CVE-2002-0173

Buffer overflow in cpr for the eoe.sw.cpr SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may allow local users to gain root privileges...

CVE-2002-0953

The PHP Address application (versions before 0.2f ) is vulnerable to Remote File Inclusion (RFI) via the globals.php file. When the PHP allow_url_fopen and register_globals variables are enabled, remote attackers can execute arbitrary PHP code by passing a URL through the LangCookie parameter. Th...

CVE-2002-0538

CVE-2002-0538 concerns the FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0, which rewrites FTP PORT responses to enable remote attackers to redirect FTP data connections to arbitrary ports. This is described as a variant of the FTP bounce vulnerability. The connected documents corr...

CVE-2002-0149

CVE-2002-0149 concerns a buffer overflow in the IIS ASP Server-Side Include (SSI) processing when handling long file names. The issue affects Microsoft IIS 4.0, 5.0 and 5.1, and can allow a remote attacker to crash the server or potentially execute arbitrary code via crafted SSI inputs. Multiple ...

CVE-2002-0663

Technical details about CVE-2002-0663 are not publicly provided in the supplied documents. No affected products, root cause, or remediation specifics are available here. Monitor for updates.

CVE-2002-0810

Bugzilla 2.14 before 2.14.2 and 2.16 before 2.16rc2 contains an information leakage vulnerability in the syncshadowdb command. Error messages are written to HTML output, which could leak sensitive information, including plaintext passwords, if syncshadowdb fails. Affected versions should be updat...

CVE-2002-0184

Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p prompt argument, which are not properly expanded...

CVE-2002-0536

PHPGroupware 0.9.12 and earlier, when running with the magicquotesgpc feature disabled, allows remote attackers to compromise the database via a SQL injection attack...

CVE-2002-0569

Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct request to the XSQL Servlet XSQLServlet...

CVE-2002-0719

SQL injection vulnerability in the function that services for Microsoft Content Management Server MCMS 2001 allows remote attackers to execute arbitrary commands via an MCMS resource request for image files or other files...

CVE-2002-0736

Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administrative ASP pages via an HTTP request with an authorization type authtype that is not blank...

CVE-2002-0967

Buffer overflow in eDonkey 2000 35.16.60 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long "ed2k:" URL...

CVE-2002-1035

Omnicron OmniHTTPd 2.09 allows remote attackers to cause a denial of service crash via an HTTP request with a long, malformed HTTP 1version number...

CVE-2002-0904

Affected software: Kismet 2.2.1 and earlier. Vulnerability: The SayText function permits remote command execution by injecting shell metacharacters (backtick or pipe) in the essid argument. Impact (as stated): Remote attackers could execute arbitrary commands via the essid field. Remediation / de...

CVE-2002-0720

Windows 2000 Network Connection Manager (NCM) contains a handler routine that, if configured insecurely, can run under LocalSystem and execute attacker-supplied code. A local user can leverage this to gain full system privileges, per multiple sources (e.g., OpenVAS/Nessus descriptions). Affected ...

CVE-2002-1076

CVE-2002-1076 describes a buffer overflow in the Web Messaging daemon of Ipswitch IMail prior to 7.12. An attacker could trigger the overflow by sending a specially crafted long HTTP GET request for HTTP/1.0, enabling remote code execution. The affected component is the Web Messaging daemon insid...

CVE-2002-0184

The CVE-2002-0184 entry describes a local privilege-escalation in sudo prior to version 1.6.6 due to an off-by-one/doorknob in the heap-based overflow during prompt ( -p ) handling. The flaw is triggered by special characters in the -p prompt, which are not properly expanded, allowing a local use...

CVE-2002-0759

CVE-2002-0759 affects bzip2 prior to 1.0.2, notably in FreeBSD 4.5 and earlier and OpenLinux 3.1/3.1.1. The issue is that bzip2 does not use the O_EXCL flag to create files during decompression and does not warn if an existing file would be overwritten. This could allow an attacker to overwrite f...

CVE-2002-0490

Technical details (affected component, vulnerable version, exploit specifics and remediation) are not publicly available in the provided documents. Monitor for updates.

CVE-2002-0829

CVE-2002-0829: Integer overflow in the Berkeley Fast File System (FFS) on FreeBSD 4.6.1 RELEASE-p4 and earlier allows local users to access arbitrary file contents within FFS to gain privileges by creating a file larger than allowed by the virtual memory system. Affects FreeBSD FFS; vulnerability...