CVE-2002-1529

CVE-2002-1529 describes a cross-site scripting (XSS) vulnerability in the administrative web interface (STEMWADM) of SurfControl SuperScout Email Filter. The flaw arises in the msgError.asp page, where an attacker can inject arbitrary script or HTML through the Reason parameter. The available doc...

CVE-2002-1514

The CVE-2002-1514 entry concerns gds_lock_mgr in Borland InterBase . The vulnerability allows local users to overwrite files and gain privileges via a symlink attack on a temporary file named isc_init1.X , demonstrated by modifications to the xinetdbd file. The provided records indicate a local a...

CVE-2002-1496

CVE-2002-1496 describes a heap-based buffer overflow in Null HTTP Server 0.5.0 and earlier, triggered by a negative Content-Length HTTP header. The vulnerability allows remote attackers to execute arbitrary code. The vulnerability is reported in both the original CVE listing and in multiple advis...

CVE-2002-1468

CVE-2002-1468 describes a buffer overflow in errpt on AIX 4.3.3 that allows local users to execute arbitrary code as root. Affected product: AIX 4.3.3. Impact: local privilege escalation to root. The connected documents provide the vulnerability description but do not include exploit details or a...

CVE-2002-1364

CVE-2002-1364 describes a buffer overflow in traceroute-nanog’s get_origin() function triggered by long WHOIS responses. This leads to arbitrary code execution and potential privilege escalation on affected systems. Public advisories (Debian DSA-254-1) note the issue was fixed in traceroute-nanog...

CVE-2002-1361

CVE-2002-1361 affects Sun Cobalt RaQ4 with the Security Hardening Patch (SHP) installed. The overflow.cgi CGI script did not properly filter input, allowing a POST to set the email parameter to shell metacharacters and enabling remote code execution with superuser privileges. Public sources descr...

CVE-2002-1169

The CVE-2002-1169 entry affects IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x prior to 4.0.1.26. The underlying issue is a malformed HTTP request to helpout.exe that omits the HTTP version number, causing ibmproxy.exe to crash and resulting in a denial of service. Connected sources (Op...

CVE-2002-0866

CVE-2002-0866 affects Microsoft's Java VM JDBC classes, where JDBC functionality could be misused by a Java applet to load and execute a DLL via com.ms.jdbc.odbc.JdbcOdbc, with the DLL name terminated by a null string. The issue enables remote execution of DLLs from the client system, as describe...

CVE-2002-0445

The CVE concerns article.php in PHP FirstPost 0.1, where an invalid post number in the post parameter causes an error message that leaks the server’s full pathname. This constitutes an information disclosure vulnerability in the PHP FirstPost 0.1 package. The available records do not provide addi...

CVE-2002-1521

CVE-2002-1521 concerns Web Server 4D (WS4D) 3.6 or lower, which stores usernames and passwords in plaintext in the Ws4d.4DD file. The vulnerability enables a local attacker to gain privileges on the affected host by accessing the credential data. OpenVAS entries corroborate the 3.6-era behavior a...

CVE-2002-1396

CVE-2002-1396 : Heap-based buffer overflow in PHP’s wordwrap function. Affects PHP versions after 4.1.2 and before 4.3.0; exploitation may cause a denial of service or allow arbitrary code execution. Connected sources corroborate the same description across multiple advisories, indicating the vul...

CVE-2002-1371

CVE-2002-1371 affects Common Unix Printing System (CUPS) versions 1.1.14 to 1.1.17. The vulnerability stems from improper handling of zero-length GIF images in filters/image-gif.c, allowing a remote attacker to execute arbitrary code via modified chunk headers (e.g., nogif). Public advisories (De...

CVE-2002-0985

CVE-2002-0985 : Argument injection vulnerability in PHP 4.x mail() up to 4.2.2 may bypass safe_mode and alter the MTA command-line arguments (e.g., the 5th argument), potentially changing MTA behavior and enabling command execution. OpenVAS and Debian advisories confirm the issue affects PHP4.x a...

CVE-2002-1255

Microsoft Outlook 2002 allows remote attackers to cause a denial of service repeated failure via an email message with a certain invalid header field that is accessed using POP3, IMAP, or WebDAV, aka "E-mail Header Processing Flaw Could Cause Outlook 2002 to Fail."...

CVE-2002-1469

scponly does not properly verify the path when finding the 1 scp or 2 sftp-server programs, which could allow remote authenticated users to bypass access controls by uploading malicious programs and modifying the PATH variable in $HOME/.ssh/environment to locate those programs...

CVE-2002-0546

CVE-2002-0546: In the Winamp mini-browser (versions 2.78 and 2.79), the HTML/JS execution vulnerability is triggered by crafted ID3v1/ID3v2 tags in MP3 files, allowing remote script execution. The root cause is cross-site scripting within the mini-browser component when processing MP3 metadata. E...

CVE-2002-0090

CVE-2002-0090 concerns the Solaris 8 Low BandWidth X proxy (lbxproxy). The available connected documents state a buffer overflow in lbxproxy triggered by a long display command line option, allowing a local attacker to execute arbitrary code. The impact is described as potentially gaining root pr...

CVE-2002-1528

CVE-2002-1528 concerns the MondoSearch product where the msmmask.exe CGI can disclose script source via the mask parameter. The vulnerability affects MondoSearch 4.4 and older builds, enabling an attacker to read files from the webserver’s directories, which is an information disclosure issue. Op...

CVE-2002-1272

Alcatel OmniSwitch 7700/7800 with AOS 5.1.1 contains a backdoor Telnet server on TCP 6778 that was left in code from development, allowing remote privileged access. Affected devices can be compromised to gain full admin control. Remediation per CERT/vendor guidance: upgrade to AOS 5.1.1.R02 or 5....

CVE-2002-1099

Cisco VPN 3000 Concentrator versions 2.2.x and 3.x prior to 3.5.3 are vulnerable to an information disclosure allowing remote attackers to access certain HTML pages without authentication. The issue compromises confidentiality (partial) and is exploitable over the network with low complexity and ...