CVE-2002-2094

CVE-2002-2094 affects the Hellbent vulnerability described in PT-2002-2814 for hellbent version 01. An attacker can determine the full path of the web root directory by sending a GET request with a relative path that includes the web root’s parent. If the parent is incorrect, the server returns a...

CVE-2002-2114

Artekopia Netjuke before 1.0 b7 is affected by a remote-code-execution vulnerability. The issue arises when the section parameter is passed to an eval call, enabling an attacker to run arbitrary code on the web server. The connected documents confirm the affected product/version and the root caus...

CVE-2002-2107

CVE-2002-2107 affects Veridis OpenKeyServer (OKS) 1.2. The vulnerability is a cross-site scripting (XSS) in the lookup script, exploitable by remote attackers, who can inject arbitrary web script or HTML through the search parameter. The connected documents confirm the same description across mul...

CVE-2002-2122

Pointsec for PalmOS (before 1.2) stores a user PIN in plaintext in memory. This enables a local attacker who steals an unlocked Palm to retrieve the PIN via memory dump. The available connected documents confirm the product (Pointsec for PalmOS), the vulnerable behavior (plaintext PIN in memory),...

CVE-2002-2105

CVE-2002-2105 affects Microsoft Windows XP. A local attacker can prevent the system from booting by corrupting the explorer.exe.manifest file, per the description. The entry specifies a local access vector, low complexity, no authentication required, and a partial impact on availability with no c...

CVE-2002-2097

Removed by vendor...

CVE-2002-2088

CVE-2002-2088 affects MOSIX Project clump/os 5.4, where a default VNC account is created without a password. This enables remote attackers to gain root access. The available documents corroborate the basic issue and impact (remote root access) but do not provide versioned patch information or exp...

CVE-2002-2089

CVE-2002-2089 is a vulnerability in Solaris 9.0 where the rcp component suffers a buffer overflow, exploitable by a local user via a long command line argument, potentially allowing arbitrary code execution. The description across sources consistently identifies a local-privilege impact with the ...

CVE-2002-2119

CVE-2002-2119 affects Novell eDirectory 8.6.2 and 8.7, where use of case-insensitive passwords enables remote brute-force password guessing. Root cause: password comparisons are not case-sensitive. Impact: higher risk of successful credential guessing (remote). Connected sources corroborate the a...

CVE-2002-2104

The CVE-2002-2104 entry concerns graph.php in Ganglia PHP RRD Web Client 1.0.2, where the command parameter is passed to passthru, enabling remote command execution. Affected software is Ganglia PHP RRD Web Client 1.0.2; the underlying issue is unsafely handling the command parameter in passthru,...

CVE-2002-2098

The CVE-2002-2098 entry describes a buffer overflow in axspawn.c within Axspawn-pam prior to 0.2.1a, allowing remote code execution via large packets. The issue affects the Axspawn-pam component and is caused by unsafe handling in axspawn.c. Impact is described as partial confidentiality, integri...

CVE-2002-2120

CVE-2002-2120 affects QNX RTOS 4.25. The vulnerability consists of multiple buffer overflows in the OS kernel/user interfaces that can be triggered by long filename arguments to (1) Watcom or (2) int10, potentially allowing arbitrary code execution. Public references likewise describe buffer over...

CVE-2002-2100

Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content...

CVE-2002-2109

Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTPREFERER check and conduct unauthorized activities via 1 a blank referer, 2 a spoofed referer with a trusted domain/URL after the beginning of the referer, or 3 a spoofed referer with a trusted domain/URL in the beginni...

CVE-2002-2100

Technical details about CVE-2002-2100 are not publicly available in the provided connected documents. The description confirms Outlook 2002 as affected via IFRAME content, but no root cause, affected versions, or fixes are disclosed. Monitor for updates.

CVE-2002-2090

CVE-2002-2090 (Resin) affects Caucho Resin 2.1.1 to 2.1.2. The vulnerability enables an attacker to disclose the server’s root path by sending requests for MS-DOS device names (e.g., lpt9.xtp). OpenVAS and Red Hat entries corroborate an information-disclosure issue in Resin related to DOS device ...

CVE-2002-2112

CVE-2002-2112 affects RCA Digital Cable Modem DCM225 and DCM225E, and other DOCSIS-conforming modems, via SNMP using the default public community string. The underlying issue is exposure of MIB information to remote readers/writers, enabling read/write access to SNMP MIB data. The available docum...

CVE-2002-2101: Undefined Security Weakness

Microsoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when scripting is disabled, via an "about:" or "javascript:" URI in the href attribute of an "a" tag...

CVE-2002-2100: Undefined Security Weakness

Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content...

RHEL 2.1 : dump (RHSA-2005:583)

Updated dump packages that address two security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having low security impact by the Red Hat Security Response Team. Dump examines files in a file system, determines which ones need to be backed up, and copies...