CVE-2002-0972

CVE-2002-0972 affects PostgreSQL 7.2 with buffer overflows in lpad() and rpad() (and related functions) that can cause a denial of service and may allow arbitrary code execution when crafted input is processed by the server. Connected sources corroborate multiple vendor advisories (Debian DSA 165...

CVE-2002-0834

CVE-2002-0834 describes a buffer overflow in Ethereal’s ISIS protocol dissector affecting version 0.9.5 and earlier. It allows remote denial of service and could enable arbitrary code execution via malformed packets. The vulnerability is documented in advisories (Debian DSA-162-1; RHSA-2002:170) ...

CVE-2002-0861

CVE-2002-0861 affects Microsoft Office Web Components (OWC) 2000 and 2002. The vulnerability arises from a bypass of the setting “Allow paste operations via script,” allowing a remote attacker to paste via script despite the setting being disabled. The issue is triggered through the (1) Copy meth...

CVE-2002-0861

Microsoft Office Web Components OWC 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the 1 Copy method of the Cell object or 2 the Paste method of the Range object...

CVE-2002-0977

CVE-2002-0977 affects the Microsoft File Transfer Manager (FTM) ActiveX control prior to 4.0. The vulnerability is a buffer overflow triggered by a long TS value, permitting remote code execution. According to NVD, the exploit vector is NETWORK with low complexity and no authentication required, ...

CVE-2002-0973

The CVE-2002-0973 entry describes an integer signedness error in FreeBSD 4.6.1 RELEASE-p10 and earlier affecting the (1) accept, (2) getsockname, (3) getpeername system calls, and (4) vesa FBIO_GETPALETTE ioctl. This vulnerability can allow attackers to access sensitive kernel memory by supplying...

CVE-2002-0978

CVE-2002-0978 affects the Microsoft File Transfer Manager (FTM) ActiveX control prior to version 4.0. The vulnerability allows remote attackers to upload or download arbitrary files to arbitrary locations via a man-in-the-middle (MITM) attack that can modify TGT and TGN parameters in a call to th...

CVE-2002-0976

Internet Explorer 4.0 and later allows remote attackers to read arbitrary files via a web page that accesses a legacy XML Datasource applet com.ms.xml.dso.XMLDSO.class and modifies the base URL to point to the local system, which is trusted by the applet...

CVE-2002-0980

The Web Folder component for Internet Explorer 5.5 and 6.0 writes an error message to a known location in the temporary folder, which allows remote attackers to execute arbitrary code by injecting it into the error message, then referring to the error message file via a mhtml: URL...

CVE-2002-0975

CVE-2002-0975 is an advisory for the Microsoft DirectX Files Viewer ActiveX control (xweb.ocx) version 2.0.6.15 and earlier. The vulnerability is triggered by a long File parameter, leading to a buffer overflow that allows remote attackers to execute arbitrary code. The connected documents corrob...

CVE-2002-0979

CVE-2002-0979 concerns the Java logging feature of the JVM in Internet Explorer. The vulnerability arises when the JVM’s logging outputs (e.g., System.out.println) are written to a known pathname, which can be leveraged to execute arbitrary code. The available connected documents confirm the affe...

WS_FTP Server SITE CPWD Command Remote Overflow

This host is running a version of WSFTP FTP server prior to 3.1.2. Versions earlier than 3.1.2 contain an unchecked buffer in routines that handle the 'CPWD' command arguments. The 'CPWD' command allows remote users to change their password. By issuing a malformed argument to the CPWD command, a...

Fixed in Apache Tomcat 4.1.29

Moderate: Cross-site scripting CVE-2002-1567 The unmodified requested URL is included in the 404 response header. The new lines in this URL appear to the client to be the end of the header section. The remaining part of the URL, including the script elements, is treated as part of the response bo...

Security fix for the ALT Linux 9 package wireshark version 0.9.6-alt1

Aug. 21, 2002 Alexander Bokovoy 0.9.6-alt1 - Security update CAN-2002-0834 - Group changed to Monitoring...

CVE-2002-0857

Format string vulnerabilities in Oracle Listener Control utility lsnrctl for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file...

CVE-2002-0725

NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard link to the target file, which causes the link to be recorded in the audit trail instead of the target file...

CVE-2002-0870

Cisco CSS 11000 series WebNS web management service (pre-WebNS 4.01B29s/4.10B17s) is vulnerable to an authentication bypass that lets a remote attacker obtain additional privileges by requesting the web management URL directly, possibly via a variant of the original attack (Cisco bug CSCdw08549)....

CVE-2002-0721

The CVE-2002-0721 issue affects Microsoft SQL Server 7.0 and 2000 where extended stored procedures with weak permissions (xp_execresultset, xp_printstatements, xp_displayparamstmt) can allow an unprivileged user to execute procedures with administrator privileges. CERT advisories describe the ris...

CVE-2002-0654

Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via 1 a request for a .var file, which leaks the pathname in the resulting error message, or 2 via an error message that occurs when a script child process cannot be invoked...

CVE-2002-0093

Technical details about CVE-2002-0093 are not publicly available in the provided connected documents. Monitor for updates; current sources do not specify affected products/versions, root cause, exploitability, or remediation within this dataset.