CVE-2002-1312

The CVE-2002-1312 issue affects Linksys BEFW11S4 (Wireless AP Router) and BEFSR11/BEFSR41/BEFSRU31 routers with firmware prior to 1.43.3 when remote web management is enabled. A buffer overflow in the Web management interface can be triggered by a long password, leading to a denial-of-service (ro...

CVE-2002-1353

Affected software : LocalWEB2000 HTTP server 2.1.0. Vulnerability : Passwords are stored in plain text under the web document root in the file users.lst, enabling remote access to passwords via a direct request to users.lst. Impact : Confidentiality of passwords is partially compromised as inform...

CVE-2005-0558: Undefined Security Weakness

Buffer overflow in Microsoft Word 2000, Word 2002, and Word 2003 allows remote attackers to execute arbitrary code via a crafted document...

Microsoft Security Bulletin MS05-023 Vulnerabilities in Microsoft Word May Lead to Remote Code Execution (890169)

Microsoft Security Bulletin MS05-023 Vulnerabilities in Microsoft Word May Lead to Remote Code Execution 890169 Issued: April 12, 2005 Version: 1.0 Summary Who should read this document: Customers who are using the affected versions of Microsoft Word should apply the appropriate security update a...

Microsoft Word Malformed Document Buffer Overflow Vulnerability

Description Microsoft Word is prone to a buffer overflow vulnerability. This issue presents itself when Microsoft Word attempts to parse a malformed document. This could result in execution of arbitrary code in the context of a user who opens the malicious document. Internet Explorer is a likely...

Microsoft Word Unspecified Document File Buffer Overflow Vulnerability

Description Microsoft Word is affected by a buffer overflow vulnerability. This issue is due to a failure in the application to do proper bounds checking on user-supplied data. Microsoft has not specified exactly where the error may occur. This could result in execution of arbitrary code in the...

CVE-2005-0921

Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy...

CVE-2005-0921: Undefined Security Weakness

Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy...

CVE-2002-1638

...

CVE-2002-1648

Cross-site request forgery CSRF vulnerability in compose.php in SquirrelMail before 1.2.3 allows remote attackers to send email as other users via an IMG URL with modified sendto and subject parameters...

CVE-2002-1637

Oracle 9i Application Server (9iAS) is affected by CVE-2002-1637 due to default credentials configured across multiple components. Over 160 usernames/passwords are present (e.g., SYS, SYSTEM, AQJAVA, OWA, IMAGEUSER, USER1, USER2, PLSQL, DEMO, FINANCE), which can allow privilege escalation for att...

CVE-2002-1647

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2002-1642

This CVE affects PostgreSQL 7.2.1 and 7.2.2. The vulnerability arises in the VACUUM path, where local users can delete transaction log data (pg_clog), leading to a denial of service and potential data loss. The connected Red Hat/RH and NVD sources corroborate that the issue concerns local access ...

CVE-2002-1643

CVE-2002-1643 affects RealNetworks Helix Universal Server 9.0 (9.0.2.768). The vulnerability consists of multiple buffer overflows that enable remote code execution via: (1) a long Transport field in a SETUP RTSP request, (2) a DESCRIBE RTSP request with a long URL argument, or (3) two simultaneo...

CVE-2002-1645

The CVE-2002-1645 entry concerns SSH Secure Shell for Workstations client versions 3.1 to 3.2.0 with a buffer overflow in the URL catcher feature. The vulnerability allows remote attackers to execute arbitrary code by supplying a long URL. The root cause is a flaw in handling long URLs in the URL...

CVE-2002-1650

CVE-2002-1650 impacts SquirrelMail’s spell checker plugin (check_me.mod.php) in all releases before 1.2.3. The underlying issue is a flaw in handling the sqspell_command parameter, which allows remote attackers to execute arbitrary commands. The vulnerability enables remote code execution with ne...

CVE-2002-1646

SSH Secure Shell for Servers versions 3.0.0–3.1.1 allow remote attackers to override AllowedAuthentications, permitting password or other less secure authentication schemes instead of those configured. This can enable unauthorized access via password-based authentication as described in multiple ...

CVE-2002-1648

CVE-2002-1648 describes a CSRF vulnerability in SquirrelMail’s compose.php prior to version 1.2.3. An attacker can trigger a request via an IMG URL with manipulated send_to and subject parameters to send mail as another user, exploiting cookie-based authentication. Affected software: SquirrelMail...

CVE-2002-1652

CVE-2002-1652 concerns CGIEmail’s CGICso (cgicso.c) in CGIEmail 1.6. The issue is a buffer overflow in cgicso.c triggered by a long query parameter, leading to remote denial of service and the possibility of arbitrary code execution. The OpenVAS entry corroborates a vulnerability in CGIEmail’s cg...

CVE-2002-1649

CVE-2002-1649 affects SquirrelMail prior to 1.2.3, in read_body.php. It is a Cross-site Scripting (XSS) flaw allowing remote attackers to execute arbitrary JavaScript via a javascript: URL in an IMG tag. No exploitation details are provided in the documents. Remediation: upgrade to SquirrelMail 1...