CVE-2002-1665

CVE-2002-1665 describes a buffer overflow in Yahoo! Messenger prior to February 2002, exploitable via a long set_buddygrp field that could cause a crash and potentially allow arbitrary code execution. The affected component is Yahoo! Messenger, with the root cause being an overflow in handling th...

CVE-2002-1664

Yahoo! Messenger vulnerability CVE-2002-1664: Before February 2002, remote attackers could add arbitrary users to another user’s buddy list, potentially exposing sensitive information. The NVD/CVE entries describe this as a buddy-list manipulation issue with partial confidentiality risk; no expli...

CVE-2002-1663

Monkey HTTP Server (monkeyd) is affected by CVE-2002-1663 through the Post_Method function in method.c, where a crafted POST request with an invalid or missing Content-Length header can crash the server and cause a denial of service. The vulnerability is reported for versions prior to 0.5.1. The ...

CVE-2002-1662

CVE-2002-1662 corresponds to multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.11. The issues allow remote attackers to execute arbitrary script on other clients via (1) search.php and (2) the "Your name" field during account registration. This is described in the NVD e...

CVE-2002-1660

CVE-2002-1660 : A vulnerability in calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter. Affected product: vBulletin (calendar.php) prior to version 2.2.0. Root cause: unsafely handling shell commands throug...

CVE-2002-1659

userprofile.asp in PortalApp 2.2 allows local users to gain privileges by modifying the userid variable...

CVE-2002-1659

CVE-2002-1659 affects PortalApp 2.2 where user_profile.asp allows local users to gain privileges by modifying the user_id variable. The root cause is manipulating a user_id parameter in the profile page, enabling local privilege escalation with complete impact on confidentiality, integrity, and a...

CVE-2004-2002

Technical details for CVE-2004-2002 are not publicly available in the provided documents; no information on affected products, versions, root cause, or fix is present. Monitor for updates.

CVE-2002-1661

The CVE-2002-1661 issue affects the Leafnode NNTP server, specifically versions 1.9.20 through 1.9.29, where processing a cross-posted article to multiple groups can trigger an infinite-loop DoS. The vulnerability occurs when one target group name is a prefix of another, and the article is reques...

CVE-2002-0646

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2002-0371. Reason: This candidate is a reservation duplicate of CVE-2002-0371. Notes: CVE-2002-0371 should be used instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidenta...

CVE-2002-1370

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2002-1367. Reason: This CAN was originally assigned for the theft of root certificates in CUPS, but it was later deemed to be a legitimate result of exploiting a different vulnerability, CVE-2002-1367, so it is not a distinct...

CVE-2002-1658

CVE-2002-1658 describes a buffer overflow in htdigest used by Apache 1.3.26/1.3.27 that may allow arbitrary code execution via a long user argument. The vulnerability is tied to htdigest functionality, with local access as the attack vector and no setuid/setgid context; escalation of privileges i...

Microsoft Jet Database - 'msjet40.dll' Code Execution (Reverse Shell) (2)

Microsoft Jet msjet40.dll Reverse Shell Exploit Based on the exploit written by S.Pearson and Python version by coded by Tal zeltzer XP/sp2 fixed version by Jean Luc import sys import struct Addresses are compatible with Windows XP Service Pack 1 and Service Pack 2 EIP = "\x47\xAD\x05\x30"; Use...

CVE-2002-1354

The CVE-2002-1354 entry concerns a directory traversal vulnerability in TYPSoft FTP Server 0.99.8. The flaw allows local users to list contents of arbitrary directories by abusing the cd/CWD command (dot dot dot). Affected software: TYPSoft FTP Server 0.99.8. Root cause: improper handling of dire...

CVE-2002-1370

CVE-2002-1370 is a placeholder/rejected candidate; the active vulnerability is CVE-2002-1367 in Common Unix Printing System (CUPS). CVE-2002-1367 describes remote addition of printers without authentication via a UDP packet, which can be leveraged to unauthorized activities such as theft of the l...

CVE-2002-1370

...

CVE-2002-1353

Affected software : LocalWEB2000 HTTP server 2.1.0. Vulnerability : Passwords are stored in plain text under the web document root in the file users.lst, enabling remote access to passwords via a direct request to users.lst. Impact : Confidentiality of passwords is partially compromised as inform...

CVE-2002-1312

The CVE-2002-1312 issue affects Linksys BEFW11S4 (Wireless AP Router) and BEFSR11/BEFSR41/BEFSRU31 routers with firmware prior to 1.43.3 when remote web management is enabled. A buffer overflow in the Web management interface can be triggered by a long password, leading to a denial-of-service (ro...

CVE-2002-1351

Buffer overflow in Melange Chat System 1.10 allows remote attackers to cause a denial of service chat server crash and possibly execute arbitrary code via the msgText buffer in the chatInterpretData function, as demonstrated via a long Nick nickname request...

Microsoft Security Bulletin MS05-023 Vulnerabilities in Microsoft Word May Lead to Remote Code Execution (890169)

Microsoft Security Bulletin MS05-023 Vulnerabilities in Microsoft Word May Lead to Remote Code Execution 890169 Issued: April 12, 2005 Version: 1.0 Summary Who should read this document: Customers who are using the affected versions of Microsoft Word should apply the appropriate security update a...