CVE-2002-1928

The CVE-2002-1928 entry concerns 602Pro LAN SUITE 2002, where remote attackers can view the directory tree by issuing an HTTP GET request with a trailing tilde (~) or a .bak extension. The connected sources reiterate this same behavior but do not provide additional technical details, affected ver...

CVE-2002-1817

Technical details for CVE-2002-1817 are not publicly available in the provided documents. Monitor for updates.

CVE-2002-1928: Undefined Security Weakness

602Pro LAN SUITE 2002 allows remote attackers to view the directory tree via an HTTP GET request with a trailing "" tilde or ".bak" extension...

Microsoft Log Sink Class ActiveX control incorrectly marked "safe for scripting"

Overview The Microsoft Log Sink Class ActiveX control is incorrectly marked safe for scripting. This may allow a remote attacker to create or append to arbitrary files on a vulnerable system. Description ActiveXActiveX is a technology that allows programmers to create reusable software components...

CVE-2002-1675

Consolidated data confirms CVE-2002-1675 is a format string vulnerability in Unreal IRCd 3.1.1’s Cio_PrintF function within cio_main.c. The root cause is improper handling of format strings, enabling remote attackers to trigger a denial of service (crash) and potentially execute arbitrary code. T...

CVE-2002-1694

The CVE refers to Microsoft Internet Information Server (IIS) 4.0 where log files are opened with FILE_SHARE_READ and FILE_SHARE_WRITE permissions. This shared access could allow remote attackers to modify log file contents while IIS is running, representing a potential integrity impact on logs. ...

CVE-2002-1697

VTun ECB vulnerability (CVE-2002-1697) : The ECB mode used in VTun 2.0–2.5 produces identical ciphertext for identical plaintext blocks, enabling a remote attacker to potentially gain sensitive information. Affected products: VTun versions 2.0 through 2.5. Root cause: use of ECB encryption mode. ...

CVE-2002-1700

CVE-2002-1700 describes a cross-site scripting (XSS) flaw in the missing template handler of Macromedia ColdFusion MX. The vulnerability arises because the HTTP request parameter for the template name is not filtered, allowing an attacker to inject script that is echoed in a 404 error message and...

CVE-2002-1710

BasiliX Webmail 1.1.0 (or lower) contains an Arbitrary File Disclosure vulnerability in the attachment handling of Compose Mail. The PHP-based script accepts a list of attachment names from the client but does not verify that those attachments were actually uploaded, allowing an attacker to retri...

CVE-2002-1721

The vulnerability CVE-2002-1721 affects alterMIME versions 0.1.10 and 0.1.11. It is caused by an off-by-one error that allows a remote attacker to trigger a denial of service (crash) by sending an x-header that makes snprintf overwrite the FFGET_FILE variable with a null byte. Public references i...

CVE-2002-1742

CVE-2002-1742 affects SOAP::Lite 0.50–0.52. Remote attackers can exploit a non-existent function in a SOAP::Lite script to trigger AUTOLOAD and load arbitrary Perl functions. Affected: SOAP::Lite 0.50–0.52. Impact: as described in sources, potentially enabling arbitrary function execution; extern...

CVE-2002-1748

Technical details for CVE-2002-1748 are not publicly available in the provided documents; no specifics on affected versions, root cause, impact, or remediation are given. Monitor for updates as information may be added.

CVE-2002-1761

CVE-2002-1761 affects PHProjekt versions 2.0 through 3.1 and is a directory traversal vulnerability that allows remote attackers to read arbitrary files via .. sequences. The connected sources confirm the affected software and vulnerability class but do not provide exploitation details or explici...

CVE-2002-1768

Cisco IOS versions 11.1–12.2 are affected when HSRP support is not enabled. The issue allows an attacker to cause a denial of service (CPU consumption) by sending randomly sized UDP packets to the HSRP port 1985. The Nessus plugin CISCO-20020606-HSRP.NASL confirms this condition and notes that th...

CVE-2002-1772

CVE-2002-1772 affects Novell NetWare 5.0–5.1. Local users could obtain Domain Admin rights by logging into an NDS account (not in NT domain) with domain access rights and running the command “net use” on an NDS_ADM account, which allows entry with a null password. The NVD entry assigns a CVSS2 ba...

CVE-2002-1779

The CVE-2002-1779 entry concerns Symantec Norton Personal Firewall 2002 (NPW) with the option “block fragmented IP Packets.” The accompanying description states this feature does not properly protect against certain Windows-based attacks such as jolt2 (CVE-2000-0305). Connected records corroborat...

CVE-2002-1775

Affected product: Symantec Norton AntiVirus (NAV) 2002. Issue: remote attackers can bypass the initial virus scan by using a non-RFC compliant MIME header, causing NAV to prematurely stop scanning. Root cause/impact: bypass of initial scan with partial impact on security posture; AutoProtect feat...

CVE-2002-1727

CVE-2002-1727 is a cross-site scripting (XSS) vulnerability in the askSam Web Publisher 1 and 4 products, specifically in the executables as_web.exe and as_web4.exe . The issue allows remote attackers to execute arbitrary script in the context of other users by supplying a crafted URL. The vulner...

CVE-2002-1735

CVE-2002-1735 describes a buffer overflow in dlogin 1.0a that could allow local users to gain privileges via unknown attack vectors. The available documents identify the affected software (dlogin 1.0a) and the vulnerability type (buffer overflow) with local privilege escalation as the impact. No ...

CVE-2002-1725

CVE-2002-1725 affects PHPImageView 1.0. The vulnerability allows a remote attacker to obtain sensitive information by using the pw=show option, which triggers the phpinfo function. This exposes partial confidentiality information. The provided documents do not specify a remediation or patch versi...