CVE-2002-1557

Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service reset to TCC, TCC+, TCCi or XTC via a malformed HTTP request that does not contain a leading / slash character...

CVE-2002-1553

The CVE-2002-1553 entry affects Cisco ONS15454 and ONS15327 running ONS prior to 3.4. The vulnerability lets a remote attacker modify system configuration and delete files by connecting via FTP to the TCC, TCC+ or XTC using a non-existent username/password. Connected sources corroborate the issue...

CVE-2002-1551

Buffer overflow in nslookup in IBM AIX may allow attackers to cause a denial of service or execute arbitrary code...

CVE-2002-1427

The CVE-2002-1427 entry affects Easy Homepage Creator 1.0. The print_html_to_file function in edit.cgi does not validate user credentials, enabling remote attackers to modify other users’ home pages. CVSS v2 data reports a base score of 7.5 ( HIGH ) with network attack vector, no authentication, ...

CVE-2002-1466

The CVE-2002-1466 entry affects CafeLog b2 Weblog Tool 2.06pre4 when allow_fopen_url is enabled. The vulnerability allows remote attackers to execute arbitrary PHP code via the b2inc variable, enabling full compromise of affected installations. The root cause is the ability to reference or includ...

CVE-2002-1408

CVE-2002-1408 concerns HP OpenView EMANATE 14.2 snmpModules where the SNMP read-write community name can be exposed, related to (1) 'read-only' community access, and/or (2) an easily guessable community name. This exposure could enable unauthorized SNMP read/write access to affected data and conf...

CVE-2002-1406

Technical details about CVE-2002-1406 are not publicly provided in the supplied documents. No concrete affected product/version, root cause, or remediation is described here. Monitor updates from the CVE entries and connected sources for new information.

CVE-2002-1542

The CVE refers to SolarWinds TFTP server 5.0.55 and earlier. Affected component: the TFTP server handling of UDP datagrams. Root cause: processing a large UDP datagram can cause a crash, with OpenVAS/NASL and Nessus entries describing the overflow risk. Documented impact: denial of service via se...

CVE-2002-1442

Affected product: Google Toolbar (IE) up to version 1.1.58 and earlier. Vulnerability: remote sites could trigger unauthorized toolbar operations, including script execution and file reading in other zones (e.g., My Computer) by opening a window to tools.google.com or the res: protocol and then u...

CVE-2002-1409

ptrace on HP-UX 11.00 through 11.11 allows local users to cause a denial of service data page fault panic via "an incorrect reference to thread register state."...

CVE-2002-1455

CVE-2002-1455 describes multiple cross-site scripting (XSS) vulnerabilities in OmniHTTPd that allow remote attackers to inject script or HTML into web pages. Exploitation via (1) test.php, (2) test.shtml, or (3) redir.exe is indicated in the description. The connected documents corroborate the pr...

CVE-2002-1423

The CVE-2002-1423 issue concerns FUDforum, where tmp_view.php before version 2.2.0 allows remote attackers to read arbitrary files through an absolute pathname supplied in the file parameter. The underlying vulnerability is a path traversal/unsafe file inclusion in the tmp_view.php handler, enabl...

CVE-2002-1450

Technical details beyond the basic description are not publicly provided in the connected documents. Available sources confirm IBM UniVerse UV/ODBC DoS via a query with an invalid link between tables (possible buffer overflow). Monitor for updates.

CVE-2002-1465

The CVE-2002-1465 entry describes an SQL injection in CafeLog b2 Weblog Tool, exploitable remotely through the tablehosts parameter. The affected component is a web-based weblog tool; the underlying issue is improper input handling that allows arbitrary SQL execution. Impact is partial confidenti...

CVE-2002-1433

CVE-2002-1433 affects Kerio MailServer 5.0. The vulnerability allows remote attackers to cause a denial-of-service (hang) by sending SYN packets to the supported network services. The available records (NVD/CVE listings) describe the issue and its impact as a network-based DoS, but do not provide...

CVE-2002-1451

Blazix before 1.2.2 allows remote attackers to read source code of JSP scripts or list restricted web directories via an HTTP request that ends in a 1 "+" or 2 "" backslash character...

CVE-2002-1500

CVE-2002-1500 describes a buffer overflow in NetBSD 1.4.x–1.6 affecting the programs mrinfo , mtrace , and pppd . The vulnerability arises when handling file descriptor tables that may exceed FD_SETSIZE, leaving these programs to fail or be exploited by local users to gain privileges. The describ...

CVE-2002-0690

Format string vulnerability in McAfee Security ePolicy Orchestrator ePO 2.5.1 allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing format strings...

CVE-2002-1545

CooolSoft Personal FTP Server 2.24 allows remote attackers to obtain the absolute pathname of the FTP root via a PWD command, which includes the full path in the response...

CVE-2002-1459

Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is off, allows remote attackers to insert arbitrary script or HTML via message fields including 1 From, 2 E-Mail, and 3 Subject...