CVE-2002-0630

The CVE-2002-0630 entry documents a vulnerability in the Telnet service of Polycom ViewStation, affected when running versions before 7.2.4. The issue allows remote attackers to cause a crash (denial of service) via long or malformed ICMP packets. No exploitation details or explicit remediation a...

CVE-2002-1350

The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers to cause a denial of service application crash...

CVE-2002-1245

CVE-2002-1245 concerns LuxMan 0.41 where a user-supplied PATH can make a local attacker execute a Trojan gzip, enabling modification of /dev/mem and local root access. Debian advisories (DSA-189-1) fixed LuxMan with package updates (e.g., LuxMan 0.41-17.1 and 0.41-19); OpenVAS/DSA entries corrobo...

CVE-2002-1224

Directory traversal vulnerability in kpf for KDE 3.0.1 through KDE 3.0.3a allows remote attackers to read arbitrary files as the kpf user via a URL with a modified icon parameter...

CVE-2002-1437

Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to read arbitrary files via an HTTP request containing "..%5c" URL-encoded dot-dot backslash sequences...

CVE-2002-1109

securetar, as used in AMaViS shell script 0.2.1 and earlier, allows users to cause a denial of service CPU consumption via a malformed TAR file, possibly via an incorrect file size parameter...

CVE-2002-1197

bugzillaemailappend.pl in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, allows remote attackers to execute arbitrary code via shell metacharacters in a system call to processmail...

CVE-2002-1223

Buffer overflow in DSC 3.0 parser from GSview, as used in KGhostView in KDE 1.1 and KDE 3.0.3a, may allow attackers to cause a denial of service or execute arbitrary code via a modified .ps PostScript input file...

CVE-2002-1311

Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files...

CVE-2002-1403

CVE-2002-1403 affects the dhcpcd DHCP client daemon up to version 1.3.22. The vulnerability arises from how quotes in the DHCP server’s options are processed, allowing a local user to cause an arbitrary command to execute via shell metacharacters fed from a dhcpd .info script into a .exe script. ...

CVE-2002-1443

CVE-2002-1443 affects Google Toolbar 1.1.58 and earlier. The vulnerability arises from an onkeydown event handler that allows remote websites to monitor a user’s input in the toolbar. The provided documents identify the affected product and the root cause (the event handler) and state the impact ...

CVE-2002-1117

Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares...

CVE-2002-1391

The CVE-2002-1391 issue affects mgetty prior to 1.1.29, where a buffer overflow in the internal handling of Caller ID CallerName could allow a remote attacker to cause a Denial of Service and potentially execute arbitrary code via a long Caller Name. The vulnerability is documented in multiple ad...

CVE-2002-0396

The CVE-2002-0396 issue affects Red-M 1050 AP web management server. It does not require site-wide credentials for every request; session state is not tied to a logged-in user, enabling an attacker from the same IP as a valid session to access the management interface. The impact is described as ...

CVE-2002-0692

The CVE-2002-0692 issue concerns a buffer overflow in Microsoft FrontPage Server Extensions’ SmartHTML interpreter (shtml.dll). FPSE 2000 is affected by denial of service (CPU consumption); FPSE 2002 can allow remote code execution via a crafted web-file request. The vulnerability is tied to the ...

CVE-2002-1313

Summary: CVE-2002-1313 affects nullmailer 1.00RC5 and earlier. When an email is delivered to a local user that does not exist, nullmailer encounters a local error and stops delivering mail for all users, causing a denial of service. This is a local-privilege-relevant impact vector (local access r...

CVE-2002-1123

CVE-2002-1123 is a buffer overflow in the authentication function of Microsoft SQL Server 2000 and MSDE 2000 triggered by a long TCP 1433 request, enabling remote code execution. Public writeups and scanners (MS02-056, Metasploit/MSF module, OpenVAS checks) confirm the existence of the Hello Over...

CVE-2002-1119

CVE-2002-1119 affects Python (os._execvpe in os.py) in Python 2.2.1 and earlier, where temporary files are created with predictable names, enabling local users to execute arbitrary code via a symlink attack. Connected sources (Debian DSAs and Red Hat/Mandrake/Nessus entries) confirm the insecure ...

CVE-2002-1157

CVE-2002-1157 describes a Cross-site scripting vulnerability in the Apache mod_ssl module (versions 2.8.9 and earlier). The issue occurs when UseCanonicalName is Off and wildcard DNS is enabled, allowing a remote attacker to cause the server name in an HTTPS response to be used in a self-referenc...

CVE-2002-1363

CVE-2002-1363 affects libpng 1.2.5 and earlier, where incorrect offset calculations in the PNG library can cause a remote crash and potentially arbitrary code execution via a buffer overflow in row buffers. The vulnerability is evidenced in multiple advisories (Red Hat RHSA, Debian DSA) and is re...