CVE-2002-1981

Microsoft SQL Server 2000 through SQL Server 2000 SP2 allows the "public" role to execute the 1 spMSSetServerProperties or 2 spMSsetalertinfo stored procedures, which allows attackers to modify configuration including SQL server startup and alert settings...

CVE-2002-1941

CVE-2002-1941 affects RadioBird WebServer 4 Everyone 1.28. A crafted long HTTP GET request with the Host header set can trigger a buffer overflow, leading to a denial of service (crash). The vulnerability is remotely exploitable over the network with low access complexity and no authentication; t...

CVE-2002-1929

Technical details about CVE-2002-1929 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2002-1813

Vulnerability (CVE-2002-1813) : AOL Instant Messenger (AIM) 4.8.2790 is affected by a directory traversal flaw that allows remote attackers to cause arbitrary program execution by placing the target program in the href attribute of a link. The root cause is insufficient validation of the href in ...

CVE-2002-1956

CVE-2002-1956 affects ROX Filer versions 1.1.9 and 1.2. The issue is due to world-writable permissions, enabling local users to write to arbitrary files. No remediation or exploit details are provided in the connected documents.

CVE-2002-1792

CVE-2002-1792 concerns the Fake Identd server, with versions 0.9–1.4 vulnerable to a remote buffer overflow. A long request split across multiple packets can allow an attacker to execute arbitrary code with root privileges. Multiple connected sources (NVD, CVE lists, OpenVAS/Nessus entries) descr...

CVE-2002-1933

The CVE-2002-1933 issue affects Microsoft Windows 2000 Terminal Services: the terminal services screensaver does not automatically lock the terminal window when the window is minimized, potentially allowing local users to gain access to the terminal server window. The connected documents confirm ...

CVE-2002-1955

Technical details (affected products, versions, root cause, or fixes) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2002-1861

CVE-2002-1861 concerns Sybase Enterprise Application Server 4.0 running on Windows, where a remote attacker could retrieve files from the WEB-INF directory by requesting the directory with a trailing dot (WEB-INF.). This is an information disclosure vulnerability tied to how the server handles WE...

CVE-2002-1934

CVE-2002-1934 affects Pingtel xpressa SIP-based VoIP phones version 1.2.5 through 2.0.1. The vulnerability leaks sensitive information during boot-up, allowing an attacker to obtain the MD5 hashes of the Admin password, the physical password, and other registration data. The available connected s...

CVE-2002-1919

CVE-2002-1919 affects VP-ASP 4.0, exposing VP-ASP's shopadmin.asp to SQL injection via the username or password fields that can allow remote SQL execution and bypass authentication. Documents indicate a remote impact and administrator-level access possibility, but do not provide a confirmed patch...

CVE-2002-1850

modcgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service hang and memory consumption by causing a CGI script to send a large amount of data to stderr, which results in a read/write deadlock between httpd and the CGI script...

CVE-2002-1957

Buffer overflow in the netlog function in pen.c for Pen 0.9.1 and 0.9.2 allows remote attackers to execute arbitrary commands via malformed log messages...

CVE-2002-1788

Format string vulnerability in the nnexitmsg function in nn 6.6.0 through 6.6.3 allows remote NNTP servers to execute arbitrary code via format strings in server responses...

CVE-2002-1914

CVE-2002-1914 concerns the dump utility (versions 0.4 b10 through b29). A local attacker can exploit a faulty flock() lock on /etc/dumpdates to cause a denial of service (execution prevention). Publicly noted references: RHSA-2005:583 and related advisories describe a patch/updates for the dump p...

CVE-2002-1936

UTStarcom BAS 1000 3.1.10 is affected by a vulnerability where several default or back door accounts exist with hardcoded passwords, allowing remote access. Specifically, accounts and passwords cited are: field (*field), guru (*3noguru), snmp (snmp), and dbase (dbase). The public documents descri...

CVE-2002-1797

CVE-2002-1797 concerns ChaiVM on HP color LaserJet 4500/4550 and HP LaserJet 4100/8150. The issue, as described, is improper enforcement of access control, which could allow local users to add, delete, or modify any services hosted by the ChaiServer. The NVD entry lists a medium impact with parti...

CVE-2002-1950

The CVE-2002-1950 entry concerns a Cross-site Scripting (XSS) flaw in phpRank 1.8. The vulnerability allows remote attackers to inject arbitrary web script or HTML through (1) the email parameter of add.php or (2) the banurl parameter in the main list. The provided documents do not specify affect...

CVE-2002-1835

Affected product: Xerox DocuTech 6110/6115 running Solaris 8.0. The issue arises from default configuration leaving many services enabled (e.g., RPC, sprayd), which could allow remote attackers to gain access to the device. Impact is described as potentially enabling access to the device; the pro...

CVE-2002-1883

CVE-2002-1883 affects Trolltech Qt Assistant 1.0 within Trolltech Qt 3.0.3 when loaded from the Designer, which opens port 7358 for interprocess communication. This enables remote attackers to open arbitrary HTML pages and cause a denial of service. The connected Red Hat and CVE records corrobora...