CVE-2002-2018

CVE-2002-2018 affects SAS/Base 8.0. The affected component is sastcpd; a local user can set the NETENCRALG environment variable, which causes a segmentation fault and may grant privileges. Exploit details and remediation/patch information are not provided in the connected documents.

CVE-2002-2017

sastcpd in SAS/Base 8.0 allows local users to execute arbitrary code by setting the authprog environment variable to reference a malicious program, which is then executed by sastcpd...

CVE-2002-2067: Incomplete Cleanup

East-Tec Eraser 2002 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted...

CVE-2002-2028: Undefined Security Weakness

The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when a valid password is provided, which makes it easier for users with physical access to conduct brute force password guessing...

CVE-2005-0564

Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers to execute arbitrary code via a .doc file with long font information...

CVE-2002-1789

CVE-2002-1789 : A format string vulnerability in the newsx NNTP client (pre-1.4.8) allows local users to execute arbitrary code via format specifiers that are mishandled in a call to syslog. Affected component: newsx NNTP client; root cause: improper handling of format specifiers in a syslog invo...

CVE-2002-1790

CVE-2002-1790 affects the SMTP service in Microsoft IIS 4.0/5.0, where the root cause is bypassing anti-relaying rules by using encapsulated SMTP addresses, enabling remote attackers to send spam or spoofed messages. This CVE is linked to the prior CVE-1999-0682 remediation lineage. The connected...

CVE-2002-1798

In MidiCart PHP, PHP Plus, and PHP Maxi, a vulnerability allows remote attackers to upload arbitrary PHP files via a direct request to admin/upload.php or to access sensitive information via admin/credit_card_info.php. Connected PT-2002-2520 provides mitigation guidance to disable or restrict acc...

CVE-2002-1816

CVE-2002-1816 affects ATPhttpd 0.4b and earlier, with an off-by-one buffer overflow in sock_gets/sockhelp.c that allows remote code execution via a long HTTP GET request. The vulnerability is confirmed in multiple sources (NVD entry and related advisories). Impact is described as remote code exec...

CVE-2002-1819

CVE-2002-1819 describes a directory traversal vulnerability in TinyHTTPD 0.1.0 that allows remote attackers to read or execute arbitrary files via a ".." in the URL. The cited sources (NVD, CVE list, Red Hat advisory) confirm the existence of this flaw but do not provide patch details or explicit...

CVE-2002-1820

The CVE-2002-1820 entry concerns Ultimate PHP Board (UPB) versions 1.0 and 1.0b where register.php uses an administrative account named Admin (capital A) but allows a remote attacker to impersonate the administrator by registering a user named admin (lowercase a). The root cause is inconsistent c...

CVE-2002-1829

OpenBB (Open Bulletin Board) 1.0.0 RC3 has a cross-site scripting vulnerability in codeparse.php that allows remote attackers to inject arbitrary script via (1) myhome.php, (2) an onerror attribute in an IMG tag (variant of CVE-2002-0330), or (3) a glow tag. The issue stems from insufficient inpu...

CVE-2002-1832

Firestorm IDS versions 0.4.0–0.4.2 have a vulnerability in the ipopts decode functionality that allows remote attackers to cause a denial of service (crash) via certain IP options. The description (CVE-2002-1832) is reflected across NVD/CVE records; no remediation details are provided in the conn...

CVE-2002-1834

CVE-2002-1834 concerns the default configuration of Xerox DocuTech 6110 and 6115, where the web server allows remote attackers to (1) submit print jobs directly into the “print now” queue or (2) read the scanner job history. The connected sources repeat this description but do not provide additio...

CVE-2002-1841

CVE-2002-1841 affects NOLA 1.1.1 and 1.1.2 where the document management module does not restrict uploaded file types, enabling remote attackers to upload and execute arbitrary PHP files (e.g., with .php4 extensions). The root cause is lack of validation on uploaded content within the document ma...

CVE-2002-1843

Perlbot 1.9.2 is affected. The vulnerability allows remote attackers to execute arbitrary commands by injecting shell metacharacters through (1) the $text variable in SpelCheck.pm or (2) the $filename variable in HTMLPlog.pm. This is a remote, unauthenticated code execution issue with a network a...

CVE-2002-1844

CVE-2002-1844 affects Microsoft Windows Media Player 6.3 when installed on Solaris, where executables are created with world-writable permissions. This allows local users to delete or modify executables to gain privileges. Documents confirm the issue but do not provide a confirmed patch or fix. P...

CVE-2002-1850

The CVE-2002-1850 issue affects Apache’s mod_cgi in versions 2.0.39 and 2.0.40. A CGI script that writes a large amount of data to stderr can trigger a read/write deadlock between httpd and the CGI script, allowing local users and possibly remote attackers to cause a denial of service (hang and m...

CVE-2002-1852

CVE-2002-1852 describes a cross-site scripting (XSS) vulnerability in Monkey 0.5.0. The issue allows remote attackers to inject arbitrary web script or HTML via (1) the URL or (2) a parameter to test2.pl. Connected documents confirm the affected product and the general impact, but do not provide ...

CVE-2002-1860

CVE-2002-1860 affects Pramati Server 3.0 running on Windows, where a remote attacker can disclose files under the WEB-INF directory by requesting the directory with a trailing dot ("WEB-INF."). The connected sources confirm this information disclosure vector targets the WEB-INF path and may expos...