CVE-2002-1503

CVE-2002-1503 affects Automatic File Distributor (AFD) 1.2.14 and earlier. A buffer overflow is triggered by a long MON_WORK_DIR environment variable or -w (workdir) argument passed to any of: afd, afdcmd, afd_ctrl, init_afd, mafd, mon_ctrl, show_olog, or udc. The vulnerability allows local users...

CVE-2002-1492

Cisco VPN 5000 Client for Linux (pre-5.2.7) and VPN 5000 Client for Solaris (pre-5.2.8) are affected by buffer overflows that allow a local user to gain root privileges via the close_tunnel and open_tunnel operations. Root access impact is stated; no exploit details or in-wild status are provided...

CVE-2002-1486

CVE-2002-1486 affects Trillian's IRC component (versions 0.73 and 0.74). The issue consists of multiple buffer overflows that allow a remote IRC server to cause denial of service and potentially execute arbitrary code. Exploitation vectors include: (1) a large response from the server, (2) a JOIN...

CVE-2002-1482

This CVE (CVE-2002-1482) affects phpGB 1.20 and earlier. The connected NVD entry describes a SQL injection in login.php when magic_quotes_gpc is not enabled, allowing remote attackers to gain administrative privileges via SQL in the password entry. The vulnerability is rated with base score 10.0 ...

CVE-2002-1456

Affects: mIRC up to version 6.0.2 (and earlier). A buffer overflow occurs in scripting via a long $asctime value, enabling remote code execution. The linked sources (NVD entry and Nessus plugin 1863.prm) indicate the issue resides in the mIRC 6.x line prior to a fixed version, with the Nessus plu...

CVE-2002-1455

CVE-2002-1455 describes multiple cross-site scripting (XSS) vulnerabilities in OmniHTTPd that allow remote attackers to inject script or HTML into web pages. Exploitation via (1) test.php, (2) test.shtml, or (3) redir.exe is indicated in the description. The connected documents corroborate the pr...

CVE-2002-1452

CVE-2002-1452: Buffer overflow in the search capability of MyWebServer 1.0.2 can be triggered by a long searchTarget parameter, enabling remote arbitrary code execution. Registry entries show this vulnerability with network-based access, low complexity, no authentication, and partial impacts to c...

CVE-2002-1444

The CVE-2002-1444 entry concerns Google Toolbar 1.1.60 running in Internet Explorer 5.5/6.0. Affected component: Google Toolbar HTML/ActiveX handling. Root cause: the vulnerability enables remote attackers to cause a denial of service (crash) through malicious HTML, with possible involvement of s...

CVE-2002-1432

CVE-2002-1432 affects MidiCart. The database file midicart.mdb is stored under the Web document root, allowing remote attackers to directly request the file and access sensitive information, resulting in partial confidentiality impact. The NVD entry lists a base score of 5.0 (Medium) with network...

CVE-2002-1429

The CVE-2002-1429 entry corresponds to a cross-site scripting (XSS) vulnerability in endity.com’s ShoutBOX, specifically in the board.php handler. The flaw allows remote attackers to inject arbitrary HTML into the shoutbox page by manipulating the site parameter. Documents confirm the affected co...

CVE-2002-1428

CVE-2002-1428 affects dotProject 0.2.1.5 (index.php). The vulnerability allows remote attackers to bypass authentication by manipulating a cookie or the URL parameter user_cookie set to 1, enabling unauthorized access to protected areas. The documents do not provide exploit details, affected vers...

CVE-2002-1422

The CVE-2002-1422 issue affects FUDforum prior to 2.2.0. Vulnerable component: admbrowse.php. Root cause: the cur and dest parameters allow URL-encoded pathnames to be used in a way that enables remote attackers to create or delete files. Impact: file creation/deletion via the web interface, with...

CVE-2002-1539

CVE-2002-1539 affects MDaemon POP Server up to version 6.0.7. The vulnerability is a buffer overflow in handling long DELE and UIDL arguments, allowing a remote authenticated attacker to trigger a denial of service. The issue is evidenced by multiple sources (NVD description, Tenable Nessus entry...

CVE-2002-1489

Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via 1 an HTTP GET request with a long URL or 2 a request with a long method name...

CVE-2002-1507

Unreal Tournament 2003 ut2003 clients and servers allow remote attackers to cause a denial of service via malformed messages containing a small number of characters to UDP ports 7778 or 10777...

CVE-2002-1410

Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to 1 delete entries via direct access of admin.cgi, or 2 reconfigure Guestbook via direct access of config.cgi...

CVE-2002-1554

Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could allow attackers to gain privileges by obtaining the passwords from the image database or a backup...

CVE-2002-1439

CVE-2002-1439 describes a stack corruption issue in the TGA daemon used by HP-UX 11.04 (VVOS) Virtualvault, affecting versions 4.0, 4.5, and 4.6. The vulnerability may allow an attacker to obtain access to system files. The public sources provided do not specify a vendor, exploit details, specifi...

CVE-2002-1488

The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service crash via a PART message with 1 a missing channel or 2 a channel that the Trillian user is not in...

CVE-2002-1450

IBM UniVerse with UV/ODBC allows attackers to cause a denial of service client crash or server CPU consumption via a query with an invalid link between tables, possibly via a buffer overflow...