CVE-2002-1420

Integer signedness error in select on OpenBSD 3.1 and earlier allows local users to overwrite arbitrary kernel memory via a negative value for the size parameter, which satisfies the boundary check as a signed integer, but is later used as an unsigned integer during a data copying operation...

CVE-2002-1220

BIND 8.3.x–8.3.3 is affected by CVE-2002-1220: remote denial of service (termination due to assertion failure) triggered by a request for a non-existent subdomain containing an OPT RR with a large UDP payload. The available sources confirm the affected range and the impact but do not provide expl...

CVE-2002-1373

CVE-2002-1373 is a signed-integer vulnerability in the COM_TABLE_DUMP package of MySQL 3.x to 3.23.53a, allowing remote attackers to cause a denial of service (crash/hang) by supplying large negative integers to a memcpy call. Public fixes upgrade to MySQL 3.23.54a (and related 3.23.54a/4.x fixes...

CVE-2002-1438

CVE-2002-1438 affects Novell NetWare 5.1/6 with Perl 5.003; the web handler discloses the Perl version via -v, causing information disclosure. The OpenVAS/Nessus entries describe broader NetWare Perl-related issues (code execution via HTTP POST) for 5.x/6.x, but the CVE itself is limited to versi...

CVE-2002-1425

CVE-2002-1425 describes a directory traversal vulnerability in the munpack utility (part of mpack) versions 1.5 and earlier. The issue allows remote attackers to create new files in the parent directory by supplying a filename containing a ../ sequence during extraction. Debian DSAs and OpenVAS e...

CVE-2002-1159

CVE-2002-1159 affects the Canna server (Canna) up to version 3.6 and earlier, where improper validation of requests allows remote attackers to cause a denial of service or information leak. This vulnerability is documented across multiple sources (Debian DSA-224, RHSA-2002:261) and is part of a d...

CVE-2002-1448

CVE-2002-1448 affects Avaya Cajun family devices (P330, P130, M770-ATM) with an undocumented SNMP read/write community string ('NoGaH$@!'), allowing remote attackers to gain administrative privileges. The vulnerability is supported by the CVSS2 base score of 7.5 (Network vector, Low attack comple...

CVE-2002-0990

Technical details about CVE-2002-0990 are not publicly available in the provided documents. The description notes a DoS via DNS timeouts in Symantec gateway/firewall products, but no affected versions, exploit status, or mitigations are disclosed here. Monitor for updates.

CVE-2002-1517

The vulnerability CVE-2002-1517 affects IRIX 6.5: the fsr_efs component allows local users to perform unauthorized file activities via a symlink attack, possibly involving the .fsrlast file. The affected component is fsr_efs in IRIX 6.5, with a local attack vector and partial impacts to confident...

CVE-2002-1255

Microsoft Outlook 2002 is affected by an E-mail Header Processing vulnerability where an email containing a certain invalid header field, accessed via POP3, IMAP, or WebDAV, can cause a denial of service (repeated failure). The underlying issue is in how the header is processed, leading to availa...

CVE-2002-1477

CVE-2002-1477 affects Cacti polished prior to 0.6.8. The issue is in graphs.php where an attacker with authenticated Cacti admin privileges can inject shell metacharacters into the title during edit mode to execute arbitrary commands. This is a remote-authenticated access risk with potential comm...

CVE-2002-0193

CVE-2002-0193 affects Microsoft Internet Explorer 5.01 and 6.0. The issue arises in how IE handles Content-Disposition and Content-Type headers for downloaded files, resulting in the spoofed file type being passed back to the operating system for handling rather than showing an error. This can al...

CVE-2002-1365

Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the "@" character when determining buffer lengths for local addresses, which allows remote attackers to execute arbitrary code via a header with a large number of local addresses...

CVE-2002-1367

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need...

CVE-2002-1271

The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers to execute arbitrary commands by inserting them into the mail body, which is then processed by mailx...

CVE-2002-1550

dumpsmutil.sh in IBM AIX allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2002-0188

Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error...

CVE-2002-1384

CVE-2002-1384 affects pdftops in Xpdf 2.01 and earlier, Xpdf-i, and CUPS pre-1.1.18. An integer overflow in a ColorSpace entry with many elements can allow a local attacker to execute arbitrary code (via cups-pdf) on the affected host. Debian OpenVAS advisories (DSA 222-1, 226-1, 232-1/2) and his...

CVE-2002-1184

The CVE-2002-1184 entry describes that the Windows 2000 system root folder has default Everyone:F permissions and is searched during login or program launch, enabling privilege escalation via Trojan horse programs. Affected software: Microsoft Windows 2000 (system root folder permissions in the s...

CVE-2002-1152

CVE-2002-1152 concerns Konqueror (KDE) versions 3.0 through 3.0.2. The issue is that Konqueror does not reliably detect the secure flag on HTTP cookies, allowing cookies to be sent over unencrypted channels. This could enable remote attackers to capture cookies via sniffing, potentially compromis...