5507 matches found
CVE-2002-0764
Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to 1 plugin.php, 2 admin.php, or 3 del.php that modifies the PHORUMsettingsdir variable to point to a directory that contains a PHP file with the commands...
CVE-2002-0775
browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter...
CVE-2002-0779
FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service network connectivity loss via a connection to port 21 with a large amount of random data...
CVE-2002-0784
Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HTTP request with a ... modified dot dot...
CVE-2002-0791
Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service CPU consumption via a connection to the server followed by a carriage return, and possibly other invalid commands with improper syntax or length...
CVE-2002-0792
The web management interface for Cisco Content Service Switch CSS 11000 switches allows remote attackers to cause a denial of service soft reset via 1 an HTTPS POST request, or 2 malformed XML data...
CVE-2002-0799
Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argument...
CVE-2002-0798
CVE-2002-0798 affects HP-UX swinstall on HP-UX 11.00 and 11.11. The vulnerability lets local users view data views for files they normally cannot read, which reportedly can lead to a denial of service. The available sources describe the affected component and the resulting impact but do not provi...
CVE-2002-0798
Vulnerability in swinstall for HP-UX 11.00 and 11.11 allows local users to view obtain data views for files that cannot be directly read by the user, which reportedly can be used to cause a denial of service...
CVE-2002-0770
The CVE-2002-0770 issue affects Quake II server 3.20/3.21, where a client can trigger the server to expand a variable like "$rcon_password" due to console variable expansion on unexpanded client input. This information leakage enables attackers to obtain sensitive credentials and potentially take...
CVE-2002-0796
CVE-2002-0796 affects the snmpdx logging component on Solaris 5.6–8. It is a format-string vulnerability in the logger that enables remote attackers to gain root privileges. The vulnerability details are based on the CVE description and associated NVD entry, which confirm the affected platform an...
CVE-2002-0750
CGIscript.net csMailto.cgi program allows remote attackers to read arbitrary files by specifying the target filename in the form-attachment field...
CVE-2002-0739
CVE-2002-0739 describes a cross-site scripting vulnerability in PostCalendar 3.02. The issue allows remote attackers to inject arbitrary HTML and scripts and to harvest cookies by modifying a calendar entry on the preview page. The NVD entry lists a base score of 7.5 (HIGH) with network attack ve...
CVE-2002-0772
CVE-2002-0772 describes a directory traversal vulnerability in the Hosting Controller’s dsnmanager.asp, exploitable via a .. payload in the RootName parameter to read arbitrary files. Affected component is the web interface/dsnmanager.asp; root cause is improper validation of the RootName input, ...
CVE-2002-0797
Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges...
CVE-2002-0744
The CVE-2002-0744 entry concerns AIX 4.3.3’s namerslv: when invoked with a very long argument, the process can core dump, reportedly due to a buffer overflow. The description from NVD confirms the impact as a complete confidentiality/integrity/availability risk via a core dump, with CVSSv2 scorin...
CVE-2002-0703
An interaction between the Perl MD5 module perl-Digest-MD5 and Perl could produce incorrect MD5 checksums for UTF-8 data, which could prevent a system from properly verifying the integrity of the data...
CVE-2002-0714
FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses...
CVE-2002-0781
CVE-2002-0781 affects the RTSP proxy component of Novell BorderManager 3.6 SP1a. A crafted GET request to port 9090 followed by a series of carriage returns can cause proxy.nlm to ABEND, resulting in denial of service. Exploitation details are not described beyond the vulnerability description; n...