CVE-2002-1127

CVE-2002-1127: Buffer overflow in uucp for Compaq Tru64/OSF1 3.x enables local users to execute arbitrary code via a long source (-s) argument. Root cause: unchecked buffer handling in uucp. Affected: Tru64/OSF1 3.x; component: uucp. Impact: local code execution; data confidentiality/integrity/av...

CVE-2002-1129

The CVE-2002-1129 entry describes a buffer overflow in dxterm that allows a local user to execute arbitrary code via a long -xrm argument. Documents confirm the affected component is dxterm and specify local execution with a crafted argument as the impact. No explicit product/vendor versions or r...

CVE-2002-1128

Technical details about CVE-2002-1128 are not publicly available in the provided connected documents; available sources reiterate a buffer overflow in the inc mail utility for Compaq Tru64/OSF1 3.x via a long MH environment variable.

Fixed in Apache Tomcat 4.1.12, 4.0.5

Important: Information disclosure CVE-2002-1148 A specially crafted URL using the default servlet can enable an attacker to obtain the source of JSP pages. Affects: 4.0.0-4.0.4, 4.1.0-4.1.11...

Immunity Canvas: MSSQLRESOLVESTACK

Name| mssqlresolvestack ---|--- CVE| CVE-2002-1123 Exploit Pack| CANVAS Description| MSSQL Resolver Stack Overflow MS02-056 Notes| CVE Name: CVE-2002-1123 VENDOR: Microsoft Notes: Exit me with ExitProcess, not exitthread MSRC: http://www.microsoft.com/technet/security/bulletin/ms02-056.asp MSADV:...

Immunity Canvas: MSSQLHELLO

Name| mssqlhello ---|--- CVE| CVE-2002-1123 Exploit Pack| CANVAS Description| MSSQL Hello Stack Overflow MS02-056 Notes| References: 'http://marc.theaimsgroup.com/?l=bugtraq&m=102865925419469&w=2', 'http://marc.theaimsgroup.com/?l=bugtraq&m=102873609025020&w=2',...

Trillian .74 and below, ident flaw.

Discovered: ----------- 03 September 2002 By Me, Lance Fitz-Herbert aka phrizer. Vulnerable Applications: ------------------------ Tested On Trillian .74 and .73, But im guessing older versions are also vulnerable. Impact: ------- Low-High. This could allow arbitary code to be executed on the...

CVE-2002-1124

Multiple buffer overflows in purity 1-16 allow local users to gain privileges and modify high scores tables...

CVE-2002-1125

The CVE-2002-1125 issue affects FreeBSD 4.6.2-RELEASE and earlier in FreeBSD port programs that use libkvm (asmon, ascpu, bubblemon, wmmon, wmnet2). The root cause is that these processes leave open file descriptors to /dev/mem and /dev/kmem, allowing a local user to read kernel memory. The provi...

CVE-2002-1121

CVE-2002-1121 describes a vulnerability where SMTP content filters fail to detect fragmented emails (RFC 2046 message/partial), allowing bypass of virus scanning. Affected products include GFI MailSecurity for Exchange/SMTP (pre-7.2), InterScan VirusWall (pre-3.52 build 1494), and the default MIM...

CVE-2002-1615

Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to execute arbitrary code via 1 msgchk or 2 .upd..loader...

CVE-2002-1612

Buffer overflow in mailcv in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges...

CVE-2002-1120

CVE-2002-1120 affects Savant Web Server 3.1 and earlier. The vulnerability is a stack-based buffer overflow triggered by a long HTTP GET request, allowing remote attackers to execute arbitrary code on the affected server. Public references show exploit code and Metasploit modules targeting Savant...

CVE-2002-1115

CVE-2002-1115 affects Mantis ≤ 0.17.4a; the issue is improper access control in bug viewing pages, allowing remote attackers to view private bugs by altering f_id on pages bug_update_advanced_page.php, bug_update_page.php, view_bug_advanced_page.php, or view_bug_page.php. Impact is exposure of pr...

CVE-2002-1100

Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to cause a denial of service crash via a long 1 username or 2 password to the HTML login interface...

CVE-2002-0664

The default Access Control Lists ACLs of the administration database for ZMerge 4.x and 5.x provides arbitrary users including anonymous users with Manager level access, which allows the users to read or modify import/export scripts...

CVE-2002-1115

Mantis 0.17.4a and earlier allows remote attackers to view private bugs by modifying the fid bug ID parameter to 1 bugupdateadvancedpage.php, 2 bugupdatepage.php, 3 viewbugadvancedpage.php, or 4 viewbugpage.php...

CVE-2002-1090

Buffer overflow in readsmtpresponse of protocol.c in libesmtp before 0.8.11 allows a remote SMTP server to 1 execute arbitrary code via a certain response or 2 cause a denial of service via long server responses...

CVE-2002-0664

The CVE-2002-0664 entry describes a vulnerability in IBM Lotus Domino ZMerge administration databases where default ACLs allow arbitrary/anonymous users to obtain Manager-level access. This misconfiguration can let an unauthenticated attacker read or modify import/export scripts and disclose serv...

CVE-2002-1100

CVE-2002-1100 affects Cisco VPN 3000 Concentrator versions 2.2.x and 3.x prior to 3.5.3. The vulnerability allows remote attackers to trigger a denial of service (crash) by sending an excessively long username or password to the HTML login interface. The issue is evidenced by the NVD description ...