Design/Logic Flaw

Sun Solaris 9 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572...

Design/Logic Flaw

HP HP-UX B11.11 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572...

Security Update for Outlook 2002 (KB921594)

This update resolves a security vulnerability in Microsoft Outlook 2002 that could enable a remote user to execute code on a computer that is running Outlook 2002...

Security Update for Excel 2002 (KB925523)

A security vulnerability exists in Microsoft Excel 2002 that could allow remote code execution. This update resolves that vulnerability...

CVE-2007-0033: Undefined Security Weakness

Microsoft Outlook 2002 and 2003 allows user-assisted remote attackers to execute arbitrary code via a malformed VEVENT record in an .iCal meeting request or ICS file...

CVE-2006-1305: Undefined Security Weakness

Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service memory exhaustion and interrupted mail recovery via malformed e-mail header information, possibly related to 1 long subject lines or 2 large numbers of recipients in To or CC headers...

Microsoft IIS HTR Request Buffer Overflow (CVE-2002-0071)

...

CVE-2002-2220

The CVE-2002-2220 issue concerns the chetcpasswd utility in Pedro Lineu Orso’s project, where a buffer overflow affects versions before 1.12 when configured to accept connections from 0.0.0.0. The documented impact is local privilege escalation by authenticated or local users via unspecified vect...

CVE-2002-2219

The CVE pertains to chetcpasswd.cgi in Pedro Lineu Orso chetcpasswd prior to version 2.1, where a flaw in the handling of a long user ID field enables remote disclosure of the last line of the /etc/shadow file. The vulnerability is an information disclosure via an unintended read of shadow data, ...

CVE-2002-2221

The CVE-2002-2221 entry describes an untrusted search path vulnerability in chetcpasswd (Pedro Lineu Orso) versions 2.4.1 and earlier. The underlying issue is a modified PATH that can reference a malicious cp binary, enabling local users to gain privileges. Documented impact is local privilege es...

CVE-2006-6561: Undefined Security Weakness

Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted DOC file that triggers memory corruption, as demonstrated via the 12122006-djtest.doc file, a different issue than CVE-2006-5994 and...

Security Update for Excel 2002 (KB923089)

A security vulnerability exists in Microsoft Excel 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

CVE-2006-6456: Undefined Security Weakness

Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecified vectors related to malformed data structures that trigger memory corruption, a different vulnerability than CVE-2006-5994...

CVE-2003-1310

The CVE concerns Norton AntiVirus 2002 on Windows, specifically the DeviceIoControl path in the Norton Device Driver (NAVAP.sys). The vulnerability allows local privilege escalation by overwriting memory locations through certain IOCTL codes, enabling a non-privileged user to gain higher privileg...

CVE-2003-1310: Undefined Security Weakness

The DeviceIoControl function in the Norton Device Driver NAVAP.sys in Symantec Norton AntiVirus 2002 allows local users to gain privileges by overwriting memory locations via certain control codes aka "Device Driver Attack"...

Microsoft IIS ASP chunked encoding buffer overflow

Added: 11/10/2006 CVE: CVE-2002-0079 BID: 4485 OSVDB: 768 Background Microsoft IIS web servers include ISAPI extensions which are invoked in the server process to handle requests of a given type. Problem A buffer overflow in the ASP ISAPI filter allows remote attackers to execute arbitrary comman...

Solaris 5.8 (sparc) : 113246-02

Topology Reporter 1.0: Support for Leadville 6.1.2, StorADE bug fi. Date this patch was last updated by Sun : Oct/16/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

Solaris 5.9 (sparc) : 113176-03

PatchPro patch engine corrections. Date this patch was last updated by Sun : Dec/17/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security if ! definedfunc"bnrando...

Solaris 5.7 (sparc) : 113176-03

PatchPro patch engine corrections. Date this patch was last updated by Sun : Dec/17/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security if ! definedfunc"bnrando...

Solaris 5.6 (sparc) : 107780-02

Java DMK 3.2 patch. Date this patch was last updated by Sun : Apr/22/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...