CVE-2002-1478

CVE-2002-1478 affects Cacti prior to 0.6.8. The issue allows an attacker to execute arbitrary commands via the Data Input option in console mode, due to the underlying handling of input. The vulnerability is documented with a high impact (CVSS v2 base score 10.0; confidentiality, integrity, and a...

CVE-2002-1325

CVE-2002-1325 affects Microsoft Virtual Machine (VM) versions up to build 5.0.3805. A Java applet that accesses the user.dir system property can disclose the local user’s username to a remote attacker, via a crafted page or email. CERT notes the vulnerability could leak the user’s system path and...

CVE-2002-1272

Alcatel OmniSwitch 7700/7800 with AOS 5.1.1 contains a backdoor Telnet server on TCP 6778 that was left in code from development, allowing remote privileged access. Affected devices can be compromised to gain full admin control. Remediation per CERT/vendor guidance: upgrade to AOS 5.1.1.R02 or 5....

CVE-2002-1493

Cross-site scripting XSS vulnerability in Lycos HTMLGear guestbook allows remote attackers to inject arbitrary script via 1 STYLE attributes or 2 SRC attributes in an IMG tag...

CVE-2002-1189

The CVE-2002-1189 issue affects Cisco Unity 2.x and 3.x where default configuration fails to block international operator calls in predefined restriction tables, enabling authenticated users to place international calls via call forwarding. The root cause is the misconfiguration of restrictions r...

CVE-2002-0729

Microsoft SQL Server 2000 allows remote attackers to cause a denial of service via a malformed 0x08 packet that is missing a colon separator...

CVE-2002-1267

Mac OS X 10.2.2 allows remote attackers to cause a denial of service by accessing the CUPS Printing Web Administration utility, aka "CUPS Printing Web Administration is Remotely Accessible."...

CVE-2002-1223

Buffer overflow in DSC 3.0 parser from GSview, as used in KGhostView in KDE 1.1 and KDE 3.0.3a, may allow attackers to cause a denial of service or execute arbitrary code via a modified .ps PostScript input file...

CVE-2002-1435

CVE-2002-1435 affects Achievo 0.7.0 through 0.9.1, excluding 0.8.2. The issue allows remote PHP code execution when allow_url_fopen is enabled and a URL in the config_atkroot parameter points to attacker-controlled code. This is a remote file inclusion vulnerability; affected component is a PHP s...

CVE-2002-1443

The Google toolbar 1.1.58 and earlier allows remote web sites to monitor a user's input into the toolbar via an "onkeydown" event handler...

CVE-2002-0974

Help and Support Center for Windows XP allows remote attackers to delete arbitrary files via a link to the hcp: protocol that accesses uplddrvinfo.htm...

CVE-2002-1574

Buffer overflow in the ixj telephony card driver in Linux before 2.4.20 has unknown impact and attack vectors...

CVE-2002-1117

Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares...

CVE-2002-0444

Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number of licenses, which can allow remote authenticate...

CVE-2002-1518

mv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory, which could allow local users to modify files and directories...

CVE-2002-0692

Buffer overflow in SmartHTML Interpreter shtml.dll in Microsoft FrontPage Server Extensions FPSE 2000 and 2002 allows remote attackers to cause a denial of service CPU consumption or run arbitrary code, respectively, via a certain type of web file request...

CVE-2002-1528

MsmMask.exe in MondoSearch 4.4 allows remote attackers to obtain the source code of scripts via the mask parameter...

CVE-2002-0158

CVE-2002-0158 refers to a buffer overflow in Xsun on Solaris 2.6–8 when processing a long -co (color database) command line argument. The overflow occurs in the heap/dynamic memory handling and can enable a local user to execute arbitrary code with root privileges, as described in the CVE details...

CVE-2002-1319

The CVE-2002-1319 issue affects the Linux kernel on x86, specifically versions 2.4.20 and earlier and 2.5.x. The root cause is a flaw in emulation mode where TF and NT EFLAGS are not properly cleared, enabling a local user to cause a denial of service (hang). The impact is a local DoS without rem...

CVE-2002-1182

CVE-2002-1182 affects Microsoft IIS 5.0 and 5.1. A remote attacker can trigger a denial of service by sending malformed WebDAV requests that cause IIS to allocate an unusually large amount of memory, potentially crashing the server. The vulnerability is characterized as a memory allocation issue ...