CVE-2002-0444

Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number of licenses, which can allow remote authenticate...

CVE-2002-1518

mv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory, which could allow local users to modify files and directories...

CVE-2002-0692

Buffer overflow in SmartHTML Interpreter shtml.dll in Microsoft FrontPage Server Extensions FPSE 2000 and 2002 allows remote attackers to cause a denial of service CPU consumption or run arbitrary code, respectively, via a certain type of web file request...

CVE-2002-1528

MsmMask.exe in MondoSearch 4.4 allows remote attackers to obtain the source code of scripts via the mask parameter...

CVE-2002-0158

CVE-2002-0158 refers to a buffer overflow in Xsun on Solaris 2.6–8 when processing a long -co (color database) command line argument. The overflow occurs in the heap/dynamic memory handling and can enable a local user to execute arbitrary code with root privileges, as described in the CVE details...

CVE-2002-1319

The CVE-2002-1319 issue affects the Linux kernel on x86, specifically versions 2.4.20 and earlier and 2.5.x. The root cause is a flaw in emulation mode where TF and NT EFLAGS are not properly cleared, enabling a local user to cause a denial of service (hang). The impact is a local DoS without rem...

CVE-2002-1182

CVE-2002-1182 affects Microsoft IIS 5.0 and 5.1. A remote attacker can trigger a denial of service by sending malformed WebDAV requests that cause IIS to allocate an unusually large amount of memory, potentially crashing the server. The vulnerability is characterized as a memory allocation issue ...

CVE-2002-1414

CVE-2002-1414 describes a buffer overflow in qmailadmin exploited by passing a long QMAILADMIN_TEMPLATEDIR environment variable, enabling local users to gain privileges. The vulnerability details indicate local attack vector with the potential for partial impact on confidentiality, integrity, and...

CVE-2002-1231

CVE-2002-1231 affects SCO UnixWare 7.1.1 and Open UNIX 8.0.0. A local user can trigger a denial of service by performing an rcp of /proc. Vulnerable binaries include /etc/conf/pack.d/fs/Driver_atup.o and Driver_mp.o. The advisory CSSA-2002-SCO.41 provides fixed packages: erg712112c.pkg.Z for Unix...

CVE-2002-0362

CVE-2002-0362: A buffer overflow in AOL Instant Messenger (AIM) 4.2 and later allows remote code execution via a long AddExternalApp request using a TLV type greater than 0x2711. Vulnerable component: AIM client input handling for AddExternalApp TLV. Exploit scenario: remote attacker sends crafte...

CVE-2002-1091

CVE-2002-1091 affects Netscape 6.2.3 and earlier and Mozilla 1.0.1, where a crafted GIF image with zero width can cause heap corruption and arbitrary code execution on remote systems. The connected documents corroborate the vulnerability across multiple advisories (NVD entry; Mandrake MDKSA advis...

CVE-2002-0672

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to restore the phone to factory defaults without authentication via a menu option, which sets the administrator password to null...

CVE-2002-1327

CVE-2002-1327 corresponds to a buffer overflow in the Windows Shell function used to extract audio file attributes (MP3/WMA) on Microsoft Windows XP. The flaw can be triggered remotely by a crafted audio file or through certain user interactions (folder browsing, web/HTML contexts) and could allo...

CVE-2002-1438

The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to obtain Perl version information via the -v option...

CVE-2002-1185

CVE-2002-1185 affects Internet Explorer 5.01–6.0. The issue is a parsing flaw where PNG parameters are not properly checked when opening a PNG file, enabling a remote attacker to trigger a heap-based buffer overflow during decompression and cause a denial of service (crash). The connected documen...

CVE-2002-1396

CVE-2002-1396 : Heap-based buffer overflow in PHP’s wordwrap function. Affects PHP versions after 4.1.2 and before 4.3.0; exploitation may cause a denial of service or allow arbitrary code execution. Connected sources corroborate the same description across multiple advisories, indicating the vul...

CVE-2002-1106

Cisco Virtual Private Network VPN Client software 2.x.x, and 3.x before 3.5.1C, does not properly verify that certificate DN fields match those of the certificate from the VPN Concentrator, which allows remote attackers to conduct man-in-the-middle attacks...

CVE-2002-0396

The web management server for Red-M 1050 Bluetooth Access Point does not use session-based credentials to authenticate users, which allows attackers to connect to the server from the same IP address as a user who has already established a session...

CVE-2002-0398

CVE-2002-0398 affects Red-M 1050AP (Bluetooth Access Point) PPP server. The vulnerability allows bonded users to cause a denial of service and, per description, possibly execute arbitrary code via a long user name. This is tied to the PPP authentication path and the device’s management interface....

CVE-2002-0395

CVE-2002-0395 affects the Red-M 1050 Bluetooth Access Point: its TFTP server supply chain cannot be disabled, enabling an attacker to crack the administration password via UDP-based attacks. The vulnerability comes from the TFTP server being always active, which, combined with weak admin-password...