CVE-2002-0978

Microsoft File Transfer Manager FTM ActiveX control before 4.0 allows remote attackers to upload or download arbitrary files to arbitrary locations via a man-in-the-middle attack with modified TGT and TGN parameters in a call to the "Persist" function...

Immunity Canvas: SAVANT

Name| savant ---|--- CVE| CVE-2002-1120 Exploit Pack| CANVAS Description| savant Notes| CVE Name: CVE-2002-1120 VENDOR: Savant VersionsAffected: Savant 3.1 Repeatability: This is a one shot exploit. CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1120 CVSS: 7.5...

CVE-2002-0975

Buffer overflow in Microsoft DirectX Files Viewer ActiveX control xweb.ocx 2.0.6.15 and earlier allows remote attackers to execute arbitrary via a long File parameter...

CVE-2002-0979

The Java logging feature for the Java Virtual Machine in Internet Explorer writes output from functions such as System.out.println to a known pathname, which can be used to execute arbitrary code...

CVE-2002-1134

Affected software: Compaq WEBES Service Tools 2.0 through WEBES 4.0 (Service Pack 5). Description indicates an unknown vulnerability that allows local users to read privileged files. The provided documents do not specify the root cause, affected components beyond the program scope, exploit detail...

CVE-2002-1134

Unknown vulnerability in Compaq WEBES Service Tools 2.0 through WEBES 4.0 Service Pack 5 allows local users to read privileged files...

CVE-2002-0985

Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify command line arguments to the MTA e.g. sendmail in the 5th argument to mail, altering MTA behavior and possibly executing commands...

CVE-2002-0691

Microsoft Internet Explorer 5.01 and 5.5 allows remote attackers to execute scripts in the Local Computer zone via a URL that references a local HTML resource file, a variant of "Cross-Site Scripting in Local HTML Resource" as identified by CAN-2002-0189...

CVE-2002-0647

Buffer overflow in a legacy ActiveX control used to display specially formatted text in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code, aka "Buffer Overrun in Legacy Text Formatting ActiveX Control"...

CVE-2002-0648

The legacy data-island capability for XML in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to read arbitrary XML files, and portions of other files, via a URL whose "src" attribute redirects to a local file...

CVE-2002-0976

Internet Explorer 4.0 and later allows remote attackers to read arbitrary files via a web page that accesses a legacy XML Datasource applet com.ms.xml.dso.XMLDSO.class and modifies the base URL to point to the local system, which is trusted by the applet...

CVE-2002-0977

Buffer overflow in Microsoft File Transfer Manager FTM ActiveX control before 4.0 allows remote attackers to execute arbitrary code via a long TS value...

CVE-2002-0984

The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC allows remote attackers to execute arbitrary code if the user joins a channel whose topic includes EPIC4 code...

CVE-2002-1123

Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine MSDE 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the "Hello" overflow...

CVE-2002-1131

Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via 1 addressbook.php, 2 options.php, 3 search.php, or 4 help.php...

CVE-2002-1133

CVE-2002-1133 concerns Dino’s WebServer 2.1, where an attacker can perform a directory traversal via URL-encoded sequences (/%2f or %5c) to read arbitrary files. The root cause is improper handling of encoded path separators, enabling navigation to directories on the server and file disclosure. T...

CVE-2002-1126

Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunloa...

CVE-2002-0861

Microsoft Office Web Components OWC 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the 1 Copy method of the Cell object or 2 the Paste method of the Range object...

CVE-2002-1129

The CVE-2002-1129 entry describes a buffer overflow in dxterm that allows a local user to execute arbitrary code via a long -xrm argument. Documents confirm the affected component is dxterm and specify local execution with a crafted argument as the impact. No explicit product/vendor versions or r...

CVE-2002-0974

Help and Support Center for Windows XP allows remote attackers to delete arbitrary files via a link to the hcp: protocol that accesses uplddrvinfo.htm...