CVE-2002-0380

CVE-2002-0380 is a vulnerability in tcpdump up to version 3.6.2 where handling NFS packets can trigger a buffer overflow, potentially allowing denial of service or arbitrary code execution. Connected sources (Debian, Red Hat, OSV, NVD) reiterate the same issue and cite that updated packages/patch...

CVE-2002-0090

CVE-2002-0090 concerns the Solaris 8 Low BandWidth X proxy (lbxproxy). The available connected documents state a buffer overflow in lbxproxy triggered by a long display command line option, allowing a local attacker to execute arbitrary code. The impact is described as potentially gaining root pr...

CVE-2002-1381

Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code by modifying the pidfilepath value...

CVE-2002-1221

CVE-2002-1221 affects BIND 8.x through 8.3.3; remote attacker can cause a denial of service (crash) by sending SIG RR elements with invalid expiry times. The invalid entries are removed from the internal BIND database and can later trigger a null dereference. Debian and related advisories (DSA-19...

CVE-2002-1277

CVE-2002-1277 refers to a buffer overflow in Window Maker (wmaker) 0.80.0 and earlier in its image handling code. The vulnerability arises when Window Maker allocates a buffer based on image width and height without proper overflow checks, potentially allowing remote attackers to execute arbitrar...

CVE-2002-0850

The CVE-2002-0850 issue affects PGP Corporate Desktop 7.1.1 . A buffer overflow occurs when handling an encrypted document with a very long filename, which can be exploited to cause a crash or remote code execution when the file is decrypted. Exploitation scenarios described in the accompanying a...

CVE-2002-0400

The CVE-2002-0400 issue affects ISC BIND 9 up to 9.2.0 (pre-9.2.1). A remote attacker can cause a DoS shutdown by sending a malformed DNS packet that triggers an internal error in dns_message_findtype() when the rdataset parameter is not NULL. Impact is denial of service (availability impact: par...

CVE-2002-1264

The vulnerability CVE-2002-1264 affects the Oracle iSQL*Plus web application component of Oracle 9 database server. A buffer overflow can be triggered by a long USERID parameter in the isqlplus URL, allowing remote code execution. The description does not specify affected versions beyond Oracle 9...

CVE-2002-1182

CVE-2002-1182 affects Microsoft IIS 5.0 and 5.1. A remote attacker can trigger a denial of service by sending malformed WebDAV requests that cause IIS to allocate an unusually large amount of memory, potentially crashing the server. The vulnerability is characterized as a memory allocation issue ...

CVE-2002-1142

CVE-2002-1142 is a heap-based buffer overflow in the MDAC RDS component caused by an unchecked buffer in the RDS Data Stub when handling malformed HTTP requests. Affected: MDAC versions 2.1–2.6 and Internet Explorer 5.01–6.0. Impact: remote code execution with the privileges of the service (e.g.,...

CVE-2002-1260

The CVE-2002-1260 vulnerability affects Microsoft Virtual Machine (VM) 5.0.3805 and earlier, where the JDBC APIs can be exploited by an untrusted Java applet to bypass security checks and access database contents. This is a remote, network‑vector issue that allows partial confidentiality/integrit...

CVE-2002-1407

Summary of CVE-2002-1407 : TinySSL 1.02 and earlier does not verify the Basic Constraints for an intermediate CA–signed certificate, which enables a remote attacker to perform a man-in-the-middle attack to spoof certificates of trusted sites. The provided documents describe the affected software,...

CVE-2002-1323

CVE-2002-1323 concerns Safe.pm (versions <= 2.0.7) used with Perl

CVE-2002-1284

Technical details, affected versions, and exact impact are not publicly provided in the available documents. Monitor for updates from official advisories to obtain concrete information.

CVE-2002-1196

CVE-2002-1196 affects Bugzilla: when using the “usebuggroups” feature and more than 47 groups are specified, editproducts.cgi in Bugzilla 2.14.x (before 2.14.4) and 2.16.x (before 2.16.1) does not correctly calculate bit values for large numbers, allowing extra permissions to be granted via Perl ...

CVE-2002-1510

CVE-2002-1510 affects XFree86/xdm: when authComplain is false, arbitrary attackers can connect to the X server if the xdm auth directory does not exist. The vulnerability is documented in multiple sources (e.g., Red Hat advisories RHSA-2003:064/065) and is acknowledged in CVE/NVD listings; the is...

CVE-2002-0673

CVE-2002-0673 concerns Pingtel xpressa SIP phones (PX-1, software 1.2.5–1.2.7.4). The vulnerability enables attackers with physical access to log out the current user via the enrollment process and re-register the phone using MyPingtel Sign-In, gaining remote access and allowing unauthorized acti...

CVE-2002-0395

CVE-2002-0395 affects the Red-M 1050 Bluetooth Access Point: its TFTP server supply chain cannot be disabled, enabling an attacker to crack the administration password via UDP-based attacks. The vulnerability comes from the TFTP server being always active, which, combined with weak admin-password...

CVE-2002-1348

CVE-2002-1348 affects w3m prior to 0.3.2.2, where HTML escaping in IMG ALT attributes is insufficient, potentially allowing remote attackers to access local files or cookies. Connected advisories (Debian DSA for w3m/w3mmee) confirm multiple Debian advisories addressing this vulnerability and indi...

CVE-2002-0866

CVE-2002-0866 affects Microsoft's Java VM JDBC classes, where JDBC functionality could be misused by a Java applet to load and execute a DLL via com.ms.jdbc.odbc.JdbcOdbc, with the DLL name terminated by a null string. The issue enables remote execution of DLLs from the client system, as describe...