5507 matches found
CVE-2002-0767
The CVE-2002-0767 issue affects Linux systems running the simpleinit component. The root cause is that simpleinit does not close a read/write FIFO file descriptor before forking a child process. Consequently, the child process can cause simpleinit to execute arbitrary programs with root privilege...
CVE-2002-0773
The CVE-2002-0773 entry describes a vulnerability in imp_rootdir.asp for Hosting Controller that enables remote attackers to copy or delete arbitrary files and directories by issuing a direct request to imp_rootdir.asp and altering parameters (1) ftp, (2) owwwPath, and (3) oftpPath). Affected sof...
CVE-2002-0775
CVE-2002-0775: The browse.asp component in Hosting Controller is vulnerable to a directory traversal flaw via the FilePath parameter, allowing remote attackers to view arbitrary directories. This affects the ability to access non-authorized file paths and partially impacts confidentiality. The do...
CVE-2002-0780
The CVE-2002-0780 entry describes a DoS condition in the IP/IPX gateway for Novell BorderManager 3.6 SP 1a. A remote attacker can cause ipipxgw.nlm to ABEND by sending a large amount of random data to port 8225, triggering a denial of service. The provided documents do not specify affected produc...
CVE-2002-0782
Novell BorderManager 3.5 with PAT (Port-Address Translate) enabled is affected. The issue allows remote attackers to cause a denial of service by saturating the connection table with a high volume of requests to hosts without a specific route, which may be forwarded to the public interface. The p...
CVE-2002-0783
CVE-2002-0783 affects Opera versions 5.12, 6.0, and 6.01. The vulnerability lets a remote attacker execute arbitrary JavaScript in the security context of other sites by setting the location of a frame or iframe to a Javascript: URL. The underlying flaw is exposure of frame/iframe navigation to a...
CVE-2002-0784
The CVE-2002-0784 entry concerns a directory traversal vulnerability in Lysias Lidik Web Server 0.7b. The issue allows remote attackers to list directories by sending HTTP requests that use a modified dot-dot sequence, revealing directory listings and potentially exposing sensitive files. The NVD...
CVE-2002-0786
The CVE-2002-0786 entry concerns the iCon administrative web server for Critical Path inJoin Directory Server 4.0. Affected component: the inJoin Directory Server 4.0 web interface (iCon admin). Vulnerability: authenticated inJoin administrators can read arbitrary files by specifying the target f...
CVE-2002-0791
CVE-2002-0791 affects the Novell NetWare NWFTPD server. NWFTPD versions before 5.02r are vulnerable to remote DoS: an attacker can establish a connection and then send a carriage return plus possibly other invalid commands with improper syntax/length, causing CPU consumption. Documented impact is...
CVE-2002-0792
The CVE-2002-0792 entry covers the Cisco Content Service Switch (CSS) 11000 series web management interface vulnerability. Reports from NVD and CERT indicate that remote attackers can trigger a denial-of-service by sending either an HTTPS POST request or malformed XML data, causing the device to ...
CVE-2002-0793
CVE-2002-0793 affects QNX RTOS 4.25 (QNX4). Hard link and possibly symbolic link following allow local users to overwrite arbitrary files via specific arguments: monitor -f, dumper -d, crttrap -c, or the Watcom sample utility. Vulnerability is local with LOW attack complexity and partial confiden...
CVE-2002-0799
Technical details for CVE-2002-0799 are not publicly available in the provided connected documents; monitor for updates.
CVE-2002-0800
CVE-2002-0800 affects BadBlue 1.7.0 and permits remote directory listing by requesting a URL that ends with an encoded '%' character. The impact is partial confidentiality (I: Partial) with network access, no authentication required, and no available exploitation details in the provided documents...
CVE-2002-0796
Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gain root privileges...
CVE-2002-0644
CVE-2002-0644 / CVE-2002-1137 describe a buffer overflow in the Database Consistency Checkers (DBCCs) of Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 . The vulnerability allows db_owner and db_ddladmin role members to execute arbitrary code due to overflow in DBCC input hand...
CVE-2002-0703
An interaction between the Perl MD5 module perl-Digest-MD5 and Perl could produce incorrect MD5 checksums for UTF-8 data, which could prevent a system from properly verifying the integrity of the data...
CVE-2002-0732
Cross-site scripting vulnerability in MyGuestbook 1.0 allows remote attackers to execute arbitrary script or inject HTML via fields such as 1 user name or 2 comments...
CVE-2002-0740
Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d SPOOLDIR argument...