CVE-2002-1229

The CVE-2002-1229 entry concerns Avaya Cajun switches P880, P882, P580, and P550R running firmware 5.2.14 or earlier that ship with undocumented accounts (manuf and diag) using default passwords, enabling remote privilege escalation. Connected sources corroborate that an attacker could gain privi...

CVE-2002-1145

The CVE-2002-1145 entry describes a privilege-escalation issue in the Web Tasks xp_runwebtask stored procedure for Microsoft SQL Server 7.0, SQL Server 2000, MSDE 1.0, and MSDE 2000. The vulnerability arises because xp_runwebtask can be executed by PUBLIC, allowing an attacker to update a webtask...

CVE-2002-1216

GNU tar 1.13.19 and other versions before 1.13.25 allows remote attackers to overwrite arbitrary files via a symlink attack, as the result of a modification that effectively disabled the security check...

CVE-2002-1225

Multiple buffer overflows in Heimdal before 0.5, possibly in both the 1 kadmind and 2 kdc servers, may allow remote attackers to gain root access...

[SECURITY] [DSA 179-1] New gnome-gv packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 179-1 [email protected] http://www.debian.org/security/ Martin Schulze October 18th, 2002 http://www.debian.org/security/faq -...

CVE-2002-1194

CVE-2002-1194 describes a buffer overflow in talkd on NetBSD 1.6 and earlier (and possibly other OSes), which could allow remote attackers to execute arbitrary code via a long inbound message. The available connected documents confirm the vulnerability exists in the talk daemon and the potential ...

CVE-2002-1190

CVE-2002-1190 : Cisco Unity 2.x and 3.x are affected by use of well-known default user accounts, which could allow remote attackers to gain access and place arbitrary calls. The available sources state this description without detailing exact affected versions beyond the 2.x/3.x range or any spec...

CVE-2002-1192

CVE-2002-1192 describes multiple buffer overflows in the rogue game affecting NetBSD (1.6 and earlier) and FreeBSD 4.6 (and possibly other OSes). Local users can gain privileges in the 'games' group via malformed entries in a game save file. The root cause is not explicitly broken out beyond memo...

CVE-2002-0646

CVE-2002-0646 is a reservation duplicate of CVE-2002-0371. Connected documents provide concrete details for CVE-2002-0371: a buffer overflow in gopher client handling for Microsoft Internet Explorer 5.1–6.0, Proxy Server 2.0, or ISA Server 2000 that allows remote code execution via a crafted goph...

CVE-2002-1192

Multiple buffer overflows in rogue on NetBSD 1.6 and earlier, FreeBSD 4.6, and possibly other operating systems, allows local users to gain "games" group privileges via malformed entries in a game save file...

CVE-2002-1202

Unknown vulnerability in routed for HP Tru64 UNIX V4.0F through V5.1A allows local and remote attackers to read arbitrary files...

CVE-2002-1202

CVE-2002-1202 affects the routed component on HP Tru64 UNIX, from versions 4.0F through 5.1A. The vulnerability is described as an unknown issue that allows local and remote attackers to read arbitrary files. The connected documents do not provide concrete details beyond the affected product/vers...

CVE-2002-1203

IBM SecureWay Firewall before 4.2.2 performs extra processing before determining that a packet is invalid and dropping it, which allows remote attackers to cause a denial of service resource exhaustion via a flood of malformed TCP packets without any flags set...

CVE-2002-0843

...

CVE-2002-1141

An input validation error in the Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service via malformed fragmented RPC client packets, aka "Denial of service by sending an invalid RPC...

CVE-2002-0840

...

CVE-2002-0840

Cross-site scripting XSS vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header, a different...

CVE-2002-0839

The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1 signal to any process as root, resulting in a denial of service process kill or possibly other behaviors that would not normally be allowed, by modifying the...

CVE-2002-0840

Cross-site scripting XSS vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header, a different...

CVE-2002-0864

The Remote Data Protocol RDP version 5.1 in Microsoft Windows XP allows remote attackers to cause a denial of service crash when Remote Desktop is enabled via a PDU Confirm Active data packet that does not set the Pattern BLT command, aka "Denial of Service in Remote Desktop."...