CVE-2002-0888

3Com OfficeConnect Remote 812 ADSL Router, firmware 1.1.9 and 1.1.7, allows remote attackers to bypass port access restrictions by connecting to an approved port and quickly connecting to the desired port, which is allowed by the router...

CVE-2002-0922

The CVE-2002-0922 issue affects the CGIScript.net csNews.cgi CGI script. It allows remote attackers to obtain database files (default.db and default.db.style) via direct URL-encoded requests, and also permits remote authenticated users to perform administrative actions when a database parameter i...

CVE-2002-0905

CVE-2002-0905 affects Informix SE-7.25, where a vulnerability in the sqlexec component allows a local user to trigger a buffer overflow through a long INFORMIXDIR environment variable, potentially gaining root privileges. The affected software/version is Informix SE-7.25; the vulnerable code path...

CVE-2002-0919

CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newlines in the title field of the edit page...

CVE-2002-0957

CVE-2002-0957 affects BlackICE Agent 3.1.eal and 3.1.ebh. The issue arises from a default configuration with a high tcp.maxconnections, which could allow remote attackers to cause a denial of service through a large number of connections that consume memory. The provided documents do not specify ...

CVE-2002-1078

Affects Abyss Web Server 1.0.3. The vulnerability allows remote attackers to trigger directory listing by sending an HTTP GET request that ends with a large sequence of / characters. The underlying cause is not detailed in the provided documents beyond the request construction; the impact is expo...

CVE-2002-1036

CVE-2002-1036 describes a cross-site scripting vulnerability in the Fluid Dynamics Search Engine (FDSE), specifically in search.pl. The issue allows remote attackers to inject and execute web script via the Rank or Match parameters on FDSE versions prior to 2.0.0.0055. The only details available ...

CVE-2002-0907

Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-"...

CVE-2002-0907

CVE-2002-0907 affects SHOUTcast servers (notably 1.8.9 and other versions prior to 1.8.12). The issue is a buffer overflow triggered by a long value in a header starting with icy-, allowing a remote authenticated DJ to execute arbitrary code on the server. The available data do not describe explo...

CVE-2002-1064

CVE-2002-1064 affects Jana Server 2.x (up to 2.2.1) and 1.4.6 and earlier. The vulnerability arises because the server generates different responses for valid versus invalid usernames, enabling remote attackers to enumerate valid user accounts. The available documents state the existence and impa...

CVE-2002-0959

The CVE-2002-0959 entry refers to a Cross-site scripting vulnerability in Splatt Forum 3.0. The issue allows remote attackers to execute arbitrary script as other users by abusing an tag with a closing quote followed by malicious script. According to the NVD entry, the vulnerability has a base s...

CVE-2002-1065

The CVE-2002-1065 entry affects Jana Server 2.x up to 2.2.1 and 1.4.6 and earlier. The root cause is that the server does not restrict the number of unsuccessful login attempts, enabling remote attackers to perform brute-force username/password guesses to gain privileges. The connected documents ...

CVE-2002-0954

The encryption algorithms for enable and passwd commands on Cisco PIX Firewall can be executed quickly due to a limited number of rounds, which make it easier for an attacker to decrypt the passwords using brute force techniques...

CVE-2002-0923

CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the 1 pheader or 2 pfooter parameters in the "Advanced Settings" capability...

CVE-2002-0948

The CVE-2002-0948 entry concerns Scripts For Educators MakeBook 2.2 CGI, where the (1) Name and (2) Email parameters are not properly filtered. This allows remote attackers to execute arbitrary scripts as other visitors, or to trigger server-side includes (SSI) with the web server context. The NV...

CVE-2002-1018

The CVE-2002-1018 entry concerns the library feature of Adobe Content Server 3.0, which does not verify whether a customer has already checked out an eBook. This allows remote attackers to cause a denial of service (resource exhaustion) by repeatedly checking out the same book. The connected docu...

CVE-2002-1038

CVE-2002-1038 concerns Double Choco Latte (DCL) prior to 20020706, where upload handling does not properly verify the file uploaded. This allows remote attackers to perform certain operations on arbitrary files via the two features: (1) Projects: Upload File Attachment and (2) Work Orders: Import...

CVE-2002-0902

CVE-2002-0902 describes a cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2). An attacker can cause script execution in other phpBB users’ browsers by inserting a http:// and a double-quote (") into an IMG tag, bypassing phpBB’s security check, which terminates the src parameter of the IM...

CVE-2002-1001

Buffer overflows in AnalogX Proxy before 4.12 allows remote attackers to cause a denial of service and possibly execute arbitrary code via 1 a long HTTP request to TCP port 6588 or 2 a SOCKS 4A request to TCP port 1080 with a long DNS hostname...

CVE-2002-0913

CVE-2002-0913 describes a format string vulnerability in the Slurp NNTP client 1.1.0, specifically in the log_doit function. A malicious news server can exploit this by sending a crafted server response to execute arbitrary code on the affected client. The vulnerability is network-based with low ...