5508 matches found
CVE-2002-1422
admbrowse.php in FUDforum before 2.2.0 allows remote attackers to create or delete files via URL-encoded pathnames in the cur and dest parameters...
CVE-2002-1525
Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to read arbitrary files via a .. dot dot attack on port 1 6015 or 2 6016, or 3 an absolute pathname to port 6017...
CVE-2002-1470
SHOUTcast 1.8.9 and earlier is affected. A local attacker can obtain the cleartext administrative password by issuing a GET request to port 8001, which causes the password to be written to the world-readable sc_serv.log file. This exposes credentials via local access and file exposure. No remedia...
CVE-2002-1452
CVE-2002-1452: Buffer overflow in the search capability of MyWebServer 1.0.2 can be triggered by a long searchTarget parameter, enabling remote arbitrary code execution. Registry entries show this vulnerability with network-based access, low complexity, no authentication, and partial impacts to c...
CVE-2002-1551
This CVE concerns a buffer overflow in the nslookup utility on IBM AIX. The root cause is an overflow in nslookup that can lead to denial of service or arbitrary code execution. Impact is described as partial confidentiality, integrity, and availability concerns per the NVD metrics, with local at...
CVE-2002-1484
DB4Web server vulnerability CVE-2002-1484: when configured to show verbose debug messages, the server can be abused as a proxy to initiate TCP connections to arbitrary hosts/ports, effectively enabling port-scanning-like behavior. The attack is triggered by requesting a URL that encodes the targe...
CVE-2002-1485
The CVE-2002-1485 entry concerns the AIM component of Trillian versions 0.73 and 0.74. A remote attacker can cause a denial of service (crash) by sending certain strings (e.g., "P > O
CVE-2002-1526
The CVE-2002-1526 entry describes a Cross-site scripting (XSS) vulnerability in EMU Webmail 5.0, specifically in the emumail.cgi handler. The underlying issue allows an attacker to inject arbitrary HTML or script via the email address field, enabling remote exploitation against affected deploymen...
CVE-2002-1512
BRU Workstation 17.0 is affected by CVE-2002-1512 due to a symlink attack on the xbru_dscheck.dd temporary file, enabling local users to overwrite arbitrary files and gain root privileges. The vulnerability arises from the described local access path and the resulting potential for privilege esca...
CVE-2002-1415
CVE-2002-1415 describes a format-string vulnerability in the SMTP service of WebEasyMail 3.4.2.2 and earlier. The flaw allows remote attackers to crash the service and potentially execute arbitrary code by sending crafted format strings in SMTP requests. The accessible impact via the NVD entry is...
CVE-2002-1416
The CVE-2002-1416 issue affects the POP3 service of WebEasyMail 3.4.2.2 and earlier. The underlying problem is that the authentication process generates different error messages for valid versus invalid usernames, enabling remote attackers to perform brute-force attempts more easily. The provided...
CVE-2002-1467
Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrary files via 1 an HTTP redirect, 2 a "file://" base in a web document, or 3 a relative URL from a web archive mht file...
CVE-2002-1428
index.php in dotProject 0.2.1.5 allows remote attackers to bypass authentication via a cookie or URL with the usercookie parameter set to 1...
CVE-2002-1512
xbru in BRU Workstation 17.0 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the xbrudscheck.dd temporary file...
CVE-2002-1498
Directory traversal vulnerability in SWServer 2.2 and earlier allows remote attackers to read arbitrary files via a URL containing .. sequences with "/" or "" characters...
CVE-2002-1539
CVE-2002-1539 affects MDaemon POP Server up to version 6.0.7. The vulnerability is a buffer overflow in handling long DELE and UIDL arguments, allowing a remote authenticated attacker to trigger a denial of service. The issue is evidenced by multiple sources (NVD description, Tenable Nessus entry...
CVE-2002-1523
The CVE-2002-1523 entry concerns the Daniel Arenz Mini Server 2.1.6. The vulnerability is a directory traversal flaw that lets remote attackers read arbitrary files via ../ or ..\ sequences. This is caused by improper handling of relative path traversal in the server, leading to potential exposur...
CVE-2002-1507
CVE-2002-1507 affects Unreal Tournament 2003 (UT2003) clients and servers. The vulnerability allows remote denial of service via malformed messages sent over UDP to ports 7778 or 10777. The provided sources describe the affected component as UT2003 network clients/servers and identify the issue a...
CVE-2002-1459
CVE-2002-1459 is a cross-site scripting vulnerability in L-Forum versions 2.40 and earlier, where the option “Enable HTML in messages” off allows remote insertion of script/HTML via From, E‑Mail, or Subject fields. Root cause: insufficient input validation/escaping in message fields. According to...