CVE-2002-0894

NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service crash via 1 a request for a long .jsp file, or 2 a long URL sent directly to com.newatlanta.servletexec.JSP10Servlet...

CVE-2002-0907

Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-"...

CVE-2002-0877

Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. dot dot in the 1 LIST ls or 2 GET commands...

CVE-2002-1005

CVE-2002-1005 concerns ArGoSoft Mail Server versions 1.8.1.7 and earlier. The issue arises when a webmail user forwards mail to themselves while autoresponse is enabled, creating an infinite loop that causes CPU consumption and a denial of service. This vulnerability is documented in multiple sou...

CVE-2002-0910

CVE-2002-0910 describes buffer overflows in the netstd 3.07-17 package that allow remote DNS servers to execute arbitrary code via a long FQDN reply. This was observed in utilities including linux-ftpd, pcnfsd, tftp, traceroute, or from/to. The NVD entry lists a base score of 7.5 (HIGH) with netw...

CVE-2002-0885

The CVE-2002-0885 entry describes multiple buffer overflows in in.rarpd (the ARP server) on Solaris and potentially other OSes (Caldera UnixWare, Open UNIX). The underlying issue is a vulnerability in functions (1) syserr and (2) error that could allow remote attackers to execute arbitrary code. ...

CVE-2002-0908

Cisco IDS Device Manager web server prior to version 3.1.2 is affected by a directory traversal vulnerability that allows remote attackers to read arbitrary files through a .. sequence in an HTTPS request. Affected software is the Cisco IDS Device Manager web service; the root cause is improper v...

CVE-2002-1041

Technical details for CVE-2002-1041 are not publicly provided in the supplied documents; no explicit affected products, versions, impact, or fixes are disclosed here. Monitor authoritative sources for updates.

CVE-2002-0924

CVE-2002-0924 affects CGIScript.net’s csNews.cgi. The vulnerability allows remote authenticated users to execute arbitrary Perl code by injecting terminating quotes and metacharacters into text fields under the “Advanced Settings” capability. The CVSS metrics in the provided document indicate net...

CVE-2002-1033

CVE-2002-1033 : Affected product is SunPS iRunbook 2.5.2, vulnerable in the none.php component. The issue is a directory traversal flaw triggered by a using a "..:" sequence in the argument, allowing remote attackers to read arbitrary files. The vulnerability is documented with a Medium impact (p...

CVE-2002-0880

Cisco IP Phone VoIP models 7910, 7940, and 7960 allow remote attackers to cause a denial of service crash via malformed packets as demonstrated by 1 "jolt", 2 "jolt2", 3 "raped", 4 "hping2", 5 "bloop", 6 "bubonic", 7 "mutant", 8 "trash", and 9 "trash2."...

CVE-2002-1062

Signedness error in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to execute arbitrary code via long 1 Username, 2 Password, or 3 Hostname entries...

CVE-2002-1607

Buffer overflow in ypmatch in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code...

CVE-2002-1033

Directory traversal vulnerability in none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via a "..:" sequence dot-dot variant in the argument...

CVE-2002-0909

CVE-2002-0909 affects mnews 1.22 and earlier. The issue involves multiple buffer overflows that can be triggered by excessively long NNTP responses, long command-line arguments (-f, -n, -D, -M, -P) or long environment variables (JNAMES, MAILSERVER), enabling either remote code execution by a serv...

CVE-2002-0926

The CVE-2002-0926 issue affects Wolfram Research webMathematica 1.0.0 and 1.0.0.1. A directory-traversal vulnerability allows remote attackers to read arbitrary files by manipulating the MSPStoreID parameter. The CERT/CC entry corroborates that reading arbitrary files is possible via absolute pat...

CVE-2002-0966

CVE-2002-0966 describes a buffer overflow in the 4D web server version 6.7.3 that can be triggered by parsing a long HTTP request. The impact cited is remote denial of service and potential arbitrary code execution. The provided sources (NVD entry) corroborate the vulnerability description; no ex...

CVE-2002-1029

CVE-2002-1029 describes a Denial of Service in Worldspan for Windows Gateway 4.1, specifically the Res Manager component. An attacker can remotely crash the service by sending a malformed request to TCP port 17990, leading to partial availability impact. The vulnerability is documented in multipl...

CVE-2002-0902

CVE-2002-0902 describes a cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2). An attacker can cause script execution in other phpBB users’ browsers by inserting a http:// and a double-quote (") into an IMG tag, bypassing phpBB’s security check, which terminates the src parameter of the IM...

CVE-2002-0936

CVE-2002-0936 affects the Java Server Pages (JSP) engine in Apache Tomcat. A JSP page that calls WPrinterJob().pageSetup(null,null) can cause a denial of service by crashing the web server. The published materials describe the vulnerability and impact but do not provide a listed fix or patch with...