CVE-2002-1425

CVE-2002-1425 describes a directory traversal vulnerability in the munpack utility (part of mpack) versions 1.5 and earlier. The issue allows remote attackers to create new files in the parent directory by supplying a filename containing a ../ sequence during extraction. Debian DSAs and OpenVAS e...

CVE-2002-0443

Technical details about CVE-2002-0443 are not publicly available in the provided documents. The materials include the vulnerability description but do not specify affected products/versions, root cause, exploit details, or remediation.

CVE-2002-0313

The CVE concerns Essentia Web Server 2.1, where a buffer overflow in URL handling enables a remote attacker to cause a denial of service and, potentially, arbitrary code execution. Affected software is the Essentia Web Server 2.1; vulnerable component is the URL-parsing path that overflows. The d...

CVE-2002-1366

CVE-2002-1366 affects Common Unix Printing System (CUPS) 1.1.14–1.1.17. It is due to race conditions related to /etc/cups/certs/ that allow local users with lp privileges to create or overwrite arbitrary files. The issue enables local privilege escalation and potential filesystem manipulation. Pu...

CVE-2002-1319

The CVE-2002-1319 issue affects the Linux kernel on x86, specifically versions 2.4.20 and earlier and 2.5.x. The root cause is a flaw in emulation mode where TF and NT EFLAGS are not properly cleared, enabling a local user to cause a denial of service (hang). The impact is a local DoS without rem...

CVE-2002-1184

The CVE-2002-1184 entry describes that the Windows 2000 system root folder has default Everyone:F permissions and is searched during login or program launch, enabling privilege escalation via Trojan horse programs. Affected software: Microsoft Windows 2000 (system root folder permissions in the s...

CVE-2002-1160

The CVE-2002-1160 issue concerns the pam_xauth module, where the default configuration forwards MIT-Magic-Cookies to new X sessions. This can enable a local attacker to gain an administrator’s X session by stealing the cookie from a temporary .xauth file created after root uses su. Public sources...

CVE-2002-1159

CVE-2002-1159 affects the Canna server (Canna) up to version 3.6 and earlier, where improper validation of requests allows remote attackers to cause a denial of service or information leak. This vulnerability is documented across multiple sources (Debian DSA-224, RHSA-2002:261) and is part of a d...

CVE-2002-1530

The CVE concerns SurfControl SuperScout Email Filter, specifically its administrative web interface STEMWADM. A vulnerability in the userlist.asp page allows an attacker to retrieve usernames and plaintext passwords via the user editing form, exposing credential data through the management UI. Th...

CVE-2002-1152

CVE-2002-1152 concerns Konqueror (KDE) versions 3.0 through 3.0.2. The issue is that Konqueror does not reliably detect the secure flag on HTTP cookies, allowing cookies to be sent over unencrypted channels. This could enable remote attackers to capture cookies via sniffing, potentially compromis...

CVE-2002-1502

CVE-2002-1502 affects the xbreaky application prior to 0.5.5. The issue is a symbolic link vulnerability that lets local users overwrite arbitrary files by creating a symlink from the user’s .breakyhighscores file to a target file. The described impact is local privilege or data integrity risk. T...

CVE-2002-1223

Technical details about CVE-2002-1223 are not publicly available in the provided connected documents. The OpenVAS/ENISA entries pertain to unrelated issues (Solaris Perl updates, malware mention) and do not supply product/version/impact data for this CVE. Monitor for updates.

CVE-2002-0627

The CVE-2002-0627 issue concerns the Polycom ViewStation Web server prior to version 7.2.4, where authentication can be bypassed and files read through Unicode-encoded requests. The affected component is the ViewStation web server; the underlying cause is a flaw that permits bypassing access cont...

CVE-2002-1132

CVE-2002-1132 affects SquirrelMail 1.2.7 and earlier. A malformed optpage argument can cause an error message that reveals the absolute pathname of options.php, exposing information about the script. The issue is documented under CAN-2002-1131 and CAN-2002-1132; Debian advisories DSA-191-1/191-2 ...

CVE-2002-1098

CVE-2002-1098 affects Cisco VPN 3000 Concentrator 2.2.x and 3.x prior to 3.5.3. When the XML filter configuration is enabled, the device’s HTTPS on Public Inbound (XML-Auto)(forward/in) rule sets the protocol to ANY, allowing arbitrary traffic to pass through the concentrator. The available docum...

CVE-2002-1538

CVE-2002-1538 affects Acuma Acusend 4 and potentially earlier versions. The issue enables remote authenticated users to read other users’ reports by inferring the full, easily predictable URL. The underlying impact is partial confidentiality exposure of reports. The provided documents do not spec...

CVE-2002-1158

Buffer overflow in the irwthrough function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as the bin user...

CVE-2002-1380

CVE-2002-1380 affects Linux kernel 2.2.x where a local user can cause a denial of service (crash) by invoking mmap() with PROT_READ to access non-readable memory pages via /proc/pid/mem. The underlying issue is a memory access vulnerability in the kernel that enables local DoS. Multiple connected...

AIX 5.1 : IY40501

The remote host is missing AIX Critical Security Patch number IY40501 SECURITY: buffer overflow in sendmail. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

CVE-2002-1583

CVE-2002-1583 describes a local buffer overflow in IBM DB2 Universal Database (DB2 UDB) versions 6.0 and 7.0, triggered by a long username read from a file descriptor argument within sqllib/security/db2ckpw. The underlying issue is a vulnerability in handling the username input that can overflow ...