CVE-2002-0051

CVE-2002-0051 describes a local vulnerability in Windows 2000 where an attacker can prevent the application of new group policy settings by opening Group Policy files with exclusive-read access. Affected products include Windows 2000 Server editions. The underlying issue is the ability to obtain ...

CVE-2002-0345

Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, which could allow an attacker to gain privileges...

CVE-2002-0323

comment2.jse in ScriptEase:WebServer allows remote attackers to read arbitrary files by specifying the target file as an argument in the URL...

CVE-2002-0022

CVE-2002-0022 describes a buffer overflow in the mshtml.dll HTML rendering engine (Internet Explorer 5.5/6.0) triggered by crafted HTML with embedded ActiveX controls, allowing remote code execution. The exploitation targets the SRC/EMBED handling and concatenation of two Unicode strings, enablin...

CVE-2002-0083

CVE-2002-0083 is described in the initial document as an off-by-one error in the OpenSSH channel code affecting OpenSSH 2.0–3.0.2 that can allow privilege escalation. The connected F5 advisory (K1648) references CAN-2002-0083 and labels it as an OpenSSH array overflow vulnerability, but does not ...

CVE-2002-0047

CIPE VPN package before 1.3.0-3 allows remote attackers to cause a denial of service crash via a short malformed packet...

CVE-2002-0057

XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifying a local file as an XML Data Source...

CVE-2002-0209

Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing SLB and Cookie-Based Persistence features enabled, allows remote attackers to determine the real IP address of a web server with a half-closed session, which causes ACEdirector to send packets from the server without changing the...

CVE-2002-0045

slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls without any values, which causes OpenLDAP to delete non-mandatory attributes that would otherwise be protected by ACLs...

CVE-2002-0020

Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via malformed protocol options...

CVE-2002-0063

CVE-2002-0063 affects CUPS prior to 1.1.14, where a buffer overflow in ippRead (triggered by long attribute names or language values) could allow remote arbitrary-code execution. Upstream fixes exist in 1.1.14+; debian/mandrake advisories reference this fix. Remediation: upgrade CUPS to 1.1.14 or...

CVE-2002-0197

psyBNC 2.3 beta and earlier allows remote attackers to spoof encrypted, trusted messages by sending lines that begin with the "B" sequence, which makes the message appear legitimate...

CVE-2002-0022

Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via a web page that specifies embedded ActiveX controls in a way that causes 2 Unicode strings to be concatenated...

CVE-2002-0117

Cross-site scripting vulnerability in Yet Another Bulletin Board YaBB 1 Gold SP 1 and earlier allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag...

CVE-2002-0049

The CVE-2002-0049 issue is validated by connected sources describing a misconfigured WinReg permissions in Microsoft Exchange 2000 System Attendant. The registry key HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg becomes world-writeable, enabling non-admins (via remote registry ac...

CVE-2002-0003

CVE-2002-0003 describes a buffer overflow in the groff preprocessor (groff 1.16 and earlier) that can allow remote attackers to gain privileges via the LPRng printing system when groff is invoked through lpd. The vulnerability affects the preprocessor and can enable privilege escalation to the lp...

CVE-2002-0078

The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone by embedding the script in a cookie, aka the "Cookie-based Script Execution" vulnerability...

CVE-2002-0028

CVE-2002-0028 describes a remote code execution vulnerability in the Windows ICQ client prior to the 2001B Beta v5.18 Build #3659, triggered by processing a Voice Video & Games request. The buffer overflow occurs in code handling that TLV/message and, before 2001B, in the core client (and in 2001...

CVE-2002-0027

Affected software: Internet Explorer 5.5 and 6.0. Vulnerability: Frame Domain Verification bypass via Document.open between frames from different domains; allows a remote attacker to read files and spoof the URL in the address bar. Impact: reads files on target and can impersonate sites; variant ...

CVE-2002-0251

CVE-2002-0251 affects licq 1.0.4 and earlier. The vulnerability is a buffer overflow triggered by a long format-string input (e.g., "%d"), allowing remote attackers to cause a crash and potentially execute arbitrary code. Impact is described as denial of service with possible code execution; expl...