CVE-2002-1383

Multiple integer overflows in Common Unix Printing System CUPS 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via 1 the CUPSd HTTP interface, as demonstrated by vanilla-coke, and 2 the image handling code in CUPS filters, as demonstrated by mksun...

CVE-2002-1368

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code by causing negative arguments to be fed into memcpy calls via HTTP requests with 1 a negative Content-Length value or 2 a negative length in a...

CVE-2002-1383

Multiple integer overflows in Common Unix Printing System CUPS 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via 1 the CUPSd HTTP interface, as demonstrated by vanilla-coke, and 2 the image handling code in CUPS filters, as demonstrated by mksun...

SSH Multiple Remote Vulnerabilities

According to its banner, the remote SSH server is affected by one or more of the following vulnerabilities : - CVE-2002-1357 incorrect length - CVE-2002-1358 lists with empty elements/empty strings - CVE-2002-1359 large packets and large fields - CVE-2002-1360 string fields with zeros The impact ...

Openwebmail 1.71 remote root compromise

-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 Security Advisory 12.18.02 Software : Openwebmail http://openwebmail.org Version : ?.?? - 1.71 current Type : Arbitrary commands execution Remote : yes Root : yes !!! Date : December 18, 2002 I. BACKGROUND Openwebmail is a web-bases email system. It...

MS02-072: Unchecked Buffer in XP Shell Could Enable System Compromise (329390)

The remote version of Windows contains a flaw in the handling of audio files MP3, WMA in the Windows Shell component, that could allow an attacker to execute arbitrary code on the remote host with SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid1119...

CVE-2002-1161

CVE-2002-1161 is rejected/not used per the description.

CVE-2002-1341

Cross-site scripting XSS vulnerability in readbody.php for SquirrelMail 1.2.10, 1.2.9, and earlier allows remote attackers to insert script and HTML via the 1 mailbox and 2 passedid parameters...

CVE-2002-1259

CVE-2002-1259 is a reservation duplicate of CVE-2002-1286; there are no separate details for 1259. The connected records describe CVE-2002-1286: The Microsoft Java implementation in Internet Explorer allows remote attackers to steal cookies and execute script in a different security context via a...

CVE-2002-1341

...

CVE-2002-1158

Buffer overflow in the irwthrough function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as the bin user...

CVE-2002-1255

Microsoft Outlook 2002 allows remote attackers to cause a denial of service repeated failure via an email message with a certain invalid header field that is accessed using POP3, IMAP, or WebDAV, aka "E-mail Header Processing Flaw Could Cause Outlook 2002 to Fail."...

CVE-2002-1354

Directory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the contents of arbitrary directories via a ... dot dot dot in the cd/CWD command...

CVE-2002-1344

Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filenames containing 1 /absolute/path or 2 .. dot dot sequences...

CVE-2002-1359

Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite...

CVE-2002-1261

...

CVE-2002-1356

CVE-2002-1356 affects Ethereal up to version 0.9.7 (and earlier) where remote attackers can crash the application or potentially execute arbitrary code by sending malformed packets to the LMP, PPP, or TDS dissectors, possibly due to a missing field in EndVerifyAck messages. Red Hat advisories RHS...

CVE-2002-1376

CVE-2002-1376 affects the libmysqlclient library in MySQL 3.x up to 3.23.54 and 4.x up to 4.0.6. The root cause is improper verification of length fields for responses in the read_rows or read_one_row routines, which can allow a remote attacker to cause a denial of service and potentially execute...

CVE-2002-1378

CVE-2002-1378 affects OpenLDAP 2 (OpenLDAP 2.2.0 and earlier). The issue comprises multiple buffer overflows in components such as slurpd (long -t/-r arguments), libldap (ldapfilter.conf, ldaptemplates.conf), slapd (ACL processing, and log filename construction for rejected replication requests)....

CVE-2002-1356

Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via malformed packets to the 1 LMP, 2 PPP, or 3 TDS dissectors, possibly related to a missing field for EndVerifyAck messages...