5507 matches found
CVE-2002-0047
CVE-2002-0047 affects the CIPE VPN package; the Debian advisory notes a bug in CIPE’s packet handling where a received packet that is too short could crash the process. Affected version: CIPE prior to 1.3.0-3. The Debian DSA-104-1 advisory (and OpenVAS NASL) describe this as a DoS via a short mal...
CVE-2002-0050
CVE-2002-0050 affects Microsoft Commerce Server 2000 via the AuthFilter ISAPI filter. A buffer overflow in the AuthFilter ISAPI filter allows remote attackers to execute arbitrary code by sending long authentication data. The vulnerability is exploitable over the network without authentication, w...
CVE-2002-0057
The CVE-2002-0057 issue affects the Microsoft XML Core Services XMLHTTP control (MSXML) in versions 2.6, 3.0, and 4.0 where IE security zone handling is applied to redirected data streams. The flaw allows a remote attacker to read arbitrary local files by specifying a local file as the XML Data S...
CVE-2002-0059
CVE-2002-0059: The decompression algorithm in zlib 1.1.3 and earlier can cause inflateEnd to free memory more than once (a double free), enabling memory corruption that may allow arbitrary code execution via malformed compression data. Affected: zlib up to version 1.1.3 and earlier. Root cause: d...
CVE-2002-0064
CVE-2002-0064 affects Funk Software’s Proxy Host v3.x on Windows 2000/NT4/9x. The issues include: (1) default filesystem and registry permissions granting the Everyone group excessive access, enabling modification of host settings and passwords; (2) passwords stored in recoverable formats (obfusc...
CVE-2002-0066
Funk Software Proxy Host 3.x contains multiple issues, primarily: (1) a Windows Named Pipe created by Proxy Host that is accessible with Everyone Full Control, allowing local/remote users to invoke configuration utilities and potentially gain privileges; (2) insecure password storage and recovery...
CVE-2002-0070
CVE-2002-0070 describes a buffer overflow in the Windows Shell (the Windows Desktop environment) that can allow arbitrary code execution. The vulnerability stems from an unchecked buffer in the URL handler mapping for applications that have been partially removed; if an application with custom UR...
CVE-2002-0092
CVE-2002-0092 affects CVS prior to 1.10.8, where an improperly initialized global variable can be exploited by a remote attacker to crash the CVS server via the diff capability, causing a denial of service. The connected Debian advisory and OpenVAS entry confirm the issue and point to upgrading C...
CVE-2002-0096
The CVE-2002-0096 entry concerns Geeklog 1.3. The installation process creates an extra group_assignments record that is not deleted, causing the first newly created user to be added to the GroupAdmin and UserAdmin groups and potentially receive unintended administrative privileges. Connected sou...
CVE-2002-0098
CVE-2002-0098 describes a buffer overflow in Boozt AdBanner’s index.cgi admin interface of Boozt! Standard 0.9.8. The vulnerability occurs when a long banner creation name is copied into internal arrays, allowing local arbitrary code execution or a crash. Connected sources cite a CVSS v2 base sco...
CVE-2002-0115
The CVE-2002-0115 entry concerns Snort 1.8.3, where the minimum ICMP header size is not properly defined. This allows remote attackers to cause a denial of service (crash and core dump) by sending a malformed ICMP packet. The documents state the affected component is the ICMP handling in Snort 1....
CVE-2002-0121
The CVE-2002-0121 entry affects PHP 4.0 through 4.1.1, where session IDs are stored in temporary files whose names contain the session ID, enabling local users to hijack web connections. The provided documents describe the vulnerable mechanism and impact (local hijack) but do not include remediat...
CVE-2002-0139
Pi-Soft SpoonFTP 1.1 and earlier is affected by an FTP bounce vulnerability where remote attackers can redirect traffic to other sites using the PORT command. The issue arises in how the PORT command allows specifying an arbitrary destination, enabling data connections to be opened to arbitrary h...
CVE-2002-0143
The CVE-2002-0143 issue is a local buffer overflow in Eterm of Enlightenment Imlib2 (versions ≤ 1.0.4) caused by a long HOME environment variable. Exploit details and mitigations are not provided in the connected documents; no further remediation is specified.
CVE-2002-0152
The CVE-2002-0152 entry concerns a buffer overflow in Macintosh builds of several Microsoft applications. The vulnerability is triggered by the file:// directive when a large number of slashes (/) is supplied, allowing remote attackers to crash the affected applications or potentially execute arb...
CVE-2002-0153
CVE-2002-0153 affects Internet Explorer 5.1 for Macintosh. A vulnerability allows remote attackers to bypass security checks and invoke local AppleScripts within a specific HTML element (the “Local Applescript Invocation” issue). The connected documents describe the flaw and its alias, but do not...
CVE-2002-0160
CVE-2002-0160 affects Cisco Secure Access Control Server (ACS) for Windows, versions 2.6.x and earlier and 3.x through 3.01 (build 40). The vulnerability allows remote attackers to read files (HTML, Java class, images) outside the web root by crafting a modified .... path in the URL aimed at port...
CVE-2002-0166
CVE-2002-0166 covers a cross-site scripting vulnerability in analog prior to 5.22 where an HTTP request containing script text is logged and not properly sanitized during display, enabling a remote attacker to execute JavaScript. Affected: analog (pre-5.22). Root cause: insufficient filtering of ...
CVE-2002-0168
CVE-2002-0168 affects Imlib up to version 1.9.12 (before 1.9.13). The vulnerability arises from how arguments passed to malloc may cause a heap corruption, enabling a denial of service and potentially arbitrary code execution when untrusted images are loaded. Public advisories (Mandrake MDKSA-200...