5507 matches found
CVE-2002-2187
Technical details are not publicly available in the provided documents for CVE-2002-2187; monitor for updates.
CVE-2002-2159
The CVE affects Linksys EtherFast Cable/DSL BEFSR11, BEFSR41 and BEFSRU31 with firmware 1.42.7, where installing this upgrade opens TCP port 5678 for remote administration even when Block WAN and Remote Admin are disabled. This creates a potential for remote access by attackers. Publicly availabl...
CVE-2002-2165
Vulnerability summary: The IMHO Webmail module 0.97.3 and earlier for Roxen leaks the HTTP Referer from the browser’s previous login session in an error page, allowing local users to read another user’s inbox. The affected component is the Roxen IMHO Webmail module (versions up to 0.97.3); impact...
CVE-2002-2141
BeA WebLogic Server and Express 7.0/7.0.0.1 running Servlets and EJB on multiple servers are vulnerable to a flaw that, when an application is undeployed on one server, causes removal of security constraints and roles on all servers for affected Servlets or EJBs. This could enable unauthorized ac...
CVE-2002-2143
The CVE-2002-2143 issue affects MySimple News 1.0 where the admin.html page stores the administrative password in plaintext, enabling remote attackers to gain unauthorized access by viewing the page source. According to the sources, this exposes partial confidentiality, integrity, and availabilit...
CVE-2002-2177
BEA WebLogic Server and Express 6.1–7.0.0.1 are affected by a vulnerability in how HTTP requests are buffered, which can cause the same response to be sent for two different requests. This could enable remote attackers to view information intended for other users. The issue is described across mu...
CVE-2002-2138
HP Advance Server/9000 on HP-UX 11.00 or 11.11 is affected by CVE-2002-2138. A malformed UDP packet to port 139 can cause a remote DoS (panic) in B.04.05–B.04.09. The connected sources do not provide exploitation details or a remediation. Monitoring for updates is advised.
CVE-2002-2149
CVE-2002-2149 describes a buffer overflow in Lucent Access Point 300, 600, and 1500 Service Routers. A remote attacker can cause a denial-of-service reboot by sending a long HTTP request to the device’s administrative interface. Documented in NVD/Red Hat CVE entries; CVSS v2 base score 5.0 (Netwo...
CVE-2002-2170
The CVE affects BadBlue Enterprise Edition versions 1.7–1.74. The root cause is insufficient authentication when attempts to restrict administrator actions to localhost IP, allowing a remote attacker to trigger arbitrary code execution via an HTTP POST to the dir.hts page on localhost, which can ...
CVE-2002-2178
CVE-2002-2178 is a cross-site scripting (XSS) vulnerability in the article.php module of phpWebSite 0.8.3. The issue allows remote attackers to execute arbitrary JavaScript by supplying a crafted sid parameter, demonstrated via an IMG tag. The available connected documents confirm the affected pr...
CVE-2002-2180
OpenBSD 2.0–3.1 setitimer(2) syscall contains input validation issues that allow a local user to write to kernel memory and potentially gain root privileges. The root cause is described as an argument-check problem, possibly related to an integer signedness error. Affected component: setitimer(2)...
CVE-2002-2196
Samba prior to 2.2.5 is affected by a buffer overflow in termination of the enum_csc_policy data structure, potentially allowing remote code execution. This is reflected across multiple sources (including Red Hat, Debian, CVE records, OSV/OSS listings, and OpenVAS/Nessus entries). Severity is lis...
CVE-2002-2160
Summary: CVE-2002-2160 is a duplicate of CVE-2002-1798 (DO NOT USE THIS CANDIDATE NUMBER). The connected records describe the underlying issue in MidiCart PHP, PHP Plus, and PHP Maxi. Affected software (as documented): MidiCart PHP, PHP Plus, and PHP Maxi. Vulnerability details (from connected CV...
CVE-2002-2206
The CVE-2002-2206 entry concerns Norton AntiVirus 2001’s POP3 proxy service (POPROXY.EXE). The vulnerability arises when a local user uses a long username containing multiple /localhost entries, leading to CPU exhaustion and a crash (denial of service). The connected sources reiterate the same af...
CVE-2002-2152
The CVE-2002-2152 entry concerns the Czech edition of Software602’s Web Server prior to 2002.0.02.0916. Affected component: web server software; vulnerability: remote attackers can gain administrator privileges by directly requesting /admin/, which is not password protected. Underlying cause: lac...
CVE-2002-2176
The CVE-2002-2176 entry concerns Gender MOD 1.1.3, where a SQL injection vulnerability in the User Profile page (via the user_level parameter) allows remote attackers to gain administrative access. The vulnerability stems from improper handling of user_level input in the profile interface, enabli...
CVE-2002-2190
The CVE relates to ArtsCore Studios CuteCast Forum 1.2, where user passwords are stored in plaintext under the web document root. The underlying vulnerability is improper password storage, enabling remote attackers to retrieve passwords by requesting a ".user" file over HTTP. The available source...
CVE-2002-2150
Technical details for CVE-2002-2150 are not publicly available in the provided connected documents. The materials reproduce the description but do not specify affected products, versions, root cause, or remediation. Monitor for updates.