CVE-2002-1774

Symantec Norton Antivirus 2002 is affected. The issue allows remote attackers to bypass e-mail scanning by sending a virus with a NULL character in the MIME header before the virus. Vendor disputes the initial scan bypass but notes AutoProtect may detect the virus before execution. There is no pu...

CVE-2002-1765

This CVE concerns Evolution 1.0.3 and 1.0.4. A remote attacker can trigger a denial of service by sending an email with a malformed MIME header, causing memory consumption and a crash. The documents do not specify additional affected components beyond the Evolution versions cited, nor provide exp...

CVE-2002-1752

CVE-2002-1752 ffects CGIScript.net csChat-R-Box. csChatRBox.cgi processes the setup parameter with Perl’s eval, enabling remote attackers to execute arbitrary code. The vulnerability is confirmed across multiple sources (NVD/CVE entries; PT-Security advisory) and is described as a remote code exe...

CVE-2002-1681

Technical details beyond the basic XSS description are not provided in the connected documents. No additional specifics (affected versions, root cause, impact or fixes) are available here. Monitor for updates from official advisories.

CVE-2002-1666

CVE-2002-1666 affects Oracle E-Business Suite 11i.1–11i.6. The issue allows remote attackers to execute unauthorized PL/SQL procedures by modifying the Oracle Applications URL. The root cause is not detailed in the provided documents; exploitation status and remediation are not specified.

CVE-2002-1729

CVE-2002-1729 describes a cross-site scripting (XSS) vulnerability in ASPjar Guestbook 1.00. The flaw occurs in the guestbook message handling when the user-supplied parameter (the "web site" field) is not properly sanitized, allowing remote attackers to execute arbitrary script as other users. D...

CVE-2002-1769

Microsoft Site Server 3.0 before SP4 has a default LDAP_Anonymous user with password LdapPassword_1, enabling remote attackers to log on locally with the Log on locally privilege. The vulnerability arises from setting a default account/password that grants local access, as documented in CVE-2002-...

CVE-2002-1781

CVE-2002-1781 concerns multiple buffer overflows in DeleGate v7.7.0–7.8.1 that allow remote code execution via a crafted long USER command sent to the POP proxy. Affected component: DeleGate’s POP proxy handling; root cause: buffer overflow in the USER command processing. Documented impact: remot...

CVE-2002-1717

The Microsoft Internet Information Server (IIS) 5.1 web server is vulnerable to an information disclosure flaw where remote attackers can view path information and potentially other sensitive information via GET requests. The vulnerability specifically involves the leakage of .cnf files located i...

CVE-2002-1685

Cross-site scripting vulnerability XSS in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute arbitrary script as other users by injecting script into ext.dll ISAPI...

CVE-2002-1712

Microsoft Windows 2000 is affected by CVE-2002-1712: a remote attacker can cause a denial of service via memory consumption by flooding the NetBIOS port (TCP/139) with empty TCP/IP packets that have ACK and FIN bits set, as shown by stream3. Impact is described as partial availability. The provid...

CVE-2002-1684

The CVE-2002-1684 entry concerns a directory traversal vulnerability in Deerfield D2Gfx 1.0.2 and BadBlue Enterprise Edition 1.5.x plus BadBlue Personal Edition 1.5.6. The vulnerability allows remote attackers to read arbitrary files via a ../ traversal in the script used to read Microsoft Office...

CVE-2002-1672

Webmin 0.92 (RPM install) creates /var/webmin with world-readable permissions, enabling local users to read the root cookie-based authentication credentials and potentially hijack the root session. The issue is documented in CVE-2002-1672 and corroborated by multiple sources (NVD/Nessus). Affecte...

CVE-2002-1699

CVE-2002-1699 describes an SQL injection vulnerability in ASP Client Check (ASPCC) 1.3 and 1.5 . The flaw allows remote attackers to bypass authentication and gain unauthorized access via the password field , due to improper handling of input in the authentication query. The available documents d...

CVE-2002-1706

CVE-2002-1706 affects Cisco IOS on uBR7200/uBR7100 (11.3–12.2). A defect allows remote attackers to modify DOCSIS settings by submitting a DOCSIS file without a Message Integrity Check (MIC) signature, which the router approves. Connected advisories describe a two-part issue for the CMTS family a...

CVE-2002-1742

CVE-2002-1742 affects SOAP::Lite 0.50–0.52. Remote attackers can exploit a non-existent function in a SOAP::Lite script to trigger AUTOLOAD and load arbitrary Perl functions. Affected: SOAP::Lite 0.50–0.52. Impact: as described in sources, potentially enabling arbitrary function execution; extern...

CVE-2002-1687

CVE-2002-1687 describes a local buffer overflow in the AIX diagnostics library triggered by a long DIAGNOSTICS environment variable. Multiple sources (NVD, Red Hat, CVE list, NVD mirrors) corroborate that a local attacker could cause data and instructions to be overwritten. The impact is limited ...

CVE-2002-1715

Technical details about CVE-2002-1715 are not publicly available in the provided connected documents. The initial description notes local privilege escalation via a world-writable directory, but no vendor/version/patch specifics are present here; monitor for updates.

CVE-2002-1708

The OpenVAS/Nessus entries confirm CVE-2002-1708 as a cross-site scripting vulnerability in BasiliX Webmail, affecting version 1.1.0 or lower. The issue arises because BasiliX does not filter HTML tags when displaying messages, enabling an attacker to inject arbitrary HTML/script into the message...

CVE-2002-1721

The vulnerability CVE-2002-1721 affects alterMIME versions 0.1.10 and 0.1.11. It is caused by an off-by-one error that allows a remote attacker to trigger a denial of service (crash) by sending an x-header that makes snprintf overwrite the FFGET_FILE variable with a null byte. Public references i...