CVE-2002-0598

Format string vulnerability in Foundstone FScan 1.12 with banner grabbing enabled allows remote attackers to execute arbitrary code on the scanning system via format string specifiers in the server banner...

CVE-2002-0600

Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the client via a long response to a passive PASV mode request...

CVE-2002-0601

ISS RealSecure Network Sensor 5.x through 6.5 allows remote attackers to cause a denial of service crash via malformed DHCP packets that cause RealSecure to dereference a null pointer...

CVE-2002-0602

Snapgear Lite+ firewall 1.5.4 and 1.5.3 allows remote attackers to cause a denial of service crash via a large number of connections to 1 the HTTP web management port, or 2 the PPTP port...

CVE-2002-0608

Buffer overflow in Matu FTP client 1.74 allows remote FTP servers to execute arbitrary code via a long "220" banner...

CVE-2002-0371

CVE-2002-0371 corresponds to a buffer overflow in the gopher client handling responses in Microsoft Internet Explorer (5.1–6.0) and related components (Proxy Server 2.0, ISA Server 2000). The CERT/CC entry (VU-440275) describes an overflow when processing gopher replies, allowing arbitrary code e...

CVE-2002-0378

The CVE-2002-0378 issue concerns the LPRng print spooler defaulting to accept print jobs from arbitrary remote hosts in Red Hat Linux 7.0–7.3, Mandrake 8.1–8.2, and similar OSes. Connected advisories (e.g., RHSA-2002:120, RHSA-2002:089, MDKSA-2002:042) document that the default policy allowed rem...

CVE-2002-0378

The default configuration of LPRng print spooler in Red Hat Linux 7.0 through 7.3, Mandrake 8.1 and 8.2, and other operating systems, accepts print jobs from arbitrary remote hosts...

Microsoft IIS .HTR Filter Multiple Overflows (MS02-028)

The remote server is vulnerable to a buffer overflow in the .HTR filter. An attacker may use this flaw to execute arbitrary code on this host although the exploitation of this flaw is considered difficult. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script audit and contributions from...

MS02-029: Windows RAS Local Overflow (318138)

An overflow in the RAS phonebook service allows a local user to execute code on the system with the privileges of LocalSystem. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11029; scriptversion"1.41"; scriptcvsdate"Date: 2018/11/15 20:50:29";...

CVE-2002-0393

Affected product: Red-M 1050 Bluetooth Access Point (management web interface). Vulnerable component: the management web server where a buffer overflow can be triggered by a long administration password, leading to remote DoS and potentially arbitrary code execution. Exploitation details are not ...

CVE-2002-0405

CVE-2002-0405 concerns Transsoft Broker FTP Server 5.0 evaluation. It describes a buffer overflow triggered by a CWD command containing a large number of dots, allowing remote denial of service and possibly arbitrary code execution. The provided connected documents do not include explicit exploit...

CVE-2002-0407

CVE-2002-0407 affects Lotus Domino server prior to 5.0.9a. The vulnerability lies in htcgibin.exe, which can leak the server’s physical pathname to remote attackers via specially crafted requests that include MS-DOS device names (e.g., com5) or long sequences (such as a request with a .pl or .jav...

CVE-2002-0408

CVE-2002-0408 affects htcgibin.exe in Lotus Domino Server 5.0.9a and earlier. When configured with the NoBanner setting, a remote attacker can cause an HTTP 500 error and leak the server version in a hard-coded error message. This is an information-disclosure vulnerability that exposes version de...

CVE-2002-0409

CVE-2002-0409 involves an issue in orderdetails.aspx used as example code for Microsoft .NET developers, where an attacker can view other users’ orders by tampering the OrderID parameter. The description from NVD/CVE records states that remote attackers can access another user’s orders due to the...

CVE-2002-0410

CVE-2002-0410 (AeroMail) affects AeroMail before 1.45. The vulnerability is in send_message.php, allowing remote attackers to read arbitrary server files instead of only uploaded ones by crafting the attachment filename during upload. This is caused by improper handling of file path/filename duri...

CVE-2002-0416

CVE-2002-0416 affects SH39 MailServer versions 1.21 and earlier. A buffer overflow is triggered by a long command to the SMTP port, allowing remote attackers to cause a denial of service and potentially execute arbitrary code. The connected documents confirm the affected product and the underlyin...

CVE-2002-0417

Endymion MailMan

CVE-2002-0418

The CVE-2002-0418 issue affects Endymion SakeMail prior to 1.0.36, specifically the com.endymion.sake.servlet.mail.MailServlet. The vulnerability is a directory-traversal in the param_name parameter, triggered by a ". ." sequence and a null character, allowing remote attackers to read arbitrary f...

CVE-2002-0419

The CVE-2002-0419 entry describes information leaks in Microsoft IIS versions 4 through 5.1 where remote attackers can learn sensitive details via server responses. Specifically, when Basic authentication is used, the server may reveal its IP address as the realm, potentially exposing NAT-obscure...