CVE-2002-2165

Vulnerability summary: The IMHO Webmail module 0.97.3 and earlier for Roxen leaks the HTTP Referer from the browser’s previous login session in an error page, allowing local users to read another user’s inbox. The affected component is the Roxen IMHO Webmail module (versions up to 0.97.3); impact...

CVE-2002-2148

The CVE covers Lucent Ascend devices: MAX Router 5.0 and earlier, Pipeline Router 6.0.2 and earlier, and DSLTerminator. Affected component/behavior is a UDP port 9 discard handling that causes the device to leak sensitive interface details (hostname, MAC, IP) in the response when an attacker send...

CVE-2002-2144

Directory traversal vulnerability in BearShare 4.0.5 and 4.0.6 allows remote attackers to read files outside of the web root by hex-encoding the "/" forward slash or "." dot characters...

CVE-2002-2184

Digi-Net Technologies DigiChat 3.5 exposes user IP addresses via a Showip parameter in the chat applet. The underlying issue is an information disclosure that allows one chat user to obtain another user’s IP, constituting a partial confidentiality impact (IP leakage). The available sources confir...

CVE-2002-2155

Format string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and 0.73 allows remote IRC servers to execute arbitrary code via an invite to a channel with format string specifiers in the name...

CVE-2002-2204

CVE-2002-2204 affects the RPM Package Manager, specifically version 4.0.4 . The vulnerability stems from the default --checksig setting, which verifies a package’s signature validity without listing who signed it, enabling remote attackers to make a malicious package appear to originate from a tr...

CVE-2002-2150

Technical details for CVE-2002-2150 are not publicly available in the provided connected documents. The materials reproduce the description but do not specify affected products, versions, root cause, or remediation. Monitor for updates.

CVE-2002-2185

The CVE-2002-2185 issue concerns a flaw in IGMP processing in the Linux kernel that could let a local attacker cause a denial of service by sending an IGMP membership report addressed to a target’s Ethernet address rather than the multicast group address. Public advisories (e.g., RHSA-2006:0101 a...

CVE-2002-2175

The vulnerability (CVE-2002-2175) affects phpSquidPass prior to 0.2. It stems from an incomplete regular expression used to match usernames in the database, enabling remote authenticated attackers to delete other usernames by supplying a short username that matches the end of the targeted usernam...

CVE-2002-2187

Technical details are not publicly available in the provided documents for CVE-2002-2187; monitor for updates.

CVE-2002-2191

This CVE affects Lotus Domino 5.0.9a and earlier. Affected component: Domino HTTP banner handling; Root cause: when a non-existent .nsf database is requested, the HTTP banner leaks the Domino version, even with DominoNoBanner=1 enabled. Impact described as potential information disclosure of vers...

CVE-2002-2194

CVE-2002-2194 is a duplicate of CVE-2002-1589. The connected CVE-2002-1589 describes Solaris 8 vulnerability where the 0x02 bit (TEST, KMF_DEADBEEF, or deadbeef) in kmem_flags enables local users to trigger a denial of service (system panic). No exploitation status or patch details are provided i...

CVE-2002-2135

CVE-2002-2135 is a duplicate of CVE-2002-1618. The connected CVE-2002-1618 describes a vulnerability in HP-UX JFS/JFS3.1 and OnlineJFS where the sticky bit is not properly enforced on JFS filesystems (HP-UX 10.20, 11.00, 11.04), potentially allowing attackers to bypass filesystem-restrictions. Th...

CVE-2002-2194

...

CVE-2002-2135

...

CVE-2002-2169

CVE-2002-2169 affects AOL Instant Messenger (AIM) 4.5 and 4.7 on MacOS and Windows. A crafted URL containing a META HTTP-EQUIV="refresh" tag to an aim: URL triggers cross-site scripting, enabling remote attackers to perform unauthorized actions such as adding buddies and groups to a user’s buddy ...

CVE-2002-2147

...

CVE-2003-1251

CVE-2003-1251 affects the N/X Web Content Management System. The vulnerable scripts are (1) menu.inc.php, (2) datasets.php, and (3) mass_operations.inc.php (often misspelled as mass_opeations.inc.php). The vulnerability arises from a remote-file-include flaw where a c_path references a URL on a r...

CVE-2002-2126

IPD 1.2 (Integrity Protection Driver) contains a vulnerability in restrictEnabled where driver installation is delayed by 20 minutes. This timing window lets a local user set the system clock back and insert malicious code during installation. Affected: IPD 1.2; root cause: clock-based delay in i...

CVE-2002-2131

CVE-2002-2131 : Perl-HTTPd before 1.0.2 has a directory traversal flaw that lets remote attackers view arbitrary files via a .. in an unknown argument. The NVD entry assigns a CVSSv2 base score of 5.0 (Medium) with network access and low complexity; confidentiality impact is partial. Red Hat’s en...