5356 matches found
CVE-2002-0422
CVE-2002-0422 concerns Microsoft IIS 5 and 5.1. WebDAV support can leak an internal IP address. The PROPFIND method with a blank Host header can expose the address in an HREF within a 207 Multi-Status response, and the WRITE or MKCOL methods can leak the internal IP in the Location header. Connec...
CVE-2002-0458
CVE-2002-0458 affects News-TNK 1.2.1 and earlier. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to run arbitrary Javascript via the WEB parameter. According to the NVD entry, exploitation would be via a network vector with high complexity and no authenticatio...
CVE-2002-0448
Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denial of service crash via an HTTP request that contains many "C:/" sequences...
CVE-2002-0603
Snapgear Lite+ firewall 1.5.3 allows remote attackers to cause a denial of service IPSEC crash via a zero length packet to UDP port 500...
CVE-2002-0421
IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr password changing programs in the /iisadmpwd directory, including 1 aexp2.htr, 2 aexp2b.htr, 3 aexp3.htr , or 4 aexp4.htr...
CVE-2002-0476
Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file containing the undocumented "save" FSCommand...
CVE-2002-0586
Format string vulnerability in NsPdLog function for the external database driver proxy daemon library libnspd.a of AOLServer 3.0 through 3.4.2 allows remote attackers to execute arbitrary code via the Error or Notice parameters...
CVE-2002-0452
Foundry Networks ServerIron switches do not decode URIs when applying "url-map" rules, which could make it easier for attackers to cause the switch to forward traffic to a different server than intended and exploit vulnerabilities that would otherwise be inaccessible...
CVE-2002-0523
ASP-Nuke RC2 and earlier allows remote attackers to list all logged-in users by submitting an invalid "pseudo" cookie...
CVE-2002-0471
The CVE-2002-0471 entry concerns PHPNetToolpack 0.1, where remote code execution is possible via shell metacharacters supplied in the a_query parameter. The underlying issue is unsafely handling user input in a_query, enabling an attacker to execute arbitrary code on the host. The available sourc...
CVE-2002-0411
AeroMail
CVE-2002-0550
Dynamic Guestbook 3.0 is affected by a remote code execution vulnerability where an attacker can execute arbitrary code by supplying shell metacharacters in the gbdaten parameter. The root cause is input allowing shell metacharacter processing; impact is described as arbitrary code execution. Exp...
CVE-2002-0433
The CVE-2002-0433 entry concerns Pi3Web 2.0.0 where remote attackers can view restricted files by issuing an HTTP request containing a wildcard character ("*"). This is an unauthorized disclosure vulnerability via crafted requests, as described in NVD and CVE records. Connected documents confirm ...
CVE-2002-0477
Standalone Macromedia Flash Player 5.0 prior to 5,0,30,2 is vulnerable to remote code execution via a SWF file that uses the exec FSCommand. Root cause: the SWF can trigger arbitrary program execution on the host. Impact is remote code execution with the affected component being the Flash Player ...
CVE-2002-0509
CVE-2002-0509 affects Oracle 9i’s Transparent Network Substrate (TNS) Listener (version 9.0.1.1). A remote attacker can cause a denial of service (CPU consumption) by sending a single malformed TCP packet to port 1521. Root cause and exact vulnerable component are stated only as the TNS Listener ...
CVE-2002-0583
WorkforceROI Xpede 4.1 uses a small random namespace 5 alphanumeric characters for temporary expense claim reports in the /reports/temp directory, which allows remote attackers to read the reports via a brute force attack...
CVE-2002-0526
CVE-2002-0526 describes a vulnerability in the INN components (1) inews or (2) rnews for INN versions 2.2.3 and earlier, caused by insecure open() calls. The NVD metrics indicate a LOCAL attack with LOW complexity and no authentication, and potential COMPLETE impact on confidentiality, integrity,...
CVE-2002-0582
CVE-2002-0582 affects WorkforceROI Xpede 4.1. The vulnerability stems from storing temporary expense claim reports in a world-readable and indexable /reports/temp directory, enabling remote readers to access the reports. The NVD entry lists a CVSS v2 base score of 5.0 (Medium) with network attack...
CVE-2002-0563
CVE-2002-0563 describes a vulnerability in Oracle 9i Application Server 1.0.2.x where the default configuration allows remote anonymous access to sensitive services without authentication. Affected components include Dynamic Monitoring Services (dms0, dms/DMSDump, servlet/DMSDump, servlet/Spy, so...