CVE-2002-1066

The CVE-2002-1066 entry concerns Jana Server (POP3) versions 1.4.6 and earlier. The issue is a buffer overflow caused by a large message index value in the RETR or DELE commands, which exceeds array limits and enables remote denial of service and possible arbitrary code execution. Affected compon...

CVE-2002-0912

CVE-2002-0912 affects in.uucpd (UUCP server) in Debian GNU/Linux 2.2; long input strings were not terminated properly, enabling remote denial of service (likely via buffer overflow). Debian DSA-129-1 fixes uucp with updated versions 1.06.1-11potato3 (potato) and 1.06.1-18 (woody); OpenVAS notes t...

CVE-2002-1067

The CVE-2002-1067 entry concerns the IC9 Pocket Print Server Firmware (versions 7.1.30 and 7.1.36f). The vulnerability is a remote denial-of-service (reboot/reset) triggered by sending a long password, with the described root cause possibly a buffer overflow. The available connected documents con...

CVE-2002-1078

Affects Abyss Web Server 1.0.3. The vulnerability allows remote attackers to trigger directory listing by sending an HTTP GET request that ends with a large sequence of / characters. The underlying cause is not detailed in the provided documents beyond the request construction; the impact is expo...

CVE-2002-1041

Technical details for CVE-2002-1041 are not publicly provided in the supplied documents; no explicit affected products, versions, impact, or fixes are disclosed here. Monitor authoritative sources for updates.

CVE-2002-1055

CVE-2002-1055 concerns a buffer overflow in the administrative web server of the Brother NC-3100h printer. The vulnerability can be triggered remotely over the network by sending a long password, leading to denial of service; no authentication is required. The available documents do not provide e...

CVE-2002-0885

The CVE-2002-0885 entry describes multiple buffer overflows in in.rarpd (the ARP server) on Solaris and potentially other OSes (Caldera UnixWare, Open UNIX). The underlying issue is a vulnerability in functions (1) syserr and (2) error that could allow remote attackers to execute arbitrary code. ...

CVE-2002-0883

The CVE-2002-0883 entry describes a vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10. Authenticated users with Telnet, SSH, or console access can perform unauthorized activities, with full impact on confidentiality, integrity, and availability per CVSS v2. No expl...

CVE-2002-0920

The CVE-2002-0920 entry describes a vulnerability in CGIScript.net csPassword.cgi where usernames and unencrypted passwords are written to the temporary file password.cgi.tmp during data modification. The underlying issue is that sensitive credentials are stored in a world-readable/accessible tem...

CVE-2002-1027

CVE-2002-1027 describes a cross-site scripting flaw in Macromedia Sitespring 1.2.0 (277.1). The vulnerability resides in the default HTTP 500 error script (500error.jsp); an attacker can craft a link to 500error.jsp containing script in the 1the et parameter to execute arbitrary web script in a v...

CVE-2002-1021

Summary of CVE-2002-1021 (BadBlue Hex-encoded Null Byte) The vulnerability affects the BadBlue web server and allows remote attackers to read restricted files (notably EXT.INI, the BadBlue configuration file) by sending an HTTP request containing a hex-encoded NULL byte. This constitutes an infor...

CVE-2002-0936

CVE-2002-0936 affects the Java Server Pages (JSP) engine in Apache Tomcat. A JSP page that calls WPrinterJob().pageSetup(null,null) can cause a denial of service by crashing the web server. The published materials describe the vulnerability and impact but do not provide a listed fix or patch with...

CVE-2002-0908

Cisco IDS Device Manager web server prior to version 3.1.2 is affected by a directory traversal vulnerability that allows remote attackers to read arbitrary files through a .. sequence in an HTTPS request. Affected software is the Cisco IDS Device Manager web service; the root cause is improper v...

CVE-2002-1089

CVE-2002-1089 affects rwcgi60, the CGI used with Oracle Reports Server. The flaw is an information disclosure: the program can reveal sensitive data (the full pathname), which an attacker could leverage for further attacks. Connected documents (Nessus plugin) confirm rwcgi60 exposure as part of O...

CVE-2002-1077

IMail Web Calendaring service (iwebcal) in IPSwitch IMail is affected by CVE-2002-1077. A remote attacker can cause a denial of service (crash) by sending an HTTP POST request that lacks a Content-Length header. The description and connected records confirm the affected component and the vulnerab...

CVE-2002-1075

Pegasus Mail vulnerability CVE-2002-1075 affects Pegasus Mail client versions prior to 4.02 (per connected Nessus entry). It is caused by a buffer overflow in the To/From header processing, allowing a remote attacker to trigger a denial of service and potentially execute arbitrary code. The secur...

CVE-2002-1043

CVE-2002-1043 affects Ultrafunk Popcorn 1.20. The vulnerability is a denial-of-service triggered by a malformed Subject ("\t\t"), allowing remote attackers to crash the application. The available documents do not provide exploit code, implicated vectors beyond remote trigger, or concrete mitigati...

CVE-2002-1029

CVE-2002-1029 describes a Denial of Service in Worldspan for Windows Gateway 4.1, specifically the Res Manager component. An attacker can remotely crash the service by sending a malformed request to TCP port 17990, leading to partial availability impact. The vulnerability is documented in multipl...

CVE-2002-1007

CVE-2002-1007 concerns Cross-site scripting vulnerabilities in Blackboard 5. The issues allow remote attackers to execute arbitrary web script through (1) course_id in a login.pl link, (2) CTID in ProcessInfo.cgi, or (3) Message in index.cgi. CVSS2 base score is 7.5 (HIGH) with network attack vec...

CVE-2002-0948

The CVE-2002-0948 entry concerns Scripts For Educators MakeBook 2.2 CGI, where the (1) Name and (2) Email parameters are not properly filtered. This allows remote attackers to execute arbitrary scripts as other visitors, or to trigger server-side includes (SSI) with the web server context. The NV...