CVE-2002-1345

Technical details for CVE-2002-1345 are not provided in the supplied connected documents; no explicit affected products, versions, or fixes are available here. Monitor for updates.

CVE-2002-1358

Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite...

CVE-2002-1357

Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite...

CVE-2002-1360

Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a length field, which could allow remote attackers to cause a denial of service or possibly execute arbitrary code due to interactions with the use of null-terminat...

CVE-2002-1360

Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a length field, which could allow remote attackers to cause a denial of service or possibly execute arbitrary code due to interactions with the use of null-terminat...

CVE-2002-1345

Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user via filenames containing /absolute/path or .. dot dot sequences...

CVE-2002-1355

CVE-2002-1355 affects Ethereal (now Wireshark) up to version 0.9.7, specifically the BGP dissector. The vulnerability arises from multiple integer signedness errors in the BGP dissector, which allow remote attackers to trigger a denial of service via malformed messages, causing an infinite loop. ...

CVE-2002-1357

Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite...

CVE-2002-1379

CVE-2002-1379 concerns OpenLDAP 2 (OpenLDAP 2) up to version 2.2.0 and earlier. The issue involves libldap reading the current user’s .ldaprc file when applications run with elevated privileges, enabling either remote or local attackers to execute arbitrary code. Multiple openldap2-related adviso...

CVE-2002-1356

CVE-2002-1356 affects Ethereal up to version 0.9.7 (and earlier) where remote attackers can crash the application or potentially execute arbitrary code by sending malformed packets to the LMP, PPP, or TDS dissectors, possibly due to a missing field in EndVerifyAck messages. Red Hat advisories RHS...

CVE-2002-1258

CVE-2002-1258 affects Microsoft Virtual Machine (VM) up to build 5.0.3805, as used in Internet Explorer and other applications. The vulnerability allows remote attackers to read files via a Java applet whose CODEBASE parameter in the APPLET tag is spoofed, likely due to a parsing error. Documents...

CVE-2002-1355

Multiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a denial of service infinite loop via malformed messages...

CVE-2002-1376

CVE-2002-1376 affects the libmysqlclient library in MySQL 3.x up to 3.23.54 and 4.x up to 4.0.6. The root cause is improper verification of length fields for responses in the read_rows or read_one_row routines, which can allow a remote attacker to cause a denial of service and potentially execute...

CVE-2002-1359

Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite...

CVE-2002-1378

CVE-2002-1378 affects OpenLDAP 2 (OpenLDAP 2.2.0 and earlier). The issue comprises multiple buffer overflows in components such as slurpd (long -t/-r arguments), libldap (ldapfilter.conf, ldaptemplates.conf), slapd (ACL processing, and log filename construction for rejected replication requests)....

CVE-2002-1359

Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite...

R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rapid 7, Inc. Security Advisory Visit http://www.rapid7.com/ to download NeXposetm, our advanced vulnerability scanner. Linux and Windows 2000 versions are available now! Rapid 7 Advisory R7-0009 Vulnerabilities in SSH2 Implementations from Multiple...

CVE-2002-1340

The "ConnectionFile" property in the DataSourceControl component in Office Web Components OWC 10 allows remote attackers to determine the existence of local files by detecting an exception...

CVE-2002-1323

Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in 1 Safe::reval or 2 Safe::rdo using a redefined @ variable, which is not reset between successive calls...

CVE-2002-1187

Cross-site scripting vulnerability XSS in Internet Explorer 5.01 through 6.0 allows remote attackers to read and execute files on the local system via web pages using the or element and javascript, aka "Frames Cross Site Scripting," as demonstrated using the PrivacyPolicy.dlg resource...