CVE-2002-1911

CVE-2002-1911 affects ZoneAlarm Pro 3.0 and 3.1 when configured to block all traffic. It allows remote attackers to cause a denial of service by sending a large number of SYN packets, leading to CPU and memory consumption. The vendor was not able to reproduce the issue. No further exploit details...

CVE-2002-1898

CVE-2002-1898 affects Terminal 1.3 on Apple Mac OS X 10.2. The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link that is opened and executed by Terminal.app. Root cause is improper handling of telnet:// URLs by Terminal.app, enabling command ...

CVE-2002-1884

CVE-2002-1884 : Public sources describe a login bypass in Py-Membres 3.1 where an attacker can become administrator by setting the pymembs parameter to "admin" in index.php. The connected documents confirm the affected product/version and the root cause (parameters controlling authentication). No...

CVE-2002-1874

CVE-2002-1874 affects AstroCam 0.9-1-1 through 1.4.0 (astrocam.cgi). The vulnerability allows remote attackers to execute arbitrary commands by injecting shell metacharacters in an HTTP request, indicating a command-injection risk in the CGI handler. The description notes vendor clarification tha...

CVE-2002-1871

pkgadd in Sun Solaris 2.5.1 through 8 installs files setuid/setgid root if the pkgmap file contains a "?" question mark in the 1 mode, 2 owner, or 3 group fields, which allows attackers to elevate privileges...

CVE-2002-1838

CVE-2002-1838 affects Charities.cron 1.0.2 through 1.6.0. A local user can write to arbitrary files via a symlink attack on temporary files, due to improper handling of temporary file names. The issue is described consistently across Red Hat and CVE records, but the provided documents do not incl...

CVE-2002-1788

CVE-2002-1788 affects nn (NN) versions 6.6.0–6.6.3, where the nn_exitmsg function is vulnerable to a format-string issue that can let remote NNTP servers cause arbitrary code execution via crafted server responses. The available documents confirm the vulnerability but do not provide exploit code,...

CVE-2002-1941

CVE-2002-1941 affects RadioBird WebServer 4 Everyone 1.28. A crafted long HTTP GET request with the Host header set can trigger a buffer overflow, leading to a denial of service (crash). The vulnerability is remotely exploitable over the network with low access complexity and no authentication; t...

CVE-2002-1792

CVE-2002-1792 concerns the Fake Identd server, with versions 0.9–1.4 vulnerable to a remote buffer overflow. A long request split across multiple packets can allow an attacker to execute arbitrary code with root privileges. Multiple connected sources (NVD, CVE lists, OpenVAS/Nessus entries) descr...

CVE-2002-1785

Zeus Web Server (Zeus Administration Server) versions 4.0–4.1r2 are affected by an XSS vulnerability in which remote authenticated users can inject arbitrary script or HTML via the section parameter to index.fcgi. The description confirms the vulnerability is an XSS issue without providing detail...

CVE-2002-1858

CVE-2002-1858 affects Oracle9i Application Server (versions 1.0.2.2 and 9.0.2 through 9.0.2.0.1) when running on Windows. It allows remote attackers to disclose contents of the WEB-INF directory (Java class files and config) by requesting the directory with a trailing dot (WEB-INF.). The connecte...

CVE-2002-1864

The vulnerability CVE-2002-1864 affects Simple Web Server (SWS) versions 0.0.4 through 0.1.0, where a directory traversal flaw allows remote attackers to read arbitrary files via a .. in an HTTP request. The connected sources consistently describe the issue, but no remediation, patch version, or ...

CVE-2002-1788

Format string vulnerability in the nnexitmsg function in nn 6.6.0 through 6.6.3 allows remote NNTP servers to execute arbitrary code via format strings in server responses...

CVE-2002-1957

Buffer overflow in the netlog function in pen.c for Pen 0.9.1 and 0.9.2 allows remote attackers to execute arbitrary commands via malformed log messages...

CVE-2002-1802

XSS vulnerability CVE-2002-1802 affects XOOPS 1.0 RC3. The flaw allows remote attackers to inject arbitrary script/HTML via Javascript in an IMG tag when submitting news, due to insufficient input sanitization in the news submission workflow. Impact is Cross‑Site Scripting; no exploit vectors or ...

CVE-2002-1985

CVE-2002-1985 concerns iSMTP 5.0.1. The remote denial of service arises from processing an excessively long MAIL FROM command, with a potential buffer overflow cited in multiple sources. The documents do not specify the exact root cause details (e.g., internal buffer size, parsing flow) or the af...

CVE-2002-1820

The CVE-2002-1820 entry concerns Ultimate PHP Board (UPB) versions 1.0 and 1.0b where register.php uses an administrative account named Admin (capital A) but allows a remote attacker to impersonate the administrator by registering a user named admin (lowercase a). The root cause is inconsistent c...

CVE-2002-1965

CVE-2002-1965 affects Imatix Xitami 2.5b4 and 2.5b5 due to a Cross-site scripting (XSS) flaw in Errors.gsl. The vulnerability allows remote attackers to inject arbitrary script/HTML via (1) Javascript events in an IMG SRC tag (onerror demonstrated) or (2) the User-Agent header in a GET request. A...

CVE-2002-1823

CVE-2002-1823 describes a buffer overflow in the HttpGetRequest function of Zeroo HTTP server 1.5. The flaw allows remote attackers to execute arbitrary code by sending a long HTTP request. The available connected documents confirm the issue and the affected component (Zeroo HTTP server 1.5) and ...

CVE-2002-1825

Summary (CVE-2002-1825): A format-string vulnerability in PerlRTE_example1.pl used by WASD versions 7.1, 7.2.0–7.2.3, and 8.0.0 allows remote attackers to execute arbitrary commands or crash the server via format strings in the $name variable. The NVD entry lists a CVSS v2 base score of 6.4 (MEDI...