CVE-2002-0960

CVE-2002-0960 describes multiple cross-site scripting vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier . The flaws allow remote attackers to execute arbitrary script in the context of other CBMS users, implying user-session impact and potential credential exposure via manipulated inputs. The...

CVE-2002-1007

Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via 1 the courseid parameter in a link to login.pl, 2 the CTID parameter in ProcessInfo.cgi, or 3 the Message parameter in index.cgi...

CVE-2002-0905

Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR environment variable...

CVE-2002-1027

CVE-2002-1027 describes a cross-site scripting flaw in Macromedia Sitespring 1.2.0 (277.1). The vulnerability resides in the default HTTP 500 error script (500error.jsp); an attacker can craft a link to 500error.jsp containing script in the 1the et parameter to execute arbitrary web script in a v...

CVE-2002-1082

The CVE-2002-1082 issue affects ezContents 1.40 and earlier, where the Image Upload capability allows remote attackers to cause ezContents to perform operations on local files as if they were uploaded. The vulnerability is network-exploitable with low attack complexity and no authentication requi...

CVE-2002-0940

This CVE concerns domesticinstall.exe for nCipher MSCAPI CSP 5.50 and 5.54, where the software does not use Operator Card Set protected keys when the user requests them if the Operator Card Set has not been generated. The outcome is a lower protection level than the user-specified module protecti...

CVE-2002-1068

The CVE-2002-1068 entry concerns the web server component of the D-Link DP-300 print server. Affected: DP-300’s web server. Vulnerability: remote attackers can cause a denial of service (hang) by sending a large HTTP POST request. Root cause details are not provided in the documents beyond this d...

PT-2002-2004 · Care 2002 · Care 2002

Name of the Vulnerable Software and Affected Versions: CARE 2002 versions prior to beta 1.0.02 Description: The issue allows remote attackers to read arbitrary files via .. dot dot sequences and null characters in the lang parameter, which is processed by a call to the include function...

CVE-2002-0998: Undefined Security Weakness

Directory traversal vulnerability in cafenews.php for CARE 2002 before beta 1.0.02 allows remote attackers to read arbitrary files via .. dot dot sequences and null characters in the lang parameter, which is processed by a call to the include function...

CVE-2002-0999: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in CARE 2002 before beta 1.0.02 allow remote attackers to perform unauthorized database operations...

CVE-2002-1609

Buffer overflow in binmail in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges...

CVE-2002-1610

Unknown vulnerability in ping in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to cause a denial of service...

CVE-2002-1353

LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst...

CVE-2002-0723

CVE-2002-0723 affects Microsoft Internet Explorer 5.5 and 6.0. The flaw arises because IE does not properly verify the domain of a frame within a browser window, enabling remote attackers to read client files or invoke executable objects via the Object tag (Cross Domain Verification in Object Tag...

CVE-2002-0983

CVE-2002-0983 affects the IRC client component irssi-text in irssi, prior to version 0.8.4. The vulnerability allows a remote attacker to cause a denial of service (crash) by joining a channel whose topic is excessively long and followed by a specific string, potentially triggering a buffer overf...

CVE-2002-0983

IRC client irssi in irssi-text before 0.8.4 allows remote attackers to cause a denial of service crash via an IRC channel that has a long topic followed by a certain string, possibly triggering a buffer overflow...

CVE-2002-0724

CVE-2002-0724 (MS02-045) describes a remote DoS in Windows SMB where handling SMB_COM_TRANSACTION with NetShareEnum/NetServerEnum2/NetServerEnum3 can overflow the heap when Max Param/Data Count is 0. A crafted packet may crash the host (Blue Screen) and, per CERT/Core advisories, might enable fur...

CVE-2002-0724

Buffer overflow in SMB Server Message Block protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a denial of service crash via a SMBCOMTRANSACTION packet with a request for the 1 NetShareEnum, 2 NetServerEnum2, or 3 NetServerEnum3, aka "Unchecked Buffer in...

CVE-2002-0976

Internet Explorer 4.0 and later is affected. The issue lets remote attackers read arbitrary files via a web page that uses the legacy XML Datasource applet (com.ms.xml.dso.XMLDSO.class) and manipulates the base URL to point to the local system, which is trusted by the applet. Impact is partial co...

CVE-2002-0977

CVE-2002-0977 affects the Microsoft File Transfer Manager (FTM) ActiveX control prior to 4.0. The vulnerability is a buffer overflow triggered by a long TS value, permitting remote code execution. According to NVD, the exploit vector is NETWORK with low complexity and no authentication required, ...