5356 matches found
CVE-2002-1570
Heap-based buffer overflow in snmpnetstat for ucd-snmp 4.2.3 and earlier, and net-snmp, allows remote attackers to execute arbitrary code via multiple getnextrequest PDU messages with conflicting ifindex variables, which cause snmpnetstat to write variable data past the end of an array...
CVE-2002-1570
CVE-2002-1570 affects snmpnetstat in ucd-snmp
CVE-2002-1569
gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the filename for 1 a PDF file or 2 a gzip file...
CVE-2002-1569
CVE-2002-1569 affects gv 3.5.8 and possibly earlier versions. The vulnerability allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of a PDF file or a gzip file, indicating a command-injection-like issue in filename handling. The available sources descri...
CVE-2002-1569
gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the filename for 1 a PDF file or 2 a gzip file...
CVE-2002-1568
OpenSSL 0.9.6e contains a vulnerability where assertions are used to detect buffer overflow attacks instead of less severe mechanisms, allowing a remote attacker to cause a denial of service (crash) by sending crafted messages (e.g., SSLv2 CLIENT_MASTER_KEY) that trigger a failed assertion in s2_...
CVE-2002-1567
Cross-site scripting XSS vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script...
CVE-2002-1567
Cross-site scripting XSS vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script...
CVE-2002-1352
Per Magne Knutsen's CartMan shopping cart cartman.php 1.04 and earlier allows remote attackers to modify product prices by changing the price parameter...
myPHPNuke phptonuke.php filnavn Parameter Traversal Arbitrary File Access
The version of myPHPNuke installed on the remote host allows anyone to read arbitrary files by passing the full filename to the 'filnavn' argument of the 'phptonuke.php' script. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Status: it was not tested against a vulnerable host, and the...
CVE-2002-1566
netris 0.5, and possibly other versions before 0.52, when running with the -w wait option, allows remote attackers to cause a denial of service crash via a long string to port 9284...
CVE-2003-1565
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2002-1565. Reason: This candidate is a duplicate of CVE-2002-1565. Notes: All CVE users should reference CVE-2002-1565 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2002-1566
netris 0.5, and possibly other versions before 0.52, when running with the -w wait option, allows remote attackers to cause a denial of service crash via a long string to port 9284...
CVE-2002-1566
The CVE-2002-1566 entry affects Netris 0.5 (and possibly versions prior to 0.52). The vulnerability arises when running with the -w (wait) option, where a long string sent to port 9284 can cause a remote Denial of Service (crash). The connected documents confirm the affected product and the trigg...
CVE-2002-1565
Buffer overflow in urlfilename function for wget 1.8.1 allows attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a long URL...
CVE-2002-1459
Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is off, allows remote attackers to insert arbitrary script or HTML via message fields including 1 From, 2 E-Mail, and 3 Subject...
CVE-2002-1460
L-Forum 2.40 and earlier does not properly verify whether a file was uploaded or if the associated variables were set by POST attachment, attachmentname, attachmentsize and attachmenttype, which allows remote attackers to read arbitrary files...
CVE-2002-1456
Buffer overflow in mIRC 6.0.2 and earlier allows remote attackers to execute arbitrary code via a long $asctime value...
CVE-2002-1458
Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is on, allows remote attackers to insert arbitrary script or HTML via message fields including 1 From, 2 E-Mail, 3 Subject and 4 Body...