CVE-2002-2194

CVE-2002-2194 is a duplicate of CVE-2002-1589. The connected CVE-2002-1589 describes Solaris 8 vulnerability where the 0x02 bit (TEST, KMF_DEADBEEF, or deadbeef) in kmem_flags enables local users to trigger a denial of service (system panic). No exploitation status or patch details are provided i...

CVE-2002-2194

...

CVE-2002-2198

CVE-2002-2198 describes a buffer overflow in ZMailer prior to 2.99.51_1 that can be triggered during HELO processing from an IPv6 address, potentially allowing remote attackers to execute arbitrary code. The component affected is ZMailer; the root cause is a buffer overflow that occurs when handl...

CVE-2002-2202

Affected software: Outlook Express 6.0. Issue: The product does not delete messages from DBX mailbox files when a user empties the Deleted Items folder, allowing local users to read other users’ email. Evidence: Descriptions in Red Hat and NVD/JST documents corroborate this behavior. Impact: Loca...

CVE-2002-2183

phpShare.php in phpShare before 0.6 beta 3 allows remote attackers to include and execute arbitrary PHP scripts from remote servers, per CVE-2002-2183. Affected software appears to be phpShare maintained prior to 0.6 beta 3. The vulnerability is described as an remote inclusion/execution issue in...

CVE-2002-2137

CVE-2002-2137 affects GlobalSunTech Wireless Access Points (including WISECOM GL2422AP-0T) and certain OEMs (D-Link DWL-900AP+ B1 2.1/2.2, ALLOY GL-2422AP-S, EUSSO GL2422-AP, LINKSYS WAP11-V2.2). The issue allows remote attackers to obtain sensitive information (WEP keys, administrator password, ...

CVE-2002-2184

Digi-Net Technologies DigiChat 3.5 exposes user IP addresses via a Showip parameter in the chat applet. The underlying issue is an information disclosure that allows one chat user to obtain another user’s IP, constituting a partial confidentiality impact (IP leakage). The available sources confir...

CVE-2002-2191

This CVE affects Lotus Domino 5.0.9a and earlier. Affected component: Domino HTTP banner handling; Root cause: when a non-existent .nsf database is requested, the HTTP banner leaks the Domino version, even with DominoNoBanner=1 enabled. Impact described as potential information disclosure of vers...

CVE-2002-2164

CVE-2002-2164 describes a buffer overflow in Microsoft Outlook Express 5.0, 5.5, and 6.0 that allows remote attackers to cause a denial of service by sending a long link. The connected sources (Red Hat, CVE listings, and NVD) corroborate a vulnerability in handling abnormally long link reference...

CVE-2002-2146

CVE-2002-2146 affects Savant Web Server prior to 3.2? (Savant Web Server 3.1 and earlier) through the CGI binary cgitest.exe . The issue is described as a buffer overflow in the CGI that can be triggered by a long HTTP request, leading to a denial of service via crash; some sources also indicate ...

CVE-2002-2147

...

CVE-2002-2201

CVE-2002-2201 affects Webmin ≤ 0.990, where the Printer Administration module allows remote attackers to execute arbitrary commands by supplying shell metacharacters in the printer name. This is a remote, unauthenticated issue with high impact (arbitrary code execution) as described in multiple s...

CVE-2002-2175

The vulnerability (CVE-2002-2175) affects phpSquidPass prior to 0.2. It stems from an incomplete regular expression used to match usernames in the database, enabling remote authenticated attackers to delete other usernames by supplying a short username that matches the end of the targeted usernam...

CVE-2002-2174

The CVE-2002-2174 entry concerns the Telnet proxy in 602Pro LAN SUITE 2002, which does not limit outstanding connections to the local host. This can allow remote attackers to cause denial of service through memory consumption by opening a large number of connections. The available sources identif...

CVE-2002-2199

CVE-2002-2199 concerns the Advanced Intrusion Detection Environment (AIDE). The default aide.conf on FreeBSD prior to 2002-08-28 with AIDE versions before 0.7_1 does not properly check subdirectories, enabling local users to bypass detection. Affected software/components: AIDE on FreeBSD; vulnera...

CVE-2002-2186

Technical details about CVE-2002-2186 are not publicly provided in the connected documents. Monitor for updates.

CVE-2002-2189

CVE-2002-2189 concerns a cross-site scripting (XSS) vulnerability in ActiveXperts Software ActiveWebserver. The affected component is the ActiveWebserver, where an attacker can cause the execution of arbitrary web script by enticing a user to click a crafted link. The Red Hat and CVE Registry ent...

CVE-2002-2203

Technical details of CVE-2002-2203 are not publicly available in the provided documents; no concrete information on affected products, root cause, or remediation is included. Monitor for updates.

CVE-2002-2185

The CVE-2002-2185 issue concerns a flaw in IGMP processing in the Linux kernel that could let a local attacker cause a denial of service by sending an IGMP membership report addressed to a target’s Ethernet address rather than the multicast group address. Public advisories (e.g., RHSA-2006:0101 a...

CVE-2002-2197

CVE-2002-2197 affects Sun Solaris 8.0. A local user can trigger a kernel panic by running a program that uses /dev/poll, causing a NULL pointer dereference in the kernel. The provided connected documents confirm the vulnerable component and the root cause (NULL pointer dereference via /dev/poll),...