CVE-2002-0714

The advisory scope confirms that CVE-2002-0714 affects the Squid FTP proxy prior to 2.4.STABLE6, where the FTP control and data channel addresses were not compared to the FTP server’s address. This allowed remote attackers to bypass firewall rules or spoof FTP server responses. Multiple connected...

CVE-2002-0818

CVE-2002-0818 affects World Wide Web Offline Explorer (WWWOFFLE) and its wwwoffled component. The remote denial of service and potential code execution stem from improper handling of negative Content-Length values, which can crash the processing child and, in some reports, allow arbitrary code ex...

CVE-2002-0073

Summary of CVE-2002-0073 : The FTP service in Microsoft IIS 4.0, 5.0, and 5.1 is vulnerable to a denial-of-service when a currently authenticated or session-hosted FTP user issues a specially crafted status request containing glob characters. The vulnerability may cause the IIS server to crash an...

CVE-2002-0185

The CVE-2002-0185 issue affects Apache mod_python versions 2.7.6 and earlier, where a module indirectly imported by a published module can be accessed via the publisher, allowing remote attackers to call potentially dangerous functions from the imported module. The OpenVAS/NVD/CVE listings corrob...

CVE-2002-0958

Technical details about CVE-2002-0958 are not publicly provided in the connected documents. No additional information on affected products, versions, root cause, exploit status, or fixes is available here. Monitor for updates from official sources.

CVE-2002-0290

Netwin WebNews WebNews.cgi (Webnews.exe) version 1.1 is affected by a buffer overflow when processing a long group argument in the WebNews CGI, allowing remote attackers to execute arbitrary code. The issue is described across CVE-2002-0290 records (NVD/Nessus/OpenVAS) with a base CVSS v2 score o...

CVE-2002-0369

CVE-2002-0369 describes a buffer overflow in the ASP.NET Worker Process when StateServer mode is enabled, triggered by a routine that processes cookies. The issue can allow a remote attacker to cause a denial of service (restart) and potentially execute arbitrary code with the worker process priv...

CVE-2002-0009

In Bugzilla versions before 2.14.1, a user with Bugs Access privileges could trigger information disclosure by submitting a bug and reading the resulting Product pulldown menu, revealing other products not accessible to them. The root cause is insufficient access controls around the Product pulld...

CVE-2002-0424

CVE-2002-0424 affects efingerd 1.61 and earlier. When configured without the -u option, efingerd executes user-owned .efingerd files as the efingerd user (typically "nobody"), allowing a local user to gain privileges by modifying their own .efingerd file and invoking finger. The connected documen...

CVE-2002-0765

Technical details for CVE-2002-0765 are not present in the provided connected documents; the initial description notes a login issue in OpenSSH 3.2.2 with YP/netgroups, but no public details are supplied in connected documents.

CVE-2002-0601

Affected product: ISS RealSecure Network Sensor (5.x–6.5). vulnerability: processing certain DHCP traffic leads to a crash by dereferencing a null pointer, enabling remote attackers to cause a denial of service. Impact: sensor crash/DoS as described; exploitation details are not provided in the d...

CVE-2002-0062

CVE-2002-0062 is a local privilege-escalation in ncurses 5.0 and the ncurses4 compatibility package, caused by a buffer overflow in routines for moving the physical cursor and scrolling. Debian and Red Hat advisories describe the issue and assign CAN-2002-0062. Affected products include ncurses 5...

CVE-2002-0163

Vulnerability: Squid earlier than 2.4 STABLE4 and some 2.5/2.6 builds were exposed to a heap-based buffer overflow in the internal DNS code when handling compressed DNS responses, caused by improper bounds/checks in lib/rfc1035.c. Impact per sources: potential denial of service and possible remot...

CVE-2002-0267

CVE-2002-0267 affects Simple Internet Publishing System (SIPS) prior to 0.3.1. A line break in the theme field followed by the Status::admin command allows remote attackers to gain administrative privileges by causing the Status line to be written into the password file. The connected sources con...

CVE-2002-0891

The CVE-2002-0891 issue affects NetScreen ScreenOS WebUI (pre-2.6.1r8 and certain 2.8.x/3.0.x builds before 3.0.3r1). The vulnerability allows remote attackers to trigger a denial-of-service (crash) by sending a long user name to the WebUI. Impact is limited to availability (PARTIAL) as per the N...

CVE-2002-0299

The CVE-2002-0299 entry concerns CNet CatchUp prior to version 1.3.1. The vulnerability arises when a crafted .RVP file enables arbitrary code execution by creating a file with an arbitrary extension (for example, .BAT) that is executed during a scan. The provided documents identify the affected ...

CVE-2002-0538

CVE-2002-0538 concerns the FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0, which rewrites FTP PORT responses to enable remote attackers to redirect FTP data connections to arbitrary ports. This is described as a variant of the FTP bounce vulnerability. The connected documents corr...

CVE-2002-0011

The CVE refers to Bugzilla, where the doeditvotes.cgi component in versions prior to 2.14.1 has an information leak that could allow remote attackers to more easily conduct attacks on the login. This is a partial confidentiality impact vulnerability (NVD metrics show MEDIUM severity, CVSS v2.0: A...

CVE-2002-0790

clchkspuser and clpasswdremote in AIX expose an encrypted password in the cspoc.log file, which could allow local users to gain privileges...

CVE-2002-1057

CVE-2002-1057: A buffer overflow in SmartMax MailMax POP3 daemon (popmax) 4.8 allows remote attackers to execute arbitrary code via a long USER command. The root cause is a buffer overflow in the POP3 daemon, with impact described as remote code execution. Exploitation details and a software fix ...