5507 matches found
CVE-2002-2144
Directory traversal vulnerability in BearShare 4.0.5 and 4.0.6 allows remote attackers to read files outside of the web root by hex-encoding the "/" forward slash or "." dot characters...
CVE-2002-2136
CVE-2002-2136 is rejected/not used; duplicate of CVE-2002-1590.
CVE-2002-2144
CVE-2002-2144 is a directory-traversal vulnerability in BearShare 4.0.5 and 4.0.6. The issue allows remote attackers to read files outside the web root by hex-encoding the "/" or "." characters. Connected sources confirm the affected software and the exploitation vector, but do not provide specif...
CVE-2002-2148
The CVE covers Lucent Ascend devices: MAX Router 5.0 and earlier, Pipeline Router 6.0.2 and earlier, and DSLTerminator. Affected component/behavior is a UDP port 9 discard handling that causes the device to leak sensitive interface details (hostname, MAC, IP) in the response when an attacker send...
CVE-2002-2153
The vulnerability CVE-2002-2153 is a format string flaw in the PL/SQL module’s administrative pages of Oracle Application Server 4.0.8 (and 4.0.8 2). The underlying issue is a format string vulnerability that allows remote attackers to execute arbitrary code. The affected component is the PL/SQL ...
CVE-2002-2171
The CVE-2002-2171 entry describes a Cross-site Scripting (XSS) vulnerability in the web application acWEB versions 1.8 and 1.14 . The issue allows remote attackers to inject arbitrary HTML/script via a URL, potentially using a URL parameter such as a "%db" request. Documents do not provide specif...
CVE-2002-2173
The CVE-2002-2173 entry describes a buffer overflow in the Trillian IRC module (versions 0.725 and 0.73). It allows remote attackers to execute arbitrary code via a long DCC Chat message. The available connected sources confirm the vulnerable component and impact but do not provide detailed root-...
CVE-2002-2174
The CVE-2002-2174 entry concerns the Telnet proxy in 602Pro LAN SUITE 2002, which does not limit outstanding connections to the local host. This can allow remote attackers to cause denial of service through memory consumption by opening a large number of connections. The available sources identif...
CVE-2002-2195
The CVE-2002-2195 issue affects Winamp 2.80 and earlier, where a buffer overflow in the version update check can be triggered by a long server response from a spoofed www.winamp.com host, allowing remote code execution. This is caused by improper handling of the server response in the update-chec...
CVE-2002-2199
CVE-2002-2199 concerns the Advanced Intrusion Detection Environment (AIDE). The default aide.conf on FreeBSD prior to 2002-08-28 with AIDE versions before 0.7_1 does not properly check subdirectories, enabling local users to bypass detection. Affected software/components: AIDE on FreeBSD; vulnera...
CVE-2002-2200
The CVE references Benjamin Lefevre Dobermann FORUM 0.5 and earlier, where remote attackers can include and execute malicious PHP files via the subpath variable in four PHP scripts: entete.php, enteteacceuil.php, index.php, and newtopic.php. This is a remote-code-injection scenario affecting that...
CVE-2002-2205
Webresolve 0.1.0 and earlier are affected by a buffer overflow when a client connects using an IP that resolves to a long hostname. This allows remote attackers to potentially execute arbitrary code on the server. The available documents confirm the vulnerability description but do not provide sp...
CVE-2002-2135
CVE-2002-2135 is a duplicate of CVE-2002-1618. The connected CVE-2002-1618 describes a vulnerability in HP-UX JFS/JFS3.1 and OnlineJFS where the sticky bit is not properly enforced on JFS filesystems (HP-UX 10.20, 11.00, 11.04), potentially allowing attackers to bypass filesystem-restrictions. Th...
CVE-2002-2175
The vulnerability (CVE-2002-2175) affects phpSquidPass prior to 0.2. It stems from an incomplete regular expression used to match usernames in the database, enabling remote authenticated attackers to delete other usernames by supplying a short username that matches the end of the targeted usernam...
CVE-2002-2204
CVE-2002-2204 affects the RPM Package Manager, specifically version 4.0.4 . The vulnerability stems from the default --checksig setting, which verifies a package’s signature validity without listing who signed it, enabling remote attackers to make a malicious package appear to originate from a tr...
CVE-2002-2172
CVE-2002-2172 affects Informed Designer and Filler 3.05. The issue is that newly allocated disk blocks are not zeroed out as an encrypted file grows, which may allow an attacker to obtain sensitive information. The connected Red Hat entry reiterates the same description. No explicit exploit detai...
CVE-2002-2161
Kerio Personal Firewall (KPF) 2.1.4 and earlier is affected by a denial-of-service vulnerability where remote attackers can trigger a SYN packet flood, causing the firewall to hang and consume CPU. The description available specifies the impact but does not provide deeper root-cause details, affe...
CVE-2002-2188
OpenBSD before 3.2 is affected by a local denial-of-service in the kernel caused by getrlimit(2) with invalid arguments, likely due to an integer signedness error. The impact is a kernel crash. Mitigation provided in the references includes patches such as 018_kernresource.patch (OpenBSD 3.1 comm...