5356 matches found
CVE-2002-0427
CVE-2002-0427 affects Apache mod_frontpage up to version 1.6.1, where buffer overflows in fpexec may allow remote attackers to gain root privileges. The underlying issue is lack of boundary checks in fpexec.c. Mandrake MDKSA-2002:021 notes remote-exploit potential; FreeBSD/others discuss remediat...
CVE-2002-0528
CVE-2002-0528 affects Watchguard SOHO firewall 5.0.35. After upgrading to 5.0.35, the device unpredictably disables certain IP restrictions configured for customized services, enabling remote attackers to bypass the intended access control rules. Root cause described as upgrade-related misbehavio...
CVE-2002-0489
Linux Directory Penguin NsLookup CGI script nslookup.pl 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the 1 query or 2 type parameters...
CVE-2002-0430
MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php...
CVE-2002-0521
Cross-site scripting vulnerabilities in ASP-Nuke RC2 and earlier allow remote attackers to execute script or gain privileges as other ASP-Nuke users via script in 1 the name parameter in downloads.asp, 2 the message parameter in Post.asp, or 3 a web site URL in profile.asp...
CVE-2002-0453
The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout period, which makes it easier for remote attackers to conduct brute force password guessing by waiting until the lockout period ends, then guessing passwords without being locked o...
CVE-2002-0461
CVE-2002-0461 affects Internet Explorer 5.01 through 6. A crafted web page using JavaScript that calls location.replace on itself can create a loop, leading to a denial of service via application crash. The connected sources confirm the affected product and the underlying cause (recursive locatio...
CVE-2002-0530
CVE-2002-0530 is a cross-site scripting vulnerability in Novell Web Search 2.0.1 that allows remote attackers to execute arbitrary script as other Web Search users via the search parameter. The NVD entry lists a CVSS v2 base score of 5.1 (Network, High attack complexity, no authentication, Partia...
CVE-2002-0522
ASP-Nuke RC2 and earlier allows remote attackers to bypass authentication and gain privileges by modifying the "pseudo" cookie. The flaw is in how ASP-Nuke uses cookies for authentication, enabling cookie tampering to impersonate other users (including admin). Vendor patch status is not provided ...
CVE-2002-0413
The CVE-2002-0413 issue is an XSS vulnerability in ReBB that allows remote attackers to execute arbitrary JavaScript and steal cookies via an IMG tag whose URL contains the malicious script. Affected software is ReBB; the vulnerability arises from the handling of image URLs containing script cont...
CVE-2002-0430
CVE-2002-0430 affects the Sun Cobalt RaQ XTR admin interface. The MultiFileUploadHandler.php allows a local attacker to bypass authentication via a symlink attack on a temporary file, then trigger MultiFileUpload.php to overwrite arbitrary files. The vulnerability is local with high attack comple...
CVE-2002-0492
DCShop 1.002 Beta is affected by CVE-2002-0492. The vulnerability lies in dcshop.cgi, allowing remote attackers to delete arbitrary setup files via a null character in the database parameter. Practical impact described in sources is the unauthorized deletion of setup files; no further exploit det...
CVE-2002-0031
Affected software: Yahoo! Messenger for Windows, version 5.0.0.1064 and earlier. Vulnerability: a remote buffer overflow in the Yahoo! Messenger URI handler (ymsgr:), sharing a single vulnerable buffer for multiple functions (e.g., getimv, sendim, message, addview, adduser, call, chat). Impact: m...
CVE-2002-0515
IPFilter 3.4.25 and earlier sets a different TTL when a port is being filtered than when it is not being filtered, which allows remote attackers to identify filtered ports by comparing TTLs...
CVE-2002-0416
CVE-2002-0416 affects SH39 MailServer versions 1.21 and earlier. A buffer overflow is triggered by a long command to the SMTP port, allowing remote attackers to cause a denial of service and potentially execute arbitrary code. The connected documents confirm the affected product and the underlyin...
CVE-2002-0416
Buffer overflow in SH39 MailServer 1.21 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long command to the SMTP port...
CVE-2002-0483
index.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of the web server when the file parameter is set to index.php, which triggers an error message that leaks the pathname...
CVE-2002-0534
CVE-2002-0534 affects PostBoard 2.0.1 and earlier, where BBCode handling in [code] tags allows remote attackers to trigger a denial of service (CPU consumption) and corrupt the database. The underlying cause is improper processing of null characters (�) in code blocks. Impact is limited to DoS an...
CVE-2002-0579
The CVE covers WorkforceROI Xpede 4.1, where the /admin/adminproc.asp script allows remote attackers to gain Xpede administrator privileges without prompting for a password. The underlying issue is an authentication bypass in that admin endpoint, enabling privilege escalation. The sources confirm...