CVE-2002-1501

The CVE-2002-1501 entry concerns Enterasys SSR8000 (Smart Switch Router) before firmware 8.3.0.10, where the MPS functionality is vulnerable to remote denial of service through multiple port scans to ports 15077 and 15078. The provided documents reiterate the affected product/versions and the cra...

CVE-2002-1141

An input validation error in the Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service via malformed fragmented RPC client packets, aka "Denial of service by sending an invalid RPC...

CVE-2002-1140

The Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service service hang via malformed packet fragments, aka "Improper parameter size check leading to denial of service."...

CVE-2002-1141

The CVE-2002-1141 issue is a vulnerability in the Sun Microsystems RPC library Services for Unix 3.0 Interix SD, executed on Windows NT4/2000/XP. It stems from an input validation error that can be exploited by malformed fragmented RPC client packets, enabling a remote denial of service. The docu...

CVE-2002-0990

Technical details about CVE-2002-0990 are not publicly available in the provided documents. The description notes a DoS via DNS timeouts in Symantec gateway/firewall products, but no affected versions, exploit status, or mitigations are disclosed here. Monitor for updates.

CVE-2002-1361

overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP Security Hardening Patch installed allows remote attackers to execute arbitrary code via a POST request with shell metacharacters in the email parameter...

CVE-2002-1349

Summary: CVE-2002-1349 describes a local buffer overflow in Trend Micro PC-cillin’s pop3trap.exe, affecting PC-cillin 2000, 2002, and 2003. The vulnerability arises from a long input string to TCP port 110 (POP3) in the local POP3 proxy, allowing a local attacker to execute arbitrary code with th...

CVE-2002-1446

The error checking routine used for the CVerify call on a symmetric verification key in the nCipher PKCS11 library 1.2.0 and later returns the CKROK status even when it detects an invalid signature, which could allow remote attackers to modify or forge messages...

CVE-2002-1374

The COMCHANGEUSER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the real password...

CVE-2002-1260

The CVE-2002-1260 vulnerability affects Microsoft Virtual Machine (VM) 5.0.3805 and earlier, where the JDBC APIs can be exploited by an untrusted Java applet to bypass security checks and access database contents. This is a remote, network‑vector issue that allows partial confidentiality/integrit...

CVE-2002-1366

CVE-2002-1366 affects Common Unix Printing System (CUPS) 1.1.14–1.1.17. It is due to race conditions related to /etc/cups/certs/ that allow local users with lp privileges to create or overwrite arbitrary files. The issue enables local privilege escalation and potential filesystem manipulation. Pu...

CVE-2002-1497

Technical details about this CVE are not provided in the connected documents. The initial description notes an XSS in Null HTTP Server 0.5.0 and earlier, allowing arbitrary HTML in 404 responses. Monitor for updates.

CVE-2002-1541

CVE-2002-1541 affects BadBlue 1.7. An HTTP request containing an extra / (slash) can bypass directory/file password protections, enabling remote access. The documents do not specify the exact root cause code or patches. No exploitation details or mitigation steps are provided in the supplied sour...

CVE-2002-0380

CVE-2002-0380 is a vulnerability in tcpdump up to version 3.6.2 where handling NFS packets can trigger a buffer overflow, potentially allowing denial of service or arbitrary code execution. Connected sources (Debian, Red Hat, OSV, NVD) reiterate the same issue and cite that updated packages/patch...

CVE-2002-0443

Technical details about CVE-2002-0443 are not publicly available in the provided documents. The materials include the vulnerability description but do not specify affected products/versions, root cause, exploit details, or remediation.

CVE-2002-1268

The CVE-2002-1268 entry relates to Mac OS X 10.2.2, where local users can gain privileges through mounting an ISO 9600 CD (User Privilege Elevation via Mounting an ISO 9600 CD). The connected documents confirm the affected software and the vector (local privilege elevation via mounted media); how...

CVE-2002-0444

Technical details about CVE-2002-0444 are not provided in the supplied documents. The description notes that Windows 2000 Terminal Server SYSVOL policy application can fail when connections exceed a maximum; monitor for official updates.

CVE-2002-1255: Undefined Security Weakness

Microsoft Outlook 2002 allows remote attackers to cause a denial of service repeated failure via an email message with a certain invalid header field that is accessed using POP3, IMAP, or WebDAV, aka "E-mail Header Processing Flaw Could Cause Outlook 2002 to Fail."...

CVE-2004-0121: Improper Neutralization of Argument Delimiters in a Command

Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs...

CVE-2003-0007: Undefined Security Weakness

Microsoft Outlook 2002 does not properly handle requests to encrypt email messages with V1 Exchange Server Security certificates, which causes Outlook to send the email in plaintext, aka "Flaw in how Outlook 2002 handles V1 Exchange Server Security Certificates could lead to Information Disclosur...