CVE-2002-0807

CVE-2002-0807: Cross-site scripting in Bugzilla affects versions 2.14 before 2.14.2 and 2.16 before 2.16rc2. Root cause: the real name field is not properly quoted by editusers.cgi, allowing remote attackers to run script as other Bugzilla users. Impact: partial confidentiality/integrity/availabi...

CVE-2002-0657

Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master key...

CVE-2002-0811

CVE-2002-0811 affects Bugzilla: versions 2.14 before 2.14.2 and 2.16 before 2.16rc2. The vulnerability allows remote attackers to cause a denial of service or execute certain queries via a SQL injection in the sort order parameter of buglist.cgi. Connected sources also link multiple related CVEs ...

CVE-2002-0655

OpenSSL CVE-2002-0655 affects 0.9.6d and earlier and 0.9.7-beta2 and earlier; on 64-bit platforms it mishandles ASCII representations of integers, enabling denial of service and potentially arbitrary code execution. Public sources in the connected docs corroborate multiple related CVEs (0655, 065...

Vulnerability in OpenSSL CVE-2002-0659

A flaw in the ASN1 library allowed remote attackers to cause a denial of service by sending invalid encodings...

Vulnerability in OpenSSL CVE-2002-0657

A buffer overflow when Kerberos is enabled allowed attackers to execute arbitrary code by sending a long master key. Note that this flaw did not affect any released version of 0.9.6 or 0.9.7...

CVE-2002-0728

CVE-2002-0728 corresponds to a buffer overflow in the libpng progressive reader. Affected: libpng 1.2.x before 1.2.4 and 1.0.x before 1.0.14. Consequence: denial of service (crash); some sources also note potential arbitrary-code execution in malformed PNG datastreams. Remediation: upgrade libpng...

CVE-2002-0730

CVE-2002-0730 : Cross-site scripting in Philip Chinery’s Guestbook 1.1 (guestbook.pl) allows remote attackers to inject Javascript/HTML via form fields such as Name, EMail, or Homepage. The linked sources (NVD/CVE records) confirm the vulnerability and its existence, but do not provide specific e...

CVE-2002-0731

The CVE-2002-0731 entry describes a Cross-site scripting vulnerability in the demonstration scripts for vqServer. The issue arises when an attacker can craft a link with script code in the arguments to demo scripts (e.g., respond.pl), enabling remote script execution in the victim’s browser via s...

CVE-2002-0732

CVE-2002-0732 is a cross-site scripting vulnerability in MyGuestbook 1.0. The issue enables remote attackers to execute arbitrary script or inject HTML via fields such as user name and comments due to insufficient input validation. Affected: MyGuestbook 1.0 (version 1.0). Impact is remote script ...

CVE-2002-0735

CVE-2002-0735 affects the C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.2 and earlier. The issue is a format string vulnerability in the logging() function, allowing remote attackers to cause a denial of service and potentially execute arbitrary code by triggering log messages. No...

CVE-2002-0740

CVE-2002-0740 describes a buffer overflow in the slrnpull component of the SLRN package when installed with setuid/setgid, allowing a local attacker to gain privileges via a long -d (SPOOLDIR) argument. The issue is triggered by an input length that overflows internal buffers, resulting in privil...

CVE-2002-0742

CVE-2002-0742 : Buffer overflow in the pioout component on AIX 4.3.3 . The known metrics indicate a network-vector vulnerability with low attack complexity and no authentication , potentially risking confidentiality, integrity, and availability if exploited. No concrete remediation or patch detai...

CVE-2002-0743

The CVE-2002-0743 entry concerns mail and mailx on AIX 4.3.3 that core dump when invoked with a very long argument, indicating a buffer overflow. The available data confirm a vulnerability in the mail-related components of AIX 4.3.3; the core dump could lead to a crash and potential downstream im...

CVE-2002-0745

CVE-2002-0745 is a reported buffer overflow in the uucp component of IBM AIX 4.3.3. The linked NVD entry lists a CVSS v2 base score of 10.0 (HIGH) with a network attack vector, low attack complexity, no authentication, and complete impact on confidentiality, integrity, and availability. The vulne...

CVE-2002-0749

CVE-2002-0749 affects the CGI CSMailto.cgi from CGIscript.net. The vulnerability is due to unsafely handling shell metacharacters in the form-attachment field, enabling remote attackers to execute arbitrary commands on the affected system. The recorded CVSSv2 base score is 7.5 (HIGH) with network...

CVE-2002-0750

Technical details for CVE-2002-0750 are not publicly available in the provided connected documents; only a high-level description is present. Monitor for updates.

CVE-2002-0752

Technical details for CVE-2002-0752 are not publicly provided in the supplied documents. Monitor for updates from connected sources to obtain affected product/version, impact, or remediation information.

CVE-2002-0753

CVE-2002-0753 : Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie. The connected documents confirm the vulnerability description but do not provide additional technical details, affected versions beyond 5.0, exploit spe...

CVE-2002-0764

Phorum 3.3.2a is vulnerable to a remote command execution via HTTP requests to (1) plugin.php, (2) admin.php, or (3) del.php. The attack modifies the PHORUM[settings_dir] setting to point to a directory containing a PHP file with the attacker’s commands, enabling remote code execution. The NVD/CV...