CVE-2002-1033

Directory traversal vulnerability in none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via a "..:" sequence dot-dot variant in the argument...

CVE-2002-0917

CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users...

CVE-2002-1005

ArGoSoft Mail Server 1.8.1.7 and earlier allows a webmail user to cause a denial of service CPU consumption by forwarding the email to the user while autoresponse is enabled, which creates an infinite loop...

CVE-2002-0901

Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver AMANDA 2.3.0.4 allow 1 remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certain local users to execute arbitrary code via long command line arguments to the programs 2 amcheck, 3...

CVE-2002-1020

The CVE-2002-1020 entry concerns Adobe Content Server 3.0. The vulnerability arises in the library feature used for the Add to bookbag operation: when the server reports that no more copies are available, a remote attacker can still check out an eBook. This implies an underlying logic flaw where ...

CVE-2002-1019

CVE-2002-1019 affects the Adobe Content Server 3.0 library feature. The vulnerability arises in a downloadable eBook workflow where a remote attacker can manipulate the loanMin parameter in download.asp to extend the loan period for an arbitrary length of time. The available documentation explici...

CVE-2002-1019

The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook for an arbitrary length of time via a modified loanMin parameter to download.asp...

CVE-2002-1018

The library feature for Adobe Content Server 3.0 does not verify if a customer has already checked out an eBook, which allows remote attackers to cause a denial of service resource exhaustion by checking out the same book multiple times...

CVE-2002-0943

CVE-2002-0943 describes a vulnerability where MetaCart2.sql stores the user database (metacart.mdb) under the web document root without access controls, enabling remote attackers to obtain sensitive information (passwords, credit card numbers) via direct request. The root cause is lack of access ...

CVE-2002-0951

The CVE-2002-0951 entry concerns a SQL injection vulnerability in Ruslan Builder. The underlying issue is an injection flaw in authentication via the username and password fields allowing remote attackers to obtain administrative privileges through a "'--" sequence. The available documents do not...

CVE-2002-0991

CVE-2002-0991 : Buffer overflows in the cifslogin command of HP CIFS/9000 Client A.01.06 and earlier (based on the Sharity package) allow local users to gain root privileges by supplying excessively long parameters (-U, -D, -P, -S, -N, or -u). Affected versions are A.01.06 and earlier. The provid...

CVE-2002-1080

The Administration console for Abyss Web Server 1.0.3 before Patch 2 allows remote attackers to gain privileges and modify server configuration via direct requests to CHL files such as 1 srvstatus.chl, 2 consport.chl, 3 general.chl, 4 srvparam.chl, and 5 advanced.chl...

CVE-2002-0992

Unknown vulnerability in IPV6 functionality for DCE daemons 1 dced or 2 rpcd on HP-UX 11.11 allows attackers to cause a denial of service crash via an attack that modifies internal data...

CVE-2002-0992

The CVE-2002-0992 entry describes an unknown vulnerability in the IPV6 functionality of DCE daemons (dced and rpcd) on HP-UX 11.11. The issue allows an attacker to cause a denial of service (crash) by performing an attack that modifies internal data. The connected documents confirm the affected c...

CVE-2002-1075

Pegasus Mail vulnerability CVE-2002-1075 affects Pegasus Mail client versions prior to 4.02 (per connected Nessus entry). It is caused by a buffer overflow in the To/From header processing, allowing a remote attacker to trigger a denial of service and potentially execute arbitrary code. The secur...

CVE-2002-0997

CVE-2002-0997 affects Novell NetMail (NIMS) IMAP Agent (imapd) 3.0.3 and earlier. The issue is a buffer overflow that allows remote attackers to cause a denial of service. The available records describe the vulnerable component and impact but do not specify a patch version or remediation steps. N...

CVE-2002-0943

MetaCart2.sql stores the user database under the web document root without access controls, which allows remote attackers to obtain sensitive information such as passwords and credit card numbers via a direct request for metacart.mdb...

CVE-2002-1061

Multiple buffer overflows in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 an HTTP GET request with a long major version number, 2 an HTTP GET request to the HTTP proxy on port 3128...

CVE-2002-1062

Signedness error in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to execute arbitrary code via long 1 Username, 2 Password, or 3 Hostname entries...

CVE-2002-0699

Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0, Windows 2000, and Windows XP allow remote attackers to delete digital certificates on a user's system via HTML...