5356 matches found
CVE-2002-0398
CVE-2002-0398 affects Red-M 1050AP (Bluetooth Access Point) PPP server. The vulnerability allows bonded users to cause a denial of service and, per description, possibly execute arbitrary code via a long user name. This is tied to the PPP authentication path and the device’s management interface....
CVE-2002-1519
The CVE-2002-1519 entry describes a format-string vulnerability in the CLI interface of WatchGuard Firebox Vclass (3.2 and earlier) and RSSA Appliance 3.0.2. The issue arises from format string specifiers in the password parameter, allowing remote attackers to trigger denial of service and potent...
CVE-2002-1239
The CVE-2002-1239 issue affects QNX Neutrino RTOS 6.2.0 where a setuid root packager uses external commands without full paths, causing local privilege escalation by manipulating PATH to point to a malicious cp. The underlying problem is unvalidated PATH-based execution of external binaries, enab...
CVE-2002-1365
CVE-2002-1365 involves a heap-based buffer overflow in fetchmail 6.1.3 and earlier, caused by insufficient buffer space when expanding local addresses in mail headers (missing space for the hostname after an address). This can allow a remote attacker to execute arbitrary code with the privileges ...
CVE-2002-1248
The CVE-2002-1248 issue affects Northern Solutions’ Xeneo Web Server (notably versions 2.1.0.0 and 2.0.759.6, prior to 2.1.5). The vulnerability arises from improper handling of a specially crafted web request for a “%” URI, allowing remote attackers to trigger a denial of service (crash). OpenVA...
CVE-2002-1211
Prometheus 6.0 and earlier is vulnerable to remote PHP code execution via a tainted PROMETHEUS_LIBRARY_BASE that can be set to a remote server and loaded by index.php, install.php, or test_*.php. The underlying flaw is the conditional inclusion of files (autoload.lib, prometheus-lib.path) based o...
CVE-2002-1179
Buffer overflow in the S/MIME Parsing capability of Microsoft Outlook Express 5.5 and 6.0 is triggered when a user views or previews a digitally signed email with a long From address, allowing potential remote code execution. The root cause is an overflow in the S/MIME parsing path, leading to ar...
CVE-2002-0844
CVE-2002-0844 describes an off-by-one overflow in the CVS PreservePermissions code path within rcs.c for CVSD before 1.11.2, enabling local users to execute arbitrary code. Affected software is CVSD CVS prior to version 1.11.2; remediation is to upgrade to 1.11.2 or later (as indicated by multipl...
CVE-2002-1375
CVE-2002-1375 affects MySQL 3.x before 3.23.54 and 4.x up to 4.0.6, where the COM_CHANGE_USER command can be exploited by remote attackers to execute arbitrary code via a long response. The underlying issue is triggered during authentication/response handling in the COM_CHANGE_USER flow, enabling...
CVE-2002-1540
The vulnerability CVE-2002-1540 affects Symantec Norton AntiVirus Corporate Edition 7.5.x (pre-7.5.1 Build 62) and 7.6.x (pre-7.6.1 Build 35a), where the client runs winhlp32 with elevated privileges, enabling local privilege escalation by using certain winhlp32 features. Impact is local privileg...
CVE-2002-0969
CVE-2002-0969 : A buffer overflow in the MySQL daemon (mysqld) on Win32 allows local code execution via a long datadir parameter in my.ini, when ACLs grant Full Control to Everyone. Affected: MySQL 3.23.x before 3.23.50 and 4.0 beta before 4.0.2. Root cause: overflow in handling the datadir value...
CVE-2002-1113
CVE-2002-1113 affects Mantis Control/issue tracker: summary_graph_functions.php in Mantis ≤ 0.17.3 allows remote code execution by altering g_jpgraph_path to point to PHP code. The root cause is the g_jpgraph_path parameter not being validated, enabling an attacker to reference arbitrary PHP as c...
CVE-2002-1230
CVE-2002-1230 affects Windows NT 4.0/Terminal Server Edition, Windows 2000, and Windows XP via NetDDE Agent exploiting a WM_TIMER handling flaw. An untrusted WM_TIMER sequence (after WM_COPYDATA) could trigger arbitrary code execution with LocalSystem privileges, as described in MS02-071. The vul...
CVE-2002-0627
The Web server for Polycom ViewStation before 7.2.4 allows remote attackers to bypass authentication and read files via Unicode encoded requests...
CVE-2002-1549
CVE-2002-1549 concerns Light HTTPD (lhttpd) 0.1, where a buffer overflow in processing a long HTTP GET request can allow remote code execution. The issue is tied to the lhttpd 0.1 HTTP server and is documented across multiple sources in the connected set, including CVE records and OpenVAS entries...
CVE-2002-1251
CVE-2002-1251 covers a buffer overflow in log2mail prior to version 0.2.5.1 that enables remote execution of arbitrary code via a long log message. Documents corroborate that log2mail runs as root and that a remote, crafted log could exploit the overflow. Affected software is log2mail; root cause...
CVE-2002-1158
CVE-2002-1158 affects the Canna server (up to version 3.5b2). The vulnerability is a buffer/heap overflow in the irw_through function, allowing a local attacker to execute arbitrary code with the privileges of the bin user. Public documentation in JVNDB confirms the issue and impact; Debian/DSA-2...
CVE-2002-1250
CVE-2002-1250 describes a buffer overflow in Abuse 2.00 and earlier that allows local users to gain root privileges via a long -net command line argument. The entry identifies the affected software/versions and the root cause (buffer overflow due to an argument length). The provided documents do ...
CVE-2002-1197
CVE-2002-1197 affects Bugzilla versions 2.14.x before 2.14.4 and 2.16.x before 2.16.1. A flaw in bugzilla_email_append.pl allows remote attackers to execute arbitrary code by injecting shell metacharacters into a system call to processmail. The vulnerability is introduced in the email processing ...