CVE-2002-2203

Technical details of CVE-2002-2203 are not publicly available in the provided documents; no concrete information on affected products, root cause, or remediation is included. Monitor for updates.

CVE-2002-2186

Technical details about CVE-2002-2186 are not publicly provided in the connected documents. Monitor for updates.

CVE-2002-2193

CVE-2002-2193 describes a cross-site scripting (XSS) vulnerability in Mojo Mail 2.7, specifically in the mojo.cgi component. The flaw allows remote attackers to inject arbitrary web script via the email parameter. Documented impact is limited to partial integrity impact and does not indicate user...

CVE-2002-2145

CVE-2002-2145 affects Savant Web Server 3.1 and earlier. The vulnerability allows remote attackers to bypass authentication for password-protected user folders by requesting a URL ending with a hex-encoded space (%20) followed by a dot (%2e). The connected Red Hat and CVE records document the sam...

CVE-2002-2143

The CVE-2002-2143 issue affects MySimple News 1.0 where the admin.html page stores the administrative password in plaintext, enabling remote attackers to gain unauthorized access by viewing the page source. According to the sources, this exposes partial confidentiality, integrity, and availabilit...

CVE-2002-2200

The CVE references Benjamin Lefevre Dobermann FORUM 0.5 and earlier, where remote attackers can include and execute malicious PHP files via the subpath variable in four PHP scripts: entete.php, enteteacceuil.php, index.php, and newtopic.php. This is a remote-code-injection scenario affecting that...

CVE-2002-2190

The CVE relates to ArtsCore Studios CuteCast Forum 1.2, where user passwords are stored in plaintext under the web document root. The underlying vulnerability is improper password storage, enabling remote attackers to retrieve passwords by requesting a ".user" file over HTTP. The available source...

CVE-2002-2176

The CVE-2002-2176 entry concerns Gender MOD 1.1.3, where a SQL injection vulnerability in the User Profile page (via the user_level parameter) allows remote attackers to gain administrative access. The vulnerability stems from improper handling of user_level input in the profile interface, enabli...

CVE-2002-2149

CVE-2002-2149 describes a buffer overflow in Lucent Access Point 300, 600, and 1500 Service Routers. A remote attacker can cause a denial-of-service reboot by sending a long HTTP request to the device’s administrative interface. Documented in NVD/Red Hat CVE entries; CVSS v2 base score 5.0 (Netwo...

CVE-2002-2164

CVE-2002-2164 describes a buffer overflow in Microsoft Outlook Express 5.0, 5.5, and 6.0 that allows remote attackers to cause a denial of service by sending a long link. The connected sources (Red Hat, CVE listings, and NVD) corroborate a vulnerability in handling abnormally long link reference...

CVE-2002-2153

The vulnerability CVE-2002-2153 is a format string flaw in the PL/SQL module’s administrative pages of Oracle Application Server 4.0.8 (and 4.0.8 2). The underlying issue is a format string vulnerability that allows remote attackers to execute arbitrary code. The affected component is the PL/SQL ...

CVE-2002-2188

OpenBSD before 3.2 is affected by a local denial-of-service in the kernel caused by getrlimit(2) with invalid arguments, likely due to an integer signedness error. The impact is a kernel crash. Mitigation provided in the references includes patches such as 018_kernresource.patch (OpenBSD 3.1 comm...

CVE-2002-2180

OpenBSD 2.0–3.1 setitimer(2) syscall contains input validation issues that allow a local user to write to kernel memory and potentially gain root privileges. The root cause is described as an argument-check problem, possibly related to an integer signedness error. Affected component: setitimer(2)...

CVE-2002-2192

CVE-2002-2192 is an XSS vulnerability affecting Perception LiteServe 2.0.1. The flaw allows remote attackers to execute arbitrary web script via (1) the Host header when DNS wildcards are supported, or (2) the query string in a "dir" request to indexed folders. Public references confirm the same ...

CVE-2002-2197

CVE-2002-2197 affects Sun Solaris 8.0. A local user can trigger a kernel panic by running a program that uses /dev/poll, causing a NULL pointer dereference in the kernel. The provided connected documents confirm the vulnerable component and the root cause (NULL pointer dereference via /dev/poll),...

CVE-2002-2157

...

CVE-2002-2141

BeA WebLogic Server and Express 7.0/7.0.0.1 running Servlets and EJB on multiple servers are vulnerable to a flaw that, when an application is undeployed on one server, causes removal of security constraints and roles on all servers for affected Servlets or EJBs. This could enable unauthorized ac...

CVE-2002-2206

The CVE-2002-2206 entry concerns Norton AntiVirus 2001’s POP3 proxy service (POPROXY.EXE). The vulnerability arises when a local user uses a long username containing multiple /localhost entries, leading to CPU exhaustion and a crash (denial of service). The connected sources reiterate the same af...

CVE-2002-2183

phpShare.php in phpShare before 0.6 beta 3 allows remote attackers to include and execute arbitrary PHP scripts from remote servers, per CVE-2002-2183. Affected software appears to be phpShare maintained prior to 0.6 beta 3. The vulnerability is described as an remote inclusion/execution issue in...

CVE-2002-2207

CVE-2002-2207 describes a buffer overflow in ssldump (version 0.9b2 and earlier) when running in decryption mode, allowing remote attackers to execute arbitrary code via a long RSA PreMasterSecret. The vulnerability is triggered over the network and is rated high severity (CVSS 2.0: AV:N/AC:L/Au:...