CVE-2002-1580

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347...

CVE-2002-1580

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347...

Symantec Norton AntiVirus 2002 - Nested File Manual Scan Bypass

source: https://www.securityfocus.com/bid/10164/info A vulnerability has been reported in Symantec Norton AntiVirus 2002 that may potentially cause deeply nested files with specific names to bypass manual scanning. This could permit malicious executable content to bypass scanning by the software...

CVE-2002-0385

Vignette Story Server (versions 4.1 and 6.0) is affected. A flaw in the TCL interpreter when processing dynamic pages allows a remote attacker to cause the interpreter to crash and disclose stack data, effectively exposing sensitive information such as other users’ sessions and server-side code. ...

CVE-2002-0385: Undefined Security Weakness

Vignette Story Server 4.1 and 6.0 allows remote attackers to obtain sensitive information via a request that contains a large number of '"' double quote and and '' characters, which causes the TCL interpreter to crash and include stack data in the output...

CVE-2004-0121

Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs...

CVE-2002-1577

SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain privileges via the 1 SAP, 2 SAPCPIC, 3 DDIC, 4 EARLYWATCH, or 5 TMSADM accounts...

Ultimate PHP Board add.php Direct Request Information Disclosure

The remote host is running Ultimate PHP Board UPB. There is a flaw in this version that could allow an attacker to view private message board information. %NASLMINLEVEL 70300 This script was written by Erik Stephens See the Nessus Scripts License for details Changes by Tenable: - Revised plugin...

No title provided for SECURITYVULNS:DOC:5999

продукт: WEB//NEWS Personal Newsmanagement - 2002-2004 производитель: Christian Scheb сайт: Stylemotion.de Возможность удаленного выполнения команд каталог modules. файл startup.php ........................... / MODULES LOAD / require$DIR."/modules/config.inc.php";...

CVE-2004-0284

Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service CPU consumption, if "Do not save encrypted pages to disk" is disabled, via a web site or HTML e-mail that contains two null characters %00 after the host name...

CVE-2004-0284: Undefined Security Weakness

Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service CPU consumption, if "Do not save encrypted pages to disk" is disabled, via a web site or HTML e-mail that contains two null characters %00 after the host name...

CVE-2002-1578

The CVE-2002-1578 detail: default SAP R/3 installation, when used with Oracle and SQLNet V2 3.x–6.10, allows remote attackers to obtain arbitrary SAP data by directly connecting to the Oracle database and executing queries, due to the database not being password-protected. The vulnerability affec...

CVE-2002-1577

CVE-2002-1577 concerns SAP R/3 versions 2.0B to 4.6D, where multiple clients are installed with default user accounts and passwords. The underlying issue is insecure default credentials that allow remote attackers to gain privileges via accounts such as SAP*, SAPCPIC, DDIC, EARLYWATCH, and TMSADM...

CVE-2002-1577

SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain privileges via the 1 SAP, 2 SAPCPIC, 3 DDIC, 4 EARLYWATCH, or 5 TMSADM accounts...

CVE-2002-1576

lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called from a directory that has a symlink to the lserver program...

CVE-2002-1576

Summary: SAP DB 7.3 and earlier versions contain a local privilege escalation in the lserver component. The lserver uses the current working directory to locate and execute the lserversrv program. If a directory contains a symlink to the lserver executable and a malicious lserversrv is placed the...

NAV bugs!

Subject: NAV bugs! Published: Friday, 05 March, 2004 Updated: 06-Mar-04 Discovered By: Bipin Gautam hUNT3R Product Version: Norton Antivirus 2002 ver: 8.00.58 Only tested On... Risk Impact: Low-Medium Details: During a 'manual scan' of a folder, if Norton Antivirus NAV encounters a file /folder...

CVE-2002-1575

cgiemail allows remote attackers to use cgiemail as a spam proxy via CRLF injection of encoded newline %0a characters in parameters such as "required-subject," which can be used to modify the CC, BCC, and other header fields in the generated email message...

CVE-2002-1575

cgiemail allows remote attackers to use cgiemail as a spam proxy via CRLF injection of encoded newline %0a characters in parameters such as "required-subject," which can be used to modify the CC, BCC, and other header fields in the generated email message...

CVE-2002-0712

Entrust Authority Security Manager EASM 6.0 does not properly require multiple master users to change the password of a master user, which could allow a master user to perform operations that require multiple authorizations...