TFTP Directory Traversal Vulnerabilities - Active Check

The TFTP Trivial File Transfer Protocol allows remote users to read files without having to log in. This may be a big security flaw, especially if tftpd the TFTP server is not well configured by the admin of the remote host. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might b...

Unchecked Buffer in Windows Help (Q323255)

An unchecked buffer in Windows help could allow an attacker to could gain control over user SPDX-FileCopyrightText: 2002 SECNAP Network Security, LLC Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2002-2124

The CVE-2002-2124 entry concerns nylon 0.2. The vulnerability arises in the recvn and sendn functions which do not handle a recv() returning 0, allowing a remote attacker to trigger a denial of service (infinite loop and high CPU usage) by closing the connection during recv. The connected records...

ASP-Nuke伪造Cookie导致信息泄露漏洞

BugCVE: CVE-2002-0523 BUGTRAQ: 4489 ASP-Nuke存在设计问题，可导致攻击者获得主机相关敏感信息。 攻击者可以本地修改Cookie信息并提交，导致主机返回所有当前登陆用户列表或者返回包含WEB ROOT路径的错误信息。 攻击者可以利用这些信息进一步对系统进行攻击。 ASP-Nuke RC1-RC2 厂商补丁： ASP-Nuke -------- 目前厂商已经在最新版本的软件中修补了此漏洞，请到厂商的主页获取最新版本： http://www.asp-nuke.com/downloads.asp...

CVE-2002-2123

The CVE-2002-2123 entry concerns Gallery 1.3.2’s publish_xp_docs.php PHP remote file inclusion vulnerability. An attacker can specify a URL to an init.php in the GALLERY_BASEDIR parameter, enabling arbitrary PHP code execution on the affected system. The affected software/function is publish_xp_d...

CVE-2002-2101

CVE-2002-2101 affects Microsoft Outlook 2002. The vulnerability allows remote attackers to execute arbitrary JavaScript code even when scripting is disabled, by abusing an about: or javascript: URI in the href attribute of an tag. Connected documents reiterate the same description across NVD/Red...

CVE-2002-2103

CVE-2002-2103 affects Apache before 1.3.24. When writing to the log file, Apache may record a spoofed hostname from reverse DNS for an IP address, even if a double-reverse lookup fails, allowing remote attackers to hide the original source of activities. The provided documents do not include expl...

CVE-2002-2101

Microsoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when scripting is disabled, via an "about:" or "javascript:" URI in the href attribute of an "a" tag...

CVE-2002-2091

CVE-2002-2091 affects Deception Finger Daemon (decfingerd) 0.7, exposing a format-string vulnerability in the username field of a finger request that could allow remote code execution. The issue is documented across multiple sources (e.g., NVD, Red Hat advisory, CVE list) with the impact describe...

CVE-2002-2092

CVE-2002-2092 describes a race condition in exec on OpenBSD ≤4.0, NetBSD ≤1.5.2, and FreeBSD ≤4.4 that lets local users gain privileges by attaching a debugger to a process before the kernel has confirmed setuid/setgid. The core issue is a window where privilege elevation can occur prior to prope...

CVE-2002-2093

The CVE-2002-2093 entry concerns SGI O2/IRIX 6.5, where the Video Control Panel can permit a user to gain a console session when the Default Input is set to “Output Video.” Attacks involve running videoout followed by videoin to access a console. The available documents confirm the affected produ...

CVE-2002-2095

CVE-2002-2095 affects the Joe Testa hellbent 01 webserver. The vulnerability allows attackers to read files listed in the hellbent.prefs by creating a similarly named file in the web root (e.g., using index.webroot or index.ipallow). The NVD entry reports a network-accessible issue with partial c...

CVE-2002-2099

The entry concerns CVE-2002-2099 affecting the GNU DataDisplay Debugger (DDD) 3.3.1. The vulnerability is a buffer overflow triggered by a long HOME environment variable, allowing a local user to execute arbitrary code and possibly gain privileges. The root cause is an overflow in DDD’s handling ...

CVE-2002-2111

The CVE-2002-2111 issue affects fwmon prior to version 1.0.10. The root cause is that the kernel can be made to process a large packet, which leads to a denial of service (crash). Impact is a local service disruption where remote input triggers a crash via a crafted large packet; exploitation det...

CVE-2002-2118

CVE-2002-2118 affects Blue World Lasso Web Data Engine 3.6.5. A buffer overflow in the URL handling allows remote attackers to trigger a denial of service. The available description confirms a network-facing vector via a long URL, with impact limited to DoS; no additional exploit details, affecte...

CVE-2002-2121

CVE-2002-2121 affects SurfControl SuperScout Email filter for SMTP 3.5.1. The vulnerability allows a remote attacker to cause a denial-of-service crash by sending excessively long SMTP commands (HELO or RCPT TO), likely due to a buffer overflow. Exploit details and a concrete remediation are not ...

CVE-2002-2107

Cross-site scripting XSS vulnerability in the lookup script in Veridis OpenKeyServer OKS 1.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2002-2087

The CVE-2002-2087 entry describes a buffer overflow in Borland InterBase 6.0 that allows local users to execute arbitrary code by supplying a long INTERBASE environment variable when invoking gds_drop, gds_lock_mgr, or gds_inet_server. This is documented across multiple feeds (Red Hat, CVE listin...

CVE-2002-2097

The CVE-2002-2097 entry concerns MaraDNS prior to 0.9.01, where the compression code can be abused by remote attackers to cause a denial of service through specially crafted DNS packets. The confirmed affected component is MaraDNS’s compression routine, with impact described as a remote DoS. The ...

CVE-2002-2096

This CVE affects NetWare 5.1 and NetWare 6 where the Novell Remote Manager module (httpstk.nlm) has a buffer overflow vulnerability in which a long username or password can allow remote arbitrary code execution. Root cause is a buffer overflow in httpstk.nlm. The connected sources document this v...