CVE-2002-1881

CVE-2002-1881 affects Macromedia Flash Player 4.0 r12–6.0.47.0. A remote attacker can cause a browser crash (DoS) by feeding malformed Flash Shockwave (.SWF) content; ROT13-encoding the body while leaving headers unchanged demonstrates the issue. No further exploit details or remediation are prov...

CVE-2002-1911

CVE-2002-1911 affects ZoneAlarm Pro 3.0 and 3.1 when configured to block all traffic. It allows remote attackers to cause a denial of service by sending a large number of SYN packets, leading to CPU and memory consumption. The vendor was not able to reproduce the issue. No further exploit details...

CVE-2002-1815

CVE-2002-1815 affects Aquonics File Manager 1.5, with a directory traversal flaw in source.php and source.cgi that enables reading arbitrary files via a .. path segment in the URL. Impact details and exploit specifics are not further described in the provided documents beyond this vulnerability d...

CVE-2002-1908

Microsoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of service CPU consumption via an HTTP request with a Host header that contains a large number of "/" forward slash characters...

CVE-2002-1921

CVE-2002-1921 affects MySQL server versions 3.20.32 through 3.23.52 on Windows. The default configuration binds to the loopback interface, allowing remote access to the database. The CVSS metrics indicate network attack vector, no authentication, with partial impact to confidentiality, integrity,...

CVE-2002-1855

CVE-2002-1855 describes an information-disclosure flaw in Macromedia JRun 3.0–4.0 on Windows, where requesting WEB-INF. with a trailing dot exposes files under WEB-INF (Java classes/config). Several feeds (NVD, Red Hat, CVE list, OpenVAS/Nessus) reiterate that this affects Win32 J2EE containers a...

CVE-2002-1938

The vulnerability affects Virgil CGI Scanner 0.9 and allows remote command execution via the tar (TARGET) or zielport (ZIELPORT) parameters. Root cause: improper handling of these inputs enables arbitrary commands to run on the affected host. Connected sources (NVD, Red Hat, CVE lists) confirm th...

CVE-2002-1912

SkyStream EMR5000 firmware versions 1.16–1.18 are vulnerable to a remote DoS due to the device not dropping packets or disabling the Ethernet interface when buffers overflow. This can be triggered by a high volume of packets, potentially causing a null pointer exception and kernel panic. The issu...

CVE-2002-1833

CVE-2002-1833 affects DocuTech 6110 and DocuTech 6115 where default administrative passwords are set ( Solaris 8.0: “service!”; Windows NT: “administ”). This default credential config allows remote attackers to gain privileges. Root cause is the existence of default admin credentials exposing a p...

CVE-2002-1952

The vulnerability concerns phpRank 1.8, where authentication does not properly check return codes from MySQL operations. This can allow remote attackers to authenticate with a NULL password when a database error occurs or the database is unavailable. The affected component is the authentication p...

CVE-2002-1816

Off-by-one buffer overflow in the sockgets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...

CVE-2002-1783

CVE-2002-1783 describes a CRLF injection vulnerability in PHP 4.2.1–4.2.3 when allow_url_fopen is enabled. An attacker could cause CRLF sequences to be injected into arguments passed to fopen or file functions, enabling modification of HTTP headers for outgoing requests. This is a remote, header-...

CVE-2002-1822

CVE-2002-1822 concerns IBM HTTP Server 1.0 on AS/400, where remote attackers can obtain the web root path and other sensitive information. The leak occurs via an error message when requesting a non-existent JSP page. The vulnerability is documented with a NVD CVSS v2 base score of 5.0 (Medium) an...

CVE-2002-1918

CVE-2002-1918 describes a buffer overflow in Microsoft Active Data Objects (ADO) within Microsoft MDAC versions 2.5–2.7. The description identifies the vulnerability as enabling remote attackers to cause impact with unknown scope and unknown attack vectors; no concrete impact, vector, or remediat...

CVE-2002-1859

CVE-2002-1859 concerns Orion Application Server 1.5.3 on Windows, where an information disclosure flaw allows remote attackers to retrieve files from the WEB-INF directory by requesting the directory with a trailing dot (WEB-INF.). The vulnerability affects requests to the WEB-INF/ path that expo...

CVE-2002-1951

CVE-2002-1951 describes a buffer overflow in GoAhead WebServer 2.1 . An attacker can trigger the overflow by sending a long HTTP GET request with a large number of subdirectories, potentially enabling remote code execution. The available documents do not provide specific details on the vulnerable...

CVE-2002-1870

CVE-2002-1870 affects Simple Web Server (SWS) versions 0.0.4–0.1.0. The root cause is improper handling of a failed recv() call, which may allow remote attackers to overwrite program data or operate on an uninitialized heap, leading to denial of service and potentially code execution. Connected s...

CVE-2002-1884

CVE-2002-1884 : Public sources describe a login bypass in Py-Membres 3.1 where an attacker can become administrator by setting the pymembs parameter to "admin" in index.php. The connected documents confirm the affected product/version and the root cause (parameters controlling authentication). No...

CVE-2002-1926

CVE-2002-1926 affects Aquonics File Manager 1.5, where a directory traversal flaw in source.php allows remote attackers to read arbitrary files by supplying .. in the HTTP query string. The core issue is insufficient input validation/traversal of file paths in the PHP script. Public references co...

CVE-2002-1853

Cross-site scripting XSS vulnerability in MyNewsGroups 0.4 and 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the subject of a newsgroup post, which is not properly handled by 1 myarticles.php, 2 search.php, 3 stats.php, or 4 standard.lib.php...