5508 matches found
CVE-2002-1392
The CVE-2002-1392 issue affects mgetty before 1.1.29, where the faxspool directory is world-writable, allowing local users to modify fax transmission privileges. Public advisories (e.g., RHSA-2003:008 and RHSA-2003:036) document a fixed upgrade path to mgetty 1.1.30 to resolve both the buffer-ove...
CVE-2002-1471
The CVE-2002-1471 issue concerns the camel component used by Ximian Evolution 1.0.x and earlier. It does not verify TLS/SSL certificates when establishing a new SSL connection after an initial verification, which could allow remote attackers to perform a man-in-the-middle attack to monitor or mod...
CVE-2002-0651
CVE-2002-0651 relates to a buffer overflow in DNS resolver code used by libc, glibc, and libbind (originating from ISC BIND). Connected advisories describe that versions of ISC BIND upstream prior to 9.2.1 were vulnerable to a resolver buffer overflow which could be triggered by crafted DNS respo...
CVE-2002-1277
CVE-2002-1277 refers to a buffer overflow in Window Maker (wmaker) 0.80.0 and earlier in its image handling code. The vulnerability arises when Window Maker allocates a buffer based on image width and height without proper overflow checks, potentially allowing remote attackers to execute arbitrar...
CVE-2002-1146
The CVE-2002-1146 issue affects BIND 4 and BIND 8.2.x stub resolver libraries, and older glibc/libc/libresolv components (e.g., glibc ≤ 2.2.5) which use the maximum buffer size instead of the actual DNS response size, causing a read buffer overflow. This can enable a remote attacker to cause a de...
CVE-2002-1477
CVE-2002-1477 affects Cacti polished prior to 0.6.8. The issue is in graphs.php where an attacker with authenticated Cacti admin privileges can inject shell metacharacters into the title during edit mode to execute arbitrary commands. This is a remote-authenticated access risk with potential comm...
CVE-2002-1159
CVE-2002-1159 affects the Canna server (Canna) up to version 3.6 and earlier, where improper validation of requests allows remote attackers to cause a denial of service or information leak. This vulnerability is documented across multiple sources (Debian DSA-224, RHSA-2002:261) and is part of a d...
CVE-2002-1390
CVE-2002-1390 concerns the GeneWeb daemon (before version 4.09), where improper handling of requested paths enables a remote attacker to read arbitrary files via a crafted URL. The issue is documented in the Debian DSA-223 advisory (and mirrored OpenVAS/NVD records). Mitigation per connected sour...
CVE-2002-1135
The CVE targets modsecurity.php 1.10 and earlier and phpWebSite 0.8.2 and earlier, where an inc_prefix parameter can point to malicious code, allowing remote PHP code execution. The issue is described with an attack vector over the network, with no authentication, and results in partial confident...
CVE-2002-0445
article.php in PHP FirstPost 0.1 allows allows remote attackers to obtain the full pathname of the server via an invalid post number in the post parameter, which leaks the pathname in an error message...
CVE-2002-1505
SQL injection vulnerability in board.php for WoltLab Burning Board wBB 2.0 RC 1 and earlier allows remote attackers to modify the database and possibly gain privileges via the boardid parameter...
CVE-2002-1540
The vulnerability CVE-2002-1540 affects Symantec Norton AntiVirus Corporate Edition 7.5.x (pre-7.5.1 Build 62) and 7.6.x (pre-7.6.1 Build 35a), where the client runs winhlp32 with elevated privileges, enabling local privilege escalation by using certain winhlp32 features. Impact is local privileg...
CVE-2002-1092
Cisco VPN 3000 Concentrator 3.6Rel and earlier, and 2.x.x, when configured to use internal authentication with group accounts and without any user accounts, allows remote VPN clients to log in using PPTP or IPSEC user authentication...
CVE-2002-1468
Buffer overflow in errpt in AIX 4.3.3 allows local users to execute arbitrary code as root...
CVE-2002-1099
Cisco VPN 3000 Concentrator versions 2.2.x and 3.x prior to 3.5.3 are vulnerable to an information disclosure allowing remote attackers to access certain HTML pages without authentication. The issue compromises confidentiality (partial) and is exploitable over the network with low complexity and ...
CVE-2002-1350
CVE-2002-1350 affects tcpdump: the BGP decoding routines in tcpdump 3.6.x before 3.7 do not copy data correctly, allowing remote attackers to trigger a denial of service (application crash). The issue arises from incorrect bounds checking when copying BGP data. Vulnerable product is tcpdump; affe...
CVE-2002-1384
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf...
CVE-2002-1365
CVE-2002-1365 involves a heap-based buffer overflow in fetchmail 6.1.3 and earlier, caused by insufficient buffer space when expanding local addresses in mail headers (missing space for the hostname after an address). This can allow a remote attacker to execute arbitrary code with the privileges ...
CVE-2002-1348
CVE-2002-1348 affects w3m prior to 0.3.2.2, where HTML escaping in IMG ALT attributes is insufficient, potentially allowing remote attackers to access local files or cookies. Connected advisories (Debian DSA for w3m/w3mmee) confirm multiple Debian advisories addressing this vulnerability and indi...