CVE-2002-1486

Multiple buffer overflows in the IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service and possibly execute arbitrary code via 1 a large response from the server, 2 a JOIN with a long channel name, 3 a long "raw 221" message, 4 a PRIVMSG with a...

CVE-2002-1490

NetBSD 1.4 through 1.6 beta allows local users to cause a denial of service kernel panic via a series of calls to the TIOCSCTTY ioctl, which causes an integer overflow in a structure counter and sets the counter to zero, which frees memory that is still in use by other processes...

CVE-2002-1512

xbru in BRU Workstation 17.0 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the xbrudscheck.dd temporary file...

CVE-2002-1515

Directory traversal vulnerability in avatar.php in CoolForum 0.5 beta allows remote attackers to read arbitrary files via .. dot dot sequences in the img parameter...

CVE-2002-1561

The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service disabled RPC service via a malformed packet to the RPC Endpoint Mapper at TCP port 135, which triggers a null pointer dereference...

CVE-2002-1500

Buffer overflow in 1 mrinfo, 2 mtrace, and 3 pppd in NetBSD 1.4.x through 1.6 allows local users to gain privileges by executing the programs after filling the file descriptor tables, which produces file descriptors larger than FDSETSIZE, which are not checked by FDSET...

CVE-2002-1513

The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions because the server runs with the SYSPRV and BYPASS privileges...

CVE-2002-1504

Directory traversal vulnerability in WebServer 4 Everyone 1.22 allows remote attackers to read arbitrary files via ".." dot-dot backslash sequences in a URL...

CVE-2002-1514

gdslockmgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "iscinit1.X" temporary file, as demonstrated by modifying the xinetdbd file...

CVE-2002-0916

Format string vulnerability in the allowuser code for the Stellar-X msntauth authentication module, as distributed in Squid 2.4.STABLE6 and earlier, allows remote attackers to execute arbitrary code via format strings in the user name, which are not properly handled in a syslog call...

CVE-2002-0640

Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authentication PAMAuthenticationViaKbdInt...

CVE-2002-0703

An interaction between the Perl MD5 module perl-Digest-MD5 and Perl could produce incorrect MD5 checksums for UTF-8 data, which could prevent a system from properly verifying the integrity of the data...

CVE-2002-0148

CVE-2002-0148 is a cross-site scripting vulnerability in Microsoft Internet Information Services (IIS) 4.0, 5.0 and 5.1 that allows remote attackers to execute arbitrary script as the affected user via an HTTP error page. Connected sources confirm this CSS/XSS issue is part of a broader set of II...

CVE-2002-0186

CVE-2002-0186 describes a buffer overflow in the Microsoft SQLXML ISAPI extension for SQL Server 2000. The flaw arises from inadequate validation of the contenttype parameter in SQLXML HTTP requests, allowing a remote attacker to trigger a crash or execute arbitrary code (the extension runs with ...

CVE-2002-0250

The vulnerability concerns HP AdvanceStack hubs (models J3200A–J3210A) running firmware version A.03.07 or earlier. The Web configuration utility exposes a flaw where an unauthorized user can bypass authentication through a direct HTTP request to the web_access.html page. This bypass allows an at...

CVE-2002-0329

Affected product: Snitz Forums 2000 (versions 3.3.03 and earlier). Vulnerability: cross-site scripting via crafted IMG tag SRC attribute, allowing remote attackers to execute arbitrary script as other Forum 2000 users. Root cause / details: the IMG SRC URL check is inadequate and can serve inject...

CVE-2002-0451

PHProjekt 3.1 and 3.1a contain a remote PHP code execution vulnerability in filemanager_forms.php. The issue arises from unsafely handling the lib_path parameter, allowing an attacker to specify a URL to executable code, enabling arbitrary code execution on the affected server. The CVE entry prov...

CVE-2002-0553

The CVE-2002-0553 entry describes a Cross-site scripting (XSS) vulnerability in SunShop 2.5 and earlier. According to the sources, remote attackers can inject script into fields during new customer registration to gain administrative privileges in SunShop. The NVD metrics list a CVSSv2 base score...

CVE-2002-0648

CVE-2002-0648 is a XML Redirect Information Disclosure vulnerability in Internet Explorer (affecting IE 5.01/5.5/6.0 with the ability to read XML data from a local file via a redirected src URL). The connected MS05-025 document describes a security update (KB883939) that mitigates this class of v...

CVE-2002-0676

Summary: CVE-2002-0676 refers to SoftwareUpdate for MacOS 10.1.x, which reportedly downloads updates without authentication. This could allow an attacker to impersonate the Apple update server via DNS spoofing or cache poisoning and deliver Trojan Horse updates, enabling arbitrary code execution ...