CVE-2002-1925

CVE-2002-1925 affects Tiny Personal Firewall versions 3.0 through 3.0.6. The vulnerability arises when an administrator views the Log tab in the Personal Firewall Agent module, enabling remote attackers to cause a denial of service (crash) by sending SYN, UDP, ICMP, or TCP port scans. The availab...

CVE-2002-1856

HP Application Server 8.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot "WEB-INF."...

CVE-2002-1834

CVE-2002-1834 concerns the default configuration of Xerox DocuTech 6110 and 6115, where the web server allows remote attackers to (1) submit print jobs directly into the “print now” queue or (2) read the scanner job history. The connected sources repeat this description but do not provide additio...

CVE-2002-1819

CVE-2002-1819 describes a directory traversal vulnerability in TinyHTTPD 0.1.0 that allows remote attackers to read or execute arbitrary files via a ".." in the URL. The cited sources (NVD, CVE list, Red Hat advisory) confirm the existence of this flaw but do not provide patch details or explicit...

CVE-2002-1789

CVE-2002-1789 : A format string vulnerability in the newsx NNTP client (pre-1.4.8) allows local users to execute arbitrary code via format specifiers that are mishandled in a call to syslog. Affected component: newsx NNTP client; root cause: improper handling of format specifiers in a syslog invo...

CVE-2002-1861

CVE-2002-1861 concerns Sybase Enterprise Application Server 4.0 running on Windows, where a remote attacker could retrieve files from the WEB-INF directory by requesting the directory with a trailing dot (WEB-INF.). This is an information disclosure vulnerability tied to how the server handles WE...

CVE-2002-1844

CVE-2002-1844 affects Microsoft Windows Media Player 6.3 when installed on Solaris, where executables are created with world-writable permissions. This allows local users to delete or modify executables to gain privileges. Documents confirm the issue but do not provide a confirmed patch or fix. P...

CVE-2002-1866

The CVE-2002-1866 issue affects Simple Web Server (SWS) versions 0.0.4 through 0.1.0. The underlying root cause is that the server does not close file descriptors for 404 error responses, which can lead to resource exhaustion (denial of service) when an attacker issues numerous requests for non-e...

CVE-2002-1800

The CVE-2002-1800 issue affects phpRank version 1.8, where the administrative password is stored in plaintext on the server and in the ap cookie. This design allows remote attackers to retrieve the administrative password, compromising admin access. The Red Hat entry and PT-7500-series advisory c...

CVE-2002-1970

CVE-2002-1970 (SnortCenter 0.9.5) : When configured to push Snort rules, SnortCenter stores the rules in a temporary file that has world-readable and world-writable permissions. This insecure permission set can allow local users to access the file and obtain usernames and passwords for the alert ...

CVE-2002-1962

The CVE concerns Finjan Software SurfinGate 6.0 and 6.0 1. The vulnerability allows remote attackers to bypass URL access restrictions by sending a URL that uses an IP address instead of a hostname, defeating host-based filtering. Impact is described as partial for confidentiality, integrity, and...

CVE-2002-1860

CVE-2002-1860 affects Pramati Server 3.0 running on Windows, where a remote attacker can disclose files under the WEB-INF directory by requesting the directory with a trailing dot ("WEB-INF."). The connected sources confirm this information disclosure vector targets the WEB-INF path and may expos...

CVE-2002-1793

The CVE-2002-1793 entry concerns HP-UX 11.04 running VirtualVault OS (VVOS) 4.5–4.6 with the HTTP Server mod_ssl module. The vulnerability arises when the Apache server times out during an SSL request, causing the connection to be closed, which may enable a denial-of-service condition. The Red Ha...

CVE-2002-1938

The vulnerability affects Virgil CGI Scanner 0.9 and allows remote command execution via the tar (TARGET) or zielport (ZIELPORT) parameters. Root cause: improper handling of these inputs enables arbitrary commands to run on the affected host. Connected sources (NVD, Red Hat, CVE lists) confirm th...

CVE-2002-1894

CVE-2002-1894 describes a Cross-site scripting (XSS) vulnerability in phpBB 2.0.3, where the highlight parameter in viewtopic.php can be exploited to inject arbitrary script/HTML. Affected component: phpBB 2.0.3, file viewtopic.php. Root cause: insufficient input handling allowing script/HTML inj...

CVE-2002-1946

The CVE-2002-1946 entry applies to Videsh Sanchar Nigam Limited (VSNL) Integrated Dialer Software version 1.2.000. The issue is that when the Save Password option is used, the password is stored in the registry using a weak, one-to-one encryption scheme, allowing local users to obtain and decrypt...

CVE-2002-1881

CVE-2002-1881 affects Macromedia Flash Player 4.0 r12–6.0.47.0. A remote attacker can cause a browser crash (DoS) by feeding malformed Flash Shockwave (.SWF) content; ROT13-encoding the body while leaving headers unchanged demonstrates the issue. No further exploit details or remediation are prov...

CVE-2002-1879

CVE-2002-1879 describes an SQL injection in LokwaBB 1.2.2 that lets remote attackers execute arbitrary SQL via the (1) member parameter to member.php or (2) loser parameter to misc.php. The NVD entry lists a base score of 7.5 (HIGH) with NETWORK attack vector and partial impacts on confidentialit...

CVE-2002-1920

CVE-2002-1920 affects FtpXQ 2.5, where a buffer overflow in the MKD command with a long directory name can cause a denial of service (crash). The connected Red Hat entry and CVE records confirm the same description; exploitation details, affected versions beyond 2.5, and available mitigations are...

CVE-2002-1882

The CVE-2002-1882 entry concerns Oracle E-Business Suite 11i (11.1–11.6) with a vulnerability in AolSecurityPrivate.class that could allow remote attackers to bypass user authentication checks. The described root cause is via unknown attack vectors; there are no explicit remediation details or ve...