CVE-2002-0791

CVE-2002-0791 affects the Novell NetWare NWFTPD server. NWFTPD versions before 5.02r are vulnerable to remote DoS: an attacker can establish a connection and then send a carriage return plus possibly other invalid commands with improper syntax/length, causing CPU consumption. Documented impact is...

CVE-2002-0800

CVE-2002-0800 affects BadBlue 1.7.0 and permits remote directory listing by requesting a URL that ends with an encoded '%' character. The impact is partial confidentiality (I: Partial) with network access, no authentication required, and no available exploitation details in the provided documents...

CVE-2002-0745

CVE-2002-0745 is a reported buffer overflow in the uucp component of IBM AIX 4.3.3. The linked NVD entry lists a CVSS v2 base score of 10.0 (HIGH) with a network attack vector, low attack complexity, no authentication, and complete impact on confidentiality, integrity, and availability. The vulne...

CVE-2002-0714

FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses...

CVE-2002-0715

Vulnerability in Squid before 2.4.STABLE6 related to proxy authentication credentials may allow remote web sites to obtain the user's proxy login and password...

CVE-2002-0799

Technical details for CVE-2002-0799 are not publicly available in the provided connected documents; monitor for updates.

CVE-2002-0784

The CVE-2002-0784 entry concerns a directory traversal vulnerability in Lysias Lidik Web Server 0.7b. The issue allows remote attackers to list directories by sending HTTP requests that use a modified dot-dot sequence, revealing directory listings and potentially exposing sensitive files. The NVD...

CVE-2002-0739

CVE-2002-0739 describes a cross-site scripting vulnerability in PostCalendar 3.02. The issue allows remote attackers to inject arbitrary HTML and scripts and to harvest cookies by modifying a calendar entry on the preview page. The NVD entry lists a base score of 7.5 (HIGH) with network attack ve...

CVE-2002-0649

CVE-2002-0649 describes a remote buffer-overflow in the SQL Server Resolution Service of Microsoft SQL Server 2000 and MSDE (port 1434/UDP). The vulnerability is triggered by UDP packets beginning with 0x04 (long registry key name) or 0x08 (long string), which can cause a denial of service or arb...

CVE-2002-0749

CVE-2002-0749 affects the CGI CSMailto.cgi from CGIscript.net. The vulnerability is due to unsafely handling shell metacharacters in the form-attachment field, enabling remote attackers to execute arbitrary commands on the affected system. The recorded CVSSv2 base score is 7.5 (HIGH) with network...

CVE-2002-0744

The CVE-2002-0744 entry concerns AIX 4.3.3’s namerslv: when invoked with a very long argument, the process can core dump, reportedly due to a buffer overflow. The description from NVD confirms the impact as a complete confidentiality/integrity/availability risk via a core dump, with CVSSv2 scorin...

CVE-2002-0796

CVE-2002-0796 affects the snmpdx logging component on Solaris 5.6–8. It is a format-string vulnerability in the logger that enables remote attackers to gain root privileges. The vulnerability details are based on the CVE description and associated NVD entry, which confirm the affected platform an...

CVE-2002-0763

The CVE-2002-0763 entry documents a vulnerability in the administration server of HP VirtualVault 4.5 on HP-UX 11.04. The issue permits remote web servers or privileged external processes to bypass access restrictions and establish connections to the HP VirtualVault server. Affected component is ...

CVE-2002-0728

Buffer overflow in the progressive reader for libpng 1.2.x before 1.2.4, and 1.0.x before 1.0.14, allows attackers to cause a denial of service crash via a PNG data stream that has more IDAT data than indicated by the IHDR chunk...

CVE-2002-0732

Cross-site scripting vulnerability in MyGuestbook 1.0 allows remote attackers to execute arbitrary script or inject HTML via fields such as 1 user name or 2 comments...

CVE-2002-0775

browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter...

CVE-2002-0732

CVE-2002-0732 is a cross-site scripting vulnerability in MyGuestbook 1.0. The issue enables remote attackers to execute arbitrary script or inject HTML via fields such as user name and comments due to insufficient input validation. Affected: MyGuestbook 1.0 (version 1.0). Impact is remote script ...

CVE-2002-0435

Race condition in the recursive 1 directory deletion and 2 directory move in GNU File Utilities fileutils 4.1 and earlier allows local users to delete directories as the user running fileutils by moving a low-level directory to a higher level as it is being deleted, which causes fileutils to chdi...

CVE-2002-0750

Technical details for CVE-2002-0750 are not publicly available in the provided connected documents; only a high-level description is present. Monitor for updates.

CVE-2002-0406

Menasoft SPHERE server 0.99x and 0.5x allows remote attackers to cause a denial of service by establishing a large number of connections to the server without providing login credentials, which prevents other users from being able to log in...