CVE-2002-1150

The Remote Desktop Sharing RDS Screen Saver Protection capability for Microsoft NetMeeting 3.01 through SP2 4.4.3396 allows attackers with physical access to hijack remote sessions by entering certain logoff or shutdown sequences such as CTRL-ALT-DEL and canceling out of the resulting user...

CVE-2002-1150

The CVE-2002-1150 entry concerns Microsoft NetMeeting 3.01 through SP2 (4.4.3396). The vulnerability stems from the Remote Desktop Sharing (RDS) Screen Saver Protection feature, which can be abused by an attacker with physical access to hijack a remote session by triggering logoff/shutdown sequen...

CVE-2002-1174

Fetchmail

CVE-2002-1175

The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service crash when Fetchmail attempts to read data beyond the expected boundary...

CVE-2002-0399

CVE-2007-4559 is a directory traversal vulnerability in the tarfile module of Python, allowing a tar archive containing a .. sequence to overwrite arbitrary files during extraction. The issue is referenced in multiple Nessus advisories (e.g., Alibaba Cloud Linux 3 advisory ALINUX3-SA-2024:0040 an...

CVE-2002-1175

CVE-2002-1175 concerns Fetchmail’s getmxrecord boundary handling. The advisory states that Fetchmail versions 6.0.0 and earlier are vulnerable to a malformed DNS packet causing a denial of service (crash) when reading beyond boundaries, notably when used in multi‑drop mode. Connected sources indi...

CVE-2002-0399

Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to overwrite arbitrary files during archive extraction via a 1 "/.." or 2 "./.." string, which removes the leading slash but leaves the "..", a variant of CVE-2001-1267...

CVE-2002-1149

The installation procedure for Invision Board suggests that users install the phpinfo.php program under the web root, which leaks sensitive information such as absolute pathnames, OS information, and PHP settings...

CVE-2002-1166

Buffer overflow in John Franks WN Server 1.18.2 through 2.0.0 allows remote attackers to execute arbitrary code via a long GET request...

CVE-2002-0838

Buffer overflow in 1 gv 3.5.8 and earlier, 2 gvv 1.0.2 and earlier, 3 ggv 1.99.90 and earlier, 4 gnome-gv, and 5 kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed a PDF or b PostScript file, which is processed by an unsafe call to sscanf...

CVE-2002-1174

Buffer overflows in Fetchmail 6.0.0 and earlier allow remote attackers to cause a denial of service crash or execute arbitrary code via 1 long headers that are not properly processed by the readheaders function, or 2 via long Received: headers, which are not properly parsed by the parsereceived...

CVE-2002-1131

The SquirrelMail webmail package (versions 1.2.6/1.2.7 and earlier) is vulnerable to Cross-Site Scripting (XSS) due to insufficient sanitization of user-supplied input. Specifically, the Virtual Keyboard plugin and the addressbook.php , options.php , search.php , and help.php files are affected. ...

CVE-2002-1134

Unknown vulnerability in Compaq WEBES Service Tools 2.0 through WEBES 4.0 Service Pack 5 allows local users to read privileged files...

CVE-2002-1131

Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via 1 addressbook.php, 2 options.php, 3 search.php, or 4 help.php...

CVE-2002-1129

The CVE-2002-1129 entry describes a buffer overflow in dxterm that allows a local user to execute arbitrary code via a long -xrm argument. Documents confirm the affected component is dxterm and specify local execution with a crafted argument as the impact. No explicit product/vendor versions or r...

CVE-2002-1133

CVE-2002-1133 concerns Dino’s WebServer 2.1, where an attacker can perform a directory traversal via URL-encoded sequences (/%2f or %5c) to read arbitrary files. The root cause is improper handling of encoded path separators, enabling navigation to directories on the server and file disclosure. T...

CVE-2002-1133

Encoded directory traversal vulnerability in Dino's web server 2.1 allows remote attackers to read arbitrary files via ".." dot dot sequences with URL-encoded 1 "/" %2f" or 2 "" %5c characters...

CVE-2002-1127

CVE-2002-1127: Buffer overflow in uucp for Compaq Tru64/OSF1 3.x enables local users to execute arbitrary code via a long source (-s) argument. Root cause: unchecked buffer handling in uucp. Affected: Tru64/OSF1 3.x; component: uucp. Impact: local code execution; data confidentiality/integrity/av...

Immunity Canvas: SAVANT

Name| savant ---|--- CVE| CVE-2002-1120 Exploit Pack| CANVAS Description| savant Notes| CVE Name: CVE-2002-1120 VENDOR: Savant VersionsAffected: Savant 3.1 Repeatability: This is a one shot exploit. CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1120 CVSS: 7.5...

CVE-2002-1128

Technical details about CVE-2002-1128 are not publicly available in the provided connected documents; available sources reiterate a buffer overflow in the inc mail utility for Compaq Tru64/OSF1 3.x via a long MH environment variable.