CVE-2002-0803

The CVE-2002-0803 issue affects Bugzilla where versions 2.14 before 2.14.2 and 2.16 before 2.16rc2 allow remote attackers to disclose restricted products and components through a direct HTTP request to queryhelp.cgi. Root cause is improper access control on the queryhelp.cgi endpoint, enabling in...

Vulnerability in OpenSSL CVE-2002-0659

A flaw in the ASN1 library allowed remote attackers to cause a denial of service by sending invalid encodings...

Vulnerability in OpenSSL CVE-2002-0657

A buffer overflow when Kerberos is enabled allowed attackers to execute arbitrary code by sending a long master key. Note that this flaw did not affect any released version of 0.9.6 or 0.9.7. Found by OpenSSL Group A.L. Digital...

CVE-2002-0784

Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HTTP request with a ... modified dot dot...

CVE-2002-0797

Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges...

CVE-2002-0798

Vulnerability in swinstall for HP-UX 11.00 and 11.11 allows local users to view obtain data views for files that cannot be directly read by the user, which reportedly can be used to cause a denial of service...

CVE-2002-0780

The CVE-2002-0780 entry describes a DoS condition in the IP/IPX gateway for Novell BorderManager 3.6 SP 1a. A remote attacker can cause ipipxgw.nlm to ABEND by sending a large amount of random data to port 8225, triggering a denial of service. The provided documents do not specify affected produc...

CVE-2002-0793

CVE-2002-0793 affects QNX RTOS 4.25 (QNX4). Hard link and possibly symbolic link following allow local users to overwrite arbitrary files via specific arguments: monitor -f, dumper -d, crttrap -c, or the Watcom sample utility. Vulnerability is local with LOW attack complexity and partial confiden...

CVE-2002-0740

CVE-2002-0740 describes a buffer overflow in the slrnpull component of the SLRN package when installed with setuid/setgid, allowing a local attacker to gain privileges via a long -d (SPOOLDIR) argument. The issue is triggered by an input length that overflows internal buffers, resulting in privil...

CVE-2002-0740

Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d SPOOLDIR argument...

CVE-2002-0441

Directory traversal vulnerability in imlist.php for Php Imglist allows remote attackers to read arbitrary code via a .. dot dot in the cwd parameter...

CVE-2002-0446

categorie.php3 in Black Tie Project BTP 0.4b through 0.5b allows remote attackers to determine the absolute path of the web server via an invalid category ID cid parameter, which leaks the pathname in an error message...

CVE-2002-0716

Format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 allows local users to gain privileges via format string specifiers in the file name argument...

CVE-2002-0440

Trend Micro InterScan VirusWall HTTP proxy 3.6 with the "Skip scanning if Content-length equals 0" option enabled allows malicious web servers to bypass content scanning via a Content-length header set to 0, which is often ignored by HTTP clients...

CVE-2002-0442

Buffer overflow in dlvraudit for Caldera OpenServer 5.0.5 and 5.0.6 allows local users to gain root privileges...

CVE-2002-0449

Buffer overflow in webpsvc.exe for Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long argument to webplus.exe program, which triggers the overflow in webpsvc.exe...

CVE-2002-0775

CVE-2002-0775: The browse.asp component in Hosting Controller is vulnerable to a directory traversal flaw via the FilePath parameter, allowing remote attackers to view arbitrary directories. This affects the ability to access non-authorized file paths and partially impacts confidentiality. The do...

CVE-2002-0770

The CVE-2002-0770 issue affects Quake II server 3.20/3.21, where a client can trigger the server to expand a variable like "$rcon_password" due to console variable expansion on unexpanded client input. This information leakage enables attackers to obtain sensitive credentials and potentially take...

CVE-2002-0756

CVE-2002-0756 is a cross-site scripting vulnerability on the authentication page for Webmin 0.96 and Usermin 0.90. The flaw allows remote attackers to inject scripts into an error page and potentially steal cookies. The NVD record assigns CVSSv2 base score 7.5 (HIGH) with network attack vector an...

CVE-2002-0014

URL-handling code in Pine 4.43 and earlier allows remote attackers to execute arbitrary commands via a URL enclosed in single quotes and containing shell metacharacters &...