CVE-2002-2018

CVE-2002-2018 affects SAS/Base 8.0. The affected component is sastcpd; a local user can set the NETENCRALG environment variable, which causes a segmentation fault and may grant privileges. Exploit details and remediation/patch information are not provided in the connected documents.

CVE-2002-2007

The CVE-2002-2007 vulnerability affects Apache Tomcat 3.2.3 and 3.2.4, where remote attackers could obtain sensitive information (directory listings and web root path) via erroneous HTTP requests to JSP-related paths (test/jsp, samples/jsp, examples/jsp) or the test/realPath.jsp servlet, leaking ...

CVE-2002-2017

The CVE-2002-2017 issue affects SAS/Base 8.0 where local users can cause arbitrary code execution by abusing sastcpd’s authprog environment variable to reference a malicious program, which is then executed by sastcpd. The root cause is the use of an environment variable (authprog) that dictates w...

CVE-2002-2079

CVE-2002-2079 concerns the mosix-protocol-stack in MOSIX 1.5.7, where remote attackers can cause a denial of service by sending malformed packets. The description is consistently reported across NVD/Red Hat/CVE listings and related references, indicating network-exposed impact without details on ...

CVE-2002-2021

Cross-site scripting XSS vulnerability in WoltLab Burning Board wbboard 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2002-2029

PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and possibly execute arbitrary programs via an HTTP request for php.exe with a filename in the query string...

CVE-2002-2035

SQL injection vulnerability in RealityScape MyLogin 2000 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 Username or 2 Password in the login form...

CVE-2002-2054

CVE-2002-2054 affects TeeKai Forum 1.2. Remote attackers can authenticate as the administrator and gain privileged web forum access by setting the valid_level cookie to admin. Exploitation details are not expanded in the provided documents beyond cookie manipulation; no remediation steps are spec...

CVE-2002-2010

CVE-2002-2010: The htsearch.cgi component of ht://Dig (htdig) versions 3.1.5, 3.1.6, and 3.2 is vulnerable to cross-site scripting (XSS) via the words parameter. An attacker can supply crafted input in the words parameter to cause arbitrary web script or HTML to be injected and executed in a vict...

CVE-2002-2042

CVE-2002-2042 affects the QNX RTOS, specifically versions 4.25 and 6.1.0, where the ptrace facility lets a program attach to privileged processes. This could enable a local user to modify running processes and potentially execute arbitrary code, constituting a local privilege escalation. The prov...

CVE-2002-2053

CVE-2002-2053 describes a vulnerability in Cisco IOS 12.1 where the Hot Standby Routing Protocol (HSRP) implementation, in conjunction with IRPAS, can be triggered when a router uses the same IP address as the HSRP interface. An attacker remotely induces a DoS by causing CPU consumption and a rou...

CVE-2002-2016

CVE-2002-2016 affects User-mode Linux (UML) 2.4.17-8, where the kernel address space is not restricted, enabling local users to execute arbitrary code. The connected documents confirm a local privilege escalation potential but do not provide any vendor-specific remediation or patch version. Explo...

CVE-2002-2002

CVE-2002-2002 : The vulnerability is a buffer overflow in libc of Compaq Tru64 releases 4.0F, 5.0, 5.1 and 5.1A triggered by unusually long environment variables (LANG, LOCPATH). This can allow an attacker to execute arbitrary code. The issue is rooted in the Tru64 libc handling of environment va...

CVE-2002-2036

Sun Ray Server Software (SRSS) 1.3 with Non-Smartcard Mobility (NSCM) enabled is affected. The issue allows remote attackers to log in as another user by running dtlogin on a system with XDMCP client support, indicating a network-exposed authentication bypass via XDMCP/X11 components. The core de...

CVE-2002-1999

The CVE-2002-1999 entry describes a vulnerability in HP Praesidium Webproxy 1.0 running on HP-UX 11.04 VVOS where remote attackers can cause the Webproxy to forward requests to the internal network by sending crafted HTTP requests. Affected product: HP Praesidium Webproxy 1.0 on HP-UX 11.04 VVOS....

CVE-2002-1988

CVE-2002-1988 affects Resin 2.1.1. The vulnerability allows remote attackers to cause a denial of service through a request containing long variables targeting non-existent resources, leading to memory consumption and a potential hang of the server. Root cause is tied to processing lengthy query/...

CVE-2002-1998

CVE-2002-1998 describes a buffer overflow in rpc.cmsd on SCO UnixWare 7.1.1 and Open UNIX 8.0.0 that allows remote attackers to execute arbitrary commands via a long parameter to rtable_create (procedure 21). Multiple sources (NVD, Red Hat advisory, CVE records) corroborate this description and t...

CVE-2002-2027

The CVE-2002-2027 entry concerns DOOW (Database of Our Owlish Wisdom) versions 0.1 through 0.2.1, where insufficient verification of user permissions enables remote attackers to perform unauthorized activities. The available documents confirm the affected product and the underlying issue (permiss...

CVE-2002-2077

The vulnerability CVE-2002-2077 affects the DCOM client on Windows 2000 prior to SP3. The issue arises because memory is not properly cleared before sending an "alter context" request, which may allow remote attackers to obtain sensitive information by sniffing the session. Connected Red Hat/CVE ...

CVE-2002-2083

CVE-2002-2083 : The vulnerability affects the Novell Netware client running on Windows 95. Local users can bypass login and open arbitrary files via the "What is this?" help feature accessible from the Netware login screen. The connected documents do not provide details on affected versions beyon...