CVE-2002-1958

Cross-site scripting XSS vulnerability in kmMail 1.0, 1.0a, and 1.0b allows remote attackers to inject arbitrary web script or HTML via 1 javascript in onmouseover or other attributes in "safe" HTML tags such as the "b" tag, or 2 the Subject field...

CVE-2002-1846

YaBB vulnerable: YaBB 1.40/1.41 allows changing a user’s password without providing the correct password, by leveraging a stolen cookie and submitting a profile2 action to index.php. This lets remote attackers modify the password and adjust the expiretime setting. Root cause is insufficient authe...

CVE-2002-1845

CVE-2002-1845 is an XSS vulnerability in Yet Another Bulletin Board (YaBB) versions 1.40 and 1.41, where the password parameter (passwrd) can be exploited by remote attackers to inject arbitrary web script/HTML via index.php. The connected sources confirm the affected product/version and the vuln...

CVE-2002-1882

The CVE-2002-1882 entry concerns Oracle E-Business Suite 11i (11.1–11.6) with a vulnerability in AolSecurityPrivate.class that could allow remote attackers to bypass user authentication checks. The described root cause is via unknown attack vectors; there are no explicit remediation details or ve...

CVE-2002-1854

Technical details about CVE-2002-1854 are not publicly available in the provided connected documents. The record repeats the domain-name shell metacharacter vulnerability in whois.cgi, but no product/vendor/version or fix is disclosed here. Monitor for updates.

CVE-2002-1862

CVE-2002-1862 affects SmartMail Server 2.0. A remote attacker can trigger a denial-of-service (crash) by sending data and closing the connection before all data is transmitted. The description confirms the vulnerability mechanism but does not provide concrete remediation steps, affected versions ...

CVE-2002-1808

CVE-2002-1808 describes a cross-site scripting (XSS) flaw in Meunity Community System 1.1 . The vulnerability allows remote attackers to inject arbitrary web script or HTML by placing Javascript in an IMG tag during topic creation. The root cause, as stated, is insufficient input sanitization of ...

CVE-2002-1847

Buffer overflow in mplay32.exe of Microsoft Windows Media Player WMP 6.3 through 7.1 allows remote attackers to execute arbitrary commands via a long mp3 filename command line argument. NOTE: since the only known attack vector requires command line access, this may not be a vulnerability...

CVE-2002-1889

The CVE refers to an off-by-one buffer overflow in the context_action function (context.c) affecting Logsurfer versions 1.41 through 1.5a. The underlying issue is a buffer boundary condition in processing log entries, enabling remote attackers to cause a denial of service (crash) by sending a mal...

CVE-2002-1838

CVE-2002-1838 affects Charities.cron 1.0.2 through 1.6.0. A local user can write to arbitrary files via a symlink attack on temporary files, due to improper handling of temporary file names. The issue is described consistently across Red Hat and CVE records, but the provided documents do not incl...

CVE-2002-1844

CVE-2002-1844 affects Microsoft Windows Media Player 6.3 when installed on Solaris, where executables are created with world-writable permissions. This allows local users to delete or modify executables to gain privileges. Documents confirm the issue but do not provide a confirmed patch or fix. P...

CVE-2002-1969

Technical details about CVE-2002-1969 are not publicly available in the provided documents. No concrete exploit, affected versions, or remediation are disclosed here; monitor for updates.

CVE-2002-1890

The CVE-2002-1890 issue affects Red Hat Linux 7.1, specifically the rhmask 1.0-9 utility. The root cause is a symlink attack on the mask file that local users can exploit to overwrite arbitrary files. The vulnerability is local in scope with low overall base score (NVD 2.1; low). Documents do not...

CVE-2002-1864

The vulnerability CVE-2002-1864 affects Simple Web Server (SWS) versions 0.0.4 through 0.1.0, where a directory traversal flaw allows remote attackers to read arbitrary files via a .. in an HTTP request. The connected sources consistently describe the issue, but no remediation, patch version, or ...

CVE-2002-1963

The CVE-2002-1963 entry affects Linux kernel versions 2.4.1–2.4.19. The root cause is that the NR_RESERVED_FILES limit is set to 10, enabling local users to exhaust resources by opening 10 setuid binaries, causing a denial of service. Publicly provided documents confirm the affected kernel range ...

CVE-2002-1895

The vulnerability CVE-2002-1895 affects the Tomcat servlet engine in versions 3.3 and 4.0.4 when used with IIS and the ajp1.3 connector. Affected component: servlet engine; issue: remote attackers can trigger a denial of service (crash) by issuing a large sequence of HTTP GET requests for MS-DOS ...

CVE-2002-1787

CVE-2002-1787 affects SGI IRIX 6.5–6.5.17; the vulnerability is a buffer overflow in the uux component of the eoe.sw.uucp package. The underlying root cause is improper handling of input causing a overflow, enabling local users to execute arbitrary code. References point to SGI advisories and pat...

CVE-2002-1788

CVE-2002-1788 affects nn (NN) versions 6.6.0–6.6.3, where the nn_exitmsg function is vulnerable to a format-string issue that can let remote NNTP servers cause arbitrary code execution via crafted server responses. The available documents confirm the vulnerability but do not provide exploit code,...

CVE-2002-1815

CVE-2002-1815 affects Aquonics File Manager 1.5, with a directory traversal flaw in source.php and source.cgi that enables reading arbitrary files via a .. path segment in the URL. Impact details and exploit specifics are not further described in the provided documents beyond this vulnerability d...

CVE-2002-1802

XSS vulnerability CVE-2002-1802 affects XOOPS 1.0 RC3. The flaw allows remote attackers to inject arbitrary script/HTML via Javascript in an IMG tag when submitting news, due to insufficient input sanitization in the news submission workflow. Impact is Cross‑Site Scripting; no exploit vectors or ...