5356 matches found
CVE-2002-1383
CVE-2002-1383 corresponds to multiple integer overflows in the Common Unix Printing System (CUPS) versions 1.1.14–1.1.17. The issue allows a remote attacker to execute arbitrary code via the CUPSd HTTP interface or via the image handling code in CUPS filters. Connected advisories (e.g., Debian DS...
CVE-2002-1176
This CVE concerns Winamp 2.81 (and Winamp 3.0) with buffer overflows in ID3v2 tag handling. A long Artist ID3v2 tag in an MP3 can cause a crash or allow remote code execution when loaded, per Foundstone advisory and NVD entry. Winamp 2.81 and Winamp 3.0 contain the overflow in the Artist field of...
CVE-2002-1383
Multiple integer overflows in Common Unix Printing System CUPS 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via 1 the CUPSd HTTP interface, as demonstrated by vanilla-coke, and 2 the image handling code in CUPS filters, as demonstrated by mksun...
CVE-2002-1176
Buffer overflow in Winamp 2.81 allows remote attackers to execute arbitrary code via a long Artist ID3v2 tag in an MP3 file...
CVE-2002-1383
Multiple integer overflows in Common Unix Printing System CUPS 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via 1 the CUPSd HTTP interface, as demonstrated by vanilla-coke, and 2 the image handling code in CUPS filters, as demonstrated by mksun...
CVE-2002-1368
CVE-2002-1368 affects CUPS 1.1.14–1.1.17 and can be exploited remotely by sending HTTP requests with a negative Content-Length or negative chunked length, causing negative arguments to memcpy() and potentially triggering a crash or arbitrary code execution. The vulnerability arises from improper ...
CVE-2002-1368
Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code by causing negative arguments to be fed into memcpy calls via HTTP requests with 1 a negative Content-Length value or 2 a negative length in a...
Openwebmail 1.71 remote root compromise
-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 Security Advisory 12.18.02 Software : Openwebmail http://openwebmail.org Version : ?.?? - 1.71 current Type : Arbitrary commands execution Remote : yes Root : yes !!! Date : December 18, 2002 I. BACKGROUND Openwebmail is a web-bases email system. It...
SSH Multiple Remote Vulnerabilities
According to its banner, the remote SSH server is affected by one or more of the following vulnerabilities : - CVE-2002-1357 incorrect length - CVE-2002-1358 lists with empty elements/empty strings - CVE-2002-1359 large packets and large fields - CVE-2002-1360 string fields with zeros The impact ...
MS02-072: Unchecked Buffer in XP Shell Could Enable System Compromise (329390)
The remote version of Windows contains a flaw in the handling of audio files MP3, WMA in the Windows Shell component, that could allow an attacker to execute arbitrary code on the remote host with SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid1119...
CVE-2002-1158
Buffer overflow in the irwthrough function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as the bin user...
CVE-2002-1259
CVE-2002-1259 is a reservation duplicate of CVE-2002-1286; there are no separate details for 1259. The connected records describe CVE-2002-1286: The Microsoft Java implementation in Internet Explorer allows remote attackers to steal cookies and execute script in a different security context via a...
CVE-2002-1354
Directory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the contents of arbitrary directories via a ... dot dot dot in the cd/CWD command...
CVE-2002-1341
Cross-site scripting XSS vulnerability in readbody.php for SquirrelMail 1.2.10, 1.2.9, and earlier allows remote attackers to insert script and HTML via the 1 mailbox and 2 passedid parameters...
CVE-2002-1341
...
CVE-2002-1255
Microsoft Outlook 2002 allows remote attackers to cause a denial of service repeated failure via an email message with a certain invalid header field that is accessed using POP3, IMAP, or WebDAV, aka "E-mail Header Processing Flaw Could Cause Outlook 2002 to Fail."...
CVE-2002-1161
CVE-2002-1161 is rejected/not used per the description.
CVE-2002-1344
Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filenames containing 1 /absolute/path or 2 .. dot dot sequences...
CVE-2002-1356
Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via malformed packets to the 1 LMP, 2 PPP, or 3 TDS dissectors, possibly related to a missing field for EndVerifyAck messages...