CVE-2002-0168

CVE-2002-0168 affects Imlib up to version 1.9.12 (before 1.9.13). The vulnerability arises from how arguments passed to malloc may cause a heap corruption, enabling a denial of service and potentially arbitrary code execution when untrusted images are loaded. Public advisories (Mandrake MDKSA-200...

CVE-2002-0175

The CVE-2002-0175 issue concerns libsafe 2.0-11 and earlier, where format-string protection can be bypassed by using certain characters ("'" and "I") that are implemented in glibc but not in libsafe. The connected Mandrake advisory (MDKSA-2002:026) states that this bypass arises from how printf w...

CVE-2002-0179

CVE-2002-0179 describes a remote buffer overflow in xpilot-server for XPilot versions 4.5.0 and earlier that allows an attacker to execute arbitrary code. The connected OpenVAS and Debian advisory entries corroborate the vulnerability in the xpilot package and indicate remediation via updating to...

CVE-2002-0197

Technical details (affected products, versions, vulnerabilities, exploitation) are not publicly provided in the connected documents. Monitor for updates.

CVE-2002-0207

RealNetworks RealPlayer 8.0 and earlier are affected by a buffer overflow caused by a header length value that exceeds the actual header length. This is a remote code execution risk with a network attack vector (no authentication required; low complexity). The description indicates the vulnerabil...

CVE-2002-0209

CVE-2002-0209 affects Nortel Alteon ACEdirector WebOS 9.0 with SLB and Cookie-Based Persistence enabled. A remote attacker can determine the real IP address of a web server when a half-closed session is present, causing ACEdirector to send packets from the server without mapping to the virtual IP...

CVE-2002-0211

CVE-2002-0211 affects Tarantella Enterprise 3 (versions 3.01–3.20). A race condition in the installation script creates a world-writable temporary "gunzip" before execution, enabling local users to modify the file and execute arbitrary commands. Root cause is the insecure temporary file handling ...

CVE-2002-0226

CVE-2002-0226 relates to DCForum 6.x and 2000. The flaw is that retrieve_password.pl generates new passwords using a sessionID, enabling a remote attacker to request a new password for another user and calculate that user’s new password from the sessionID. The connected documents confirm the affe...

CVE-2002-0265

The CVE-2002-0265 issue affects Sawmill for Solaris

CVE-2002-0051

CVE-2002-0051 describes a local vulnerability in Windows 2000 where an attacker can prevent the application of new group policy settings by opening Group Policy files with exclusive-read access. Affected products include Windows 2000 Server editions. The underlying issue is the ability to obtain ...

CVE-2002-0004

CVE-2002-0004 describes a heap corruption vulnerability in the “at” utility caused by a double-free during execution time handling, enabling a local user to potentially execute arbitrary code. The issue is evidenced in multiple advisories (e.g., Debian DSA 102-1/102-2) noting that the remote host...

CVE-2002-0051

Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access...

CVE-2002-0051

Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access...

CVE-2002-0167

The CVE-2002-0167 issue affects Imlib prior to 1.9.13, where loading images via NetPBM could trigger a crash or, in some cases, execute arbitrary code due to weaknesses in NetPBM. Connected Red Hat advisory RHSA-2002:048 confirms that Imlib versions before 1.9.13 fall back to NetPBM for untrusted...

CVE-2002-0060

CVE-2002-0060 affects the Linux kernel netfilter IRC DCC connection-tracking helper in 2.4.x (notably 2.4.14–2.4.18-pre8/9). The bug sets an overly broad conntrack mask, causing firewall rules to be more permissive than intended and potentially allowing inbound connections that bypass restriction...

CVE-2002-0107

CacheFlow CacheOS 4.0.13 and earlier expose a information disclosure vulnerability in a web administration interface: a sequence of GET requests that do not end with a HTTP/1.0 (or another version) string causes leakage of sensitive data in the error message. Affected product: CacheFlow CacheOS (...

CVE-2002-0050

Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitrary code via long authentication data...

CVE-2002-0003

Buffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to gain privileges via lpd in the LPRng printing system...

CVE-2002-0007

CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server...

CVE-2002-0018

In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domain does not verify that the trusted domain is authoritative for all listed SIDs, which allows remote attackers to gain Domain Administrator privileges on the trusting domain by...