CVE-2002-0906

CVE-2002-0906 describes a buffer overflow in Sendmail before 8.12.5 when configured to use a custom DNS map to query TXT records. A malicious DNS server could trigger the overflow, allowing a remote attacker to cause a denial of service and, potentially, execute arbitrary code on the affected hos...

CVE-2002-0947

CVE-2002-0947 describes a buffer overflow in the rwcgi60 CGI program used by Oracle Reports Server 6.0.8.18.0 and earlier (Oracle9iAS and other products). The vulnerability allows a remote attacker to execute arbitrary code via a long database name parameter. The Oracle RWCGI60 component handles ...

CVE-2002-0703

An interaction between the Perl MD5 module perl-Digest-MD5 and Perl could produce incorrect MD5 checksums for UTF-8 data, which could prevent a system from properly verifying the integrity of the data...

CVE-2002-0831

Technical details about CVE-2002-0831 are not publicly available in the provided documents. Monitor for updates.

CVE-2002-0213

CVE-2002-0213 affects SGI Xinet K-AShare (IRIX) 0.011.01. The vulnerability arises from a symlink attack on the VOLICON file, which is copied to the world-writable .HSicon directory in a shared path. This enables local users to read arbitrary files. The SGI advisory notes the issue as fixed in th...

CVE-2002-0401

The CVE-2002-0401 issue affects Ethereal SMB dissector: versions 0.9.3 and earlier are vulnerable to remote denial of service or arbitrary code execution due to a NULL pointer dereference when handling malformed SMB packets. Connected sources confirm the flaw and indicate remediation by upgrading...

CVE-2002-0355

The SGI IRIX netstat vulnerability (CVE-2002-0355) affects the /usr/etc/netstat binary in IRIX prior to 6.5.12, allowing local users to detect the existence of files they should not access. The issue is a local-access information-disclosure flaw; exploitation requires a local account. SGI states ...

CVE-2002-0403

CVE-2002-0403 affects Ethereal's DNS dissector. Vulnerable: Ethereal versions prior to 0.9.3. Exploitation causes a denial of service through CPU consumption by a malformed DNS packet that makes Ethereal enter an infinite loop. Remediation is to upgrade Ethereal to a fixed version (e.g., 0.9.3 or...

CVE-2002-0617

CVE-2002-0617 affects Microsoft Excel 2000 and 2002 on Windows. The vulnerability allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that points to a destination workbook containing an autoexecute macro, known as the Hyperlinked Excel Workbook ...

CVE-2002-0513

CVE-2002-0513 affects the popper_mod PHP administration script (versions 1.2.1 and earlier). The vulnerability arises because the admin interface relies on Apache .htaccess authentication, enabling remote attackers to gain administrative privileges if the administrator does not configure the scri...

CVE-2002-0795

CVE-2002-0795 affects the FreeBSD rc startup script (FreeBSD 4–4.5). The root cause is a symlink attack on X Window system lock files that allows local users to delete arbitrary files. Exploitation details are not provided in the available documents, so the exact steps and vulnerable files are no...

CVE-2002-0776

CVE-2002-0776 affects Hosting Controller 2002. getuserdesc.asp lets remote attackers change arbitrary users’ passwords and gain privileges by modifying the username parameter. Root cause is input manipulation in the affected function, leading to partial confidentiality, integrity and availability...

CVE-2002-0094

CVE-2002-0094 affects BSCW (Basic Support for Cooperative Work) 3.x and versions before 4.06. The vulnerability arises from config_converters.py, allowing remote command execution via shell metacharacters in file names during filename conversion. Root cause is inadequate validation of file-name i...

CVE-2002-0790

Technical details about CVE-2002-0790 are not publicly available in the provided documents. Monitor for updates.

CVE-2002-0172

CVE-2002-0172 concerns SGI IRIX 6.5 where the /dev/ipfilter device is created by /dev/MAKEDEV with insecure default permissions (644). A local user could exploit this to cause a denial of service by disrupting network traffic. The issue is mitigated by upgrading to IRIX 6.5.11 or later, as noted ...

CVE-2002-0573

CVE-2002-0573 affects Solaris systems running the rpc.rwalld daemon (Solaris 2.5.1–8). The issue is a format-string vulnerability in the error-handling path of rpc.rwalld, which can allow a remote attacker to execute arbitrary code with the daemon’s privileges (typically root) by sending a specia...

CVE-2002-0358

CVE-2002-0358 affects SGI IRIX systems where the MediaMail and MediaMail Pro binaries (located in /usr/binX11/MediaMail) could be coerced by certain user-supplied arguments to dump core. The underlying issue is a local privilege/ information-disclosure risk due to core dumps from privileged mail ...

CVE-2002-0736

Microsoft BackOffice 4.0/4.5, when configured for remote access, is vulnerable to authentication bypass via an HTTP request using a non-blank auth_type, allowing remote attackers to access administrative ASP pages. The provided documents describe the vulnerability and impact but do not include a ...

CVE-2002-0984

The CVE affects Light’s EPIC-based IRC script (epic4-script-light) in Light 2.7.x before 2.7.30p5 and 2.8.x before 2.8pre10. A remote attacker can trigger arbitrary code execution if a user joins a channel whose topic contains EPIC4 code, via the IRC script. Remediation involves updating to the p...

CVE-2002-1000

CVE-2002-1000 describes a buffer overflow in AnalogX SimpleServer:Shout 1.0 that allows remote attackers to cause a denial of service and potentially execute arbitrary code via a long request to TCP port 8001. The issue affects the affected software as documented in multiple sources (NVD, CVE Lis...