5508 matches found
CVE-2002-1766
CVE-2002-1766 concerns Netscape 4.77's Composer component, where a buffer overflow can occur when processing a font tag with a long face attribute. This vulnerability could allow local users to overwrite process memory and execute arbitrary code. The provided documents identify the affected produ...
CVE-2002-1771
FormMail 1.9 and earlier contains a newline-injection flaw in the email/realname CGI variables that allows remote attackers to inject CC/BCC/TO fields, enabling spam or anonymous email. Affected component is the FormMail mailing script; impact is remote abuse without authentication. The provided ...
CVE-2002-1757
PHProjekt 2.0–3.1 uses the $PHP_SELF variable for authentication, allowing remote attackers to bypass authentication for scripts via a PATH_INFO path (example: mail_send.php/sms). Affected: PHProjekt 2.0–3.1; Root cause: improper reliance on PATH_INFO in $PHP_SELF for auth. Impact: unauthorized a...
CVE-2002-1760
PHProjekt versions 2.0 through 3.1 are affected by multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via unknown attack vectors. The issue can impact confidentiality, integrity, and availability (per CVSS metrics: AV:N/AC:L/Au:N/C:P/I:P/A:P). No ...
CVE-2002-1779
The CVE-2002-1779 entry concerns Symantec Norton Personal Firewall 2002 (NPW) with the option “block fragmented IP Packets.” The accompanying description states this feature does not properly protect against certain Windows-based attacks such as jolt2 (CVE-2000-0305). Connected records corroborat...
CVE-2002-1772
CVE-2002-1772 affects Novell NetWare 5.0–5.1. Local users could obtain Domain Admin rights by logging into an NDS account (not in NT domain) with domain access rights and running the command “net use” on an NDS_ADM account, which allows entry with a null password. The NVD entry assigns a CVSS2 ba...
CVE-2002-1738
CVE-2002-1738 affects Alt-N Technologies MDaemon 5.0.5.0 and earlier. The issue is that a default MDaemon mail account is created with the password “MServer,” which could allow remote attackers to send anonymous email. The available sources describe the affected product and the default credential...
CVE-2002-1732
Actinic Catalog 4.7.0 is affected by multiple XSS vulnerabilities (CVE-2002-1732). The issues allow remote attackers to inject arbitrary web script or HTML via: (1) query string arguments to certain .pl files, (2) the REFPAGE parameter to ca000007.pl, (3) the PRODREF parameter to ss000007.pl, or ...
CVE-2002-1746
Affected software: Vtun 2.5b1. The CVE describes that remote attackers can inject data into user sessions by sniffing and replaying packets, enabling data injection into sessions. The provided documents do not specify a fix or patch version. No explicit exploitation details beyond the sniffing/re...
CVE-2002-1707
Affected product: phpBB 2.0 (through 2.0.1). The vulnerability arises when both allow_url_fopen and register_globals are on and the attacker can modify the phpbb_root_dir to reference a URL on a remote server, enabling remote code execution. This is a remote, unauthenticated attack with impact de...
CVE-2002-1697
Electronic Code Book ECB mode in VTun 2.0 through 2.5 uses a weak encryption algorithm that produces the same ciphertext from the same plaintext blocks, which could allow remote attackers to gain sensitive information...
CVE-2002-1697
VTun ECB vulnerability (CVE-2002-1697) : The ECB mode used in VTun 2.0–2.5 produces identical ciphertext for identical plaintext blocks, enabling a remote attacker to potentially gain sensitive information. Affected products: VTun versions 2.0 through 2.5. Root cause: use of ECB encryption mode. ...
CVE-2002-1782
The CVE-2002-1782 entry concerns the University of Washington IMAP daemon (wu-imapd). In default configurations on systems that deny shell access, an authenticated IMAP user can read arbitrary files as that user. This is supported by multiple connected sources (OpenVAS/Nessus entries) describing ...
CVE-2002-1774: Undefined Security Weakness
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to send viruses that bypass the e-mail scanning via a NULL character in the MIME header before the virus. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is...
CVE-2002-1779: Undefined Security Weakness
The "block fragmented IP Packets" option in Symantec Norton Personal Firewall 2002 NPW does not properly protect against certain attacks on Windows vulnerabilities such as jolt2 CVE-2000-0305...
CVE-2002-1778: Undefined Security Weakness
Symantec Norton Personal Firewall 2002 allows remote attackers to bypass the portscan protection by using a 1 SYN/FIN, 2 SYN/FIN/URG, 3 SYN/FIN/PUSH, or 4 SYN/FIN/URG/PUSH scan...
CVE-2002-1776: Undefined Security Weakness
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document. NOTE: the vendor has disputed th...
CVE-2005-2002
CVE-2005-2002 corresponds to a SQL injection in Mambo 4.5.2.2 and earlier through the user_rating parameter in content.php, allowing remote attackers to alter SQL queries. The CVE entry is supported by multiple connected advisories and scanners (e.g., OpenVAS/Nessus) referencing Mambo/Open Source...
MS05-025: Cumulative Security Update for Internet Explorer (883939)
The remote host is missing IE Cumulative Security Update 883939. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18490;...
