CVE-2002-1823

CVE-2002-1823 describes a buffer overflow in the HttpGetRequest function of Zeroo HTTP server 1.5. The flaw allows remote attackers to execute arbitrary code by sending a long HTTP request. The available connected documents confirm the issue and the affected component (Zeroo HTTP server 1.5) and ...

CVE-2002-1915

The CVE-2002-1915 issue concerns multiple BSD-based operating systems where a local attacker can cause a denial of service by using flock() to lock /var/log/acculog. The Red Hat and CVE lists confirm the local-execution vector and DoS impact, with the notable detail that affected versions are not...

CVE-2002-1867

The CVE-2002-1867 entry concerns BizDesign ImageFolio versions 2.23–2.26 where default configuration fails to restrict access to admin/setup.cgi and admin/nph-build.cgi. This allows remote attackers to (1) create an administrative account and (2) trigger a denial of service (CPU consumption). The...

CVE-2002-1820

The CVE-2002-1820 entry concerns Ultimate PHP Board (UPB) versions 1.0 and 1.0b where register.php uses an administrative account named Admin (capital A) but allows a remote attacker to impersonate the administrator by registering a user named admin (lowercase a). The root cause is inconsistent c...

CVE-2002-1967

XiRCON 1.0 Beta 4 is affected by a buffer overflow that can be triggered remotely via overly long (ctcp, primsg, msg, notice) commands, causing denial of service (disconnect). The provided documents describe the impact but do not include exploit details or a patch. Affected component: XiRCON 1.0 ...

CVE-2002-1796

ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, which allows local users to load unauthorized Chai services...

CVE-2002-1892

NETGEAR FVS318 running firmware 1.1 stores the username and password in a readable format when a backup of the configuration file is made, which allows local users to obtain sensitive information...

CVE-2002-1806

Cross-site scripting XSS vulnerability in Drupal 4.0.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag...

CVE-2002-1985

CVE-2002-1985 concerns iSMTP 5.0.1. The remote denial of service arises from processing an excessively long MAIL FROM command, with a potential buffer overflow cited in multiple sources. The documents do not specify the exact root cause details (e.g., internal buffer size, parsing flow) or the af...

CVE-2002-1814

Bonobo’s efstools contains a local buffer overflow when installed setuid, allowing a local user to trigger arbitrary code execution through excessively long command line arguments. Affected component: efstools within Bonobo. Root cause: unchecked/buffered input handling leading to overflow when h...

CVE-2002-1853

Cross-site scripting XSS vulnerability in MyNewsGroups 0.4 and 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the subject of a newsgroup post, which is not properly handled by 1 myarticles.php, 2 search.php, 3 stats.php, or 4 standard.lib.php...

CVE-2002-1926

CVE-2002-1926 affects Aquonics File Manager 1.5, where a directory traversal flaw in source.php allows remote attackers to read arbitrary files by supplying .. in the HTTP query string. The core issue is insufficient input validation/traversal of file paths in the PHP script. Public references co...

CVE-2002-1955

Technical details (affected products, versions, root cause, or fixes) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2002-1888

CommonName Toolbar 3.5.2.0 is affected. It sends unqualified domain name requests to the CommonName organization and potentially other web servers for name resolution, which can reveal internal server names to those organizations. This describes the root cause as unqualified DNS/name-resolution r...

CVE-2002-1890

The CVE-2002-1890 issue affects Red Hat Linux 7.1, specifically the rhmask 1.0-9 utility. The root cause is a symlink attack on the mask file that local users can exploit to overwrite arbitrary files. The vulnerability is local in scope with low overall base score (NVD 2.1; low). Documents do not...

CVE-2002-1835

Affected product: Xerox DocuTech 6110/6115 running Solaris 8.0. The issue arises from default configuration leaving many services enabled (e.g., RPC, sprayd), which could allow remote attackers to gain access to the device. Impact is described as potentially enabling access to the device; the pro...

CVE-2002-1918

CVE-2002-1918 describes a buffer overflow in Microsoft Active Data Objects (ADO) within Microsoft MDAC versions 2.5–2.7. The description identifies the vulnerability as enabling remote attackers to cause impact with unknown scope and unknown attack vectors; no concrete impact, vector, or remediat...

CVE-2002-1919

CVE-2002-1919 affects VP-ASP 4.0, exposing VP-ASP's shopadmin.asp to SQL injection via the username or password fields that can allow remote SQL execution and bypass authentication. Documents indicate a remote impact and administrator-level access possibility, but do not provide a confirmed patch...

CVE-2002-1916

CVE-2002-1916 affects Pirch and RusPirch when auto-log is enabled. A remote attacker can cause a denial of service (crash) by supplying a nickname containing an MS-DOS device name (e.g., AUX) that is inserted into a filename for saving queries. The description notes a partial availability impact....

CVE-2002-1843

Perlbot 1.9.2 is affected. The vulnerability allows remote attackers to execute arbitrary commands by injecting shell metacharacters through (1) the $text variable in SpelCheck.pm or (2) the $filename variable in HTMLPlog.pm. This is a remote, unauthenticated code execution issue with a network a...