIFY. Root cause: multiple buffer overflows in these entry points. Impact is r...

CVE-2002-2252

The CVE-2002-2252 entry affects Thatware versions up to and including 0.5.0, with the vulnerability located in auth.inc.php. The root cause is a SQL injection flaw that allows remote attackers to execute arbitrary SQL commands via a base64-encoded user parameter. Impact is remote data manipulatio...

CVE-2002-2254

The CVE describes a vulnerability in the Linux kernel’s Netfilter/IPTables: the experimental IP packet queuing feature in kernels 2.4 (up to 2.4.19) and 2.5 (up to 2.5.31). If a privileged process exits while traffic is not queued, a later process with the same PID may access network traffic that...

CVE-2002-2255

The CVE-2002-2255 entry describes an XSS vulnerability in phpBB 2.0.3 and possibly earlier versions. The issue enables remote attackers to inject arbitrary web script or HTML via the search_username parameter in the searchuser mode, potentially compromising user sessions or data integrity. Accord...

CVE-2002-2257

CVE-2002-2257 affects LIBCGI 1.0.2 and 1.0.3. A stack-based overflow in the parse_field function (cgi_lib.c) allows remote attackers to execute arbitrary code by sending a long argument. Documented impact is remote code execution with a CVSSv2 base score of 10.0 (HIGH). No remediation or patch de...