CVE-2002-0963

CVE-2002-0963 describes a SQL injection in GeekLog 1.3.5 and earlier, occurring in comment.php via the pid parameter. This could allow remote attackers to obtain sensitive user information. The NVD notes a MEDIUM risk (CVSS v2: AV:N/AC:L/Au:N/C:P/I:N/A:N; base 5.0). Affected product/version and e...

CVE-2002-0966

CVE-2002-0966 describes a buffer overflow in the 4D web server version 6.7.3 that can be triggered by parsing a long HTTP request. The impact cited is remote denial of service and potential arbitrary code execution. The provided sources (NVD entry) corroborate the vulnerability description; no ex...

CVE-2002-0993

HP Instant Support Enterprise Edition (ISEE) U2512A on HP-UX 11.00/11.11 has an unknown vulnerability allowing authenticated users to access restricted files. The available records identify the affected software and the access impact but do not provide technical details on root cause, vulnerable ...

CVE-2002-0998

The CVE-2002-0998 entry affects CARE 2002 prior to beta 1.0.02 in cafenews.php, where the lang parameter is processed by include, enabling directory traversal to read arbitrary files via .. patterns (and null chars). The issue arises in the cafenews.php include call, affecting CARE 2002’s web com...

CVE-2002-1003

CVE-2002-1003: A buffer overflow in MyWebServer 1.02 and earlier is triggered by a long HTTP GET request, allowing remote attackers to execute arbitrary code. This is a network-facing vulnerability with a CVSS base score of 7.5 (HIGH). OpenVAS references corroborate a 'too long URL' condition aff...

CVE-2002-1005

CVE-2002-1005 concerns ArGoSoft Mail Server versions 1.8.1.7 and earlier. The issue arises when a webmail user forwards mail to themselves while autoresponse is enabled, creating an infinite loop that causes CPU consumption and a denial of service. This vulnerability is documented in multiple sou...

CVE-2002-1007

CVE-2002-1007 concerns Cross-site scripting vulnerabilities in Blackboard 5. The issues allow remote attackers to execute arbitrary web script through (1) course_id in a login.pl link, (2) CTID in ProcessInfo.cgi, or (3) Message in index.cgi. CVSS2 base score is 7.5 (HIGH) with network attack vec...

CVE-2002-1008

CVE-2002-1008 describes a cross-site scripting vulnerability in PowerBASIC urlcount.cgi, included with Lil’ HTTP web server. The flaw allows remote attackers to induce execution of web script in another browser by crafting a request to urlcount.cgi that contains unfiltered script, particularly wh...

CVE-2002-1022

CVE-2002-1022 affects BadBlue server. The vulnerability arises because passwords are stored in plaintext in the ext.ini file, enabling local and possibly remote attackers to escalate privileges. The connected documents corroborate the plaintext storage and the potential privilege gain, but do not...

CVE-2002-1028

The CVE-2002-1028 incident affects the Oddsock Song Requester WinAmp plugin CGI programs, version 2.1. The issue is described as multiple buffer overflows that permit remote attackers to trigger a denial of service (crash) by supplying long arguments. The connected documents confirm the affected ...

CVE-2002-1041

Technical details for CVE-2002-1041 are not publicly provided in the supplied documents; no explicit affected products, versions, impact, or fixes are disclosed here. Monitor authoritative sources for updates.

CVE-2002-1042

CVE-2002-1042 describes a directory traversal flaw in iPlanet Web Server 6.0 SP2, 4.1 SP9, and Netscape Enterprise Server 3.6 on Windows, allowing remote attackers to read arbitrary files via ..\ in the NS-query-pat parameter. Connected sources confirm the affected products and the vulnerable par...

CVE-2002-1045

CVE-2002-1045 affects Ultrafunk Popcorn 1.20. A malformed Date field can be converted into a year > 2037, allowing remote attackers to cause a crash (DoS). Based on NVD/NVD summaries, impact is partial availability with network access, no authentication required, and no confidentiality/integri...

CVE-2002-1055

CVE-2002-1055 concerns a buffer overflow in the administrative web server of the Brother NC-3100h printer. The vulnerability can be triggered remotely over the network by sending a long password, leading to denial of service; no authentication is required. The available documents do not provide e...

CVE-2002-1063

CVE-2002-1063 affects Jana Server 2.x (up to 2.2.1) and 1.4.6 and earlier. The vulnerability allows remote attackers to cause a denial of service by issuing a large number of FTP PASV requests, leading to resource exhaustion and exhaustion of available FTP ports. The available connected documents...

CVE-2002-1066

The CVE-2002-1066 entry concerns Jana Server (POP3) versions 1.4.6 and earlier. The issue is a buffer overflow caused by a large message index value in the RETR or DELE commands, which exceeds array limits and enables remote denial of service and possible arbitrary code execution. Affected compon...

CVE-2002-1073

CVE-2002-1073 describes a buffer overflow in the control service of MERCUR Mailserver 4.2, allowing remote attackers to execute arbitrary code via a long password. The vulnerability is documented in CVE databases (NVD/CVE) with a CVSS v2 base score of 7.5 (HIGH) and remote network access without ...

CVE-2002-1086

The CVE-2002-1086 entry relates to multiple SQL injection vulnerabilities in ezContents 1.41 and earlier. The affected software is ezContents (versions up to 1.41). Underlying cause is input handling leading to SQL injection. The vulnerability is assessable as network-exploitable with no authenti...

CVE-2002-1087

The CVE-2002-1087 entry concerns ezContents 1.41 and earlier, where three scripts (createdir.php, removedir.php, uploadfile.php) fail to perform credential checks. This allows remote attackers to create or delete directories and upload files via a direct HTTP POST request. Documented impact is un...

CVE-2002-1089

CVE-2002-1089 affects rwcgi60, the CGI used with Oracle Reports Server. The flaw is an information disclosure: the program can reveal sensitive data (the full pathname), which an attacker could leverage for further attacks. Connected documents (Nessus plugin) confirm rwcgi60 exposure as part of O...