CVE-2002-1683

CVE-2002-1683 is an XSS vulnerability in BadBlue Personal Edition 1.7.3 where an attacker can remotely inject a script via the cleanSearchString() function, causing the script to run in other users’ contexts. The connected sources confirm the vulnerability details but do not provide exploitation ...

CVE-2002-1728

AskSam Web Publisher 1.0 and 4.0 are affected by a path disclosure vulnerability. The issue occurs when a user requests a non-existent file, causing an error message that reveals the full path to the web root directory. The accessible documents state this information exposure and do not provide e...

CVE-2002-1765

This CVE concerns Evolution 1.0.3 and 1.0.4. A remote attacker can trigger a denial of service by sending an email with a malformed MIME header, causing memory consumption and a crash. The documents do not specify additional affected components beyond the Evolution versions cited, nor provide exp...

CVE-2002-1774

Symantec Norton Antivirus 2002 is affected. The issue allows remote attackers to bypass e-mail scanning by sending a virus with a NULL character in the MIME header before the virus. Vendor disputes the initial scan bypass but notes AutoProtect may detect the virus before execution. There is no pu...

CVE-2002-1694

The CVE refers to Microsoft Internet Information Server (IIS) 4.0 where log files are opened with FILE_SHARE_READ and FILE_SHARE_WRITE permissions. This shared access could allow remote attackers to modify log file contents while IIS is running, representing a potential integrity impact on logs. ...

CVE-2002-1716

The CVE-2002-1716 vulnerability affects Microsoft Office XP: the Host() function in the Microsoft spreadsheet component allows remote attackers to create arbitrary files via SaveAs. The root cause is exposure of SaveAs-related functionality through the Host() function. Impact is the potential cre...

CVE-2002-1738

CVE-2002-1738 affects Alt-N Technologies MDaemon 5.0.5.0 and earlier. The issue is that a default MDaemon mail account is created with the password “MServer,” which could allow remote attackers to send anonymous email. The available sources describe the affected product and the default credential...

CVE-2002-1680

CVE-2002-1680 concerns CGI Online Worldweb Shopping 1.1 (COWS). The vulnerability is a Cross-site Scripting (XSS) flaw in the server-side scripts, allowing remote attackers to execute arbitrary script as other users by injecting code into diagnose.cgi or compatible.cgi. The description identifies...

CVE-2002-1735

CVE-2002-1735 describes a buffer overflow in dlogin 1.0a that could allow local users to gain privileges via unknown attack vectors. The available documents identify the affected software (dlogin 1.0a) and the vulnerability type (buffer overflow) with local privilege escalation as the impact. No ...

CVE-2002-1668

The vulnerability CVE-2002-1668 affects HP-UX 11.11 and earlier. It allows local users to trigger a denial of service (kernel deadlock) via a file-system weakness potentially exploited by mmap() and performing I/O using data from the mapped buffer on the mapped file descriptor. The available sour...

CVE-2002-1717

Microsoft Internet Information Services (IIS) 5.1 is affected by CVE-2002-1717, allowing remote attackers to view installation path information via GET requests to /_vti_pvt/access.cnf, /_vti_pvt/botinfs.cnf, /_vti_pvt/bots.cnf, or /_vti_pvt/linkinfo.cnf. OpenVAS/Nessus references confirm this .c...

CVE-2002-1671

Microsoft Internet Explorer versions 5.0, 5.01, and 5.5 are affected by a vulnerability in the clipboardData.getData method that enables remote attackers to monitor the contents of the clipboard. The issue is described across CVE-2002-1671 entries in NVD, CVE List, and related records, consistent...

CVE-2002-1766

CVE-2002-1766 concerns Netscape 4.77's Composer component, where a buffer overflow can occur when processing a font tag with a long face attribute. This vulnerability could allow local users to overwrite process memory and execute arbitrary code. The provided documents identify the affected produ...

CVE-2002-1708

The OpenVAS/Nessus entries confirm CVE-2002-1708 as a cross-site scripting vulnerability in BasiliX Webmail, affecting version 1.1.0 or lower. The issue arises because BasiliX does not filter HTML tags when displaying messages, enabling an attacker to inject arbitrary HTML/script into the message...

CVE-2002-1703

CVE-2002-1703 is a cross-site scripting (XSS) vulnerability in Mewsoft NetAuction 3.0, specifically in auction.cgi, allowing remote attackers to execute arbitrary script as other users via the Term parameter. The linked records confirm the affected product/version and the vulnerable parameter, wi...

CVE-2002-1740

The CVE-2002-1740 entry describes a buffer overflow in WorldClient.cgi (WorldClient) of Alt-N Technologies MDaemon

CVE-2002-1714

CVE-2002-1714 affects Microsoft Internet Explorer 5.0 through 6.0. The issue arises when processing an object of type "text/html" where the DATA field identifies the HTML document containing the object, which may trigger infinite recursion and cause a denial of service (crash). NVD lists a CVSS v...

CVE-2002-1666

CVE-2002-1666 affects Oracle E-Business Suite 11i.1–11i.6. The issue allows remote attackers to execute unauthorized PL/SQL procedures by modifying the Oracle Applications URL. The root cause is not detailed in the provided documents; exploitation status and remediation are not specified.

CVE-2002-1780

BPM Studio Pro 4.2 by ALCATech GmbH includes a webserver that enables a remote attacker to cause a denial of service (crash) by sending a URL request for a MS-DOS device such as con. The note indicates that some of these application-level DOS device issues may stem from a Windows bug, and the pro...

CVE-2002-1718

CVE-2002-1718 affects Microsoft Internet Information Server (IIS) 5.1. The issue, as described in the connected sources, allows remote attackers to view the contents of a Frontpage Server Extension (FPSE) file by sending an HTTP request for colegal.htm containing .. sequences. The Red Hat and CVE...