5356 matches found
CVE-2002-0737
CVE-2002-0737 affects the Sambar Web Server prior to 5.2 beta 1. An attacker can remotely obtain source code of server-side scripts or trigger a denial of service by exploiting a flaw in URL parsing when a URL ends with a space followed by a null byte. This occurs because the server misinterprets...
CVE-2002-0898
The CVE-2002-0898 entry affects Opera 6.0.1 and 6.0.2. The flaw arises in the handling of an HTML input element of type=file, where a newline in the value can enable a remote attacker to upload arbitrary files from the client system without user prompting. This represents a client-side security r...
CVE-2002-1059
The CVE-2002-1059 vulnerability affects Van Dyke/ SecureCRT SSH client via a remote buffer overflow caused by an overly long SSH1 protocol version string. Affected versions include SecureCRT before 3.4.6 and 4.x before 4.0 beta 3, enabling the SSH server to potentially execute arbitrary code. Mit...
CVE-2002-1076
CVE-2002-1076 describes a buffer overflow in the Web Messaging daemon of Ipswitch IMail prior to 7.12. An attacker could trigger the overflow by sending a specially crafted long HTTP GET request for HTTP/1.0, enabling remote code execution. The affected component is the Web Messaging daemon insid...
CVE-2002-0006
Vulnerability summary (CVE-2002-0006) : XChat versions 1.8.7 and earlier (including default configurations of 1.4.2 and 1.4.3) are vulnerable. A remote attacker can execute arbitrary IRC commands as another client by sending specially encoded characters in a PRIVMSG that calls CTCP PING, which ca...
CVE-2002-0187
The CVE-2002-0187 entry corresponds to a cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000, where an attacker could inject script via the root parameter of an XML SQL query. Connected documents also describe a related overflow issue in the SQLXML ISAPI filter...
CVE-2002-0391
CVE-2002-0391 describes an integer overflow in the xdr_array function of RPC servers using libc/glibc or SunRPC-based code (e.g., dietlibc), enabling remote code execution by passing a large number of RPC arguments. The OpenVAS/DSA entries show Debian advisories addressing this issue across multi...
CVE-2002-0647
CVE-2002-0647 is a buffer overflow in a legacy ActiveX control used to display specially formatted text in Microsoft Internet Explorer 5.01, 5.5, and 6.0, allowing remote code execution. The root cause is a vulnerability in the ActiveX control; affected products are IE versions listed. Impact is ...
CVE-2002-0823
The CVE-2002-0823 entry maps to a buffer overflow in Winhlp32.exe triggered by an HTML document calling the HTML Help ActiveX control HHCtrl.ocx with a long pathname in the Item parameter. Affected software is Microsoft Windows components involving WinHlp32.exe and HHCtrl.ocx. The root cause is a...
CVE-2002-0965
CVE-2002-0965 describes a buffer overflow in Oracle’s TNS Listener triggered by a long SERVICE_NAME when writing an error to a log. Affected products include Oracle 9i on Windows and Oracle 8i/VM environments. The vulnerability could allow an unauthenticated local user with TNS Listener privilege...
CVE-2002-1060
CVE-2002-1060 describes a cross-site scripting (XSS) vulnerability in Blue Coat Systems (CacheFlow) CacheOS affecting Client Accelerator 4.1.06, Security Gateway 2.1.02, and Server Accelerator 4.1.06. The issue allows remote attackers to inject arbitrary web script or HTML by crafting a URL to a ...
CVE-2002-0173
Buffer overflow in cpr for the eoe.sw.cpr SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may allow local users to gain root privileges...
CVE-2002-0506
Buffer overflow in newt.c of newt windowing library libnewt 0.50.33 and earlier may allow attackers to cause a denial of service or execute arbitrary code in setuid programs that use libnewt...
CVE-2002-0174
nsd on SGI IRIX before 6.5.11 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the nsd.dump file...
CVE-2002-0009
showbug.cgi in Bugzilla before 2.14.1 allows a user with "Bugs Access" privileges to see other products that are not accessible to the user, by submitting a bug and reading the resulting Product pulldown menu...
CVE-2002-0808
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when performing a mass change, sets the groupset of all bugs to the groupset of the first bug, which could inadvertently cause insecure groupset permissions to be assigned to some bugs...
CVE-2002-0891
The web interface WebUI of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers to cause a denial of service crash via a long user name...
CVE-2002-0619
The Mail Merge Tool in Microsoft Word 2002 for Windows, when Microsoft Access is present on a system, allows remote attackers to execute Visual Basic VBA scripts within a mail merge document that is saved in HTML format, aka a "Variant of MS00-071, Word Mail Merge Vulnerability" CVE-2000-0788...