CVE-2002-2032

The CVE-2002-2032 issue affects PHP-Nuke 5.4 and earlier, where sql_layer.php’s debugging feature is not restricted. This enables remote attackers to disclose SQL query information by setting sql_debug (e.g., in index.php or modules.php). Impact is information disclosure of all SQL queries, not r...

CVE-2002-2055

TeeKai Tracking Online XSS (CVE-2002-2055) affects the TeeKai Tracking Online web app (1.0) via userlog.php, where the id parameter is not properly sanitized, allowing a remote attacker to inject arbitrary script/HTML. Public sources reiterate an XSS risk; OpenVAS/Nessus mention that a crafted UR...

CVE-2002-2066

BestCrypt BCWipe versions 1.0.7 and 2.0 through 2.35.1 do not clear Windows alternate data streams (ADS) on NTFS-attached files, allowing recovery of securely deleted data. Connected sources confirm this vulnerability affects BCWipe on NTFS by failing to purge ADS, with implications of sensitive ...

CVE-2002-2003

The CVE-2002-2003 entry affects Compaq Tru64 systems: ypbind on Tru64 4.0F/4.0G/5.0A/5.1/5.1A allows a remote attacker to trigger a core dump by sending specific network packets generated by nmap. The connected records corroborate the core-dump impact and the network-based trigger across multiple...

CVE-2002-2049

configure for Dsniff 2.3, fragroute 1.2, and fragrouter 1.6, when downloaded from monkey.org on May 17, 2002, has been modified to contain a backdoor, which allows remote attackers to access the system...

CVE-2002-2086

CVE-2002-2086 confirms XSS vulnerabilities in the magicHTML component of SquirrelMail (versions before 1.2.6). Remote attackers could inject arbitrary web script or HTML through (1) an input field containing “<

CVE-2002-2012

CVE-2002-2012 concerns an unknown vulnerability in Apache 1.3.19 running on HP Secure OS for Linux 1.0. The connected documents provide a concrete context: remote attackers could trigger “unexpected results” by sending an HTTP request. The vulnerability impact is described as affecting availabili...

CVE-2002-2074

CVE-2002-2074 is an SQL injection vulnerability in Mailidx prior to 20020105. According to NVD, it allows remote attackers to execute arbitrary SQL commands via the search web page, with a base CVSS v2 score of 7.5 (HIGH) and network vector. Affected product/version detail is Mailidx before 20020...

CVE-2002-2063

CVE-2002-2063 affects AtGuard 3.2, where remote attackers can bypass firewall filters and run prohibited programs by renaming files to permitted filenames. The root cause is filename-based bypass of the filter mechanism. Available connected sources reiterate this description but do not provide an...

CVE-2002-2005

Technical details about CVE-2002-2005 are not publicly available in the provided documents. No concrete affected product/version, root cause, or remediation are described here. Monitor for updates from trusted sources.

CVE-2002-2022

The CVE-2002-2022 entry concerns Kaffe OpenVM 1.0.6 and earlier. Root cause: a format string vulnerability in the handling of forName attributes that can be triggered when a java.lang.NoClassDefFoundError is thrown, allowing a local attacker to execute arbitrary code. Affected component: the VM’s...

CVE-2002-2069

CVE-2002-2069 affects PGP 6.x and 7.x on Windows NTFS. The issue is failure to clear Windows alternate data streams attached to files, enabling recovery of deleted sensitive information. Connected Red Hat CVE entry corroborates the same description. No explicit exploit details or affected version...

CVE-2002-2072

The CVE-2002-2072 entry concerns Sun/Oracle Java VM behavior: Java code calling java.security.AccessController.doPrivileged with a null argument in JRE 1.2.2 and 1.3.1 can trigger a JVM crash, resulting in a denial of service. Impact is stated as JVM crash (availability impact). The available doc...

CVE-2002-2085

Directory traversal vulnerability in page.cgi of WWWeBBB Forum 3.82 beta and earlier allows remote attackers to read arbitrary files via a .. dot dot in an HTTP request...

CVE-2002-1992

The CVE-2002-1992 entry concerns ColdFusion MX: a buffer overflow in jrun.dll when ColdFusion runs with IIS 4/5, enabling remote denial of service via either a long template file name or a long HTTP header. Affected software is ColdFusion MX (jrun.dll) on IIS environments. The underlying cause is...

CVE-2002-2021

CVE-2002-2021 affects WoltLab Burning Board (wbboard) 1.1.1 with a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the message parameter. Multiple connected sources (Red Hat, CVE records, NVD/NIST, CVE List) corroborate the issue. T...

CVE-2002-2041

CVE-2002-2041 affects RTOS 6.1.0 due to multiple buffer overflows that let a local attacker execute arbitrary code. Exploitation vectors are (1) a long ABLANG environment variable in phlocale and (2) a long -u option to pkg-installer. CVSSv2 base score is 7.2 (HIGH); impact is complete confidenti...

CVE-2002-2073

Cross-site scripting (XSS) vulnerability in Microsoft Site Server 3.0 for Windows NT 4.0 affects the default ASP page Default.asp (ctr parameter) and formslogin.asp (query string). The issue allows remote attackers to inject arbitrary web scripts or HTML. Root cause is insufficient sanitization o...

CVE-2002-2023

The CVE-2002-2023 entry concerns the beep2 package (versions 1.0, 1.1, 1.2). The vulnerability arises when the program is installed with setuid root, allowing local users to read arbitrary files via unknown attack vectors. Evidence across multiple sources identifies the affected function (get_par...

CVE-2002-2050

CVE-2002-2050 affects the ModLogAn processor_web plugin (versions 0.5.0 through 0.7.11) where the splitby option enables a directory traversal via a .. in the hostname of a log entry. This can allow local users to overwrite arbitrary files. The available references do not provide exploit details,...