CVE-2002-0748

LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service crash via an HTTP GET request that ends in two newline characters, instead of the expected carriage return/newline combinations...

CVE-2002-0891

The CVE-2002-0891 issue affects NetScreen ScreenOS WebUI (pre-2.6.1r8 and certain 2.8.x/3.0.x builds before 3.0.3r1). The vulnerability allows remote attackers to trigger a denial-of-service (crash) by sending a long user name to the WebUI. Impact is limited to availability (PARTIAL) as per the N...

CVE-2002-0542

Technical details about CVE-2002-0542 are not publicly provided in the supplied documents. Monitor for updates from CVE lists and vendor advisories.

CVE-2002-0187

The CVE-2002-0187 entry corresponds to a cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000, where an attacker could inject script via the root parameter of an XML SQL query. Connected documents also describe a related overflow issue in the SQLXML ISAPI filter...

CVE-2002-0181

CVE-2002-0181 — Horde IMP status.php3 XSS is confirmed in connected OpenVAS/NVD entries. The vulnerability arises in the status.php3 parameter handling of IMP 2.2.8 and HORDE 1.2.7, where user-supplied data is not properly sanitized, enabling cross-site scripting and potential cookie theft when a...

CVE-2002-0777

CVE-2002-0777: A buffer overflow in the LDAP component of Ipswitch IMail

CVE-2002-0431

CVE-2002-0431 affects the XTux system, where remote attackers can trigger a denial of service by sending random inputs during the initial connection. The vulnerability is described as causing CPU consumption, with no details about affected versions, exploit methods, or available fixes in the prov...

CVE-2002-0814

CVE-2002-0814 concerns VMware GSX Server 2.0.0 build-2050, where a buffer overflow in the VMware Authorization Service allows remote authenticated users to execute arbitrary code through a long GLOBAL argument. Affected component: VMware Authorization Service within GSX Server 2.0.0. Root cause: ...

CVE-2002-0441

CVE-2002-0441 describes a directory traversal vulnerability in the Php Imglist component (imlist.php) where a crafted cwd parameter containing two dots (.. ) can cause reading of arbitrary files. The available sources indicate a potential exposure of code or sensitive files but do not provide con...

CVE-2002-0250

The vulnerability concerns HP AdvanceStack hubs (models J3200A–J3210A) running firmware version A.03.07 or earlier. The Web configuration utility exposes a flaw where an unauthorized user can bypass authentication through a direct HTTP request to the web_access.html page. This bypass allows an at...

CVE-2002-0067

Summary: CVE-2002-0067 affects Squid 2.4 STABLE3 and earlier, where the HTCP interface is not properly disabled even when squid.conf sets htcp_port 0, potentially allowing remote attackers to bypass access restrictions. Root cause (as described): HTCP cannot be fully disabled in these releases, e...

CVE-2002-0601

Affected product: ISS RealSecure Network Sensor (5.x–6.5). vulnerability: processing certain DHCP traffic leads to a crash by dereferencing a null pointer, enabling remote attackers to cause a denial of service. Impact: sensor crash/DoS as described; exploitation details are not provided in the d...

CVE-2002-0887

CVE-2002-0887 affects scoadmin on Caldera/SCO OpenServer 5.0.5 and 5.0.6. The vulnerability is a symlink attack on temporary files (demonstrated via log files) that allows local users to overwrite arbitrary files, indicating a local access requirement and partial integrity impact. The NVD CVSS me...

CVE-2002-0241

The vulnerability CVE-2002-0241 affects Cisco Secure Authentication Control Server (ACS) 3.0.1 via the NDSAuth.DLL, which fails to validate the Expired/Disabled state of NetWare/NDS users. As a result, such accounts could authenticate to the ACS despite being expired or disabled. The issue is cau...

CVE-2002-0174

IRIX nsd symlink vulnerability (CVE-2002-0174): on SGI IRIX versions prior to 6.5.11, nsd can be tricked via a symlink attack on /var/tmp/nsd.dump to damage/modify the dump file when the nsd process receives USR1. Local users could potentially gain root privileges. The advisory fixes/change is to...

CVE-2002-0831

The kqueue mechanism in FreeBSD 4.3 through 4.6 STABLE allows local users to cause a denial of service kernel panic via a pipe call in which one end is terminated and an EVFILTWRITE filter is registered for the other end...

CVE-2002-0545

Cisco Aironet before 11.21 with Telnet enabled allows remote attackers to cause a denial of service reboot via a series of login attempts with invalid usernames and passwords...

CVE-2002-0809

Bugzilla 2.14 before 2.14.2 and 2.16 before 2.16rc2 mishandles URL-encoded field names generated by some browsers, causing certain fields to appear unset and resulting in removal of group permissions on bugs when buglist.cgi is used with the encoded field names. Affected components: Bugzilla bug ...

CVE-2002-0373

CVE-2002-0373 affects Windows Media Player 7.1 on Windows 2000, where the Windows Media Device Manager (WMDM) Service lets a local user elevate to LocalSystem by invoking the WMDM service to connect to an invalid local storage device. The vulnerability is local and impacts the WMDM component; aff...

CVE-2002-0358

MediaMail and MediaMail Pro in SGI IRIX 6.5.16 and earlier allows local users to force the program to dump core via certain arguments, which could allow the users to read sensitive data or gain privileges...