5356 matches found
CVE-2002-2136
CVE-2002-2136 is rejected/not used; duplicate of CVE-2002-1590.
CVE-2002-2166
CVE-2002-2166 is an XSS vulnerability reported in FuseTalk 2.0 and 3.0. The public records indicate that remote attackers could inject arbitrary HTML/script into pages, potentially affecting user data integrity without affecting confidentiality or availability per the CVSS metrics (base score 4.3...
CVE-2002-2201
CVE-2002-2201 affects Webmin ≤ 0.990, where the Printer Administration module allows remote attackers to execute arbitrary commands by supplying shell metacharacters in the printer name. This is a remote, unauthenticated issue with high impact (arbitrary code execution) as described in multiple s...
CVE-2002-2195
The CVE-2002-2195 issue affects Winamp 2.80 and earlier, where a buffer overflow in the version update check can be triggered by a long server response from a spoofed www.winamp.com host, allowing remote code execution. This is caused by improper handling of the server response in the update-chec...
CVE-2002-2172
CVE-2002-2172 affects Informed Designer and Filler 3.05. The issue is that newly allocated disk blocks are not zeroed out as an encrypted file grows, which may allow an attacker to obtain sensitive information. The connected Red Hat entry reiterates the same description. No explicit exploit detai...
CVE-2002-2155
CVE-2002-2155 affects Trillian (versions 0.725 and 0.73). The vulnerability is a format string issue in the error handling of IRC invite responses, enabling a remote attacker (IRC server) to cause arbitrary code execution by sending an invite to a channel whose name contains format specifiers. Do...
CVE-2002-2152
The CVE-2002-2152 entry concerns the Czech edition of Software602’s Web Server prior to 2002.0.02.0916. Affected component: web server software; vulnerability: remote attackers can gain administrator privileges by directly requesting /admin/, which is not password protected. Underlying cause: lac...
CVE-2002-2138
HP Advance Server/9000 on HP-UX 11.00 or 11.11 is affected by CVE-2002-2138. A malformed UDP packet to port 139 can cause a remote DoS (panic) in B.04.05–B.04.09. The connected sources do not provide exploitation details or a remediation. Monitoring for updates is advised.
CVE-2002-2202
Affected software: Outlook Express 6.0. Issue: The product does not delete messages from DBX mailbox files when a user empties the Deleted Items folder, allowing local users to read other users’ email. Evidence: Descriptions in Red Hat and NVD/JST documents corroborate this behavior. Impact: Loca...
CVE-2002-2154
CVE-2002-2154 describes a directory traversal vulnerability in the web server component Monkey HTTP Daemon 0.1.4. Remote attackers can read arbitrary files by using dot-dot sequences in the request path. The problem is documented across multiple feeds (NVD, Red Hat advisories, CVE listings) with ...
CVE-2002-2171
The CVE-2002-2171 entry describes a Cross-site Scripting (XSS) vulnerability in the web application acWEB versions 1.8 and 1.14 . The issue allows remote attackers to inject arbitrary HTML/script via a URL, potentially using a URL parameter such as a "%db" request. Documents do not provide specif...
CVE-2002-2170
The CVE affects BadBlue Enterprise Edition versions 1.7–1.74. The root cause is insufficient authentication when attempts to restrict administrator actions to localhost IP, allowing a remote attacker to trigger arbitrary code execution via an HTTP POST to the dir.hts page on localhost, which can ...
CVE-2002-2142
Technical details (affected products, versions, root cause, remediation) are not publicly provided in the connected documents; monitor for updates.
CVE-2002-2144
CVE-2002-2144 is a directory-traversal vulnerability in BearShare 4.0.5 and 4.0.6. The issue allows remote attackers to read files outside the web root by hex-encoding the "/" or "." characters. Connected sources confirm the affected software and the exploitation vector, but do not provide specif...
CVE-2002-2174
The CVE-2002-2174 entry concerns the Telnet proxy in 602Pro LAN SUITE 2002, which does not limit outstanding connections to the local host. This can allow remote attackers to cause denial of service through memory consumption by opening a large number of connections. The available sources identif...
CVE-2002-2198
CVE-2002-2198 describes a buffer overflow in ZMailer prior to 2.99.51_1 that can be triggered during HELO processing from an IPv6 address, potentially allowing remote attackers to execute arbitrary code. The component affected is ZMailer; the root cause is a buffer overflow that occurs when handl...
CVE-2002-2178
CVE-2002-2178 is a cross-site scripting (XSS) vulnerability in the article.php module of phpWebSite 0.8.3. The issue allows remote attackers to execute arbitrary JavaScript by supplying a crafted sid parameter, demonstrated via an IMG tag. The available connected documents confirm the affected pr...
