CVE-2002-1987

The CVE-2002-1987 entry concerns Resin 2.1.2 where a directory traversal flaw in view_source.jsp allows remote attackers to read arbitrary files via a .. sequence. Affected component is Resin 2.1.2; root cause is input path traversal in the JSP renderer. Impact is partial confidentiality (read ac...

CVE-2002-2024

Horde IMP 2.2.7 is affected. The issue allows remote attackers to obtain the full web root pathname by requesting specific files (poppassd.php3, login.php3?reason=chpass2, spelling.php3, ldap.search.php3?ldap_serv=nonsense), with error messages leaking the information. Impact is information discl...

CVE-2002-2030

The CVE-2002-2030 entry affects SQLData Enterprise Server 3.0 and is a stack-based buffer overflow. The vulnerability allows a remote attacker to send a long HTTP request to trigger the overflow, with the impact of executing arbitrary code and causing a denial of service. The available connected ...

CVE-2002-1990

Vulnerability summary: CVE-2002-1990 affects Resin 2.0.5 through 2.1.2. The issue allows remote attackers to reveal physical path information by requesting the example Java class HelloServlet, enabling partial information disclosure. The available sources (NVD/Red Hat/CVE listings) confirm the af...

CVE-2002-2026

CVE-2002-2026 affects the BrowseFTP 1.62 client. A buffer overflow in the handling of FTP reply text (a long in-band “220” message) can allow a remote attacker to execute arbitrary code on the affected system. The vulnerability is described but public details such as affected platforms, specific ...

CVE-2002-2015

The CVE-2002-2015 entry concerns PostNuke 0.703, where PHP file inclusion in user.php can be triggered through the caselist parameter to include arbitrary files and potentially execute code. The root cause is a file inclusion weakness allowing remote attackers to supply a path to arbitrary files....

CVE-2002-2006

CVE-2002-2006 affects Apache Tomcat 4.0–4.1 and 3.0–3.3.1. The vulnerability is an information disclosure: the default Tomcat distribution exposes installation path and other sensitive info via the Sno o pServlet and TroubleShooter example servlets. The issue is explicitly described as informatio...

CVE-2002-1993

The CVE-2002-1993 entry affects WebBBS 4 and 5.0, where webbbs_post.pl fails to sanitize shell metacharacters in the followup parameter, enabling remote command execution. The underlying issue is improper handling of shell commands, allowing an attacker to run arbitrary commands on the affected s...

CVE-2002-2037

The CVE-2002-2037 entry concerns the Cisco Media Gateway Controller (MGC) in the following devices: SC2200 7.4 and earlier, VSC3000 9.1 and earlier, PGW 2200 9.1 and earlier, plus BAMS and VSPT. All run on default Solaris 2.6 installations with unnecessary services and without the latest security...

CVE-2002-2061

CVE-2002-2061 : Heap-based buffer overflow in Netscape 6.2.3 and Mozilla 1.0 and earlier allows remote attackers to crash client browsers and execute arbitrary code via a PNG image with large width/height values and an 8-bit or 16-bit alpha channel. Affected products and exact root cause are desc...

CVE-2002-2011

The CVE-2002-2011 entry concerns Faq-O-Matic’s fom.cgi (versions 2.711 and 2.712). The issue is a cross-site scripting (XSS) vulnerability where an attacker can inject arbitrary web script or HTML via the file parameter, potentially enabling/script execution in the victim’s browser. Documented im...

CVE-2002-2080

Floositek FTGate PRO 1.05 is affected by a denial-of-service vulnerability where an attacker can trigger memory and CPU exhaustion by sending a large number of RCPT TO: messages during an SMTP session. The impact is partial availability as per CVSS 2.0 metrics. No remediation details are provided...

CVE-2002-2085

CVE-2002-2085 - WWWeBBB Forum : Affected product: WWWeBBB Forum prior to or including version 3.82 beta. Vulnerable component: page.cgi. Issue: directory traversal via a .. in an HTTP request allows reading arbitrary files. Exploitability: network attack; evidence shows impact as partial confiden...

CVE-2002-2059

CVE-2002-2059 affects Intel motherboard models BIOS D845BG, D845HV, D845PT and D845WN. The BIOS passwords fail to properly restrict access to configuration information, enabling a local attacker to change the default boot device via the F8 key. The vulnerability stems from insufficient access con...

CVE-2002-2051

The CVE-2002-2051 entry concerns the processor_web plugin for ModLogAn (versions 0.5.0 through 0.7.11) when used with the splitby option. The vulnerability arises from a symlink-based attack targeting files specified as hostnames in a log file, allowing local attackers to overwrite arbitrary file...

CVE-2005-0564

Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers to execute arbitrary code via a .doc file with long font information...

CVE-2002-1832

Firestorm IDS versions 0.4.0–0.4.2 have a vulnerability in the ipopts decode functionality that allows remote attackers to cause a denial of service (crash) via certain IP options. The description (CVE-2002-1832) is reflected across NVD/CVE records; no remediation details are provided in the conn...

CVE-2002-1881

Macromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote attackers to cause a denial of service web browser crash via malformed content in a Flash Shockwave .SWF file, as demonstrated by by ROT13 encoding the body of the file but not the headers...

CVE-2002-1952

phpRank 1.8 does not properly check the return codes for MySQL operations when authenticating users, which could allow remote attackers to authenticate using a NULL password when database errors occur or if the database is unavailable...

CVE-2002-1925

CVE-2002-1925 affects Tiny Personal Firewall versions 3.0 through 3.0.6. The vulnerability arises when an administrator views the Log tab in the Personal Firewall Agent module, enabling remote attackers to cause a denial of service (crash) by sending SYN, UDP, ICMP, or TCP port scans. The availab...