5356 matches found
CVE-2002-0448
Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denial of service crash via an HTTP request that contains many "C:/" sequences...
CVE-2002-0757
CVE-2002-0757 affects Webmin 0.96 and Usermin 0.90 (password timeouts enabled), enabling authentication bypass by sending certain control characters in authentication data to force acceptance of arbitrary username/session IDs. The issue allows local and possibly remote attackers to gain privilege...
CVE-2002-0764
Phorum 3.3.2a is vulnerable to a remote command execution via HTTP requests to (1) plugin.php, (2) admin.php, or (3) del.php. The attack modifies the PHORUM[settings_dir] setting to point to a directory containing a PHP file with the attacker’s commands, enabling remote code execution. The NVD/CV...
CVE-2002-0797
CVE-2002-0797 : The vulnerability affects Solaris 5.6–8 running the MIB parsing component of mibiisa. A buffer overflow in this component may allow a remote attacker to gain root privileges. The issue is documented in NVD/Nessus references as a remote overflow potentially enabling a root shell. N...
CVE-2002-0786
The CVE-2002-0786 entry concerns the iCon administrative web server for Critical Path inJoin Directory Server 4.0. Affected component: the inJoin Directory Server 4.0 web interface (iCon admin). Vulnerability: authenticated inJoin administrators can read arbitrary files by specifying the target f...
CVE-2002-0743
The CVE-2002-0743 entry concerns mail and mailx on AIX 4.3.3 that core dump when invoked with a very long argument, indicating a buffer overflow. The available data confirm a vulnerability in the mail-related components of AIX 4.3.3; the core dump could lead to a crash and potential downstream im...
CVE-2002-0783
CVE-2002-0783 affects Opera versions 5.12, 6.0, and 6.01. The vulnerability lets a remote attacker execute arbitrary JavaScript in the security context of other sites by setting the location of a frame or iframe to a Javascript: URL. The underlying flaw is exposure of frame/iframe navigation to a...
CVE-2002-0644
CVE-2002-0644 / CVE-2002-1137 describe a buffer overflow in the Database Consistency Checkers (DBCCs) of Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 . The vulnerability allows db_owner and db_ddladmin role members to execute arbitrary code due to overflow in DBCC input hand...
CVE-2002-0747
CVE-2002-0747 affects AIX 4.3.3 with a buffer overflow in the lsmcode component. The underlying cause is a buffer overflow, with impact stated as complete for confidentiality, integrity, and availability. The provided documents confirm the vulnerability but do not specify affected subversions, ex...
CVE-2002-0703
An interaction between the Perl MD5 module perl-Digest-MD5 and Perl could produce incorrect MD5 checksums for UTF-8 data, which could prevent a system from properly verifying the integrity of the data...
CVE-2002-0753
CVE-2002-0753 : Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie. The connected documents confirm the vulnerability description but do not provide additional technical details, affected versions beyond 5.0, exploit spe...
CVE-2002-0771
Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the 1 cvsroot or 2 sortby parameters...
CVE-2002-0779
FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service network connectivity loss via a connection to port 21 with a large amount of random data...
CVE-2002-0649
Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 MSDE allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which 1 a 0x04 byte that causes the SQL Monitor thread to generate...
CVE-2002-0757
1 Webmin 0.96 and 2 Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass authentication and gain privileges via certain control characters in the authentication information, which can force Webmin or Usermin to accept arbitrary username/session ID...
CVE-2002-0739
CVE-2002-0739 describes a cross-site scripting vulnerability in PostCalendar 3.02. The issue allows remote attackers to inject arbitrary HTML and scripts and to harvest cookies by modifying a calendar entry on the preview page. The NVD entry lists a base score of 7.5 (HIGH) with network attack ve...
CVE-2002-0649
CVE-2002-0649 describes a remote buffer-overflow in the SQL Server Resolution Service of Microsoft SQL Server 2000 and MSDE (port 1434/UDP). The vulnerability is triggered by UDP packets beginning with 0x04 (long registry key name) or 0x08 (long string), which can cause a denial of service or arb...
CVE-2002-0749
CVE-2002-0749 affects the CGI CSMailto.cgi from CGIscript.net. The vulnerability is due to unsafely handling shell metacharacters in the form-attachment field, enabling remote attackers to execute arbitrary commands on the affected system. The recorded CVSSv2 base score is 7.5 (HIGH) with network...