CVE-2002-0850

The CVE-2002-0850 issue affects PGP Corporate Desktop 7.1.1 . A buffer overflow occurs when handling an encrypted document with a very long filename, which can be exploited to cause a crash or remote code execution when the file is decrypted. Exploitation scenarios described in the accompanying a...

CVE-2002-1137

Buffer overflow in the Database Console Command DBCC that handles user inputs in Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine MSDE 1.0 and Microsoft Desktop Engine MSDE 2000, allows attackers to execute arbitrary code via a long SourceDB argument in a "non-SQL OLEDB data...

CVE-2002-0387

CVE-2002-0387 refers to a buffer overflow in the gxnsapi6.dll NSAPI plugin of the Sun ONE Application Server’s Connector Module. The overflow occurs when handling a long HTTP request URL, enabling a remote attacker to potentially execute arbitrary code on affected hosts. The issue affects Sun ONE...

CVE-2002-1296

Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via ".." sequences in the pcclname field of a pcinfot structure, which cause priocntl to load a malicious kernel module...

CVE-2002-1521

CVE-2002-1521 concerns Web Server 4D (WS4D) 3.6 or lower, which stores usernames and passwords in plaintext in the Ws4d.4DD file. The vulnerability enables a local attacker to gain privileges on the affected host by accessing the credential data. OpenVAS entries corroborate the 3.6-era behavior a...

CVE-2002-1107

Affected software: Cisco VPN Client (2.x.x and 3.x before 3.5.2B). Issue: inadequate randomness in generated numbers. Impact: may enable spoofing or related attacks as described in CVE-2002-1107. Status in provided documents: no explicit exploit details or remediation version are listed; no addit...

CVE-2002-1396

Heap-based buffer overflow in the wordwrap function in PHP after 4.1.2 and before 4.3.0 may allow attackers to cause a denial of service or execute arbitrary code...

CVE-2002-0384

CVE-2002-0384 stems from a buffer overflow in the Jabber plug-in of the Gaim client, affecting versions prior to 0.58. The issue enables remote code execution by an attacker via the Jabber plug-in. Public advisories (e.g., RHSA-2002:122) advise updating to 0.59 (or later), which is no longer vuln...

CVE-2002-1178

The CVE-2002-1178 entry concerns a directory traversal vulnerability in the Jetty HTTP server’s CGIServlet (affected: Jetty CGIServlet prior to 4.1.0). An attacker can craft requests to the cgi-bin directory using ..\ sequences to trigger arbitrary command execution. The provided documents identi...

CVE-2002-1178

Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands via ..\ dot-dot backslash sequences in an HTTP request to the cgi-bin directory...

CVE-2002-0400

ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service shutdown via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dnsmessagefindtype function in message.c is not NULL, aka DoSfindtype...

CVE-2002-0443

Microsoft Windows 2000 allows local users to bypass the policy that prohibits reusing old passwords by changing the current password before it expires, which does not enable the check for previous passwords...

CVE-2002-1230

NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via "shatter" style attack by sending a WMCOPYDATA message followed by a WMTIMER message, as demonstrated by GetAd, aka "Flaw in Windows WMTIMER...

CVE-2002-1516

rpcbind in SGI IRIX, when using the -w command line switch, allows local users to overwrite arbitrary files via a symlink attack...

CVE-2002-1381

Exim contains a format string vulnerability in daemon.c that affects Exim 4.x up to 4.10 and 3.x up to 3.36. The root cause is a format string flaw that allows an administrator (local) to execute arbitrary code by modifying the pid_file_path value. The connected records confirm the affected versi...

CVE-2002-1318

CVE-2002-1318 affects Samba 2.2.2 through 2.2.6. The vulnerability is a buffer overflow in the nttrans path during handling of encrypted password change requests, triggered when a DOS codepage string is converted to a little-endian UCS2 Unicode string. This can lead to denial of service and may a...

CVE-2002-0844

Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to execute arbitrary code...

CVE-2002-1365

Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the "@" character when determining buffer lengths for local addresses, which allows remote attackers to execute arbitrary code via a header with a large number of local addresses...

CVE-2002-1369

CVE-2002-1369 affects Common Unix Printing System (CUPS) 1.1.14–1.1.17, where an unsafe use of strncat while processing the options string enables a remote attacker to cause a buffer overflow and execute arbitrary code. OpenVAS and Debian security advisories (DSA-232-1/232-2) corroborate this fam...

CVE-2002-1277

Buffer overflow in Window Maker wmaker 0.80.0 and earlier may allow remote attackers to execute arbitrary code via a certain image file that is not properly handled when Window Maker uses width and height information to allocate a buffer...