CVE-2002-1573

CVE-2002-1573 refers to an unspecified vulnerability in the Linux kernel’s pcilynx ieee1394 (pcilynx.c) driver, affected in kernels before 2.4.20 and related to wrap handling. The initial description notes unknown impact and attack vectors; public detail is limited. Public references describe the...

CVE-2002-1572

CVE-2002-1572 describes a signed integer overflow in the Linux kernel’s bttv_read function of the bttv-driver.c (pre-2.4.20). The CVE entry notes the impact as unknown. Connected sources indicate a Red Hat kernel update (RHSA-2002:227) addressing kernel vulnerabilities, suggesting a remediation v...

CVE-2002-1572

Signed integer overflow in the bttvread function in the bttv driver bttv-driver.c in Linux kernel before 2.4.20 has unknown impact and attack vectors...

CVE-2002-1571

CVE-2002-1571 affects the Linux 2.4 kernel pre-2.4.19. The root cause is that the fninit instruction is assumed to clear all registers, which can cause an information leak on processors that do not clear all relevant SSE registers. The practical impact is potential leakage of information (partial...

CVE-2006-0368

Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allow remote attackers to 1 cause a denial of service CPU and memory consumption via a large number of open TCP connections to port 2000 and 2 cause a denial of service fill the Windows Service...

Memory corruption

Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allow remote attackers to 1 cause a denial of service CPU and memory consumption via a large number of open TCP connections to port 2000 and 2 cause a denial of service fill the Windows Service...

CVE-2006-0368

CVE-2006-0368 affects Cisco CallManager versions 3.2 and earlier; 3.3 before 3.3(5)SR1; 4.0 before 4.0(2a)SR2c; and 4.1 before 4.1(3)SR2. It enables remote attackers to cause denial of service by opening a large number of TCP connections to port 2000 (CPU/memory consumption) and to ports 2001, 20...

CVE-2006-0368: Undefined Security Weakness

Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allow remote attackers to 1 cause a denial of service CPU and memory consumption via a large number of open TCP connections to port 2000 and 2 cause a denial of service fill the Windows Service...

RHEL 3 : kernel (RHSA-2006:0140)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

CVE-2002-2208

CVE-2002-2208 affects Cisco IOS (11.3–12.2) and related products. It allows remote attackers to cause a denial of service by sending a large number of spoofed EIGRP neighbor announcements, triggering an ARP storm on the local network. The issue is tied to the EIGRP implementation; Cisco issued a ...

CVE-2005-4131

Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument to the msvcrt.memmove...

CVE-2002-2169

CVE-2002-2169 affects AOL Instant Messenger (AIM) 4.5 and 4.7 on MacOS and Windows. A crafted URL containing a META HTTP-EQUIV="refresh" tag to an aim: URL triggers cross-site scripting, enabling remote attackers to perform unauthorized actions such as adding buddies and groups to a user’s buddy ...

CVE-2002-2166

CVE-2002-2166 is an XSS vulnerability reported in FuseTalk 2.0 and 3.0. The public records indicate that remote attackers could inject arbitrary HTML/script into pages, potentially affecting user data integrity without affecting confidentiality or availability per the CVSS metrics (base score 4.3...

CVE-2002-2207

CVE-2002-2207 describes a buffer overflow in ssldump (version 0.9b2 and earlier) when running in decryption mode, allowing remote attackers to execute arbitrary code via a long RSA PreMasterSecret. The vulnerability is triggered over the network and is rated high severity (CVSS 2.0: AV:N/AC:L/Au:...

CVE-2002-2155

CVE-2002-2155 affects Trillian (versions 0.725 and 0.73). The vulnerability is a format string issue in the error handling of IRC invite responses, enabling a remote attacker (IRC server) to cause arbitrary code execution by sending an invite to a channel whose name contains format specifiers. Do...

CVE-2002-2193

CVE-2002-2193 describes a cross-site scripting (XSS) vulnerability in Mojo Mail 2.7, specifically in the mojo.cgi component. The flaw allows remote attackers to inject arbitrary web script via the email parameter. Documented impact is limited to partial integrity impact and does not indicate user...

CVE-2002-2145

CVE-2002-2145 affects Savant Web Server 3.1 and earlier. The vulnerability allows remote attackers to bypass authentication for password-protected user folders by requesting a URL ending with a hex-encoded space (%20) followed by a dot (%2e). The connected Red Hat and CVE records document the sam...

CVE-2002-2189

Cross-site scripting XSS vulnerability in ActiveXperts Software ActiveWebserver allows remote attackers to execute arbitrary web script via a link...

CVE-2002-2155

Format string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and 0.73 allows remote IRC servers to execute arbitrary code via an invite to a channel with format string specifiers in the name...

CVE-2002-2192

CVE-2002-2192 is an XSS vulnerability affecting Perception LiteServe 2.0.1. The flaw allows remote attackers to execute arbitrary web script via (1) the Host header when DNS wildcards are supported, or (2) the query string in a "dir" request to indexed folders. Public references confirm the same ...