CVE-2002-1846

YaBB vulnerable: YaBB 1.40/1.41 allows changing a user’s password without providing the correct password, by leveraging a stolen cookie and submitting a profile2 action to index.php. This lets remote attackers modify the password and adjust the expiretime setting. Root cause is insufficient authe...

CVE-2002-1845

CVE-2002-1845 is an XSS vulnerability in Yet Another Bulletin Board (YaBB) versions 1.40 and 1.41, where the password parameter (passwrd) can be exploited by remote attackers to inject arbitrary web script/HTML via index.php. The connected sources confirm the affected product/version and the vuln...

CVE-2002-1882

The CVE-2002-1882 entry concerns Oracle E-Business Suite 11i (11.1–11.6) with a vulnerability in AolSecurityPrivate.class that could allow remote attackers to bypass user authentication checks. The described root cause is via unknown attack vectors; there are no explicit remediation details or ve...

CVE-2002-1854

Technical details about CVE-2002-1854 are not publicly available in the provided connected documents. The record repeats the domain-name shell metacharacter vulnerability in whois.cgi, but no product/vendor/version or fix is disclosed here. Monitor for updates.

CVE-2002-1862

CVE-2002-1862 affects SmartMail Server 2.0. A remote attacker can trigger a denial-of-service (crash) by sending data and closing the connection before all data is transmitted. The description confirms the vulnerability mechanism but does not provide concrete remediation steps, affected versions ...

CVE-2002-1808

CVE-2002-1808 describes a cross-site scripting (XSS) flaw in Meunity Community System 1.1 . The vulnerability allows remote attackers to inject arbitrary web script or HTML by placing Javascript in an IMG tag during topic creation. The root cause, as stated, is insufficient input sanitization of ...

CVE-2002-1847

Buffer overflow in mplay32.exe of Microsoft Windows Media Player WMP 6.3 through 7.1 allows remote attackers to execute arbitrary commands via a long mp3 filename command line argument. NOTE: since the only known attack vector requires command line access, this may not be a vulnerability...

CVE-2002-1889

The CVE refers to an off-by-one buffer overflow in the context_action function (context.c) affecting Logsurfer versions 1.41 through 1.5a. The underlying issue is a buffer boundary condition in processing log entries, enabling remote attackers to cause a denial of service (crash) by sending a mal...

CVE-2002-1838

CVE-2002-1838 affects Charities.cron 1.0.2 through 1.6.0. A local user can write to arbitrary files via a symlink attack on temporary files, due to improper handling of temporary file names. The issue is described consistently across Red Hat and CVE records, but the provided documents do not incl...

CVE-2002-1817

Technical details for CVE-2002-1817 are not publicly available in the provided documents. Monitor for updates.

CVE-2002-1844

CVE-2002-1844 affects Microsoft Windows Media Player 6.3 when installed on Solaris, where executables are created with world-writable permissions. This allows local users to delete or modify executables to gain privileges. Documents confirm the issue but do not provide a confirmed patch or fix. P...

CVE-2002-1969

Technical details about CVE-2002-1969 are not publicly available in the provided documents. No concrete exploit, affected versions, or remediation are disclosed here; monitor for updates.

CVE-2002-1890

The CVE-2002-1890 issue affects Red Hat Linux 7.1, specifically the rhmask 1.0-9 utility. The root cause is a symlink attack on the mask file that local users can exploit to overwrite arbitrary files. The vulnerability is local in scope with low overall base score (NVD 2.1; low). Documents do not...

CVE-2002-1864

The vulnerability CVE-2002-1864 affects Simple Web Server (SWS) versions 0.0.4 through 0.1.0, where a directory traversal flaw allows remote attackers to read arbitrary files via a .. in an HTTP request. The connected sources consistently describe the issue, but no remediation, patch version, or ...

CVE-2002-1787

CVE-2002-1787 affects SGI IRIX 6.5–6.5.17; the vulnerability is a buffer overflow in the uux component of the eoe.sw.uucp package. The underlying root cause is improper handling of input causing a overflow, enabling local users to execute arbitrary code. References point to SGI advisories and pat...

CVE-2002-1801

Vulnerability summary (CVE-2002-1801) ImageFolio versions 2.23 through 2.27 allow remote attackers to obtain sensitive information by querying a nonexistent image category, causing an error message that leaks the web root. This is the explicit impact described across multiple sources (NVD/Red Hat...

CVE-2002-1962

The CVE concerns Finjan Software SurfinGate 6.0 and 6.0 1. The vulnerability allows remote attackers to bypass URL access restrictions by sending a URL that uses an IP address instead of a hostname, defeating host-based filtering. Impact is described as partial for confidentiality, integrity, and...

CVE-2002-1856

HP Application Server 8.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot "WEB-INF."...

CVE-2002-1981

Microsoft SQL Server 2000 up to SP2 allows the public role to execute the stored procedures sp_MSSetServerProperties and sp_MSsetalertinfo, enabling modification of configuration including startup and alert settings. This CVE description is corroborated across NVD/Red Hat/CVE pages. No explicit e...

CVE-2002-1842

CVE-2002-1842 affects Perlbot 1.0 beta. A remote attacker can execute arbitrary commands via shell metacharacters in (1) a word being spell checked or (2) an e‑mail address. The vulnerability impact and exploit details are described in the connected records; no fix or remediation is provided in t...