5356 matches found
CVE-2002-0121
PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections...
CVE-2002-0121
The CVE-2002-0121 entry affects PHP 4.0 through 4.1.1, where session IDs are stored in temporary files whose names contain the session ID, enabling local users to hijack web connections. The provided documents describe the vulnerable mechanism and impact (local hijack) but do not include remediat...
CVE-2002-0063
Buffer overflow in ippRead function of CUPS before 1.1.14 may allow attackers to execute arbitrary code via long attribute names or language values...
CVE-2002-0226
retrievepassword.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remote attackers to request a new password on behalf of another user and use the sessionID to calculate the new password for that user...
CVE-2002-0338
The Bat! 1.53d and 1.54beta, and possibly other versions, allows remote attackers to cause a denial of service crash via an attachment whose name includes an MS-DOS device name...
CVE-2002-0342
Kmail 1.2 on KDE 2.1.1 allows remote attackers to cause a denial of service crash via an email message whose body is approximately 55 K long...
CVE-2002-0353
The ASN.1 parser in Ethereal 0.9.2 and earlier allows remote attackers to cause a denial of service crash via a certain malformed packet, which causes Ethereal to allocate memory incorrectly, possibly due to zero-length fields...
CVE-2002-0367
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit...
CVE-2002-0167
Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service crash and possibly execute arbitrary code via certain weaknesses of NetPBM...
CVE-2002-0179
CVE-2002-0179 describes a remote buffer overflow in xpilot-server for XPilot versions 4.5.0 and earlier that allows an attacker to execute arbitrary code. The connected OpenVAS and Debian advisory entries corroborate the vulnerability in the xpilot package and indicate remediation via updating to...
CVE-2002-0065
The CVE-2002-0065 issue affects Funk Software Proxy Host 3.x on Windows 2000/NT4 and Windows 9x. The root cause is weakly encrypted/stored passwords (obfuscated registry value on Windows 2000/NT4; PHOST.INI on Windows 9x), enabling local users to recover passwords and gain privileges. The attack ...
CVE-2002-0176
CVE-2002-0176 concerns the printf wrappers in libsafe, affected in versions 2.0-11 and earlier. The vulnerability arises because the wrappers do not properly handle argument indexing specifiers, allowing certain calls to proceed with unverified arguments. Mandrake’s MDKSA-2002:026 notes that form...
CVE-2002-0175
The CVE-2002-0175 issue concerns libsafe 2.0-11 and earlier, where format-string protection can be bypassed by using certain characters ("'" and "I") that are implemented in glibc but not in libsafe. The connected Mandrake advisory (MDKSA-2002:026) states that this bypass arises from how printf w...
CVE-2002-0211
CVE-2002-0211 affects Tarantella Enterprise 3 (versions 3.01–3.20). A race condition in the installation script creates a world-writable temporary "gunzip" before execution, enabling local users to modify the file and execute arbitrary commands. Root cause is the insecure temporary file handling ...
CVE-2002-0209
CVE-2002-0209 affects Nortel Alteon ACEdirector WebOS 9.0 with SLB and Cookie-Based Persistence enabled. A remote attacker can determine the real IP address of a web server when a half-closed session is present, causing ACEdirector to send packets from the server without mapping to the virtual IP...
CVE-2002-0143
The CVE-2002-0143 issue is a local buffer overflow in Eterm of Enlightenment Imlib2 (versions ≤ 1.0.4) caused by a long HOME environment variable. Exploit details and mitigations are not provided in the connected documents; no further remediation is specified.
CVE-2002-0023
CVE-2002-0023 affects Internet Explorer 5.01, 5.5 and 6.0. The vulnerability arises in the GetObject function, where malformed requests can bypass some security checks, allowing remote attackers to read arbitrary files. The connected records confirm the affected products and the vulnerability cla...
CVE-2002-0051
CVE-2002-0051 describes a local vulnerability in Windows 2000 where an attacker can prevent the application of new group policy settings by opening Group Policy files with exclusive-read access. Affected products include Windows 2000 Server editions. The underlying issue is the ability to obtain ...