CVE-2002-1215

Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier claimed as buffer overflows in some sources allow remote attackers to execute arbitrary code via certain packets to UDP port 694 incorrectly claimed as TCP in some sources...

CVE-2002-1217

Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses and domain...

CVE-2002-1167

Cross-site scripting XSS vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP GET request...

CVE-2002-0666

CVE-2002-0666 affects multiple IPsec implementations (notably FreeS/WAN and KAME). The root cause is incorrect calculation of the authentication data length for very small ESP datagrams, which can result in an unsigned integer overflow and cause a kernel panic (remote denial of service). The NVD/...

CVE-2002-1233

A regression error in the Debian distributions of the apache-ssl package before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0, for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs 1...

CVE-2002-1235

The kadmserin function in 1 the Kerberos v4compatibility administration daemon kadmind4 in the MIT Kerberos 5 krb5 krb5-1.2.6 and earlier, 2 kadmind in KTH Kerberos 4 eBones before 1.2.1, and 3 kadmind in KTH Kerberos 5 Heimdal before 0.5.1 when compiled with Kerberos 4 support, does not properly...

CVE-2002-1235

CVE-2002-1235 describes a buffer overflow in the kadm_ser_in path of Kerberos tooling across multiple implementations: MIT Kerberos 5 kadmind4 (krb5-1.2.6 and earlier), KTH Kerberos 4 kadmind (ebones) before 1.2.1, and Heimdal kadmind before 0.5.1 when built with Kerberos 4 support. The underlyin...

CVE-2002-1233

CVE-2002-1233 applies to Debian’s apache-ssl packages, where a regression in Apache 1.3.27 and earlier (Debian 2.2 before 1.3.9, Debian 3.0 before 1.3.26) allows local attackers to read or modify the Apache password file via a symlink attack when running htpasswd or htdigest. The issue reintroduc...

CVE-2002-1168

Cross-site scripting XSS vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP request that contains an Location: header with a "%0a%0d" CRLF sequence, which echoes the Location as an HTTP...

CVE-2002-1235

The kadmserin function in 1 the Kerberos v4compatibility administration daemon kadmind4 in the MIT Kerberos 5 krb5 krb5-1.2.6 and earlier, 2 kadmind in KTH Kerberos 4 eBones before 1.2.1, and 3 kadmind in KTH Kerberos 5 Heimdal before 0.5.1 when compiled with Kerberos 4 support, does not properly...

CVE-2002-1226

Unknown vulnerabilities in Heimdal before 0.5 with unknown impact, possibly in the 1 kadmind and 2 kdc servers, may allow remote or local attackers to gain root or other access, but not via buffer overflows CVE-2002-1225...

CVE-2002-1213

Directory traversal vulnerability in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to read arbitrary files via an HTTP request with ".." dot-dot sequences containing URL-encoded forward slash "%2F" characters...

CVE-2002-1145

The CVE-2002-1145 entry describes a privilege-escalation issue in the Web Tasks xp_runwebtask stored procedure for Microsoft SQL Server 7.0, SQL Server 2000, MSDE 1.0, and MSDE 2000. The vulnerability arises because xp_runwebtask can be executed by PUBLIC, allowing an attacker to update a webtask...

CVE-2002-1229

The CVE-2002-1229 entry concerns Avaya Cajun switches P880, P882, P580, and P550R running firmware 5.2.14 or earlier that ship with undocumented accounts (manuf and diag) using default passwords, enabling remote privilege escalation. Connected sources corroborate that an attacker could gain privi...

CVE-2002-1215

CVE-2002-1215 affects heartbeat 0.4.9 and earlier. Multiple format string vulnerabilities allow a remote attacker to execute arbitrary code by sending crafted UDP packets to port 694 (some sources describe as a buffer overflow). Debian/OSS-related advisories reference this in DSAs and OpenVAS ent...

CVE-2002-1225

Multiple buffer overflows in Heimdal before 0.5, possibly in both the 1 kadmind and 2 kdc servers, may allow remote attackers to gain root access...

CVE-2002-1216

GNU tar 1.13.19 and other versions before 1.13.25 allows remote attackers to overwrite arbitrary files via a symlink attack, as the result of a modification that effectively disabled the security check...

CVE-2002-1225

CVE-2002-1225 and CVE-2002-1226 pertain to multiple buffer overflows in Heimdal prior to 0.5, likely affecting kadmind and kdc servers, which may allow remote root access. Public sources (NVD, Debian DSA) describe remote exploitation risk and indicate fixes/upgrades in Debian (DSA-178-1) and rela...

CVE-2002-1212

CVE-2002-1212 affects RadioBird Software WebServer 4 Everyone versions prior to 1.30. The vulnerability is a buffer overflow triggered by a long HTTP GET request, allowing remote attackers to crash the server (DoS). Public details in NVD/NVD-related OpenVAS entries confirm a remote DoS via overly...

CVE-2002-1228

The CVE-2002-1228 entry concerns Solaris NFS, specifically the lockd daemon. The vulnerability allows an NFS client to cause a denial of service by killing the lockd process on affected Solaris versions (2.5.1–9). Reported impact is partial availability loss. Public details in connected sources i...