CVE-2002-0068

Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service core dump and possibly execute arbitrary code with an ftp:// URL with a larger number of special characters, which exceed the buffer when Squid URL-escapes the characters...

CVE-2002-0714

FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses...

CVE-2002-0389

CVE-2002-0389 concerns Pipermail in Mailman, where private mail messages are stored with predictable filenames in a world-executable directory, allowing local users to read private mailing list archives. The connected advisories corroborate the issue within Mailman and reference multiple CVEs (no...

CVE-2002-0658

OSSP mm library libmm before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack...

CVE-2002-0687

Zope Server DoS via header injection (CVE-2002-0687) affects Zope versions 2.0 through 2.5.1 beta 1, where the "through the web code" capability allows untrusted users to crash the server by injecting malicious headers into a response. The connected advisories (GHSA-vwrc-g9q6-f675 and OSV) descri...

CVE-2002-0597

LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service CPU/memory exhaustion via a stream of malformed data to microsoft-ds port 445...

CVE-2002-0163

Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via compressed DNS responses...

CVE-2002-0391

CVE-2002-0391 describes an integer overflow in the xdr_array function of RPC servers using libc/glibc or SunRPC-based code (e.g., dietlibc), enabling remote code execution by passing a large number of RPC arguments. The OpenVAS/DSA entries show Debian advisories addressing this issue across multi...

CVE-2002-0464

Directory traversal vulnerability in Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files and directories via a .. dot dot in arguments to 1 fileeditor.asp, 2 folderactions.asp, or 3 editoractions.asp...

CVE-2002-0531

Directory traversal vulnerability in emumail.cgi in EMU Webmail 4.5.x and 5.1.0 allows remote attackers to read arbitrary files or list arbitrary directories via a .. dot dot in the type parameter...

CVE-2002-0946

CVE-2002-0946 affects SeaNox Devwex prior to 1.2002.0601 and is a directory traversal vulnerability that allows remote attackers to read arbitrary files via ..\ (dot dot) sequences in an HTTP request. The issue targets the path handling in the HTTP interface and results in partial confidentiality...

CVE-2002-0495

csSearch.cgi in csSearch 2.3 and earlier contains a remote command‑execution flaw. An attacker can trigger arbitrary Perl code by using the savesetup command and the setup parameter, which overwrites the setup.cgi configuration file loaded by csSearch.cgi. This yields remote, user‑independent com...

CVE-2002-0178

uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which could allow attackers to overwrite files or execute commands...

CVE-2002-0061

Apache HTTP Server on Windows (Win32) is vulnerable prior to versions 1.3.24 and 2.0.x prior to 2.0.34-beta. The flaw allows remote attackers to execute arbitrary commands by sending shell metacharacters (a pipe |) as arguments to batch (.bat) or .cmd scripts, which reach the shell interpreter (c...

CVE-2002-0900

The CVE-2002-0900 entry concerns the pks PGP public key web server prior to 0.9.5. The vulnerability is a buffer overflow in the lookup capability that can be triggered by a long search argument, resulting in denial of service and potentially arbitrary code execution. Affected component: the PGP ...

CVE-2002-0538

FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0 rewrites an FTP server's "FTP PORT" responses in a way that allows remote attackers to redirect FTP data connections to arbitrary ports, a variant of the "FTP bounce" vulnerability...

CVE-2002-0463

home.php in ARSC Really Simple Chat 1.0.1 and earlier allows remote attackers to determine the full pathname of the web server via an invalid language in the arsclanguage parameter, which leaks the pathname in an error message...

CVE-2002-0829

Integer overflow in the Berkeley Fast File System FFS in FreeBSD 4.6.1 RELEASE-p4 and earlier allows local users to access arbitrary file contents within FFS to gain privileges by creating a file that is larger than allowed by the virtual memory system...

CVE-2002-0904

SayText function in Kismet 2.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters backtick or pipe in the essid argument...

CVE-2002-0358

CVE-2002-0358 affects SGI IRIX systems where the MediaMail and MediaMail Pro binaries (located in /usr/binX11/MediaMail) could be coerced by certain user-supplied arguments to dump core. The underlying issue is a local privilege/ information-disclosure risk due to core dumps from privileged mail ...