CVE-2002-1966

CVE-2002-1966 affects My Postcards Platinum 5.0 and 6.0, where a directory traversal bug in magiccard.cgi lets remote attackers read arbitrary files by providing a .. in the page parameter. This has been consistently described across multiple sources (Red Hat, CVE lists, NVD). The connected docum...

CVE-2002-1967

XiRCON 1.0 Beta 4 is affected by a buffer overflow that can be triggered remotely via overly long (ctcp, primsg, msg, notice) commands, causing denial of service (disconnect). The provided documents describe the impact but do not include exploit details or a patch. Affected component: XiRCON 1.0 ...

CVE-2002-1794

The CVE-2002-1794 entry concerns HP-UX 11.00 and 11.11 running the LDAP-UX Integration product. The vulnerability is described as affecting the pam_authz component, enabling remote attackers to execute r-commands with the privileges of other users. The provided connected documents confirm the aff...

CVE-2002-1793

The CVE-2002-1793 entry concerns HP-UX 11.04 running VirtualVault OS (VVOS) 4.5–4.6 with the HTTP Server mod_ssl module. The vulnerability arises when the Apache server times out during an SSL request, causing the connection to be closed, which may enable a denial-of-service condition. The Red Ha...

CVE-2002-1893

CVE-2002-1893: Cross-site scripting (XSS) in ArGoSoft Mail Server Pro 1.8.1.9 lets remote attackers inject arbitrary web script/HTML via the e-mail message. Connected sources confirm the vulnerability exists in the WebMail interface of ArGoSoft Mail Server Pro, but the provided documents do not i...

CVE-2002-1860

Pramati Server 3.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot "WEB-INF."...

CVE-2002-1812

CVE-2002-1812: Buffer overflow in gdam123 versions 0.933 and 0.942 allows local users to execute arbitrary code via a long filename parameter. Root cause: unsafe handling of filename input leading to overflow. Impact: arbitrary code execution with local privileges; no exploitation details provide...

CVE-2002-1791

CVE-2002-1791 affects SGI IRIX 6.5–6.5.17. The vulnerability stems from creating temporary desktop files with world-writable permissions, enabling local users to overwrite or corrupt those files. Exploitation details, affected files, and patch information are not provided in the documents. Public...

CVE-2002-1970

CVE-2002-1970 (SnortCenter 0.9.5) : When configured to push Snort rules, SnortCenter stores the rules in a temporary file that has world-readable and world-writable permissions. This insecure permission set can allow local users to access the file and obtain usernames and passwords for the alert ...

CVE-2002-1945

CVE-2002-1945 describes a buffer overflow in SmartMail Server 1.0 Beta 10 that can be triggered by a long request to SMTP port 25 or POP3 port 110. The documented impact is a remote denial of service (crash). The sources in the provided documents confirm the affected product/version and the two v...

CVE-2002-1855

CVE-2002-1855 describes an information-disclosure flaw in Macromedia JRun 3.0–4.0 on Windows, where requesting WEB-INF. with a trailing dot exposes files under WEB-INF (Java classes/config). Several feeds (NVD, Red Hat, CVE list, OpenVAS/Nessus) reiterate that this affects Win32 J2EE containers a...

CVE-2002-1915

The CVE-2002-1915 issue concerns multiple BSD-based operating systems where a local attacker can cause a denial of service by using flock() to lock /var/log/acculog. The Red Hat and CVE lists confirm the local-execution vector and DoS impact, with the notable detail that affected versions are not...

CVE-2002-1890

rhmask 1.0-9 in Red Hat Linux 7.1 allows local users to overwrite arbitrary files via a symlink attack on the mask file...

CVE-2002-1876

CVE-2002-1876 : The provided documents identify a vulnerability in Microsoft Exchange 2000 where a remote authenticated attacker can cause a denial of service by issuing a large number of rapid requests that exhaust the licenses granted to Exchange by IIS. The core issue is described as a DoS due...

CVE-2002-1795

Technical details available: CVE-2002-1795 describes a Cross-site scripting (XSS) vulnerability in connect.asp of the Microsoft Terminal Services Advanced Client (TSAC) ActiveX control. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Documents...

CVE-2002-1871

pkgadd in Sun Solaris 2.5.1 through 8 installs files setuid/setgid root if the pkgmap file contains a "?" question mark in the 1 mode, 2 owner, or 3 group fields, which allows attackers to elevate privileges...

CVE-2002-1871

CVE-2002-1871 concerns Sun Solaris: the pkgadd utility in Solaris 2.5.1–8 can install files with setuid/setgid root when the pkgmap entry’s mode/owner/group contain a “?” in certain fields, enabling privilege escalation. Red Hat and CVE aggregations corroborate the same description. Core details:...

CVE-2002-1800

The CVE-2002-1800 issue affects phpRank version 1.8, where the administrative password is stored in plaintext on the server and in the ap cookie. This design allows remote attackers to retrieve the administrative password, compromising admin access. The Red Hat entry and PT-7500-series advisory c...

CVE-2002-1803

CVE-2002-1803 describes a cross-site scripting (XSS) flaw in PHP-Nuke 6.0 that allows remote attackers to inject arbitrary script/HTML via Javascript in an IMG tag. Affected software is PHP-Nuke 6.0; the root cause is an XSS vulnerability exposed by image tags, enabling arbitrary code execution i...

CVE-2002-1847

CVE-2002-1847 concerns a buffer overflow in mplay32.exe of Microsoft Windows Media Player (versions 6.3–7.1). The vulnerability is triggered by a long mp3 filename command line argument, potentially allowing a remote attacker to execute arbitrary commands. The initial description notes that the o...