CVE-2002-1566

The CVE-2002-1566 entry affects Netris 0.5 (and possibly versions prior to 0.52). The vulnerability arises when running with the -w (wait) option, where a long string sent to port 9284 can cause a remote Denial of Service (crash). The connected documents confirm the affected product and the trigg...

CVE-2002-1566

netris 0.5, and possibly other versions before 0.52, when running with the -w wait option, allows remote attackers to cause a denial of service crash via a long string to port 9284...

CVE-2002-1565

Buffer overflow in urlfilename function for wget 1.8.1 allows attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a long URL...

CVE-2002-1456

Buffer overflow in mIRC 6.0.2 and earlier allows remote attackers to execute arbitrary code via a long $asctime value...

CVE-2002-1460

L-Forum 2.40 and earlier does not properly verify whether a file was uploaded or if the associated variables were set by POST attachment, attachmentname, attachmentsize and attachmenttype, which allows remote attackers to read arbitrary files...

CVE-2002-1454

MyWebServer 1.0.2 allows remote attackers to determine the absolute path of the web document root via a request for a directory that does not exist, which leaks the pathname in an error message...

CVE-2002-1463

Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial sequence numbers ISN, which allows remote attackers to spoof connections...

CVE-2002-1455

Multiple cross-site scripting XSS vulnerabilities in OmniHTTPd allow remote attackers to insert script or HTML into web pages via 1 test.php, 2 test.shtml, or 3 redir.exe...

CVE-2002-1458

Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is on, allows remote attackers to insert arbitrary script or HTML via message fields including 1 From, 2 E-Mail, 3 Subject and 4 Body...

CVE-2002-1459

Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is off, allows remote attackers to insert arbitrary script or HTML via message fields including 1 From, 2 E-Mail, and 3 Subject...

CVE-2002-1461

Web Shop Manager 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search box...

[SECURITY] [DSA-311-1] New kernel packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 311-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 8th, 2003 http://www.debian.org/security/faq -...

CVE-2002-1155

Buffer overflow in KON kon2 0.3.9b and earlier allows local users to execute arbitrary code via a long -Coding command line argument...

CVE-2002-1565

Buffer overflow in urlfilename function for wget 1.8.1 allows attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a long URL...

CVE-2002-1565

CVE-2002-1565: GNU Wget 1.8.1 contains a buffer overflow in the url_filename function that can cause a segmentation fault and may allow arbitrary code execution via a very long URL. Debian and Red Hat advisories confirm fixes (upgraded wget packages) to mitigate the issue; Conectiva also issued u...

CVE-2002-1155

CVE-2002-1155 describes a buffer overflow in KON kon2 (versions up to 0.3.9b) that allows a local user to execute arbitrary code via a long -Coding command line argument. The vulnerability affects the command line parsing in KON2 and can lead to root-privelege escalation. Public references includ...

CVE-2002-1565

Buffer overflow in urlfilename function for wget 1.8.1 allows attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a long URL...

CVE-2002-1564

CVE-2002-1564 describes a vulnerability in Internet Explorer 5.5 and 6.0 where a cookie can contain script that is executed when a page loads, allowing remote attackers to steal potentially sensitive information from cookies (information disclosure). The underlying issue is the ability for a page...

CVE-2002-1564

Internet Explorer 5.5 and 6.0 allows remote attackers to steal potentially sensitive information from cookies via a cookie that contains script which is executed when a page is loaded, aka the "Script within Cookies Reading Cookies" vulnerability...

Activity Monitor 2002 remote Denial of Service

Overview: "Activity Monitor 2002 is a monitoring software system for real time employee monitoring and continuous tracking of users activities on networked computers." More information can be found at www.softactivity.com Vulnerability Description: By connecting TCP port 15163 and sending a long...