CVE-2002-1912

SkyStream EMR5000 firmware versions 1.16–1.18 are vulnerable to a remote DoS due to the device not dropping packets or disabling the Ethernet interface when buffers overflow. This can be triggered by a high volume of packets, potentially causing a null pointer exception and kernel panic. The issu...

CVE-2002-1833

CVE-2002-1833 affects DocuTech 6110 and DocuTech 6115 where default administrative passwords are set ( Solaris 8.0: “service!”; Windows NT: “administ”). This default credential config allows remote attackers to gain privileges. Root cause is the existence of default admin credentials exposing a p...

CVE-2002-1952

The vulnerability concerns phpRank 1.8, where authentication does not properly check return codes from MySQL operations. This can allow remote attackers to authenticate with a NULL password when a database error occurs or the database is unavailable. The affected component is the authentication p...

CVE-2002-1816

Off-by-one buffer overflow in the sockgets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...

CVE-2002-1783

CVE-2002-1783 describes a CRLF injection vulnerability in PHP 4.2.1–4.2.3 when allow_url_fopen is enabled. An attacker could cause CRLF sequences to be injected into arguments passed to fopen or file functions, enabling modification of HTTP headers for outgoing requests. This is a remote, header-...

CVE-2002-1898

CVE-2002-1898 affects Terminal 1.3 on Apple Mac OS X 10.2. The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link that is opened and executed by Terminal.app. Root cause is improper handling of telnet:// URLs by Terminal.app, enabling command ...

CVE-2002-1813

Vulnerability (CVE-2002-1813) : AOL Instant Messenger (AIM) 4.8.2790 is affected by a directory traversal flaw that allows remote attackers to cause arbitrary program execution by placing the target program in the href attribute of a link. The root cause is insufficient validation of the href in ...

CVE-2002-1943

The vulnerability CVE-2002-1943 affects SafeTP 1.46. When NAT is used, the internal FTP server IP address is leaked in responses to PASV (passive mode) FTP transfers. Root cause: NAT-related information disclosure in SafeTP’s PASV handling. Impact is partial confidentiality leakage; no integrity ...

CVE-2002-1973

The CVE-2002-1973 entry describes a buffer overflow in CHttpServer::OnParseError of the ISAPI extension (Isapi.cpp) when built with MFC static libraries in Visual C++ 5.0 and 6.0 before SP3. This flaw, present in multiple products (including BadBlue), can be triggered by a long query string that ...

CVE-2002-1859

CVE-2002-1859 concerns Orion Application Server 1.5.3 on Windows, where an information disclosure flaw allows remote attackers to retrieve files from the WEB-INF directory by requesting the directory with a trailing dot (WEB-INF.). The vulnerability affects requests to the WEB-INF/ path that expo...

CVE-2002-1951

CVE-2002-1951 describes a buffer overflow in GoAhead WebServer 2.1 . An attacker can trigger the overflow by sending a long HTTP GET request with a large number of subdirectories, potentially enabling remote code execution. The available documents do not provide specific details on the vulnerable...

CVE-2002-1870

CVE-2002-1870 affects Simple Web Server (SWS) versions 0.0.4–0.1.0. The root cause is improper handling of a failed recv() call, which may allow remote attackers to overwrite program data or operate on an uninitialized heap, leading to denial of service and potentially code execution. Connected s...

CVE-2002-1884

CVE-2002-1884 : Public sources describe a login bypass in Py-Membres 3.1 where an attacker can become administrator by setting the pymembs parameter to "admin" in index.php. The connected documents confirm the affected product/version and the root cause (parameters controlling authentication). No...

CVE-2002-1926

CVE-2002-1926 affects Aquonics File Manager 1.5, where a directory traversal flaw in source.php allows remote attackers to read arbitrary files by supplying .. in the HTTP query string. The core issue is insufficient input validation/traversal of file paths in the PHP script. Public references co...

CVE-2002-1853

Cross-site scripting XSS vulnerability in MyNewsGroups 0.4 and 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the subject of a newsgroup post, which is not properly handled by 1 myarticles.php, 2 search.php, 3 stats.php, or 4 standard.lib.php...

CVE-2002-1868

CVE-2002-1868 affects Dispair versions 0.1 and 0.2. The vulnerability allows remote attackers to execute arbitrary shell commands via certain form fields. The NVD entry lists a base score of 10.0 (HIGH) with network attack vector and low complexity, but the connected Red Hat and CVE records do no...

CVE-2002-1875

CVE-2002-1875 affects Entercept Agent 2.5 for Windows. The vulnerability description states that local administrative users can obtain the Entercept agent password, enabling them to log on as the entercept_agent account and conceal their identity. Connected sources consistently describe the same ...

CVE-2002-1892

NETGEAR FVS318 running firmware 1.1 stores the username and password in a readable format when a backup of the configuration file is made, which allows local users to obtain sensitive information...

CVE-2002-1814

Bonobo’s efstools contains a local buffer overflow when installed setuid, allowing a local user to trigger arbitrary code execution through excessively long command line arguments. Affected component: efstools within Bonobo. Root cause: unchecked/buffered input handling leading to overflow when h...

CVE-2002-1860

CVE-2002-1860 affects Pramati Server 3.0 running on Windows, where a remote attacker can disclose files under the WEB-INF directory by requesting the directory with a trailing dot ("WEB-INF."). The connected sources confirm this information disclosure vector targets the WEB-INF path and may expos...