CVE-2002-0510

The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine that a target system is running Linux...

CVE-2002-0563

The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including Dynamic Monitoring Services 1 dms0, 2 dms/DMSDump, 3 servlet/DMSDump, 4 servlet/Spy, 5 soap/servlet/Spy, and 6 dms/AggreSpy; and Oracle Ja...

CVE-2002-0524

ASP-Nuke RC2 and earlier allows remote attackers to determine the absolute path of the server by 1 calling database-inc.asp with incorrect cookies, or 2 calling Post.asp with certain arguments, which leak the pathname in an error message...

CVE-2002-0509

Transparent Network Substrate TNS Listener in Oracle 9i 9.0.1.1 allows remote attackers to cause a denial of service CPU consumption via a single malformed TCP packet to port 1521...

CVE-2002-0457

Cross-site scripting vulnerability in signgbook.php for BG GuestBook 1.0 allows remote attackers to execute arbitrary Javascript via encoded tags such as , , and & in fields such as 1 name, 2 email, 3 AIM screen name, 4 website, 5 location, or 6 message...

CVE-2002-0528

Watchguard SOHO firewall 5.0.35 unpredictably disables certain IP restrictions for customized services that were set before the administrator upgrades to 5.0.35, which could allow remote attackers to bypass the intended access control rules...

CVE-2002-0564

CVE-2002-0564 affects Oracle 9i Application Server 1.0.2.x via PL/SQL module 3.0.9.8.2. An attacker can bypass authentication for a Database Access Descriptor (DAD) by altering the URL to reference a different DAD that already has valid credentials, enabling unauthorized access. The description n...

CVE-2002-0585

CVE-2002-0585 affects HP-UX 11.11’s ndd component. The vulnerability is described as allowing a denial of service via certain TRANSPORT patches. Affected software: ndd(1M) on HP-UX 11.11. Root cause/impact: denial of service (as stated). Exploitation details are not provided in the documents. Rem...

CVE-2002-0503

CVE-2002-0503 corresponds to a directory traversal vulnerability in Citrix NFuse 1.5 , affecting the internal file ** boilerplate.asp**. The issue allows remote authenticated users to read arbitrary files via a double-dot sequence in the NFuse_Template parameter. The publicly available details (N...

CVE-2002-0587

CVE-2002-0587 is a buffer overflow in the Ns_PdLog function of AOLServer's external database driver proxy daemon library (libnspd.a), affecting AOLServer versions 3.0 through 3.4.2. The vulnerability allows remote attackers to cause a denial of service or execute arbitrary code via the Error or N...

CVE-2002-0489

CVE-2002-0489 affects the Linux Directory Penguin NsLookup CGI script (nslookup.pl) version 1.0. It allows remote code execution via shell metacharacters in the (1) query or (2) type parameters. The NVD record assigns a base score of 10.0 (HIGH) with network attack vector, low complexity, no auth...

CVE-2002-0549

CVE-2002-0549 involves cross-site scripting vulnerabilities in Anthill that allow remote attackers to execute scripts as other Anthill users. The NVD entry provides a CVSS v2 base score of 7.5 (HIGH) with network attack vector, low attack complexity, no authentication, and partial impact to confi...

CVE-2002-0456

CVE-2002-0456 affects Eudora 5.1 and earlier. The issue arises because attachments are stored in a directory with a fixed name, which could enable attackers to exploit vulnerabilities in other software that rely on installing/reading files from directories with known pathnames. The provided docum...

CVE-2002-0417

Endymion MailMan

CVE-2002-0465

Hosting Controller 1.4.1 and earlier are affected by CVE-2002-0465. A directory traversal flaw in filemanager.asp allows remote attackers to read/modify arbitrary files and execute commands via an open path parameter containing .. (dot dot). The issue is identified in the NVD/CVE records for this...

CVE-2002-0551

CVE-2002-0551 describes a cross-site scripting vulnerability in Dynamic Guestbook 3.0. The issue allows remote attackers to cause client-side execution of code when users access guestbook pages with the parameters name, mail, or kommentar. The CVSS v2 base score is 7.5 (HIGH), with network attack...

CVE-2002-0587

Buffer overflow in NsPdLog function for the external database driver proxy daemon library libnspd.a of AOLServer 3.0 through 3.4.2 allows remote attackers to cause a denial of service or execute arbitrary code via the Error or Notice parameters...

CVE-2002-0480

Technical details about CVE-2002-0480 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2002-0608

The vulnerability CVE-2002-0608 concerns the Matu FTP client 1.74, where a buffer overflow in handling the FTP server banner (a long “220” response) can allow the remote FTP server to execute arbitrary code. This is documented in the NVD/NVD-derived records, with the affected component being the ...

CVE-2002-0589

The CVE-2002-0589 issue affects PVote prior to 1.9. An unauthenticated remote attacker can change the administrative password by directly calling ch_info.php with newpass and confirm parameters both set to the new password, enabling privilege gain. The available documents confirm the vulnerabilit...