5508 matches found
CVE-2002-0895
The CVE-2002-0895 issue affects MatuFtpServer 1.1.3.0 (1.1.3). It is a buffer overflow in the FTP server’s handling of the PASS command that can be triggered remotely, leading to denial of service and possibly arbitrary code execution. Other details such as affected subversions, root cause specif...
CVE-2002-1278
The mailconf module in Linuxconf 1.24, and other versions before 1.28, on Conectiva Linux 6.0 through 8, and possibly other distributions, generates the Sendmail configuration file sendmail.cf in a way that configures Sendmail to run as an open mail relay, which allows remote attackers to send Sp...
CVE-2002-1323
CVE-2002-1323 concerns Safe.pm (versions <= 2.0.7) used with Perl
CVE-2002-1323
Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in 1 Safe::reval or 2 Safe::rdo using a redefined @ variable, which is not reset between successive calls...
CVE-2002-1517
The vulnerability CVE-2002-1517 affects IRIX 6.5: the fsr_efs component allows local users to perform unauthorized file activities via a symlink attack, possibly involving the .fsrlast file. The affected component is fsr_efs in IRIX 6.5, with a local attack vector and partial impacts to confident...
CVE-2002-1518
CVE-2002-1518 (IRIX 6.5): during a directory move with mv, a destination directory is created with world-writable permissions, enabling local users to modify files and directories. Root cause: permission handling in the move operation. No remediation details or exploit status are provided in the ...
CVE-2002-1169
The CVE-2002-1169 entry affects IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x prior to 4.0.1.26. The underlying issue is a malformed HTTP request to helpout.exe that omits the HTTP version number, causing ibmproxy.exe to crash and resulting in a denial of service. Connected sources (Op...
CVE-2002-0835
The CVE-2002-0835 issue affects the PXE (Preboot eXecution Environment) server component used on Linux-like systems (e.g., Red Hat Advanced Server) and SCO OpenLinux. Description across connected sources states that the PXE server can be crashed, causing a denial of service, when processing certa...
CVE-2002-1248
The CVE-2002-1248 issue affects Northern Solutions’ Xeneo Web Server (notably versions 2.1.0.0 and 2.0.759.6, prior to 2.1.5). The vulnerability arises from improper handling of a specially crafted web request for a “%” URI, allowing remote attackers to trigger a denial of service (crash). OpenVA...
CVE-2002-1152
CVE-2002-1152 concerns Konqueror (KDE) versions 3.0 through 3.0.2. The issue is that Konqueror does not reliably detect the secure flag on HTTP cookies, allowing cookies to be sent over unencrypted channels. This could enable remote attackers to capture cookies via sniffing, potentially compromis...
CVE-2002-1214
CVE-2002-1214 describes a buffer overflow in Microsoft PPTP Service affecting Windows XP and Windows 2000 (and Terminal Services) that can be triggered by a PPTP control data packet with malformed data. The vulnerability can lead to a denial of service and, in some cases, may allow the attacker t...
CVE-2002-1391
The CVE-2002-1391 issue affects mgetty prior to 1.1.29, where a buffer overflow in the internal handling of Caller ID CallerName could allow a remote attacker to cause a Denial of Service and potentially execute arbitrary code via a long Caller Name. The vulnerability is documented in multiple ad...
CVE-2002-1363
Portable Network Graphics PNG library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a buffer overflow attack on the row buffers...
CVE-2002-1363
CVE-2002-1363 affects libpng 1.2.5 and earlier, where incorrect offset calculations in the PNG library can cause a remote crash and potentially arbitrary code execution via a buffer overflow in row buffers. The vulnerability is evidenced in multiple advisories (Red Hat RHSA, Debian DSA) and is re...
CVE-2002-0844
CVE-2002-0844 describes an off-by-one overflow in the CVS PreservePermissions code path within rcs.c for CVSD before 1.11.2, enabling local users to execute arbitrary code. Affected software is CVSD CVS prior to version 1.11.2; remediation is to upgrade to 1.11.2 or later (as indicated by multipl...
CVE-2002-1424
CVE-2002-1424 describes a buffer overflow in the munpack component of the mpack package (version 1.5 and earlier). The underlying issue allows remote attackers to cause a denial of service and potentially execute arbitrary code. Public advisories indicate fixes have been released in subsequent De...
CVE-2002-1377
vim 6.0 and 6.1, and possibly other versions, allows attackers to execute arbitrary commands using the libcall feature in modelines, which are not sandboxed but may be executed when vim is used to edit a malicious file, as demonstrated using mutt...
CVE-2002-0651
Buffer overflow in the DNS resolver code used in libc, glibc, and libbind, as derived from ISC BIND, allows remote malicious DNS servers to cause a denial of service and possibly execute arbitrary code via the stub resolvers...
CVE-2002-0275
The CVE-2002-0275 entry concerns Falcon web server (versions 2.0.0.1020 and earlier) where remote attackers can bypass authentication and read restricted files by sending a URL with an extra trailing slash (an additional / in the request). The vulnerability stems from how the server processes the...