CVE-2002-1707

Affected product: phpBB 2.0 (through 2.0.1). The vulnerability arises when both allow_url_fopen and register_globals are on and the attacker can modify the phpbb_root_dir to reference a URL on a remote server, enabling remote code execution. This is a remote, unauthenticated attack with impact de...

CVE-2002-1703

CVE-2002-1703 is a cross-site scripting (XSS) vulnerability in Mewsoft NetAuction 3.0, specifically in auction.cgi, allowing remote attackers to execute arbitrary script as other users via the Term parameter. The linked records confirm the affected product/version and the vulnerable parameter, wi...

CVE-2002-1702

CVE-2002-1702 is a cross-site scripting vulnerability in DeltaScripts PHP Classifieds 6.0.5 that allows remote attackers to execute arbitrary script as other users via the URL parameter. Documented impacts include potential integrity compromise with no confidentiality or availability impact per N...

CVE-2002-1782

The CVE-2002-1782 entry concerns the University of Washington IMAP daemon (wu-imapd). In default configurations on systems that deny shell access, an authenticated IMAP user can read arbitrary files as that user. This is supported by multiple connected sources (OpenVAS/Nessus entries) describing ...

CVE-2002-1733

Technical details are not publicly available in the provided documents for CVE-2002-1733. Monitor for updates; no confirmed affected products, versions, or fixes are specified in the supplied sources.

CVE-2002-1738

CVE-2002-1738 affects Alt-N Technologies MDaemon 5.0.5.0 and earlier. The issue is that a default MDaemon mail account is created with the password “MServer,” which could allow remote attackers to send anonymous email. The available sources describe the affected product and the default credential...

CVE-2002-1778

CVE-2002-1778 affects Symantec Norton Personal Firewall 2002. The vulnerability allows remote attackers to bypass the portscan protection by using crafted scans: SYN/FIN, SYN/FIN/URG, SYN/FIN/PUSH, or SYN/FIN/URG/PUSH. The connected records reiterate this bypass but do not provide the exact root ...

CVE-2002-1776

Symantec Norton AntiVirus 2002 is affected by CVE-2002-1776. The issue allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document. The vendor disputes the claim, noting that...

CVE-2002-1754

CVE-2002-1754: Buffer overflow in Novell NetWare Client 4.80–4.83 can crash the client when resolving a very large hostname, triggered by local user actions (e.g., ping/traceroute). Affected: NetWare Client 4.80–4.83. Root cause: buffer overflow in hostname resolution. Impact: local denial of ser...

CVE-2002-1683

CVE-2002-1683 is an XSS vulnerability in BadBlue Personal Edition 1.7.3 where an attacker can remotely inject a script via the cleanSearchString() function, causing the script to run in other users’ contexts. The connected sources confirm the vulnerability details but do not provide exploitation ...

CVE-2002-1726

CVE-2002-1726 affects PhotoDB 1.4, specifically the secure_inc.php component. The vulnerability allows remote authentication bypass by constructing a URL with a large Time parameter, a non-empty rmtusername and rmtpassword, and an accesslevel lower than the requested page’s level. The CVSS-based ...

CVE-2002-1705

CVE-2002-1705 concerns Microsoft Internet Explorer 5.5 through 6.0, where a remote attacker could cause a denial of service (crash) by supplying a Cascading Style Sheet that uses the p{cssText} element declared with a bold font weight. Affected product family is Internet Explorer; the root cause ...

CVE-2002-1671

Microsoft Internet Explorer versions 5.0, 5.01, and 5.5 are affected by a vulnerability in the clipboardData.getData method that enables remote attackers to monitor the contents of the clipboard. The issue is described across CVE-2002-1671 entries in NVD, CVE List, and related records, consistent...

CVE-2002-1744

The connected CVE records confirm a directory traversal in CodeBrws.asp for Microsoft IIS 5.0. The vulnerable component is CodeBrws.asp (IIS 5.0), with the underlying issue caused by a hex-encoded "+%c0%ae%c0%ae+" sequence representing ".." that allows remote attackers to view source code and det...

CVE-2002-1689

The CVE-2002-1689 entry concerns the AIX login program prior to 4.0. The issue arises when remote users can supply 100 or more environment variables during login, which surpasses a string length and may trigger a buffer overflow. The available connected documents confirm the affected component (A...

CVE-2002-1680

CVE-2002-1680 concerns CGI Online Worldweb Shopping 1.1 (COWS). The vulnerability is a Cross-site Scripting (XSS) flaw in the server-side scripts, allowing remote attackers to execute arbitrary script as other users by injecting code into diagnose.cgi or compatible.cgi. The description identifies...

CVE-2002-1718

CVE-2002-1718 affects Microsoft Internet Information Server (IIS) 5.1. The issue, as described in the connected sources, allows remote attackers to view the contents of a Frontpage Server Extension (FPSE) file by sending an HTTP request for colegal.htm containing .. sequences. The Red Hat and CVE...

CVE-2002-1713

The CVE-2002-1713 issue affects Mandrake Linux 8.2, where the Standard security setting for the Mandrake-Security package (msec) installs home directories with world-readable permissions. This local-file-permission flaw could allow a local user to view other users’ files. The connected PT-2002-24...

CVE-2002-1728

AskSam Web Publisher 1.0 and 4.0 are affected by a path disclosure vulnerability. The issue occurs when a user requests a non-existent file, causing an error message that reveals the full path to the web root directory. The accessible documents state this information exposure and do not provide e...

CVE-2002-1734

NewsPro 1.01 is vulnerable: remote attackers can gain unauthorized administrator access by setting the authentication cookie to "logged,true". The described root cause is a cookie-based authentication bypass. The available documents do not provide deeper technical details such as affected compone...