CVE-2002-1626

CVE-2002-1626 describes a directory traversal vulnerability in Mike Spice My Calendar before 1.5. An attacker can craft a URL containing .. sequences to write arbitrary files on the server. The issue arises from improper validation of path traversal in the web-facing handler, enabling verifying a...

CVE-2002-1606

CVE-2002-1606 details multiple local buffer-overflow vulnerabilities in HP Tru64 UNIX (versions 5.1a, 5.1, 5.0a, 4.0g, 4.0f) affecting the printing utilities (lpc, lpd, lpq, lpr, lprm). Root cause: unchecked/overrun buffers in these programs allow local users to escalate privileges. Impact: local...

CVE-2002-1602

CVE-2002-1602 describes a buffer overflow in the Braille module for GNU Screen 3.9.11 when HAVE_BRAILLE is defined. This vulnerability could allow local users to execute arbitrary code due to the overflow in the Braille support path. The affected component is the Braille module within GNU Screen;...

CVE-2002-1614

CVE-2002-1614 concerns a buffer overflow in HP Tru64 UNIX that allows local users to execute arbitrary code via a long argument to /usr/bin/at. The NVD entry confirms a local AV, low complexity, with complete confidentiality/integrity/availability impacts. Connected records corroborate the vulner...

CVE-2002-1608

This CVE concerns a local buffer overflow in traceroute on HP Tru64 UNIX, affecting versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f. The underlying issue is a buffer overflow in the traceroute routine that allows a local user to execute arbitrary code. The available documents state the vulnerability but...

CVE-2002-1611

CVE-2002-1611 describes a local privilege escalation in HP Tru64 UNIX, via a buffer overflow in the quot utility affecting multiple Tru64 UNIX releases (5.1a, 5.1, 5.0a, 4.0g, 4.0f). The root cause is a vulnerability in quot that could allow local users to gain privileges. Public exploitation det...

CVE-2002-1607

The CVE-2002-1607 entry describes a local-privilege escalation vulnerability in HP Tru64 UNIX: a buffer overflow in the ypmatch component affects Tru64 UNIX versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f, which could allow a local user to execute arbitrary code. The available sources confirm the affect...

CVE-2002-1616

CVE-2002-1616 describes multiple buffer overflows in HP Tru64 UNIX affecting versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f. The vulnerability allows local users to escalate privileges to root via several utilities: (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc. The description iden...

CVE-2002-1605

A buffer overflow in HP Tru64 UNIX (versions 4.0f, 4.0g, 5.0a, 5.1, 5.1a) allows an attacker to execute arbitrary code by supplying a long _XKB_CHARSET environment variable that affects dxpause, dxconsole, or dtsession. Root cause: improper handling of environment data in these components. Impact...

CVE-2002-1612

CVE-2002-1612 describes a buffer overflow in the mailcv utility of HP Tru64 UNIX, spanning versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f. The vulnerability enables local users to gain privileges due to the overflow in mailcv. The available documents confirm the affected product and the attack vector a...

CVE-2002-1609

CVE-2002-1609 describes a buffer overflow in HP Tru64 UNIX binmail affecting versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f, allowing local users to gain privileges. The connected documents confirm the affected product and the local-privilege-escalation impact but do not provide any remediation, patch ...

CVE-2002-1613

Technical details for CVE-2002-1613 are not publicly available in the provided documents. The initial description notes a buffer overflow affecting HP Tru64 UNIX, but no vendor/version specifics, impact, or fixes are provided here. Monitor for updates.

CVE-2002-1617

The CVE-2002-1617 entry concerns HP Tru64 UNIX 5.x with multiple local buffer overflow vulnerabilities. The affected components are dtaction (long -contextDir), dtprintinfo (long -p), dxterm (long -customization), and dtterm (long DISPLAY env var). The root cause is buffer overflows leading to ar...

CVE-2002-1603

CVE-2002-1603 affects GoAhead Web Server 2.1.7 and earlier: an attacker can obtain ASP source code by requesting a URL terminated with /, , %2f, %20, or %00, causing the ASP file to be returned unparsed. The issue is a data disclosure due to how the server handles certain URL terminations. The vu...

CVE-2002-1604

HP Tru64 UNIX is affected by CVE-2002-1604 due to multiple buffer overflows triggered by a long NLSPATH environment variable. The exploitation targets 9 programs (csh, dtsession, dxsysinfo, imapd, inc, uucp, uux, rdist, deliver). The underlying issue is a vulnerability in handling NLSPATH that co...

CVE-2002-1617

Multiple buffer overflows in HP Tru64 UNIX 5.x allow local users to execute arbitrary code via 1 a long -contextDir argument to dtaction, 2 a long -p argument to dtprintinfo, 3 a long -customization argument to dxterm, or 4 a long DISPLAY environment variable to dtterm...

CVE-2002-1615

HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f contain multiple buffer overflows that allow local users to execute arbitrary code via two vectors: (1) msgchk and (2) .upd..loader. The CVE entry identifies the affected platforms and the nature of the flaw (buffer overflows) and states the impact is...

CVE-2002-1610

Technical details for CVE-2002-1610 are not publicly available in the provided documents. Monitor for updates.

CVE-2002-1601

The CVE-2002-1601 issue affects Adobe PhotoDeluxe 3.1 (Connectables feature) where the software prepends the Adobe directory to the CLASSPATH, enabling applets to run with higher privileges. This can allow remote attackers to gain privileges via HTML e‑mail messages or web pages. The vulnerabilit...

HP-UX PHSS_28098 : HP-UX Running Apache, Increased Privileges or Denial of Service (DoS) or Execution of Arbitrary Code (HPSBUX00224 SSRT2393 rev.3)

s700800 11.04 Virtualvault 4.5 OWS update : Potential vulnerability regarding ownership permissions of System V shared memory based scoreboards. CERT VU825353, CVE CAN-2002-0839 Potential cross-site scripting vulnerability in the default error page when using wildcard DNS. CERT VU240329, CVE...