CVE-2002-1988

CVE-2002-1988 affects Resin 2.1.1. The vulnerability allows remote attackers to cause a denial of service through a request containing long variables targeting non-existent resources, leading to memory consumption and a potential hang of the server. Root cause is tied to processing lengthy query/...

CVE-2002-2055

TeeKai Tracking Online XSS (CVE-2002-2055) affects the TeeKai Tracking Online web app (1.0) via userlog.php, where the id parameter is not properly sanitized, allowing a remote attacker to inject arbitrary script/HTML. Public sources reiterate an XSS risk; OpenVAS/Nessus mention that a crafted UR...

CVE-2002-2037

The CVE-2002-2037 entry concerns the Cisco Media Gateway Controller (MGC) in the following devices: SC2200 7.4 and earlier, VSC3000 9.1 and earlier, PGW 2200 9.1 and earlier, plus BAMS and VSPT. All run on default Solaris 2.6 installations with unnecessary services and without the latest security...

CVE-2002-2013

The CVE-2002-2013 entry affects Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier. The vulnerability arises from a hex-encoded null character (%00) in a link, allowing a remote attacker to steal cookies from another domain. Exploitation details are not provided in the supplied documents, and...

CVE-2002-2036

Sun Ray Server Software (SRSS) 1.3 with Non-Smartcard Mobility (NSCM) enabled is affected. The issue allows remote attackers to log in as another user by running dtlogin on a system with XDMCP client support, indicating a network-exposed authentication bypass via XDMCP/X11 components. The core de...

CVE-2002-2069

CVE-2002-2069 affects PGP 6.x and 7.x on Windows NTFS. The issue is failure to clear Windows alternate data streams attached to files, enabling recovery of deleted sensitive information. Connected Red Hat CVE entry corroborates the same description. No explicit exploit details or affected version...

CVE-2002-2017

sastcpd in SAS/Base 8.0 allows local users to execute arbitrary code by setting the authprog environment variable to reference a malicious program, which is then executed by sastcpd...

CVE-2002-2065

WebCalendar 0.9.34 and earlier is affected by an insecure include-file access vulnerability. When the product is built with “browsing in includes directory” enabled, remote attackers can read arbitrary .inc files from the web root. Root cause: insecure include-path handling allows reading local i...

CVE-2002-2040

CVE-2002-2040 affects QNX RTOS versions 4.25 and 6.1.0, where the phrafx and phgrafx-startup programs fail to drop privileges before running the system command. This allows local users to execute arbitrary commands by manipulating the PATH to reference a malicious crttrap program. Impact is descr...

CVE-2002-2058

TeeKai Tracking Online 1.0 is affected by a weak encryption flaw in the stored web usage statistics (data/userlog/log.txt) that enables remote attackers to identify visiting IPs by dividing each octet by the MD5 hash of '20'. The Red Hat advisory and PT-Security notes corroborate the vulnerabilit...

CVE-2002-2079

CVE-2002-2079 concerns the mosix-protocol-stack in MOSIX 1.5.7, where remote attackers can cause a denial of service by sending malformed packets. The description is consistently reported across NVD/Red Hat/CVE listings and related references, indicating network-exposed impact without details on ...

CVE-2002-2063

CVE-2002-2063 affects AtGuard 3.2, where remote attackers can bypass firewall filters and run prohibited programs by renaming files to permitted filenames. The root cause is filename-based bypass of the filter mechanism. Available connected sources reiterate this description but do not provide an...

CVE-2002-2012

CVE-2002-2012 concerns an unknown vulnerability in Apache 1.3.19 running on HP Secure OS for Linux 1.0. The connected documents provide a concrete context: remote attackers could trigger “unexpected results” by sending an HTTP request. The vulnerability impact is described as affecting availabili...

CVE-2002-2041

CVE-2002-2041 affects RTOS 6.1.0 due to multiple buffer overflows that let a local attacker execute arbitrary code. Exploitation vectors are (1) a long ABLANG environment variable in phlocale and (2) a long -u option to pkg-installer. CVSSv2 base score is 7.2 (HIGH); impact is complete confidenti...

CVE-2002-1998

CVE-2002-1998 describes a buffer overflow in rpc.cmsd on SCO UnixWare 7.1.1 and Open UNIX 8.0.0 that allows remote attackers to execute arbitrary commands via a long parameter to rtable_create (procedure 21). Multiple sources (NVD, Red Hat advisory, CVE records) corroborate this description and t...

CVE-2002-2081

CVE-2002-2081 affects cphost.dll in Microsoft Site Server 3.0. A remote attacker can trigger a denial of service by sending an HTTP POST with a long TargetURL parameter, causing Site Server to abort and leaving the uploaded file in c:\temp. The available connected documents confirm the component ...

CVE-2002-2078

A heap-based buffer overflow affects Floositek FTGate Pro 1.05 and FTGate Office 1.05. The flaw allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long POP3 APOP USER command. Exploitation details are not provided in the connected documents; no patches ...

CVE-2002-2042

CVE-2002-2042 affects the QNX RTOS, specifically versions 4.25 and 6.1.0, where the ptrace facility lets a program attach to privileged processes. This could enable a local user to modify running processes and potentially execute arbitrary code, constituting a local privilege escalation. The prov...

CVE-2002-2067

East-Tec Eraser 2002 on Windows NTFS fails to clear alternate data streams attached to files, allowing recovery of supposedly deleted sensitive information. Descriptions across NVD, Red Hat, and CVE records confirm the issue and its impact on confidentiality (partial in CVSS v2, high in CVSS v3.1...

CVE-2002-2015

The CVE-2002-2015 entry concerns PostNuke 0.703, where PHP file inclusion in user.php can be triggered through the caselist parameter to include arbitrary files and potentially execute code. The root cause is a file inclusion weakness allowing remote attackers to supply a path to arbitrary files....