CVE-2002-1480

Cross-site scripting XSS vulnerability in phpGB before 1.20 allows remote attackers to inject arbitrary HTML or script into guestbook pages, which is executed when the administrator deletes the entry...

CVE-2002-1556

Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service reset via an HTTP request to the TCC, TCC+ or XTC, in which the request contains an invalid CORBA Interoperable Object Reference IOR...

CVE-2002-1483

db4webc and db4webc.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP request whose argument is a filename of the form 1 C: drive letter, 2 //absolute/path double-slash, or 3 .. dot-dot...

CVE-2002-1481

savesettings.php in phpGB 1.20 and earlier does not require authentication, which allows remote attackers to cause a denial of service or execute arbitrary PHP code by using savesettings.php to modify config.php...

CVE-2002-1475

HP Tru64 UNIX ARP component (versions 4.0f, 4.0g, 5.0a) is described as having an unknown vulnerability that allows remote attackers to take over packets destined for another host and cause a denial of service. The available sources do not provide concrete technical details such as root cause, sp...

CVE-2002-1470

SHOUTcast 1.8.9 and earlier is affected. A local attacker can obtain the cleartext administrative password by issuing a GET request to port 8001, which causes the password to be written to the world-readable sc_serv.log file. This exposes credentials via local access and file exposure. No remedia...

CVE-2002-1489

Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via 1 an HTTP GET request with a long URL or 2 a request with a long method name...

CVE-2002-1507

Unreal Tournament 2003 ut2003 clients and servers allow remote attackers to cause a denial of service via malformed messages containing a small number of characters to UDP ports 7778 or 10777...

CVE-2002-1410

Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to 1 delete entries via direct access of admin.cgi, or 2 reconfigure Guestbook via direct access of config.cgi...

CVE-2002-1554

Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could allow attackers to gain privileges by obtaining the passwords from the image database or a backup...

CVE-2002-1439

CVE-2002-1439 describes a stack corruption issue in the TGA daemon used by HP-UX 11.04 (VVOS) Virtualvault, affecting versions 4.0, 4.5, and 4.6. The vulnerability may allow an attacker to obtain access to system files. The public sources provided do not specify a vendor, exploit details, specifi...

CVE-2002-1535

Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal network via a CONNECT request, which generates different error messages if the host is present...

CVE-2002-1433

CVE-2002-1433 affects Kerio MailServer 5.0. The vulnerability allows remote attackers to cause a denial-of-service (hang) by sending SYN packets to the supported network services. The available records (NVD/CVE listings) describe the issue and its impact as a network-based DoS, but do not provide...

CVE-2002-0690

Format string vulnerability in McAfee Security ePolicy Orchestrator ePO 2.5.1 allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing format strings...

CVE-2002-1553

The CVE-2002-1553 entry affects Cisco ONS15454 and ONS15327 running ONS prior to 3.4. The vulnerability lets a remote attacker modify system configuration and delete files by connecting via FTP to the TCC, TCC+ or XTC using a non-existent username/password. Connected sources corroborate the issue...

CVE-2002-1460

CVE-2002-1460 affects L-Forum 2.40 and earlier. The issue is improper verification of uploaded files and associated POST variables (attachment, attachment_name, attachment_size, attachment_type), enabling remote attackers to read arbitrary files. The connected documents confirm the affected softw...

CVE-2002-1411

CVE-2002-1411 concerns a directory traversal vulnerability in the Duma Photo Gallery System (DPGS) 0.99.4, reported as affecting the update.dpgs endpoint. The vulnerability arises from insufficient validation of the id parameter, allowing remote attackers to read arbitrary files via .. (dot dot) ...

CVE-2002-1454

MyWebServer 1.0.2 is affected by a path disclosure vulnerability: when requesting a non-existent directory, the error message reveals the absolute path to the web document root, exposing sensitive directory structure. This impacts confidentiality (partial). No remediation details or patch/version...

CVE-2002-1442

Affected product: Google Toolbar (IE) up to version 1.1.58 and earlier. Vulnerability: remote sites could trigger unauthorized toolbar operations, including script execution and file reading in other zones (e.g., My Computer) by opening a window to tools.google.com or the res: protocol and then u...

CVE-2002-1557

CVE-2002-1557 affects Cisco ONS platforms: ONS15454 and ONS15327 running ONS before 3.4. The vulnerability is triggered by a malformed HTTP request that does not start with a leading ‘/’, allowing an attacker to cause a denial of service by resetting to TCC, TCC+, TCCi or XTC. The provided docume...