ISC BIND named SIG Resource Server Response RR Overflow

The remote BIND server, according to its version number, is affected by the 'SIG cached RR overflow' vulnerability. An attacker may use this flaw to gain a shell on this system. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid11152; scriptversion"1.30";...

CVE-2002-1238

Peter Sandvik's Simple Web Server 0.5.1 and earlier allows remote attackers to bypass access restrictions for files via an HTTP request with a sequence of multiple / slash characters such as http://www.example.com///file/...

CVE-2002-0711

HP TruCluster Server Cluster Interconnect on HP TruCluster Server versions 5.0A, 5.1 and 5.1A has a potential DoS vulnerability. The issue, described in SSRT2265 and CVE-2002-0711, may allow local or remote attackers to disrupt service. Remediation is provided as early release patches (ERP kits):...

CVE-2002-1275

CVE-2002-1275 concerns the html2ps HTML to PostScript converter (version 1.0) when used as a filter within LPRng. Reported as an unknown vulnerability, it allows a remote attacker to execute arbitrary code through unsanitized input. Public references in the provided documents confirm a Debian sec...

CVE-2002-0711

Unknown vulnerability in Cluster Interconnect for HP TruCluster Server 5.0A, 5.1, and 5.1A may allow local and remote attackers to cause a denial of service...

CVE-2002-1275

Unknown vulnerability in html2ps HTML/PostScript converter 1.0, when used within LPRng, allows remote attackers to execute arbitrary code via "unsanitized input."...

CVE-2002-1238

CVE-2002-1238 affects Peter Sandvik’s Simple Web Server (version 0.5.1 and earlier). The issue arises from improper handling of malformed URLs with multiple slashes, allowing remote attackers to bypass access restrictions and disclose restricted files. The impact is remote file disclosure; the se...

security flaw

Cross-site scripting vulnerability in the modssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wildcard DNS is enabled, allows remote attackers to execute script as other web site visitors, via the server name in an HTTPS response on the SSL port, which is used in a...

CVE-2002-1231

SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to cause a denial of service via an rcp call on /proc...

CVE-2002-1233

A regression error in the Debian distributions of the apache-ssl package before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0, for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs 1...

CVE-2002-1209

Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via ".." dot-dot backslash sequences in a GET request...

CVE-2002-1157

...

CVE-2002-1234

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2002-0180. Reason: This candidate is a an out-of-band assignment duplicate of CVE-2002-0180. Notes: All CVE users should reference CVE-2002-0180 instead of this candidate. All references and descriptions in this candidate have bee...

CVE-2002-1235

The kadmserin function in 1 the Kerberos v4compatibility administration daemon kadmind4 in the MIT Kerberos 5 krb5 krb5-1.2.6 and earlier, 2 kadmind in KTH Kerberos 4 eBones before 1.2.1, and 3 kadmind in KTH Kerberos 5 Heimdal before 0.5.1 when compiled with Kerberos 4 support, does not properly...

CVE-2002-1169

IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to cause a denial of service crash via an HTTP request to helpout.exe with a missing HTTP version number, which causes ibmproxy.exe to crash...

CVE-2002-1157

Cross-site scripting vulnerability in the modssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wildcard DNS is enabled, allows remote attackers to execute script as other web site visitors, via the server name in an HTTPS response on the SSL port, which is used in a...

CVE-2002-1230

NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via "shatter" style attack by sending a WMCOPYDATA message followed by a WMTIMER message, as demonstrated by GetAd, aka "Flaw in Windows WMTIMER...

CVE-2002-0869

Unknown vulnerability in the hosting process dllhost.exe for Microsoft Internet Information Server IIS 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation."...

CVE-2002-1181

Summary: CVE-2002-1181 is an IIS XSS vulnerability affecting Microsoft Internet Information Services 4.0–5.1, exposed via the IISHELP ASP file (and possibly other vectors). The admin web interface can allow remote attackers to execute HTML/script as other users. The connected OpenVAS entries conf...

CVE-2002-0869

CVE-2002-0869 refers to an unknown vulnerability in the IIS hosting process (dllhost.exe) affecting IIS 4.0–5.1 that enables remote attackers to gain LocalSystem privileges by executing an out-of-process application. Connected sources document related patches: OpenVAS/NASL entries reference MS02-...