CVE-2002-0796

Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gain root privileges...

CVE-2002-0832

Internet Explorer 5, 5.6, and 6 allows remote attackers to bypass cookie privacy settings and store information across browser sessions via the userData storeuserData feature...

CVE-2002-0769

The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass authentication via an HTTP POST request with a single byte, which allows the attackers to 1 obtain the password from the login screen, or 2 reconfigure the adaptor by modifying...

CVE-2002-0775

browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter...

CVE-2002-0779

FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service network connectivity loss via a connection to port 21 with a large amount of random data...

CVE-2002-0781

RTSP proxy for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a GET request to port 9090 followed by a series of carriage returns, which causes proxy.nlm to ABEND...

CVE-2002-0819

Format string vulnerability in artsd, when called by artswrapper, allows local users to gain privileges via format strings in the -a argument, which results in an error message that is not properly handled in a call to the artsfatal function...

CVE-2002-0822

Ethereal 0.9.4 and earlier allows remote attackers to cause a denial of service and possibly excecute arbitrary code via the 1 SOCKS, 2 RSVP, 3 AFS, or 4 LMP dissectors, which can be caused to core dump...

CVE-2002-1445

Cross-site scripting XSS vulnerability in CERN Proxy Server allows remote attackers to execute script as other users via a link to a non-existent page whose name contains the script, which is inserted into the resulting error page...

CVE-2002-0462

bigsamguestbook.php for Big Sam Built-In Guestbook Stand-Alone Module 1.1.08 and earlier allows remote attackers to cause a denial of service CPU consumption or obtain the absolute path of the web server via a displayBegin parameter with a very large number, which leaks the web path in an error...

CVE-2002-0506

Buffer overflow in newt.c of newt windowing library libnewt 0.50.33 and earlier may allow attackers to cause a denial of service or execute arbitrary code in setuid programs that use libnewt...

CVE-2002-0505

Memory leak in the Call Telephony Integration CTI Framework authentication for Cisco CallManager 3.0 and 3.1 before 3.13 allows remote attackers to cause a denial of service crash and reload via a series of authentication failures, e.g. via incorrect passwords...

CVE-2002-0684

Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr...

CVE-2002-0495

csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup command and the setup parameter, which overwrites the setup.cgi configuration file that is loaded by csSearch.cgi...

CVE-2002-0659

The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings...

CVE-2002-0526

Vulnerability in 1 inews or 2 rnews for INN 2.2.3 and earlier, related to insecure open calls...

CVE-2002-0792

The web management interface for Cisco Content Service Switch CSS 11000 switches allows remote attackers to cause a denial of service soft reset via 1 an HTTPS POST request, or 2 malformed XML data...

CVE-2002-0661

Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to read arbitrary files and execute commands via .. dot dot sequences containing \ backslash characters...

Immunity Canvas: IPLANET_CHUNKED

Name| iplanetchunked ---|--- CVE| CVE-2002-0845 Exploit Pack| CANVAS Description| iPlanet Chunked Encoding Notes| References: http://www.sun.com/service/sunone/software/alerts/transferencodingalert-23july2002.html http://www.eeye.com/html/Research/Advisories/AD20020808a.html CVE Name: CVE-2002-08...

Immunity Canvas: TTDB_XDRARRAY

Name| ttdbxdrarray ---|--- CVE| CVE-2002-0391 Exploit Pack| CANVAS Description| rpc.ttdbserverd xdrarray Heap Overflow Notes| References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F46122 CVE Name: CVE-2002-0391 VENDOR: Sun Patch Info: Solaris 2.5.1: 103640-42, Solaris 2.6: 105401-3...