CVE-2002-1971

The CVE-2002-1971 entry describes a vulnerability in Sourcecraft Networking_Utils 1.0 where the ping utility (networking_utils.php) can read arbitrary files via shell metacharacters in the Domain name or IP argument. Affected component: networking_utils.php in Sourcecraft Networking_Utils 1.0. Ro...

CVE-2002-1957

CVE-2002-1957 describes a buffer overflow in the netlog function in pen.c affecting Pen 0.9.1 and 0.9.2. The overflow allows remote attackers to execute arbitrary commands via malformed log messages. The available documents specify the vulnerable component and affected versions, but do not provid...

CVE-2002-1883

CVE-2002-1883 affects Trolltech Qt Assistant 1.0 within Trolltech Qt 3.0.3 when loaded from the Designer, which opens port 7358 for interprocess communication. This enables remote attackers to open arbitrary HTML pages and cause a denial of service. The connected Red Hat and CVE records corrobora...

CVE-2002-1842

CVE-2002-1842 affects Perlbot 1.0 beta. A remote attacker can execute arbitrary commands via shell metacharacters in (1) a word being spell checked or (2) an e‑mail address. The vulnerability impact and exploit details are described in the connected records; no fix or remediation is provided in t...

CVE-2002-1945

CVE-2002-1945 describes a buffer overflow in SmartMail Server 1.0 Beta 10 that can be triggered by a long request to SMTP port 25 or POP3 port 110. The documented impact is a remote denial of service (crash). The sources in the provided documents confirm the affected product/version and the two v...

CVE-2002-1862

CVE-2002-1862 affects SmartMail Server 2.0. A remote attacker can trigger a denial-of-service (crash) by sending data and closing the connection before all data is transmitted. The description confirms the vulnerability mechanism but does not provide concrete remediation steps, affected versions ...

CVE-2002-1804

The CVE-2002-1804 entry documents a Cross-site scripting (XSS) vulnerability in NPDS 4.8, allowing remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag. Affected component: NPDS 4.8 frontend rendering of IMG tags; root cause is improper handling/escaping of inline ...

CVE-2002-1910

CVE-2002-1910 affects Click2Learn Ingenium Learning Management System, versions 5.1–6.1. The root cause is the use of weak, reversible password encryption, enabling attackers to obtain passwords. Public sources confirm the affected products/versions and the vulnerability description across NVD/Re...

CVE-2002-1868

CVE-2002-1868 affects Dispair versions 0.1 and 0.2. The vulnerability allows remote attackers to execute arbitrary shell commands via certain form fields. The NVD entry lists a base score of 10.0 (HIGH) with network attack vector and low complexity, but the connected Red Hat and CVE records do no...

CVE-2002-1847

CVE-2002-1847 concerns a buffer overflow in mplay32.exe of Microsoft Windows Media Player (versions 6.3–7.1). The vulnerability is triggered by a long mp3 filename command line argument, potentially allowing a remote attacker to execute arbitrary commands. The initial description notes that the o...

CVE-2002-1813

Vulnerability (CVE-2002-1813) : AOL Instant Messenger (AIM) 4.8.2790 is affected by a directory traversal flaw that allows remote attackers to cause arbitrary program execution by placing the target program in the href attribute of a link. The root cause is insufficient validation of the href in ...

CVE-2002-1899

IceWarp Web Mail versions 3.3.3 and 3.4.5 are affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the Full Name (addressname) parameter. The connected sources confirm the affected product and the vulnerable input, but do n...

CVE-2002-1871

CVE-2002-1871 concerns Sun Solaris: the pkgadd utility in Solaris 2.5.1–8 can install files with setuid/setgid root when the pkgmap entry’s mode/owner/group contain a “?” in certain fields, enabling privilege escalation. Red Hat and CVE aggregations corroborate the same description. Core details:...

CVE-2002-1826

The CVE-2002-1826 issue affects grsecurity 1.9.4 for the Linux kernel (2.4.18). Local users can bypass read-only protections by using mmap to directly map /dev/mem or /dev/kmem into kernel memory, as described in multiple sources (NVD/Red Hat/CVE lists). The connected documents provide the vulner...

CVE-2002-1798

In MidiCart PHP, PHP Plus, and PHP Maxi, a vulnerability allows remote attackers to upload arbitrary PHP files via a direct request to admin/upload.php or to access sensitive information via admin/credit_card_info.php. Connected PT-2002-2520 provides mitigation guidance to disable or restrict acc...

CVE-2002-1983

CVE-2002-1983 affects QNX RTOS 6.1.0. The timer implementation is vulnerable: by creating multiple timers with a 1‑ms tick, local users can cause a denial of service (hang) and potentially execute arbitrary code. Impact described as local, with partial availability impact. No explicit remediation...

CVE-2002-1981

Microsoft SQL Server 2000 through SQL Server 2000 SP2 allows the "public" role to execute the 1 spMSSetServerProperties or 2 spMSsetalertinfo stored procedures, which allows attackers to modify configuration including SQL server startup and alert settings...

CVE-2002-1900

This CVE reports a Cross-site scripting (XSS) vulnerability in Pinboard 1.0, exploitable by remote attackers to inject arbitrary web script or HTML via tasklists. The connected documents do not provide additional technical specifics such as exact vulnerable component details beyond the applicatio...

CVE-2002-1854

Technical details about CVE-2002-1854 are not publicly available in the provided connected documents. The record repeats the domain-name shell metacharacter vulnerability in whois.cgi, but no product/vendor/version or fix is disclosed here. Monitor for updates.

CVE-2002-1936

UTStarcom BAS 1000 3.1.10 is affected by a vulnerability where several default or back door accounts exist with hardcoded passwords, allowing remote access. Specifically, accounts and passwords cited are: field (*field), guru (*3noguru), snmp (snmp), and dbase (dbase). The public documents descri...