CVE-2002-0475

The CVE-2002-0475 entry describes a cross-site scripting (XSS) vulnerability in phpBB versions 1.4.4 and earlier. The flaw allows remote attackers to cause arbitrary JavaScript execution on a user’s browser by embedding a script inside an IMG tag while editing a message. Affected software is phpB...

CVE-2002-0477

Standalone Macromedia Flash Player 5.0 prior to 5,0,30,2 is vulnerable to remote code execution via a SWF file that uses the exec FSCommand. Root cause: the SWF can trigger arbitrary program execution on the host. Impact is remote code execution with the affected component being the Flash Player ...

CVE-2002-0480

Technical details about CVE-2002-0480 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2002-0482

PCI Netsupport Manager (before v7) is affected by a directory traversal vulnerability in web extensions that allows an attacker to read arbitrary files via .. in an HTTP GET request. The issue arises from insufficient validation of path input in the web extension context, enabling access to files...

CVE-2002-0483

CVE-2002-0483 affects PHP-Nuke versions 5.4 and earlier, where requesting index.php with the file parameter set to index.php can trigger an error message that leaks the web server’s physical pathname. This is a remote vulnerability that primarily exposes confidential information (the server path)...

CVE-2002-0487

CVE-2002-0487 affects Intellisol Xpede 4.1, where passwords are stored in plaintext within a Javascript “session timeout” re-authentication capability. The underlying issue is plaintext password storage in a source file/cache accessible to the local user, enabling a local attacker to read credent...

CVE-2002-0492

DCShop 1.002 Beta is affected by CVE-2002-0492. The vulnerability lies in dcshop.cgi, allowing remote attackers to delete arbitrary setup files via a null character in the database parameter. Practical impact described in sources is the unauthorized deletion of setup files; no further exploit det...

CVE-2002-0496

The CVE-2002-0496 issue affects the HTTP server component of SouthWest Talker server 1.0.0. A remote attacker can cause a denial of service (server crash) by sending a malformed URL to port 5002. The available documents confirm the vulnerable product/version and the nature of the impact (DoS/part...

CVE-2002-0498

CVE-2002-0498 affects Etnus TotalView 5.0.0-4, where certain files are installed with UID 5039 and GID 59. This ownership mishandling could allow local users with that UID/GID to modify those files and gain privileges as other TotalView users. No exploit details are provided in the supplied docum...

CVE-2002-0502

CVE-2002-0502 affects Citrix NFuse 1.6. Affected component: applist.asp handling within NFuse, enabling remote attackers to list available applications without authentication. Root cause is improper access control on the applist.asp endpoint, leading to potential information disclosure. CVSS metr...

CVE-2002-0503

CVE-2002-0503 corresponds to a directory traversal vulnerability in Citrix NFuse 1.5 , affecting the internal file ** boilerplate.asp**. The issue allows remote authenticated users to read arbitrary files via a double-dot sequence in the NFuse_Template parameter. The publicly available details (N...

CVE-2002-0504

CVE-2002-0504 describes a remote cross-site scripting flaw in Citrix NFuse 1.6 and earlier where results from getLastError are not quoted, allowing an attacker to inject script via the NFuse_Application parameter to launch.jsp or launch.asp. The CVSS v2 base metrics are provided (AV:N/AC:L/Au:N/C...

CVE-2002-0507

CVE-2002-0507 describes an authentication bypass in Microsoft Outlook Web Access (OWA) when used with RSA SecurID. Local users could bypass SecurID for a previous user by submitting multiple OWA Authentication requests using the previous user’s password, which is eventually accepted by OWA. The N...

CVE-2002-0508

CVE-2002-0508 affects wwwisis 3.45 and earlier. The issue allows remote attackers to execute arbitrary commands and read files via the parameters (1) prolog or (2) epilog). The connected documents confirm the vulnerable product/version and the impact as described; no explicit remediation or mitig...

CVE-2002-0514

OpenBSD 3.0 PF with the return-rst rule is vulnerable. The RST packet’s TTL is set to 128, allowing remote attackers to infer whether a port is filtered by comparing TTL to the default. Affected component: PF rule handling in OpenBSD 3.0. Root cause: TTL manipulation in RST responses leads to dis...

CVE-2002-0515

IPFilter 3.4.25 and earlier is affected: it sets a different TTL for packets targeting a port when that port is being filtered versus when it is not, enabling remote attackers to identify filtered ports by TTL comparison. The vulnerability is described across NVD/CVE records and PT-Security conte...

CVE-2002-0517

The CVE-2002-0517 issue affects the X11 libX11 library in Caldera Open UNIX 8.0.0 and UnixWare 7.1.1 (and possibly other OSes). A buffer overflow occurs when handling a long -xrm argument in programs such as dtterm or xterm, allowing local users to gain root privileges. Exploitation details and a...

CVE-2002-0520

The CVE-2002-0520 entry describes an XSS in ASP-Nuke RC1 via the IMG tag in functions-inc.asp. The root cause is insufficient filtering of content within the [img] tag, allowing remote attackers to execute script in other users’ browsers. The affected software is ASP-Nuke RC1; exploitation detail...

CVE-2002-0522

ASP-Nuke RC2 and earlier allows remote attackers to bypass authentication and gain privileges by modifying the "pseudo" cookie. The flaw is in how ASP-Nuke uses cookies for authentication, enabling cookie tampering to impersonate other users (including admin). Vendor patch status is not provided ...

CVE-2002-0523

ASP-Nuke RC2 and earlier are affected by an information disclosure vulnerability where an attacker can locally modify the user cookie and submit it to cause the server to reveal the list of currently logged-in users (or show the web root path in an error). Affected component: ASP-Nuke RC1–RC2 (co...