CVE-2002-2100

Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content...

CVE-2002-2101

Microsoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when scripting is disabled, via an "about:" or "javascript:" URI in the href attribute of an "a" tag...

CVE-2002-2107

Cross-site scripting XSS vulnerability in the lookup script in Veridis OpenKeyServer OKS 1.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2002-2090

CVE-2002-2090 (Resin) affects Caucho Resin 2.1.1 to 2.1.2. The vulnerability enables an attacker to disclose the server’s root path by sending requests for MS-DOS device names (e.g., lpt9.xtp). OpenVAS and Red Hat entries corroborate an information-disclosure issue in Resin related to DOS device ...

CVE-2002-2114

Artekopia Netjuke before 1.0 b7 is affected by a remote-code-execution vulnerability. The issue arises when the section parameter is passed to an eval call, enabling an attacker to run arbitrary code on the web server. The connected documents confirm the affected product/version and the root caus...

CVE-2002-2119

CVE-2002-2119 affects Novell eDirectory 8.6.2 and 8.7, where use of case-insensitive passwords enables remote brute-force password guessing. Root cause: password comparisons are not case-sensitive. Impact: higher risk of successful credential guessing (remote). Connected sources corroborate the a...

CVE-2002-2105

CVE-2002-2105 affects Microsoft Windows XP. A local attacker can prevent the system from booting by corrupting the explorer.exe.manifest file, per the description. The entry specifies a local access vector, low complexity, no authentication required, and a partial impact on availability with no c...

CVE-2002-2092

CVE-2002-2092 describes a race condition in exec on OpenBSD ≤4.0, NetBSD ≤1.5.2, and FreeBSD ≤4.4 that lets local users gain privileges by attaching a debugger to a process before the kernel has confirmed setuid/setgid. The core issue is a window where privilege elevation can occur prior to prope...

CVE-2002-2112

CVE-2002-2112 affects RCA Digital Cable Modem DCM225 and DCM225E, and other DOCSIS-conforming modems, via SNMP using the default public community string. The underlying issue is exposure of MIB information to remote readers/writers, enabling read/write access to SNMP MIB data. The available docum...

CVE-2002-2097

The compression code in MaraDNS before 0.9.01 allows remote attackers to cause a denial of service via crafted DNS packets...

CVE-2002-2097

The CVE-2002-2097 entry concerns MaraDNS prior to 0.9.01, where the compression code can be abused by remote attackers to cause a denial of service through specially crafted DNS packets. The confirmed affected component is MaraDNS’s compression routine, with impact described as a remote DoS. The ...

CVE-2002-2094

CVE-2002-2094 affects the Hellbent vulnerability described in PT-2002-2814 for hellbent version 01. An attacker can determine the full path of the web root directory by sending a GET request with a relative path that includes the web root’s parent. If the parent is incorrect, the server returns a...

CVE-2002-2096

This CVE affects NetWare 5.1 and NetWare 6 where the Novell Remote Manager module (httpstk.nlm) has a buffer overflow vulnerability in which a long username or password can allow remote arbitrary code execution. Root cause is a buffer overflow in httpstk.nlm. The connected sources document this v...

CVE-2002-2122

Pointsec for PalmOS (before 1.2) stores a user PIN in plaintext in memory. This enables a local attacker who steals an unlocked Palm to retrieve the PIN via memory dump. The available connected documents confirm the product (Pointsec for PalmOS), the vulnerable behavior (plaintext PIN in memory),...

CVE-2002-2088

CVE-2002-2088 affects MOSIX Project clump/os 5.4, where a default VNC account is created without a password. This enables remote attackers to gain root access. The available documents corroborate the basic issue and impact (remote root access) but do not provide versioned patch information or exp...

CVE-2002-2121

CVE-2002-2121 affects SurfControl SuperScout Email filter for SMTP 3.5.1. The vulnerability allows a remote attacker to cause a denial-of-service crash by sending excessively long SMTP commands (HELO or RCPT TO), likely due to a buffer overflow. Exploit details and a concrete remediation are not ...

CVE-2002-2109

Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTPREFERER check and conduct unauthorized activities via 1 a blank referer, 2 a spoofed referer with a trusted domain/URL after the beginning of the referer, or 3 a spoofed referer with a trusted domain/URL in the beginni...

CVE-2002-2107

CVE-2002-2107 affects Veridis OpenKeyServer (OKS) 1.2. The vulnerability is a cross-site scripting (XSS) in the lookup script, exploitable by remote attackers, who can inject arbitrary web script or HTML through the search parameter. The connected documents confirm the same description across mul...

CVE-2002-2118

CVE-2002-2118 affects Blue World Lasso Web Data Engine 3.6.5. A buffer overflow in the URL handling allows remote attackers to trigger a denial of service. The available description confirms a network-facing vector via a long URL, with impact limited to DoS; no additional exploit details, affecte...

CVE-2002-2089

CVE-2002-2089 is a vulnerability in Solaris 9.0 where the rcp component suffers a buffer overflow, exploitable by a local user via a long command line argument, potentially allowing arbitrary code execution. The description across sources consistently identifies a local-privilege impact with the ...