CVE-2002-1706

CVE-2002-1706 affects Cisco IOS on uBR7200/uBR7100 (11.3–12.2). A defect allows remote attackers to modify DOCSIS settings by submitting a DOCSIS file without a Message Integrity Check (MIC) signature, which the router approves. Connected advisories describe a two-part issue for the CMTS family a...

CVE-2002-1779

The CVE-2002-1779 entry concerns Symantec Norton Personal Firewall 2002 (NPW) with the option “block fragmented IP Packets.” The accompanying description states this feature does not properly protect against certain Windows-based attacks such as jolt2 (CVE-2000-0305). Connected records corroborat...

CVE-2002-1725

CVE-2002-1725 affects PHPImageView 1.0. The vulnerability allows a remote attacker to obtain sensitive information by using the pw=show option, which triggers the phpinfo function. This exposes partial confidentiality information. The provided documents do not specify a remediation or patch versi...

CVE-2002-1686

Technical details for CVE-2002-1686 are not publicly available in the provided documents; no affected product/version or impact is disclosed. Monitor for updates.

CVE-2002-1752

CVE-2002-1752 ffects CGIScript.net csChat-R-Box. csChatRBox.cgi processes the setup parameter with Perl’s eval, enabling remote attackers to execute arbitrary code. The vulnerability is confirmed across multiple sources (NVD/CVE entries; PT-Security advisory) and is described as a remote code exe...

CVE-2002-1748

Technical details for CVE-2002-1748 are not publicly available in the provided documents; no specifics on affected versions, root cause, impact, or remediation are given. Monitor for updates as information may be added.

CVE-2002-1726

CVE-2002-1726 affects PhotoDB 1.4, specifically the secure_inc.php component. The vulnerability allows remote authentication bypass by constructing a URL with a large Time parameter, a non-empty rmtusername and rmtpassword, and an accesslevel lower than the requested page’s level. The CVSS-based ...

CVE-2002-1776

Symantec Norton AntiVirus 2002 is affected by CVE-2002-1776. The issue allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document. The vendor disputes the claim, noting that...

CVE-2002-1772

CVE-2002-1772 affects Novell NetWare 5.0–5.1. Local users could obtain Domain Admin rights by logging into an NDS account (not in NT domain) with domain access rights and running the command “net use” on an NDS_ADM account, which allows entry with a null password. The NVD entry assigns a CVSS2 ba...

CVE-2002-1675

Consolidated data confirms CVE-2002-1675 is a format string vulnerability in Unreal IRCd 3.1.1’s Cio_PrintF function within cio_main.c. The root cause is improper handling of format strings, enabling remote attackers to trigger a denial of service (crash) and potentially execute arbitrary code. T...

CVE-2002-1705

CVE-2002-1705 concerns Microsoft Internet Explorer 5.5 through 6.0, where a remote attacker could cause a denial of service (crash) by supplying a Cascading Style Sheet that uses the p{cssText} element declared with a bold font weight. Affected product family is Internet Explorer; the root cause ...

CVE-2002-1685

CVE-2002-1685 : BadBlue Enterprise Edition and Personal Edition versions 1.7 and 1.7.2 are affected by a cross-site scripting (XSS) vulnerability in the ext.dll ISAPI. The flaw enables an attacker to execute arbitrary script in the context of other users by injecting script via the ext.dll ISAPI ...

CVE-2002-1727

CVE-2002-1727 is a cross-site scripting (XSS) vulnerability in the askSam Web Publisher 1 and 4 products, specifically in the executables as_web.exe and as_web4.exe . The issue allows remote attackers to execute arbitrary script in the context of other users by supplying a crafted URL. The vulner...

CVE-2002-1691

CVE-2002-1691 affects the Alcatel OmniPCX 4400. The vulnerability arises because known user accounts and passwords are installed in the /etc/password file by default, enabling remote attackers to gain unauthorized access. The available sources corroborate the default-credentials issue and the res...

CVE-2002-1672

Webmin 0.92 (RPM install) creates /var/webmin with world-readable permissions, enabling local users to read the root cookie-based authentication credentials and potentially hijack the root session. The issue is documented in CVE-2002-1672 and corroborated by multiple sources (NVD/Nessus). Affecte...

CVE-2002-1732

Actinic Catalog 4.7.0 is affected by multiple XSS vulnerabilities (CVE-2002-1732). The issues allow remote attackers to inject arbitrary web script or HTML via: (1) query string arguments to certain .pl files, (2) the REFPAGE parameter to ca000007.pl, (3) the PRODREF parameter to ss000007.pl, or ...

CVE-2002-1674

CVE-2002-1674 affects FreeBSD procfs prior to 4.5. The vulnerability arises when a local user removes a file that the kernel’s fstatfs function refers to, potentially causing a kernel panic (local DoS). The provided documents do not include concrete exploit details or remediation steps.

CVE-2002-1685

Cross-site scripting vulnerability XSS in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute arbitrary script as other users by injecting script into ext.dll ISAPI...

CVE-2002-1668

The vulnerability CVE-2002-1668 affects HP-UX 11.11 and earlier. It allows local users to trigger a denial of service (kernel deadlock) via a file-system weakness potentially exploited by mmap() and performing I/O using data from the mapped buffer on the mapped file descriptor. The available sour...

CVE-2002-1697

Electronic Code Book ECB mode in VTun 2.0 through 2.5 uses a weak encryption algorithm that produces the same ciphertext from the same plaintext blocks, which could allow remote attackers to gain sensitive information...