CVE-2002-1216

GNU tar 1.13.19 and other versions before 1.13.25 allows remote attackers to overwrite arbitrary files via a symlink attack, as the result of a modification that effectively disabled the security check...

CVE-2002-1233

CVE-2002-1233 applies to Debian’s apache-ssl packages, where a regression in Apache 1.3.27 and earlier (Debian 2.2 before 1.3.9, Debian 3.0 before 1.3.26) allows local attackers to read or modify the Apache password file via a symlink attack when running htpasswd or htdigest. The issue reintroduc...

CVE-2002-1167

Cross-site scripting XSS vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP GET request...

CVE-2002-1235

The kadmserin function in 1 the Kerberos v4compatibility administration daemon kadmind4 in the MIT Kerberos 5 krb5 krb5-1.2.6 and earlier, 2 kadmind in KTH Kerberos 4 eBones before 1.2.1, and 3 kadmind in KTH Kerberos 5 Heimdal before 0.5.1 when compiled with Kerberos 4 support, does not properly...

CVE-2002-1235

CVE-2002-1235 describes a buffer overflow in the kadm_ser_in path of Kerberos tooling across multiple implementations: MIT Kerberos 5 kadmind4 (krb5-1.2.6 and earlier), KTH Kerberos 4 kadmind (ebones) before 1.2.1, and Heimdal kadmind before 0.5.1 when built with Kerberos 4 support. The underlyin...

CVE-2002-1235

The kadmserin function in 1 the Kerberos v4compatibility administration daemon kadmind4 in the MIT Kerberos 5 krb5 krb5-1.2.6 and earlier, 2 kadmind in KTH Kerberos 4 eBones before 1.2.1, and 3 kadmind in KTH Kerberos 5 Heimdal before 0.5.1 when compiled with Kerberos 4 support, does not properly...

CVE-2002-0666

CVE-2002-0666 affects multiple IPsec implementations (notably FreeS/WAN and KAME). The root cause is incorrect calculation of the authentication data length for very small ESP datagrams, which can result in an unsigned integer overflow and cause a kernel panic (remote denial of service). The NVD/...

CVE-2002-1233

A regression error in the Debian distributions of the apache-ssl package before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0, for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs 1...

CVE-2002-1168

Cross-site scripting XSS vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP request that contains an Location: header with a "%0a%0d" CRLF sequence, which echoes the Location as an HTTP...

CVE-2002-1213

RadioBird Software WebServer 4 Everyone versions 1.23 and 1.27 (and earlier than 1.30) contain a directory-traversal vulnerability that lets remote attackers read arbitrary files via HTTP requests containing dot-dot sequences with URL-encoded forward slashes (%2F). Root cause: improper validation...

CVE-2002-1216

CVE-2002-1216 is a variant of a tar vulnerability where GNU tar versions around 1.13.x and later (including 1.16 and 1.15.1) are affected by a symlink-based attack that can overwrite arbitrary files. The root cause is improper handling of GNUTYPE_NAMES records with symbolic links in the extract_a...

CVE-2002-1225

CVE-2002-1225 and CVE-2002-1226 pertain to multiple buffer overflows in Heimdal prior to 0.5, likely affecting kadmind and kdc servers, which may allow remote root access. Public sources (NVD, Debian DSA) describe remote exploitation risk and indicate fixes/upgrades in Debian (DSA-178-1) and rela...

CVE-2002-1226

Unknown vulnerabilities in Heimdal before 0.5 with unknown impact, possibly in the 1 kadmind and 2 kdc servers, may allow remote or local attackers to gain root or other access, but not via buffer overflows CVE-2002-1225...

CVE-2002-1145

The xprunwebtask stored procedure in the Web Tasks component of Microsoft SQL Server 7.0 and 2000, Microsoft Data Engine MSDE 1.0, and Microsoft Desktop Engine MSDE 2000 can be executed by PUBLIC, which allows an attacker to gain privileges by updating a webtask that is owned by the database owne...

CVE-2002-1212

Buffer overflow in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to cause a denial of service crash via a long HTTP GET request...

CVE-2002-1213

Directory traversal vulnerability in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to read arbitrary files via an HTTP request with ".." dot-dot sequences containing URL-encoded forward slash "%2F" characters...

CVE-2002-1215

CVE-2002-1215 affects heartbeat 0.4.9 and earlier. Multiple format string vulnerabilities allow a remote attacker to execute arbitrary code by sending crafted UDP packets to port 694 (some sources describe as a buffer overflow). Debian/OSS-related advisories reference this in DSAs and OpenVAS ent...

CVE-2002-1217

The CVE-2002-1217 entry describes a Cross-Frame scripting vulnerability in the WebBrowser control as used by Internet Explorer 5.5 and 6.0. The issue arises when script accesses the Document property, bypassing / domain restrictions, enabling remote attackers to execute arbitrary code, read arbit...

CVE-2002-1228

The CVE-2002-1228 entry concerns Solaris NFS, specifically the lockd daemon. The vulnerability allows an NFS client to cause a denial of service by killing the lockd process on affected Solaris versions (2.5.1–9). Reported impact is partial availability loss. Public details in connected sources i...

CVE-2002-1212

CVE-2002-1212 affects RadioBird Software WebServer 4 Everyone versions prior to 1.30. The vulnerability is a buffer overflow triggered by a long HTTP GET request, allowing remote attackers to crash the server (DoS). Public details in NVD/NVD-related OpenVAS entries confirm a remote DoS via overly...