CVE-2002-2003

ypbind in Compaq Tru64 4.0F, 4.0G, 5.0A, 5.1 and 5.1A allows remote attackers to cause the process to core dump via certain network packets generated by nmap...

CVE-2002-2003

The CVE-2002-2003 entry affects Compaq Tru64 systems: ypbind on Tru64 4.0F/4.0G/5.0A/5.1/5.1A allows a remote attacker to trigger a core dump by sending specific network packets generated by nmap. The connected records corroborate the core-dump impact and the network-based trigger across multiple...

CVE-2002-2081

CVE-2002-2081 affects cphost.dll in Microsoft Site Server 3.0. A remote attacker can trigger a denial of service by sending an HTTP POST with a long TargetURL parameter, causing Site Server to abort and leaving the uploaded file in c:\temp. The available connected documents confirm the component ...

CVE-2002-2058

TeeKai Tracking Online 1.0 is affected by a weak encryption flaw in the stored web usage statistics (data/userlog/log.txt) that enables remote attackers to identify visiting IPs by dividing each octet by the MD5 hash of '20'. The Red Hat advisory and PT-Security notes corroborate the vulnerabilit...

CVE-2002-2072

java.security.AccessController in Sun Java Virtual Machine JVM in JRE 1.2.2 and 1.3.1 allows remote attackers to cause a denial of service JVM crash via a Java program that calls the doPrivileged method with a null argument...

CVE-2002-2079

mosix-protocol-stack in Multicomputer Operating System for UnIX MOSIX 1.5.7 allows remote attackers to cause a denial of service via malformed packets...

CVE-2002-2017

sastcpd in SAS/Base 8.0 allows local users to execute arbitrary code by setting the authprog environment variable to reference a malicious program, which is then executed by sastcpd...

CVE-2002-2035

RealityScape MyLogin 2000 1.0.0 and earlier is affected by a SQL injection vulnerability in the login form (Username and Password fields). The issue allows remote attackers to manipulate SQL commands executed by the application, enabling potential unauthorized access or data exposure. The availab...

CVE-2002-2056

CVE-2002-2056 describes a cross-site scripting (XSS) vulnerability in TeeKai Forum 1.2, exploitable via the valid_username_online cookie to inject arbitrary script/HTML. The NVD entry assigns a MEDIUM base CVSS v2 score (AV:N/AC:M/Au:N/C:N/I:P/A:N). No exploit details or specific remediation are ...

CVE-2002-2020

The CVE-2002-2020 entry concerns Netgear RP114 Cable/DSL Web Safe Router with Firmware 3.26. According to the provided documents, the vulnerability arises from a default administrator password and the acceptance of admin logins on the external interface, enabling remote attackers to gain privileg...

CVE-2002-2045

CVE-2002-2045 affects x-stat 2.3 and earlier, via x_stat_admin.php. The flaw allows remote attackers to (1) execute PHP commands (e.g., phpinfo) or (2) reveal the web server’s full path through an invalid action parameter that leaks the pathname in an error message. The NVD CVSS v2 score is 6.4 (...

CVE-2002-1989

Resin 2.1.1 is affected by CVE-2002-1989. The vulnerability allows remote attackers to cause a denial of service by issuing multiple URL requests that include the DOS name “CON” and a registered file extension such as .jsp or .xtp, leading to thread and connection consumption. The available docum...

CVE-2002-1996

Technical details about CVE-2002-1996 are not publicly provided in the supplied documents; no concrete fix, affected products, or exploit information is included. Monitor for updates.

CVE-2002-2008

CVE-2002-2008 concerns Apache Tomcat 4.0.3 for Windows. The vulnerability allows a remote attacker to disclose the web root path by requesting a resource that does not exist (e.g., lpt9), causing the server to leak information in the error page. This is an information-disclosure in the error hand...

CVE-2002-2064

PhpWebGallery 1.0 is affected by CVE-2002-2064. isadmin.php allows remote attackers to gain administrative access by setting the photo_login cookie to the value “pseudo,” effectively bypassing authentication. Root cause is improper cookie-based authorization in isadmin.php. The vulnerability can ...

CVE-2002-2033

FAQManager’s FAQManager CGI (faqmanager.cgi) is affected by CVE-2002-2033. The vulnerability occurs in version 2.2.5 and earlier, where an attacker can read arbitrary files on the web server by supplying a filename in the toc parameter with a trailing null character (%00). This is a web-applicati...

CVE-2002-2043

CVE-2002-2043 affects Cyrus SASL patches for LDAP and MySQL authentication (versions 1.5.24 and 1.5.27). The vulnerability is a SQL injection in the authentication patch that enables remote attackers to execute arbitrary SQL commands and log in as arbitrary POP mail users via the password. Exploi...

CVE-2002-2044

CVE-2002-2044 describes a cross-site scripting (XSS) vulnerability in x-stat (version 2.3 and earlier) affecting the file x_stat_admin.php . The issue arises when a parameter to the phpinfo action is not properly sanitized, allowing remote attackers to inject arbitrary web script or HTML. Affecte...

CVE-2002-2001

The CVE relates to jmcce 1.3.8 on Mandrake 8.1. It creates log files in /tmp with predictable names, enabling a local user to perform a symlink attack to overwrite arbitrary files. Root-level risk is implied by Mandrake advisory context (jmcce runs with elevated privileges and writes logs to a wo...

CVE-2002-2040

CVE-2002-2040 affects QNX RTOS versions 4.25 and 6.1.0, where the phrafx and phgrafx-startup programs fail to drop privileges before running the system command. This allows local users to execute arbitrary commands by manipulating the PATH to reference a malicious crttrap program. Impact is descr...