CVE-2002-2239

The Cisco Optical Service Module (OSM) in Catalyst 6500/7600 chassis with IOS 12.1(8)E–12.1(13.4)E is affected. A malformed-packet can be sent remotely to cause a denial of service (hang) via the OSM, as documented in multiple sources (OSM LC IOS vulnerability). The issue originates from how spec...

CVE-2002-2249

CVE-2002-2249 affects News Evolution 2.0 and describes a PHP remote file inclusion vulnerability. The issue allows an attacker to execute arbitrary PHP commands by supplying a crafted neurl parameter to one of three scripts: backend.php, screen.php, or admin/modules/comment.php. The documents do ...

CVE-2002-2247

The CVE-2002-2247 entry concerns Mambo Site Server 4.0.11 where the administrator/phpinfo.php script calls phpinfo(), enabling remote attackers to reveal sensitive information such as the full web root path. This is an information-disclosure flaw attributed to phpinfo() usage in that script. The ...

CVE-2002-2241

CVE-2002-2241 describes a buffer overflow in Deerfield VisNetic WebSite’s httpd32.exe prior to 3.5.15, exploitable by sending a long HTTP OPTIONS request to crash the service (denial of service). The affected component is the httpd32.exe web server used by VisNetic WebSite; root cause is a buffer...

CVE-2002-2248

CVE-2002-2248 describes a buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation used by Netscape 4.0. An applet that passes a long string to the WDefaultFontCharset constructor and calls canConvert can trigger the overflow, enabling remote code execution. The NVD en...

CVE-2002-2242

The CVE-2002-2242 entry concerns the Apple Package Manager in KisMAC 0.02a and earlier, which modifies file permissions of sensitive files after installation. This behavior could enable attackers to perform unauthorized activities on those files. The connected documents confirm the affected softw...

CVE-2002-2235

CVE-2002-2235 affects vBulletin 2.2.9 and earlier, where member2.php mishandles the $perpage parameter by not enforcing an integer type. This can cause an error message to be reflected back to the user without quoting, facilitating cross-site scripting (XSS) and potentially other attacks. Connect...

CVE-2002-2253

CVE-2002-2253 affects Cyrus Sieve / libSieve 2.1.2 and earlier. The issue arises from multiple buffer overflows in code handling (1) long header names, (2) long IMAP flags, and (3) a script generating many errors that overflow the error string. This allows remote attackers to execute arbitrary co...

CVE-2002-2258

CVE-2002-2258 affects Moby NetSuite. A remote attacker can crash the service by sending an HTTP POST with a Content-Length header containing a large integer or non-numeric value, triggering an access violation after a failed atoi(). The documents do not provide any remediation, exploit details, o...

CVE-2002-2228

CVE-2002-2228 affects MailScanner prior to 4.0 5-1 and prior to 3.2 6-1. The vulnerability allows remote attackers to bypass protection by crafting attachments whose filenames contain (1) extra leading spaces, (2) extra trailing spaces, or (3) alternate character encodings that MailScanner cannot...

CVE-2002-2232

CVE-2002-2232 describes a buffer overflow in Enceladus Server Suite 3.9 that allows a remote attacker to execute arbitrary code through a long CD (CWD) command. Connected entries (Red Hat CVE, CVE lists, EUVD, NVD) corroborate the same description. There are no details in the provided documents a...

CVE-2002-2234

NetScreen ScreenOS pre-4.0.1 is affected: remote attackers can bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests. The available documents confirm the vulnerability and affected version, but do not provide remediation steps or exploit details.

CVE-2002-2251

Technical details about CVE-2002-2251 are not publicly available in the provided documents. Monitor for updates.

CVE-2002-2237

CVE-2002-2237 affects TFTPD32 TFTP server 2.21 and earlier, allowing remote denial of service via a GET request containing a DOS device name (e.g., com1/aux). The CERT advisory associates this with Wyse TFTPD32 in Wyse Simple Imager (WSI) and lists a fixed version path: 2.51 for this CVE, with WS...

CVE-2002-2256

The CVE-2002-2256 entry concerns the pWins Webserver (versions 0.2.5 and earlier). Affected component: the webserver’s handling of Unicode characters enables a directory traversal vulnerability, allowing remote attackers to read arbitrary files. The public records describe the vulnerability as a ...

CVE-2002-2244

CVE-2002-2244 affects Akfingerd 0.5 and earlier. The vulnerability arises when a local user exploits a .plan containing a symlink to /dev/urandom (or another device) and disconnects during data transfer, causing Akfingerd to receive a SIGPIPE it cannot handle, resulting in a denial of service (cr...

Microsoft Word工作区内存破坏远程代码执行漏洞（MS07-060）

BUGTRAQ ID: 25906 CVECAN ID: CVE-2007-3899 Word是Office办公套件中的文字处理软件。 Word处理特制Word文件的方式中存在一个远程执行代码漏洞，远程攻击者可能利用此漏洞通过诱使用户处理恶意文件控制用户系统。 如果用户打开带有畸形字符串的特制Word文件，该漏洞就可能允许远程执行指令。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft Office 2004 for Mac Microsoft Word 2002 SP3 Microsoft Word 2000 SP3 临时解决方法：...

CVE-2007-3899

A memory corruption vulnerability exists in Microsoft Word 2000 SP3 , Word 2002 SP3 , and Office 2004 for Mac . The flaw is triggered when a user is tricked into opening a specially crafted Word file containing a malformed string or a bug in the font parsing handler . Successful exploitation allo...

Security Update for Word 2002 (KB942670)

A security vulnerability exists in Microsoft Word 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

CVE-2007-3899: Improper Control of Generation of Code

Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string in a Word file, aka "Word Memory Corruption Vulnerability."...