CVE-2002-1543

Buffer overflow in trek on NetBSD 1.5 through 1.5.3 allows local users to gain privileges via long keyboard input...

CVE-2002-1548

Unknown vulnerability in autofs on AIX 4.3.0, when using executable maps, allows attackers to execute arbitrary commands as root, possibly related to "string handling around how the executable map is called."...

CVE-2002-1555

Cisco ONS15454 and ONS15327 running ONS before 3.4 uses a "public" SNMP community string that cannot be changed, which allows remote attackers to obtain sensitive information...

CVE-2002-1551

Buffer overflow in nslookup in IBM AIX may allow attackers to cause a denial of service or execute arbitrary code...

CVE-2002-0030

CVE-2002-0030 is a vulnerability in Adobe Acrobat/Reader plug-ins where the digital signature check only validates the plug-in’s PE header, allowing a malicious unsigned plug-in to be loaded as if signed. This enables local attackers to cause arbitrary code execution when Acrobat/Reader loads a c...

CVE-2002-1561

The CVE-2002-1561 issue affects the Windows RPC service stack (RPC Endpoint Mapper) on Windows 2000, NT 4.0, and XP. A malformed packet to TCP 135 can trigger a NULL pointer dereference in the RPC Endpoint Mapper, causing the RPC service to terminate and resulting in a denial of service for RPC-b...

CVE-2002-1561

The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service disabled RPC service via a malformed packet to the RPC Endpoint Mapper at TCP port 135, which triggers a null pointer dereference...

PHP Mail Function Header Spoofing

The remote host is running a version of PHP prior or equal to 4.2.2. The mail function does not properly sanitize user input. This allows users to forge email to make it look like it is coming from a different source other than the server. Users can exploit this even if SAFEMODE is enabled...

CVE-2002-1454

MyWebServer 1.0.2 is affected by a path disclosure vulnerability: when requesting a non-existent directory, the error message reveals the absolute path to the web document root, exposing sensitive directory structure. This impacts confidentiality (partial). No remediation details or patch/version...

CVE-2002-1535

CVE-2002-1535 affects Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2. An attacker can discover internal host IP addresses by sending a CONNECT request and observing differing error messages depending on host presence, implying partial disclosure of internal topology. Th...

CVE-2002-1441

Tomahawk SteelArrow (before 4.5) is affected by multiple buffer overflows that allow remote code execution. The vulnerabilities arise from: (1) Steelarrow Service (Steelarrow.exe) accepting a long UserIdent Cookie header, (2) DLLHOST.EXE (Steelarrow.dll) handling an oversized .aro file request, a...

CVE-2002-1535

Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal network via a CONNECT request, which generates different error messages if the host is present...

CVE-2002-1495

The CVE-2002-1495 entry documents a Cross-site scripting (XSS) vulnerability in JAWmail 1.0-rc1. The vulnerability allows remote attackers to inject arbitrary script or HTML through multiple vectors: (1) attached file names in the Read Mail feature, (2) text/html mails displayed in a pop-up windo...

CVE-2002-1495

Cross-site scripting XSS vulnerability in JAWmail 1.0-rc1 allows remote attackers to insert arbitrary script or HTML via 1 attached file names in the Read Mail feature, 2 text/html mails that are displayed in a pop-up window, and 3 certain malicious attributes within otherwise safe tags, such as...

CVE-2002-1470

SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to port 8001, which causes the password to be logged in the world-readable scserv.log file...

CVE-2002-1489

Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via 1 an HTTP GET request with a long URL or 2 a request with a long method name...

CVE-2002-1434

CVE-2002-1434 corresponds to multiple cross-site scripting (XSS) vulnerabilities in the Web Mail module of Kerio MailServer 5.0. The collected documents specify that remote attackers could cause HTML/script execution as other users by exploiting certain URLs in the WebMail interface. The OpenVAS/...

CVE-2002-1492

Cisco VPN 5000 Client for Linux (pre-5.2.7) and VPN 5000 Client for Solaris (pre-5.2.8) are affected by buffer overflows that allow a local user to gain root privileges via the close_tunnel and open_tunnel operations. Root access impact is stated; no exploit details or in-wild status are provided...

CVE-2002-1432

CVE-2002-1432 affects MidiCart. The database file midicart.mdb is stored under the Web document root, allowing remote attackers to directly request the file and access sensitive information, resulting in partial confidentiality impact. The NVD entry lists a base score of 5.0 (Medium) with network...

CVE-2002-1522

CVE-2002-1522 concerns a buffer overflow in PowerFTP FTP server 2.24 (and possibly other versions). The vulnerability allows a remote attacker to cause a denial of service and, potentially, execute arbitrary code by sending a long USER argument. The available documents consistently describe the i...