CVE-2002-1354

The CVE-2002-1354 entry concerns a directory traversal vulnerability in TYPSoft FTP Server 0.99.8. The flaw allows local users to list contents of arbitrary directories by abusing the cd/CWD command (dot dot dot). Affected software: TYPSoft FTP Server 0.99.8. Root cause: improper handling of dire...

CVE-2002-1353

Affected software : LocalWEB2000 HTTP server 2.1.0. Vulnerability : Passwords are stored in plain text under the web document root in the file users.lst, enabling remote access to passwords via a direct request to users.lst. Impact : Confidentiality of passwords is partially compromised as inform...

CVE-2002-1312

The CVE-2002-1312 issue affects Linksys BEFW11S4 (Wireless AP Router) and BEFSR11/BEFSR41/BEFSRU31 routers with firmware prior to 1.43.3 when remote web management is enabled. A buffer overflow in the Web management interface can be triggered by a long password, leading to a denial-of-service (ro...

CVE-2002-1351

Buffer overflow in Melange Chat System 1.10 allows remote attackers to cause a denial of service chat server crash and possibly execute arbitrary code via the msgText buffer in the chatInterpretData function, as demonstrated via a long Nick nickname request...

Microsoft Security Bulletin MS05-023 Vulnerabilities in Microsoft Word May Lead to Remote Code Execution (890169)

Microsoft Security Bulletin MS05-023 Vulnerabilities in Microsoft Word May Lead to Remote Code Execution 890169 Issued: April 12, 2005 Version: 1.0 Summary Who should read this document: Customers who are using the affected versions of Microsoft Word should apply the appropriate security update a...

Microsoft Word Unspecified Document File Buffer Overflow Vulnerability

Description Microsoft Word is affected by a buffer overflow vulnerability. This issue is due to a failure in the application to do proper bounds checking on user-supplied data. Microsoft has not specified exactly where the error may occur. This could result in execution of arbitrary code in the...

Microsoft Word Malformed Document Buffer Overflow Vulnerability

Description Microsoft Word is prone to a buffer overflow vulnerability. This issue presents itself when Microsoft Word attempts to parse a malformed document. This could result in execution of arbitrary code in the context of a user who opens the malicious document. Internet Explorer is a likely...

CVE-2005-0921

Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy...

CVE-2002-1638

...

CVE-2002-1648

CVE-2002-1648 describes a CSRF vulnerability in SquirrelMail’s compose.php prior to version 1.2.3. An attacker can trigger a request via an IMG URL with manipulated send_to and subject parameters to send mail as another user, exploiting cookie-based authentication. Affected software: SquirrelMail...

CVE-2002-1656

CVE-2002-1656 affects X-News (x_news) 1.1 and earlier, a PHP-based news management system that stores user IDs and MD5 password hashes in a world-readable file (db/users.txt). The vulnerability enables an attacker to authenticate as other users by obtaining a password hash (e.g., via sniffing or ...

CVE-2002-1651

CVE-2002-1651 describes a cross-site scripting (XSS) vulnerability in the Verity Search97 product. The issue arises from certain error messages in template pages that use the (1) vformat and (2) vfilter functions, enabling remote attackers to inject arbitrary web content and potentially access se...

CVE-2002-1648

Cross-site request forgery CSRF vulnerability in compose.php in SquirrelMail before 1.2.3 allows remote attackers to send email as other users via an IMG URL with modified sendto and subject parameters...

CVE-2002-1655

The CVE-2002-1655 entry affects the Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x. The vulnerability allows remote attackers to cause a denial of service (crash) via a wp-html-rend request. No remediation details, exploit status, or additional impact informat...

CVE-2002-1639

Oracle Configurator prior to 11.5.7.17.32 and 11.5.6.16.53 is vulnerable to a remote information-disclosure via the oracle.apps.cz.servlet.UiServlet servlet when the test parameter is set to “version” or “host,” allowing access to sensitive information. The underlying issue is a server-side infor...

CVE-2002-1645

The CVE-2002-1645 entry concerns SSH Secure Shell for Workstations client versions 3.1 to 3.2.0 with a buffer overflow in the URL catcher feature. The vulnerability allows remote attackers to execute arbitrary code by supplying a long URL. The root cause is a flaw in handling long URLs in the URL...

CVE-2002-1650

CVE-2002-1650 impacts SquirrelMail’s spell checker plugin (check_me.mod.php) in all releases before 1.2.3. The underlying issue is a flaw in handling the sqspell_command parameter, which allows remote attackers to execute arbitrary commands. The vulnerability enables remote code execution with ne...

CVE-2002-1644

The CVE-2002-1644 entry describes a local privilege-escalation flaw in SSH Secure Shell for Servers and SSH Secure Shell for Workstations, version 2.0.13 through 3.2.1, when run without a PTY. The root cause is that the process does not call setsid to detach the child from the parent’s process gr...

CVE-2002-1643

CVE-2002-1643 affects RealNetworks Helix Universal Server 9.0 (9.0.2.768). The vulnerability consists of multiple buffer overflows that enable remote code execution via: (1) a long Transport field in a SETUP RTSP request, (2) a DESCRIBE RTSP request with a long URL argument, or (3) two simultaneo...

CVE-2002-1654

The CVE affects iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1. A flaw allows remote attackers to initiate HTTP Basic Authentication through the wp-force-auth Web Publisher command, creating a distinct attack vector and potentially making brute-force password gue...