CVE-2002-0872

l2tpd 0.67 does not initialize the random number generator, which allows remote attackers to hijack sessions...

CVE-2002-0874

Vulnerability in Interchange 4.8.6, 4.8.3, and other versions, when running in INET mode, allows remote attackers to read arbitrary files...

CVE-2002-0855

Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the 1 adminpw or 2 info parameters to the ml-name feature...

CVE-2002-1604

Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to 1 csh, 2 dtsession, 3 dxsysinfo, 4 imapd, 5 inc, 6 uucp, 7 uux, 8 rdist, or 9 deliver...

CVE-2002-1605

Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long XKBCHARSET environment variable to 1 dxpause, 2 dxconsole, or 3 dtsession...

CVE-2002-0876

CVE-2002-0876 affects the Shambala Web Server (version 4.5). It allows remote attackers to cause a denial-of-service crash by sending a malformed HTTP request. Some OpenVAS/Nessus entries describe the DoS as triggered by specific malformed requests; remediation guidance in those scans suggests up...

CVE-2002-0877

CVE-2002-0877 describes a directory traversal vulnerability in the FTP server for Shambala 4.5. The flaw allows remote attackers to read arbitrary files by injecting .. (dot dot) into the LIST (ls) or GET commands. Public details in the provided sources confirm the vulnerability class (directory ...

CVE-2002-0878

The vulnerability CVE-2002-0878 affects LogiSense software products Hawk-i Billing, Hawk-i ASP, and DNS Manager. It is a SQL injection flaw in the login form that allows remote attackers to bypass authentication by injecting SQL in the password field. The underlying issue is improper handling of ...

CVE-2002-0879

CVE-2002-0879 affects Gafware CFXImage 1.6.6. The vulnerability arises in showtemp.cfm, allowing remote attackers to read arbitrary files via the FILE parameter using a .. path traversal or a C: style pathname. This is a file read/arbitrary file disclosure issue. The available documents do not pr...

CVE-2002-0880

Cisco IP Phone (VoIP) models 7910, 7940, and 7960 are affected by CVE-2002-0880. Remote attackers can cause a denial of service (crash) by sending malformed packets (examples: jolt, jolt2, raped, hping2, bloop, bubonic, mutant, trash, trash2). The root cause is described only as malformed packets...

CVE-2002-0882

CVE-2002-0882 affects Cisco IP Phone (VoIP) models 7910, 7940, and 7960. The vulnerability arises from handling large integer values in two script parameters: the stream ID of StreamingStatistics and the port ID of PortInformation. Exploitation can cause a remote DoS (reset) and may allow reading...

CVE-2002-0883

The CVE-2002-0883 entry describes a vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10. Authenticated users with Telnet, SSH, or console access can perform unauthorized activities, with full impact on confidentiality, integrity, and availability per CVSS v2. No expl...

CVE-2002-0901

CVE-2002-0901 affects AMANDA 2.3.0.4. The vulnerability arises from multiple buffer overflows in the AMANDA components, allowing remote attackers to execute arbitrary code via long commands to the amindexd daemon, or local users via long command-line arguments to programs such as amcheck, amgetid...

CVE-2002-0910

CVE-2002-0910 describes buffer overflows in the netstd 3.07-17 package that allow remote DNS servers to execute arbitrary code via a long FQDN reply. This was observed in utilities including linux-ftpd, pcnfsd, tftp, traceroute, or from/to. The NVD entry lists a base score of 7.5 (HIGH) with netw...

CVE-2002-0912

CVE-2002-0912 affects in.uucpd (UUCP server) in Debian GNU/Linux 2.2; long input strings were not terminated properly, enabling remote denial of service (likely via buffer overflow). Debian DSA-129-1 fixes uucp with updated versions 1.06.1-11potato3 (potato) and 1.06.1-18 (woody); OpenVAS notes t...

CVE-2002-0918

The vulnerability CVE-2002-0918 affects CGIScript.net csPassword.cgi. The root cause is leakage of the server pathname via debug messages generated on script failure, which can be triggered through a remote attacker using a remove option in the command parameter to cause an error. Impact is expos...

CVE-2002-0920

The CVE-2002-0920 entry describes a vulnerability in CGIScript.net csPassword.cgi where usernames and unencrypted passwords are written to the temporary file password.cgi.tmp during data modification. The underlying issue is that sensitive credentials are stored in a world-readable/accessible tem...

CVE-2002-0921

The CVE-2002-0921 vulnerability affects CGIScript.net csNews.cgi, where the viewnews command against an invalid database may cause error messages to reveal sensitive information such as the full server pathname and configuration settings. The available sources (NVD/CVE entries) describe the infor...

CVE-2002-0924

CVE-2002-0924 affects CGIScript.net’s csNews.cgi. The vulnerability allows remote authenticated users to execute arbitrary Perl code by injecting terminating quotes and metacharacters into text fields under the “Advanced Settings” capability. The CVSS metrics in the provided document indicate net...

CVE-2002-0933

CVE-2002-0933 affects Datalex PLC BookIt! Consumer prior to version 2.2. The issue stems from usernames/passwords being stored in plaintext in a cookie, enabling remote attackers to gain privileges through cross-site scripting or sniffing. The NVD metrics indicate partial impact to confidentialit...