5356 matches found
CVE-2002-0887
CVE-2002-0887 affects scoadmin on Caldera/SCO OpenServer 5.0.5 and 5.0.6. The vulnerability is a symlink attack on temporary files (demonstrated via log files) that allows local users to overwrite arbitrary files, indicating a local access requirement and partial integrity impact. The NVD CVSS me...
CVE-2002-0734
B2 2.0.6pre2 and earlier are affected by CVE-2002-0734 due to a flaw in how b2edit.showposts.php loads b2config.php in certain configurations. This can allow a remote attacker to execute arbitrary PHP code by crafting a URL that sets the $b2inc variable to point to a malicious program hosted remo...
CVE-2002-0658
CVE-2002-0658 affects OSSP mm library (libmm) prior to 1.2.0. The vulnerability allows the local Apache user to gain privileges via temporary files, potentially through a symlink attack. Debian advisory DSA-137 and OpenVAS entries confirm mm-related remediation guidance and show the vulnerability...
CVE-2002-0599
Blahz-DNS 0.2 and earlier is affected by CVE-2002-0599. The vulnerability allows remote attackers to bypass authentication and modify DNS configuration by directly requesting CGI programs (e.g., dostuff.php) instead of using the login screen. Affected component is the authentication/config flow; ...
CVE-2002-0542
Technical details about CVE-2002-0542 are not publicly provided in the supplied documents. Monitor for updates from CVE lists and vendor advisories.
CVE-2002-0406
Technical details about CVE-2002-0406 are not publicly available in the provided connected documents. The description confirms a DoS via many connections on Menasoft SPHERE server, but no specifics on affected versions, vectors, or remediation are included here. Monitor for updates.
CVE-2002-0392
Affected software: Apache HTTP Server 1.3.x (up to 1.3.24) and 2.0.x (up to 2.0.36). The vulnerability arises from processing chunk-encoded HTTP requests, causing Apache to compute an incorrect size, which can lead to a remote denial of service and, in some reports, potential arbitrary code execu...
CVE-2002-0276
CVE-2002-0276 describes a buffer overflow in various decoders of Ettercap ≤ 0.6.3.1 when running on networks with MTU > 2000, allowing remote attackers to execute arbitrary code via large packets. The entry specifies the affected software (Ettercap) and version range, the root cause (buffer ov...
CVE-2002-0246
The CVE-2002-0246 issue affects UnixWare 7.1.1, where a format string vulnerability in the message catalog library functions can be exploited locally by manipulating the LC_MESSAGE environment variable. This could allow a local attacker to read other message catalogs containing format strings fro...
CVE-2002-0650
The keep-alive mechanism for Microsoft SQL Server 2000 allows remote attackers to cause a denial of service bandwidth consumption via a "ping" style packet to the Resolution Service UDP port 1434 with a spoofed IP address of another SQL Server system, which causes the two servers to exchange...
CVE-2002-0543
Directory traversal vulnerability in Aprelium Abyss Web Server abyssws before 1.0.0.2 allows remote attackers to read files outside the web root, including the abyss.conf file, via URL-encoded .. dot dot sequences in the HTTP request...
CVE-2002-0741
psyBNC 2.3 allows remote attackers to cause a denial of service CPU consumption and resource exhaustion by sending a PASS command with a long password argument and quickly killing the connection, which is not properly terminated by psyBNC...
CVE-2002-0887
scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using log files...
CVE-2002-0033
Heap-based buffer overflow in cfsdcalloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name...
CVE-2002-0826
Buffer overflow in WSFTP FTP Server 3.1.1 allows remote authenticated users to execute arbitrary code via a long SITE CPWD command...
CVE-2002-0401
SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via malformed packets that cause Ethereal to dereference a NULL pointer...
CVE-2002-0935
Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, allows remote attackers to cause a denial of service resource exhaustion via a large number of requests to the server with null characters, which causes the working threads to hang...
CVE-2002-0640
Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authentication PAMAuthenticationViaKbdInt...
CVE-2002-0163
Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via compressed DNS responses...