5507 matches found
CVE-2002-1315
The CVE-2002-1315 entry describes a Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x up to SP11, allowing remote attackers to inject and execute script/HTML as the iPlanet administrator by placing the script in error logs; it may enable privilege escalation w...
CVE-2002-1315
Cross-site scripting XSS vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability i...
CVE-2002-1316
CVE-2002-1316 affects iPlanet WebServer 4.x (Admin Server) up to Service Pack 11, where the dir parameter can be manipulated with shell metacharacters to execute arbitrary commands. This vulnerability, reported alongside CVE-2002-1315 (XSS), enables potential unauthorized command execution and pa...
CVE-2002-0029
Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as BSD libc and GNU glibc, allow remote attackers to execute arbitrary code via DNS server responses that trigger the overflow in the 1 getnetbyname, or 2 getnetbyaddr functions, a...
MS03-010: Microsoft Windows RPC Endpoint Manager Malformed Packet DoS (331953) (intrusive check)
MS Windows RPC service RPCSS crashes trying to dereference a NULL pointer when it receives a certain malformed request. All MS RPC-based services i.e. a large part of MS Windows 2000+ running on the target machine are rendered inoperable. %NASLMINLEVEL 70300 Test "Spike 2.7" MS RPC Services NULL...
CVE-2002-1316: Undefined Security Weakness
importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell metacharacters in the dir parameter, and possibly allows remote attackers to exploit this vulnerability via a separate XSS issue CVE-2002-1315...
TFTPD32 Long Filename Buffer Overflow
This module exploits a stack buffer overflow in TFTPD32 version 2.21 and prior. By sending a request for an overly long file name to the tftpd32 server, a remote attacker could overflow a buffer and execute arbitrary code on the system. Module Options msf use...
CVE-2002-1289
The CVE-2002-1289 entry concerns the Microsoft Java implementation used in Internet Explorer. The vulnerability arises in getNativeServices, which creates an instance of com.ms.awt.peer.INativeServices (INativeServices) and does not verify the memory addresses passed to its methods, allowing remo...
CVE-2002-1286
The CVE-2002-1286 issue affects the Microsoft Java implementation used by Internet Explorer. The underlying vulnerability is improper parsing of URLs whose domain portion contains a colon, allowing a remote attacker to load a Java applet from a malicious site within the security context of the si...
CVE-2002-1290
The CVE-2002-1290 entry describes a vulnerability in the Microsoft Java implementation used by Internet Explorer. An applet can abuse the INativeServices ClipBoardGetText/ClipBoardSetText interfaces to read and modify the user’s clipboard contents. This yields potential unauthorized disclosure an...
CVE-2002-1285
runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments...
CVE-2002-1287
Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service via a long class name through 1 Class.forName or 2 ClassLoader.loadClass...
CVE-2002-1289
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read restricted process memory, cause a denial of service crash, and possibly execute arbitrary code via the getNativeServices function, which creates an instance of the com.ms.awt.peer.INativeServices...
CVE-2002-1290
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read and modify the contents of the Clipboard via an applet that accesses the 1 ClipBoardGetText and 2 ClipBoardSetText methods of the INativeServices class...
CVE-2002-1293
The CVE concerns the Microsoft Java implementation used in Internet Explorer. A public load0() method in the CabCracker class (com.ms.vm.loader.CabCracker) allows remote attackers to bypass security checks performed by load(), enabling potential bypass of authentication/validation logic. The vuln...
CVE-2002-1288
CVE-2002-1288 affects the Microsoft Java implementation used in Internet Explorer. The vulnerability arises when a getAbsolutePath() call on a File() object enables remote attackers to determine the current directory of the Internet Explorer process. This is a information-disclosure issue. The pr...
CVE-2002-1276
An incomplete fix for a cross-site scripting XSS vulnerability in SquirrelMail 1.2.8 calls the striptags function on the PHPSELF value but does not save the result back to that variable, leaving it open to cross-site scripting attacks...
CVE-2002-1287
The CVE concerns Microsoft’s Java implementation used by Internet Explorer. A stack-based buffer overflow occurs in the Java runtime when handling long class names via Class.forName or ClassLoader.loadClass, allowing a remote attacker to cause a denial of service. The affected component is the Mi...
CVE-2002-1285
CVE-2002-1285 describes a local privilege escalation in the LPRng package, where the dedicated runlpr utility allows the local lp user to gain root privileges through certain command line arguments. The description is limited to this mechanism; no further exploit details or affected versions are ...