CVE-2002-0509

CVE-2002-0509 affects Oracle 9i’s Transparent Network Substrate (TNS) Listener (version 9.0.1.1). A remote attacker can cause a denial of service (CPU consumption) by sending a single malformed TCP packet to port 1521. Root cause and exact vulnerable component are stated only as the TNS Listener ...

CVE-2002-0510

CVE-2002-0510 describes a fingerprinting flaw in the UDP/IP stack of Linux 2.4.x: the IP Identification field is kept at 0 for non-fragmented packets, enabling remote observers to determine if a target runs Linux. The available connected documents reiterate the Linux kernel vulnerability and refe...

CVE-2002-0514

OpenBSD 3.0 PF with the return-rst rule is vulnerable. The RST packet’s TTL is set to 128, allowing remote attackers to infer whether a port is filtered by comparing TTL to the default. Affected component: PF rule handling in OpenBSD 3.0. Root cause: TTL manipulation in RST responses leads to dis...

CVE-2002-0515

IPFilter 3.4.25 and earlier is affected: it sets a different TTL for packets targeting a port when that port is being filtered versus when it is not, enabling remote attackers to identify filtered ports by TTL comparison. The vulnerability is described across NVD/CVE records and PT-Security conte...

CVE-2002-0517

The CVE-2002-0517 issue affects the X11 libX11 library in Caldera Open UNIX 8.0.0 and UnixWare 7.1.1 (and possibly other OSes). A buffer overflow occurs when handling a long -xrm argument in programs such as dtterm or xterm, allowing local users to gain root privileges. Exploitation details and a...

CVE-2002-0520

The CVE-2002-0520 entry describes an XSS in ASP-Nuke RC1 via the IMG tag in functions-inc.asp. The root cause is insufficient filtering of content within the [img] tag, allowing remote attackers to execute script in other users’ browsers. The affected software is ASP-Nuke RC1; exploitation detail...

CVE-2002-0522

ASP-Nuke RC2 and earlier allows remote attackers to bypass authentication and gain privileges by modifying the "pseudo" cookie. The flaw is in how ASP-Nuke uses cookies for authentication, enabling cookie tampering to impersonate other users (including admin). Vendor patch status is not provided ...

CVE-2002-0523

ASP-Nuke RC2 and earlier are affected by an information disclosure vulnerability where an attacker can locally modify the user cookie and submit it to cause the server to reveal the list of currently logged-in users (or show the web root path in an error). Affected component: ASP-Nuke RC1–RC2 (co...

CVE-2002-0524

The CVE-2002-0524 entry affects ASP-Nuke RC2 and earlier . The vulnerability arises from error messages that disclose the server’s absolute path when attackers trigger two conditions: (1) calling database-inc.asp with incorrect cookies, or (2) calling Post.asp with certain arguments. This results...

CVE-2002-0525

The CVE-2002-0525 entry corresponds to a format string vulnerability in INN components (inews or rnews) affecting INN 2.2.3 and earlier. The underlying issue is format string specifiers in NNTP (NTTP) responses, which could allow a local user or a remote malicious NNTP server to gain privileges. ...

CVE-2002-0528

CVE-2002-0528 affects Watchguard SOHO firewall 5.0.35. After upgrading to 5.0.35, the device unpredictably disables certain IP restrictions configured for customized services, enabling remote attackers to bypass the intended access control rules. Root cause described as upgrade-related misbehavio...

CVE-2002-0529

The CVE-2002-0529 entry concerns HP Photosmart printer driver for Mac OS X. The vulnerability arises because the hp_imaging_connectivity program and the hp_imaging_connectivity.app directory are installed with world-writable permissions, enabling a local user to replace the executable with a Troj...

CVE-2002-0530

CVE-2002-0530 is a cross-site scripting vulnerability in Novell Web Search 2.0.1 that allows remote attackers to execute arbitrary script as other Web Search users via the search parameter. The NVD entry lists a CVSS v2 base score of 5.1 (Network, High attack complexity, no authentication, Partia...

CVE-2002-0534

CVE-2002-0534 affects PostBoard 2.0.1 and earlier, where BBCode handling in [code] tags allows remote attackers to trigger a denial of service (CPU consumption) and corrupt the database. The underlying cause is improper processing of null characters (�) in code blocks. Impact is limited to DoS an...

CVE-2002-0535

CVE-2002-0535 covers cross-site scripting in PostBoard 2.0.1 and earlier. The vulnerability enables remote attackers to execute script in the context of other users via (1) an IMG tag when BBCode is enabled, or (2) in a topic title. Documents confirm affected software/version and the underlying a...

CVE-2002-0540

The CVE-2002-0540 issue affects Nortel CVX 1800, where the device is deployed with a default SNMP community string (public). A specially crafted SNMP walk can disclose administrator usernames and passwords and allow modification of CVX configuration, enabling partially read and write access to se...

CVE-2002-0544

CVE-2002-0544 affects Aprelium Abyss Web Server (abyssws) before 1.0.3. The administrative console password is stored in plaintext in the abyss.conf file, allowing local users who can access the file to gain privileges. The connected documents provide the vulnerability description but do not spec...

CVE-2002-0548

CVE-2002-0548 affects Anthill. The vulnerability allows remote attackers to bypass authentication and file bug reports by directly accessing postbug.php instead of enterbug.php. Public references confirm the authentication bypass and report filing path. The connected EUVD and CVE sources corrobor...

CVE-2002-0549

CVE-2002-0549 involves cross-site scripting vulnerabilities in Anthill that allow remote attackers to execute scripts as other Anthill users. The NVD entry provides a CVSS v2 base score of 7.5 (HIGH) with network attack vector, low attack complexity, no authentication, and partial impact to confi...

CVE-2002-0551

CVE-2002-0551 describes a cross-site scripting vulnerability in Dynamic Guestbook 3.0. The issue allows remote attackers to cause client-side execution of code when users access guestbook pages with the parameters name, mail, or kommentar. The CVSS v2 base score is 7.5 (HIGH), with network attack...