CVE-2002-1453

Cross-site scripting XSS vulnerability in MyWebServer 1.0.2 allows remote attackers to insert script and HTML via a long request followed by the malicious script, which is echoed back to the user in an error message...

CVE-2002-1464

CVE-2002-1464 describes a cross-site scripting (XSS) vulnerability in the CafeLog b2 Weblog Tool. The affected component is the CafeLog b2 Weblog Tool, and the root cause is improper handling of user-supplied data in the GPC variable, enabling remote attackers to inject arbitrary HTML or script. ...

CVE-2002-0690

McAfee Security ePolicy Orchestrator (ePO) 2.5.1 is affected by CVE-2002-0690, a format-string vulnerability in the HTTP GET request path that can allow remote code execution with SYSTEM privileges. The issue stems from processing of network requests (port 8081) and can enable arbitrary code exec...

CVE-2002-1523

The CVE-2002-1523 entry concerns the Daniel Arenz Mini Server 2.1.6. The vulnerability is a directory traversal flaw that lets remote attackers read arbitrary files via ../ or ..\ sequences. This is caused by improper handling of relative path traversal in the server, leading to potential exposur...

CVE-2002-1535

CVE-2002-1535 affects Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2. An attacker can discover internal host IP addresses by sending a CONNECT request and observing differing error messages depending on host presence, implying partial disclosure of internal topology. Th...

CVE-2002-1465

The CVE-2002-1465 entry describes an SQL injection in CafeLog b2 Weblog Tool, exploitable remotely through the tablehosts parameter. The affected component is a web-based weblog tool; the underlying issue is improper input handling that allows arbitrary SQL execution. Impact is partial confidenti...

CVE-2002-1506

Linuxconf before 1.28r4 is vulnerable to a local buffer overflow triggered by a long LINUXCONF_LANG environment variable, allowing local users to execute arbitrary code. This matches the CVE-2002-1506 description and is corroborated by the NVD entry and related records (e.g., CVE list and EUVD-20...

CVE-2002-1484

DB4Web server vulnerability CVE-2002-1484: when configured to show verbose debug messages, the server can be abused as a proxy to initiate TCP connections to arbitrary hosts/ports, effectively enabling port-scanning-like behavior. The attack is triggered by requesting a URL that encodes the targe...

CVE-2002-1481

The CVE-2002-1481 entry concerns phpGB versions 1.20 and earlier where savesettings.php allows unauthenticated remote modification of config.php. The root cause is lack of authentication on savesettings.php, enabling an attacker to alter configuration and potentially cause a denial of service or ...

CVE-2002-1451

The vulnerability CVE-2002-1451 affects the Blazix web server (Java-based) prior to version 1.2.2. An HTTP request that ends with a "+" or a backslash "\" can disclose the JSP source code or list restricted directories, enabling partial disclosure of sensitive data. The threat is described as rem...

CVE-2002-1522

CVE-2002-1522 concerns a buffer overflow in PowerFTP FTP server 2.24 (and possibly other versions). The vulnerability allows a remote attacker to cause a denial of service and, potentially, execute arbitrary code by sending a long USER argument. The available documents consistently describe the i...

CVE-2002-1488

CVE-2002-1488 affects the IRC component of Trillian in versions 0.73 and 0.74. The issue allows remote malicious IRC servers to cause a denial of service (crash) by sending a PART message with (1) a missing channel or (2) a channel that the Trillian user is not in. This is a network-vector impact...

CVE-2002-1434

CVE-2002-1434 corresponds to multiple cross-site scripting (XSS) vulnerabilities in the Web Mail module of Kerio MailServer 5.0. The collected documents specify that remote attackers could cause HTML/script execution as other users by exploiting certain URLs in the WebMail interface. The OpenVAS/...

CVE-2002-1460

L-Forum 2.40 and earlier does not properly verify whether a file was uploaded or if the associated variables were set by POST attachment, attachmentname, attachmentsize and attachmenttype, which allows remote attackers to read arbitrary files...

CVE-2002-1464

Cross-site scripting XSS vulnerability in CafeLog b2 Weblog Tool allows remote attackers to insert arbitrary HTML or script via the GPC variable...

CVE-2002-1546

BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence...

CVE-2002-1416

The CVE-2002-1416 issue affects the POP3 service of WebEasyMail 3.4.2.2 and earlier. The underlying problem is that the authentication process generates different error messages for valid versus invalid usernames, enabling remote attackers to perform brute-force attempts more easily. The provided...

CVE-2002-0387

Buffer overflow in gxnsapi6.dll NSAPI plugin of the Connector Module for Sun ONE Application Server before 6.5 allows remote attackers to execute arbitrary code via a long HTTP request URL...

CVE-2002-1456

Buffer overflow in mIRC 6.0.2 and earlier allows remote attackers to execute arbitrary code via a long $asctime value...

CVE-2002-1484

DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems port scan via a request for a URL that specifies the target IP address and port, which produces a connection status in the resulting error...