CVE-2002-1485

The AIM component of Trillian 0.73 and 0.74 allows remote attackers to cause a denial of service crash via certain strings such as "P O C"...

CVE-2002-1429

Cross-site scripting vulnerability in board.php of endity.com ShoutBOX allows remote attackers to inject arbitrary HTML into the shoutbox page via the site parameter...

CVE-2002-1551

This CVE concerns a buffer overflow in the nslookup utility on IBM AIX. The root cause is an overflow in nslookup that can lead to denial of service or arbitrary code execution. Impact is described as partial confidentiality, integrity, and availability concerns per the NVD metrics, with local at...

CVE-2002-1459

CVE-2002-1459 is a cross-site scripting vulnerability in L-Forum versions 2.40 and earlier, where the option “Enable HTML in messages” off allows remote insertion of script/HTML via From, E‑Mail, or Subject fields. Root cause: insufficient input validation/escaping in message fields. According to...

CVE-2002-1515

CVE-2002-1515 affects CoolForum 0.5 beta. The vulnerability is in avatar.php where the img parameter can be exploited with dot-dot sequences to perform a directory traversal and read arbitrary files. Root cause: inadequate validation/sanitization of the img parameter. Impact described as partial ...

CVE-2002-1441

Tomahawk SteelArrow (before 4.5) is affected by multiple buffer overflows that allow remote code execution. The vulnerabilities arise from: (1) Steelarrow Service (Steelarrow.exe) accepting a long UserIdent Cookie header, (2) DLLHOST.EXE (Steelarrow.dll) handling an oversized .aro file request, a...

CVE-2002-1462

CVE-2002-1462 affects OrganicPHP PHP-affiliate 1.0 (and possibly later), where details2.php allows remote attackers to modify information of other users by tampering with hidden form fields. The underlying issue is insufficient validation/authentication for user data in the affected script, enabl...

CVE-2002-1507

CVE-2002-1507 affects Unreal Tournament 2003 (UT2003) clients and servers. The vulnerability allows remote denial of service via malformed messages sent over UDP to ports 7778 or 10777. The provided sources describe the affected component as UT2003 network clients/servers and identify the issue a...

CVE-2002-1406

Technical details about CVE-2002-1406 are not publicly provided in the supplied documents. No concrete affected product/version, root cause, or remediation is described here. Monitor updates from the CVE entries and connected sources for new information.

CVE-2002-1450

Technical details beyond the basic description are not publicly provided in the connected documents. Available sources confirm IBM UniVerse UV/ODBC DoS via a query with an invalid link between tables (possible buffer overflow). Monitor for updates.

CVE-2002-1415

CVE-2002-1415 describes a format-string vulnerability in the SMTP service of WebEasyMail 3.4.2.2 and earlier. The flaw allows remote attackers to crash the service and potentially execute arbitrary code by sending crafted format strings in SMTP requests. The accessible impact via the NVD entry is...

CVE-2002-1504

This CVE-2002-1504 entry pertains to WebServer 4 Everyone 1.22 and describes a directory traversal vulnerability where remote attackers can read arbitrary files through URL dot-dot backslash sequences ("..\"). The described root cause is improper normalization of path traversal in user-supplied U...

CVE-2002-1495

Cross-site scripting XSS vulnerability in JAWmail 1.0-rc1 allows remote attackers to insert arbitrary script or HTML via 1 attached file names in the Read Mail feature, 2 text/html mails that are displayed in a pop-up window, and 3 certain malicious attributes within otherwise safe tags, such as...

CVE-2002-1487

The CVE-2002-1487 entry concerns the IRC component of Trillian versions 0.73 and 0.74. The vulnerability allows remote malicious IRC servers to cause a denial of service (crash) by sending any of the 15 specified raw messages (numbers 206, 211, 213, 214, 215, 217, 218, 243, 302, 317, 324, 332, 33...

CVE-2002-1453

Vulnerability: CVE-2002-1453 affects MyWebServer 1.0.2. Issue: Cross-site scripting (XSS) where a long request allows remote attackers to inject script/HTML, which is echoed back to the user in an error message. Impact (as described): Script execution in the context of the user’s browser via the ...

CVE-2002-1427

The CVE-2002-1427 entry affects Easy Homepage Creator 1.0. The print_html_to_file function in edit.cgi does not validate user credentials, enabling remote attackers to modify other users’ home pages. CVSS v2 data reports a base score of 7.5 ( HIGH ) with network attack vector, no authentication, ...

CVE-2002-1423

The CVE-2002-1423 issue concerns FUDforum, where tmp_view.php before version 2.2.0 allows remote attackers to read arbitrary files through an absolute pathname supplied in the file parameter. The underlying vulnerability is a path traversal/unsafe file inclusion in the tmp_view.php handler, enabl...

CVE-2002-1495

The CVE-2002-1495 entry documents a Cross-site scripting (XSS) vulnerability in JAWmail 1.0-rc1. The vulnerability allows remote attackers to inject arbitrary script or HTML through multiple vectors: (1) attached file names in the Read Mail feature, (2) text/html mails displayed in a pop-up windo...

CVE-2002-1426

CVE-2002-1426 affects the HP ProCurve Switch 4000M (firmware version C.07.23). The vulnerability allows remote attackers to cause a denial of service (crash) by sending an SNMP write request containing 85 characters, which may trigger a buffer overflow. The connected documents provide the impact ...

CVE-2002-1487

The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service crash by sending the raw messages 1 206, 2 211, 3 213, 4 214, 5 215, 6 217, 7 218, 8 243, 9 302, 10 317, 11 324, 12 332, 13 333, 14 352, and 15 367...