CVE-2002-1251

CVE-2002-1251 covers a buffer overflow in log2mail prior to version 0.2.5.1 that enables remote execution of arbitrary code via a long log message. Documents corroborate that log2mail runs as root and that a remote, crafted log could exploit the overflow. Affected software is log2mail; root cause...

CVE-2002-1158

CVE-2002-1158 affects the Canna server (up to version 3.5b2). The vulnerability is a buffer/heap overflow in the irw_through function, allowing a local attacker to execute arbitrary code with the privileges of the bin user. Public documentation in JVNDB confirms the issue and impact; Debian/DSA-2...

CVE-2002-1250

CVE-2002-1250 describes a buffer overflow in Abuse 2.00 and earlier that allows local users to gain root privileges via a long -net command line argument. The entry identifies the affected software/versions and the root cause (buffer overflow due to an argument length). The provided documents do ...

CVE-2002-1197

CVE-2002-1197 affects Bugzilla versions 2.14.x before 2.14.4 and 2.16.x before 2.16.1. A flaw in bugzilla_email_append.pl allows remote attackers to execute arbitrary code by injecting shell metacharacters into a system call to processmail. The vulnerability is introduced in the email processing ...

CVE-2002-1253

Technical details for CVE-2002-1253 are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2002-0895

The CVE-2002-0895 issue affects MatuFtpServer 1.1.3.0 (1.1.3). It is a buffer overflow in the FTP server’s handling of the PASS command that can be triggered remotely, leading to denial of service and possibly arbitrary code execution. Other details such as affected subversions, root cause specif...

CVE-2002-1349

Summary: CVE-2002-1349 describes a local buffer overflow in Trend Micro PC-cillin’s pop3trap.exe, affecting PC-cillin 2000, 2002, and 2003. The vulnerability arises from a long input string to TCP port 110 (POP3) in the local POP3 proxy, allowing a local attacker to execute arbitrary code with th...

CVE-2002-1118

Oracle TNS Listener (Oracle Net Services) on Oracle 8i (8.1.x), 9i (9.0.x, 9.2.x) is vulnerable to a remote DoS via the SERVICE_CURLOAD command. Exploitation can cause the listener to hang or crash. Oracle has released patches (Oracle Security Alert #42, Rev1); Rapid7 advisory R7-0006 documents t...

CVE-2004-0121

Technical details about CVE-2004-0121 are not publicly available in the provided connected documents. The material only restates the issue in Outlook 2002 without specifics. Monitor for updates.

CVE-2002-1148

The default servlet org.apache.catalina.servlets.DefaultServlet in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct request to the servlet...

CVE-2002-1547

Technical details for CVE-2002-1547 are not provided in the connected documents. The supplied data is limited to the initial description. Monitor for updates in case concrete details (affected products, impact, remediation) are published.

CVE-2002-1350

CVE-2002-1350 affects tcpdump: the BGP decoding routines in tcpdump 3.6.x before 3.7 do not copy data correctly, allowing remote attackers to trigger a denial of service (application crash). The issue arises from incorrect bounds checking when copying BGP data. Vulnerable product is tcpdump; affe...

CVE-2002-1132

SquirrelMail 1.2.7 and earlier allows remote attackers to determine the absolute pathname of the options.php script via a malformed optpage file argument, which generates an error message when the file cannot be included in the script...

CVE-2002-1394

Apache Tomcat 4.x: vulnerability allows remote disclosure of server source code when using both the invoker servlet and the default servlet (Tomcat 4.0.5 and earlier). Root cause is exposure of server files through misconfigured/default servlet handling; impact is read access to source code and p...

CVE-2002-1430

Unknown vulnerability in Sympoll 1.2 allows remote attackers to read arbitrary files when registerglobals is enabled, possibly by modifying certain PHP variables through URL parameters...

CVE-2002-1242

CVE-2002-1242 describes an SQL injection vulnerability in PHP-Nuke prior to 6.0 that allows remote authenticated users to modify the database and gain privileges via the bio parameter in modules.php. Root cause: unvalidated input in the bio field enables injection into SQL statements. Affected so...

CVE-2002-0842

CVE-2002-0842 is a format-string vulnerability in Oracle’s mod_dav extension (used for logging gateway errors) that could enable remote code execution via a crafted destination URI triggering a 502 Bad Gateway. The vulnerability affects Oracle9i Application Server 9.0.2 (and related mod_dav code ...

CVE-2002-1270

Mac OS X 10.2.2 allows local users to read files that only allow write access via the mapfd Mach system call...

CVE-2002-0672

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to restore the phone to factory defaults without authentication via a menu option, which sets the administrator password to null...

CVE-2002-1222

The CVE-2002-1222 entry describes a vulnerability in Cisco Catalyst switches running CatOS 5.4–7.3 where the embedded HTTP server is vulnerable to a buffer overflow. An unauthenticated remote attacker can trigger a denial of service (reset/reboot) by sending a long HTTP request, as indicated by t...