5508 matches found
CVE-2002-0700
This CVE concerns Microsoft Content Management Server (MCMS) 2001, where a buffer overflow in the Profile Service (an MDAC-related function used during user authentication) can allow an attacker to execute code in the Local System context by authenticating to a vulnerable web page. The issue is c...
CVE-2002-1015
RealNetworks RealJukebox/RealONE Gold are affected by a remote code execution vulnerability in the processing of skin files. A crafted skin file can be embedded in or referenced by a document (HTML/email) and parsed as HTML, allowing an attacker to execute arbitrary code on the target system. Sev...
CVE-2002-0762
CVE-2002-0762 : The shadow package in SuSE 8.0 lets local users destroy /etc/passwd and /etc/shadow or grant extra group privileges by lowering the filesize limits before programs modify those files, indicating a local-privilege-impact scenario due to improper enforcement of file-size constraints...
CVE-2002-0148
CVE-2002-0148 is a cross-site scripting vulnerability in Microsoft Internet Information Services (IIS) 4.0, 5.0 and 5.1 that allows remote attackers to execute arbitrary script as the affected user via an HTTP error page. Connected sources confirm this CSS/XSS issue is part of a broader set of II...
CVE-2002-0072
The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server IIS 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote attackers to cause a denial of service crash when the URL parser accesses a nu...
CVE-2002-0172
CVE-2002-0172 concerns SGI IRIX 6.5 where the /dev/ipfilter device is created by /dev/MAKEDEV with insecure default permissions (644). A local user could exploit this to cause a denial of service by disrupting network traffic. The issue is mitigated by upgrading to IRIX 6.5.11 or later, as noted ...
CVE-2002-0246
The CVE-2002-0246 issue affects UnixWare 7.1.1, where a format string vulnerability in the message catalog library functions can be exploited locally by manipulating the LC_MESSAGE environment variable. This could allow a local attacker to read other message catalogs containing format strings fro...
CVE-2002-0848
CVE-2002-0848 affects Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier. When using RADIUS with a PAP or Challenge, the system sends the user password in cleartext in a validation retry request, enabling potential password capture by remote attackers...
CVE-2002-0367
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit...
CVE-2002-0276
Buffer overflow in various decoders in Ettercap 0.6.3.1 and earlier, when running on networks with an MTU greater than 2000, allows remote attackers to execute arbitrary code via large packets...
CVE-2002-1046
Dynamic VPN Configuration Protocol service DVCP in Watchguard Firebox firmware 5.x.x allows remote attackers to cause a denial of service crash via a malformed packet containing tab characters to TCP port 4110...
CVE-2002-0368
The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service CPU consumption via a mail message with a malformed RFC message attribute, aka "Malformed Mail Attribute can Cause Exchange 2000 to Exhaust CPU Resources."...
CVE-2002-0545
Cisco Aironet before 11.21 with Telnet enabled is vulnerable to a denial-of-service via rapid login attempts with invalid usernames/passwords, which can reboot the device. The CVE description and NASL entry corroborate a remote DoS by targeting Telnet login handling; no explicit patch/version rem...
CVE-2002-0404
Ethereal (network traffic analyzer) is affected by a memory-consumption DoS in the GIOP dissector prior to version 0.9.3. Red Hat and Debian advisories summarize the issue as a vulnerability in Ethereal’s dissectors (GIOP), where memory allocation/consumption can be exploited remotely to impact a...
CVE-2002-0988
Buffer overflow in X server Xsco in OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities...
CVE-2002-0292
The CVE-2002-0292 entry describes a cross-site scripting (XSS) vulnerability in Slash before 2.2.5 (used in Slashcode and related projects). The issue allows remote attackers to steal cookies and authentication information from other users by injecting JavaScript into a URL (potentially via the f...
CVE-2002-1002
Buffer overflow in Novell iManager eMFrame 1.2.1 allows remote attackers to cause a denial of service crash via a long user name...
CVE-2002-0163
Vulnerability: Squid earlier than 2.4 STABLE4 and some 2.5/2.6 builds were exposed to a heap-based buffer overflow in the internal DNS code when handling compressed DNS responses, caused by improper bounds/checks in lib/rfc1035.c. Impact per sources: potential denial of service and possible remot...
CVE-2002-0531
EMU Webmail vulnerability: directory traversal in emumail.cgi affects 4.5.x and 5.1.0, allowing read/list of arbitrary files via .. in the type parameter. Root cause is path traversal in the type parameter; exploitation details and remediation are not provided in the supplied documents.