5356 matches found
CVE-2002-1454
MyWebServer 1.0.2 allows remote attackers to determine the absolute path of the web document root via a request for a directory that does not exist, which leaks the pathname in an error message...
CVE-2002-1463
Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial sequence numbers ISN, which allows remote attackers to spoof connections...
CVE-2002-1461
Web Shop Manager 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search box...
[SECURITY] [DSA-311-1] New kernel packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 311-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 8th, 2003 http://www.debian.org/security/faq -...
CVE-2002-1155
Buffer overflow in KON kon2 0.3.9b and earlier allows local users to execute arbitrary code via a long -Coding command line argument...
CVE-2002-1565
Buffer overflow in urlfilename function for wget 1.8.1 allows attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a long URL...
CVE-2002-1155
CVE-2002-1155 describes a buffer overflow in KON kon2 (versions up to 0.3.9b) that allows a local user to execute arbitrary code via a long -Coding command line argument. The vulnerability affects the command line parsing in KON2 and can lead to root-privelege escalation. Public references includ...
CVE-2002-1565
CVE-2002-1565: GNU Wget 1.8.1 contains a buffer overflow in the url_filename function that can cause a segmentation fault and may allow arbitrary code execution via a very long URL. Debian and Red Hat advisories confirm fixes (upgraded wget packages) to mitigate the issue; Conectiva also issued u...
CVE-2002-1565
Buffer overflow in urlfilename function for wget 1.8.1 allows attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a long URL...
CVE-2002-1564
Internet Explorer 5.5 and 6.0 allows remote attackers to steal potentially sensitive information from cookies via a cookie that contains script which is executed when a page is loaded, aka the "Script within Cookies Reading Cookies" vulnerability...
CVE-2002-1564
CVE-2002-1564 describes a vulnerability in Internet Explorer 5.5 and 6.0 where a cookie can contain script that is executed when a page loads, allowing remote attackers to steal potentially sensitive information from cookies (information disclosure). The underlying issue is the ability for a page...
Activity Monitor 2002 remote Denial of Service
Overview: "Activity Monitor 2002 is a monitoring software system for real time employee monitoring and continuous tracking of users activities on networked computers." More information can be found at www.softactivity.com Vulnerability Description: By connecting TCP port 15163 and sending a long...
Activity Monitor 2002 2.6 - Remote Denial of Service
Activity Monitor 2002 2.6 - Remote Denial of Service // source: https://www.securityfocus.com/bid/7748/info A vulnerability has been reported for Activity Monitor 2002 that may be exploited to remotely trigger a denial of service condition. The problem occurs while handling data received from hos...
Activity Monitor 2002 2.6 - Remote Denial of Service
// source: https://www.securityfocus.com/bid/7748/info A vulnerability has been reported for Activity Monitor 2002 that may be exploited to remotely trigger a denial of service condition. The problem occurs while handling data received from hosts that are not registered in the Activity Monitor...
CVE-2002-1563
stunnel 4.0.3 and earlier allows attackers to cause a denial of service crash via SIGCHLD signal handler race conditions that cause an inconsistency in the child counter...
thttpd Host Header Traversal Arbitrary File Access
The remote HTTP server allows anyone to browse the files on the remote host by sending HTTP requests with a Host: field set to '../../'. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11576; scriptversion "1.18"; scriptcveid"CVE-2002-1562", "CVE-2003-0899";...
CVE-2002-1563
Summary: CVE-2002-1563 affects stunnel 4.0.3 and earlier and is due to unsafe handling of SIGCHLD in the child process/daemon path, allowing a race that can crash the process and cause a denial of service. The issue is documented across multiple feeds (NVD entry and OSV/CVE mirrors) with Red Hat ...
CVE-2002-1562
The CVE-2002-1562 entry affects thttpd in virtual-hosting mode, where a remote attacker can read arbitrary files by injecting a path into the Host header (directory traversal). Related advisories (CAN-2002-1562 and CAN-2003-0899) describe an information leak and remote code execution via a crafte...