CVE-2002-1637

Oracle 9i Application Server (9iAS) is affected by CVE-2002-1637 due to default credentials configured across multiple components. Over 160 usernames/passwords are present (e.g., SYS, SYSTEM, AQJAVA, OWA, IMAGEUSER, USER1, USER2, PLSQL, DEMO, FINANCE), which can allow privilege escalation for att...

CVE-2002-1642

This CVE affects PostgreSQL 7.2.1 and 7.2.2. The vulnerability arises in the VACUUM path, where local users can delete transaction log data (pg_clog), leading to a denial of service and potential data loss. The connected Red Hat/RH and NVD sources corroborate that the issue concerns local access ...

CVE-2002-1641

Oracle Web Cache in Oracle 9i Application Server (9iAS) has multiple buffer overflows that allow remote attackers to execute arbitrary code via unknown vectors. The connected records confirm the affected product and the root cause (buffer overflows) with remote code execution as impact, but do no...

CVE-2002-1646

SSH Secure Shell for Servers versions 3.0.0–3.1.1 allow remote attackers to override AllowedAuthentications, permitting password or other less secure authentication schemes instead of those configured. This can enable unauthorized access via password-based authentication as described in multiple ...

CVE-2002-1647

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2002-1634

CVE-2002-1634 affects Novell NetWare 5.1. The vulnerability is described as an issue where the installation of sample applications could allow remote attackers to obtain sensitive information through eight components: ndsobj.nlm, allfield.jse, websinfo.bas, ndslogin.pl, volscgi.pl, lancgi.pl, tes...

CVE-2002-1649

CVE-2002-1649 affects SquirrelMail prior to 1.2.3, in read_body.php. It is a Cross-site Scripting (XSS) flaw allowing remote attackers to execute arbitrary JavaScript via a javascript: URL in an IMG tag. No exploitation details are provided in the documents. Remediation: upgrade to SquirrelMail 1...

CVE-2002-1652

CVE-2002-1652 concerns CGIEmail’s CGICso (cgicso.c) in CGIEmail 1.6. The issue is a buffer overflow in cgicso.c triggered by a long query parameter, leading to remote denial of service and the possibility of arbitrary code execution. The OpenVAS entry corroborates a vulnerability in CGIEmail’s cg...

CVE-2002-1625

Macromedia Flash Player 6 is affected by CVE-2002-1625. The issue arises because connections are not terminated when the user leaves the page, allowing remote attackers to cause a denial of service via the (1) loadMovie and (2) loadSound commands, which continue executing until the browser is clo...

CVE-2002-1619

The CVE-2002-1619 entry describes a buffer overflow in the FC client for IBM AIX 4.3.x that allows remote attackers to cause a denial of service (crash and core dump). Affected component: IBM AIX 4.3.x FC client. Root cause: buffer overflow in the FC client. Impact: denial of service via remote e...

CVE-2002-1632

CVE-2002-1632 is documented in multiple security feeds as an information disclosure flaw in Oracle 9i Application Server (9iAS). The affected component is the 9iAS sample pages, which can leak environment variables and other sensitive information through the pages named info.jsp, printenv, echo, ...

CVE-2002-1627

Technical details about CVE-2002-1627 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2002-1621

CVE-2002-1621 describes a buffer overflow in the file_comp function of rcp on IBM AIX 4.3.x and 5.1, allowing remote code execution. The vulnerability is tied to the rcp component and affects remote attack vectors with no authentication required, as indicated by the CVE description. No explicit r...

CVE-2002-1630

The CVE-2002-1630 entry affects Oracle 9i Application Server (9iAS). The vulnerability is in the sendmail.jsp sample page, described as allowing remote attackers to send arbitrary emails. Public details in the provided documents confirm the affected component is the sendmail.jsp page, but there i...

CVE-2002-1620

Technical details about CVE-2002-1620 are not publicly provided in the supplied documents; no affected product/version specifics, root cause, or remediation are disclosed. Monitor for updates.

CVE-2002-1631

CVE-2002-1631 corresponds to a SQL injection vulnerability in the query.xsql sample page of Oracle 9i Application Server (9iAS). The affected component is the query.xsql page within the Oracle XSQL/9iAS environment, and the underlying root cause is unsafely handling the sql parameter in the page,...

CVE-2002-1628

The CVE-2002-1628 entry describes a directory traversal in Mike Spice Mike’s Vote CGI (vote.cgi) prior to version 1.3, where an attacker can write arbitrary files via .. sequences in the type parameter. Affected component: vote.cgi; root cause: improper sanitization of the type parameter enabling...

CVE-2002-1633

CVE-2002-1633 : In QNX 4.25, multiple buffer overflows in various utilities (e.g., sample, ex, du, find, lex, mkdir, rm, serserv, tcpserv, termdef, time, unzip, use, wcc, wlink, wpp, write, etc.) may allow a local user to execute arbitrary code via long command line arguments. The description spe...

CVE-2002-1622

CVE-2002-1622 describes a buffer overflow in certain RPC routines in IBM AIX 4.3, caused by a vulnerability in a variable data type. The impact stated is the potential execution of arbitrary code by a remote attacker with network access and no authentication required (per the CVE description). Th...

CVE-2002-1624

CVE-2002-1624 refers to a buffer overflow in the Lotus Domino web server prior to R5.0.10 when logging to DOMLOG.NSF. The vulnerability can be triggered by a long HTTP Authenticate header containing certain non-ASCII characters, allowing a remote attacker to cause a denial of service and potentia...