CVE-2002-0696

CVE-2002-0696 affects Microsoft Visual FoxPro 6.0. The issue arises because Visual FoxPro 6.0 does not register its associated files with Internet Explorer, enabling remote attackers to execute Visual FoxPro applications via HTML that references specially crafted filenames. This can allow code ex...

CVE-2002-1268

The CVE-2002-1268 entry relates to Mac OS X 10.2.2, where local users can gain privileges through mounting an ISO 9600 CD (User Privilege Elevation via Mounting an ISO 9600 CD). The connected documents confirm the affected software and the vector (local privilege elevation via mounted media); how...

CVE-2002-0840

CVE-2002-0840 is a cross-site scripting (XSS) vulnerability in the default error page of Apache. It affects Apache 2.0 before 2.0.43 and 1.3.x up to 1.3.26, when UseCanonicalName is set to off and wildcard DNS is supported. An attacker can inject script via the Host header to execute in other vis...

CVE-2002-1494

The CVE-2002-1494 entry describes a Cross-site Scripting (XSS) vulnerability in Aestiva HTML/OS. The root cause is that an attacker can insert arbitrary HTML or script by placing the script after a trailing / character, causing the script to appear in error messages generated by the application. ...

CVE-2002-1420

OpenBSD 3.1 and earlier are affected by a local privilege escalation due to an integer signedness error in select(2): a negative size value passes the boundary check as signed but is then used as unsigned during a data copy, allowing a local user to overwrite kernel memory. Impact: local code/ker...

CVE-2002-0865

CVE-2002-0865 affects Microsoft Virtual Machine (VM) prior to 5.0.3805, where the XML-support class com.ms.osp.ospmrshl exposes unsafe methods that can permit remote code execution via a Java applet. Microsoft’s MS02-052 patch is the documented fix path; other sources (CERT/OpenVAS) identify this...

CVE-2002-0443

Technical details about CVE-2002-0443 are not publicly available in the provided documents. The materials include the vulnerability description but do not specify affected products/versions, root cause, exploit details, or remediation.

CVE-2002-1137

Buffer overflow in the Database Console Command DBCC that handles user inputs in Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine MSDE 1.0 and Microsoft Desktop Engine MSDE 2000, allows attackers to execute arbitrary code via a long SourceDB argument in a "non-SQL OLEDB data...

CVE-2002-1369

CVE-2002-1369 affects Common Unix Printing System (CUPS) 1.1.14–1.1.17, where an unsafe use of strncat while processing the options string enables a remote attacker to cause a buffer overflow and execute arbitrary code. OpenVAS and Debian security advisories (DSA-232-1/232-2) corroborate this fam...

CVE-2002-1389

CVE-2002-1389 describes a buffer overflow in typespeed versions 0.4.2 and earlier that lets a local user gain privileges via long input. The Debian advisory DSA-217-1 notes a fix; OpenVAS/NVD entries corroborate a local-privilege escalation issue caused by overflowing a buffer. The available conn...

CVE-2002-1317

The CVE-2002-1317 flaw affects the Solaris X Window Font Server (XFS) daemon fs.auto, where the Dispatch() function handles XFS queries. This remotely exploitable buffer overflow can allow an attacker to crash the service or execute arbitrary code with the fs.auto/Font Server privileges (typicall...

CVE-2002-1232

CVE-2002-1232 describes a memory leak in ypserv’s ypdb_open (yp_db.c) affecting the NIS package prior to version 2.5. Repeated remote requests for non-existent maps can exhaust memory, causing a denial-of-service condition. Multiple vendor advisories document this issue (e.g., Mandrake MDKSA-2002...

CVE-2002-0627

The CVE-2002-0627 issue concerns the Polycom ViewStation Web server prior to version 7.2.4, where authentication can be bypassed and files read through Unicode-encoded requests. The affected component is the ViewStation web server; the underlying cause is a flaw that permits bypassing access cont...

CVE-2002-1513

The CVE-2002-1513 issue concerns the UCX POP server in HP TCP/IP services for OpenVMS 4.2–5.3. A local user can truncate arbitrary files through the -logfile command line option, because the server runs with SYSPRV and BYPASS privileges, which override file system permissions. NVD assigns a base ...

CVE-2002-1265

CVE-2002-1265 is evidenced in HP-UX RPC-related DoS advisories; OpenVAS/Nessus entries (PHNE_30091/30092/30093/30094, and PHKL_31500) reference CVE-2002-1265 as the RPC/HP-UX RPC DoS issue. Patches exist (HPSBUX01020 SSRT2384, etc.; PHKL_31500 consolidates fixes) addressing remote DoS via HP-UX R...

CVE-2002-1435

class.atkdateattribute.js.php in Achievo 0.7.0 through 0.9.1, except 0.8.2, allows remote attackers to execute arbitrary PHP code when the 'allowurlfopen' setting is enabled via a URL in the configatkroot parameter that points to the code...

CVE-2002-1502

CVE-2002-1502 affects the xbreaky application prior to 0.5.5. The issue is a symbolic link vulnerability that lets local users overwrite arbitrary files by creating a symlink from the user’s .breakyhighscores file to a target file. The described impact is local privilege or data integrity risk. T...

CVE-2002-1366

CVE-2002-1366 affects Common Unix Printing System (CUPS) 1.1.14–1.1.17. It is due to race conditions related to /etc/cups/certs/ that allow local users with lp privileges to create or overwrite arbitrary files. The issue enables local privilege escalation and potential filesystem manipulation. Pu...

CVE-2002-1105

CVE-2002-1105 affects Cisco VPN Client software 2.x.x and 3.x before 3.5.1C. A local user can use a utility program to obtain the group password, indicating a credential exposure/removal of password material on affected clients. The description does not specify a root cause beyond the existence o...

CVE-2002-1132

CVE-2002-1132 affects SquirrelMail 1.2.7 and earlier. A malformed optpage argument can cause an error message that reveals the absolute pathname of options.php, exposing information about the script. The issue is documented under CAN-2002-1131 and CAN-2002-1132; Debian advisories DSA-191-1/191-2 ...