5356 matches found
CVE-2002-0595
The CVE-2002-0595 entry describes a buffer overflow in WebTrends Reporting Center 4.0d, specifically in WTRS_UI.EXE (WTX_REMOTE.DLL). The vulnerability can be triggered by a long HTTP GET request to the /reports/ directory, allowing remote execution of arbitrary code. Metrics indicate a Network-v...
CVE-2002-0612
FileSeek.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 head or 2 foot parameters...
CVE-2002-0612
The vulnerability CVE-2002-0612 affects FileSeek.cgi, enabling remote attackers to execute arbitrary commands through shell metacharacters in the (1) head or (2) foot parameters. The report does not specify affected products, versions, or root cause beyond shell metacharacter injection. No remedi...
CVE-2002-0560
Oracle 9i Application Server 1.0.2.x with PL/SQL module 3.0.9.8.2 exposes OWA_UTIL procedures (signature, listprint, show_query_columns) to remote attackers, enabling information disclosure. Affected component is the PL/SQL gateway (modplsql) in Oracle 9iAS; exploitation involves unauthenticated ...
CVE-2002-0521
ASP-Nuke RC2 and earlier are affected by a cross-site scripting (XSS) vulnerability. The issue arises in multiple input points: downloads.asp (name parameter), Post.asp (message parameter), and profile.asp (web site URL), allowing remote attackers to execute script in a user’s browser and potenti...
CVE-2002-0507
CVE-2002-0507 describes an authentication bypass in Microsoft Outlook Web Access (OWA) when used with RSA SecurID. Local users could bypass SecurID for a previous user by submitting multiple OWA Authentication requests using the previous user’s password, which is eventually accepted by OWA. The N...
CVE-2002-0405
Buffer overflow in Transsoft Broker FTP Server 5.0 evaluation allows remote attackers to cause a denial of service and possibly execute arbitrary code via a CWD command with a large number of . dot characters...
CVE-2002-0405
CVE-2002-0405 concerns Transsoft Broker FTP Server 5.0 evaluation. It describes a buffer overflow triggered by a CWD command containing a large number of dots, allowing remote denial of service and possibly arbitrary code execution. The provided connected documents do not include explicit exploit...
CVE-2002-0510
CVE-2002-0510 describes a fingerprinting flaw in the UDP/IP stack of Linux 2.4.x: the IP Identification field is kept at 0 for non-fragmented packets, enabling remote observers to determine if a target runs Linux. The available connected documents reiterate the Linux kernel vulnerability and refe...
CVE-2002-0540
The CVE-2002-0540 issue affects Nortel CVX 1800, where the device is deployed with a default SNMP community string (public). A specially crafted SNMP walk can disclose administrator usernames and passwords and allow modification of CVX configuration, enabling partially read and write access to se...
CVE-2002-0468
CVE-2002-0468 affects Ecartis (formerly Listar) 1.0.0 and earlier snapshots. The vulnerability arises from buffer overflows in core code paths handling command line arguments and string formatting, including potential bad uses of sprintf() in files such as core.c, moderate.c, lcgi.c, fileapi.c, c...
CVE-2002-0467
CVE-2002-0467 affects Ecartis (formerly Listar) 1.0.0 before snapshot 20020125, where buffer overflows in address_match() (mystring.c) or other functions in tolist.c allow a remote attacker to execute arbitrary code. Multiple sources (NVD entry, Debian DSA-123-1 advisory, and OpenVAS/Nessus data)...
AlienForm2 alienform.cgi Traversal Arbitrary File Manipulation
The AlienForm CGI script allows an attacker to view any file on the target computer, append arbitrary data to an existing file, and write arbitrary data to a new file. The AlienForm CGI script is installed as either af.cgi or alienform.cgi. %NASLMINLEVEL 70300 This script was written by Andrew...
Microsoft Site Server Multiple Script Information Disclosure
The remote web server seems to leak information when some pages are accessed using the account 'LDAPAnonymousUser' with the password 'LdapPassword1'. Pages which leak information include, but are not limited to : - /SiteServer/Admin/knowledge/persmbr/vs.asp -...
Xerver Web Server < 2.20 Crafted C:/ Request Remote DoS
It is possible to crash the Xerver web server by sending a long URL to its administration port. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exists Added BugtraqID and CAN From Bugtraq : Date: Fri, 8 Mar 2002 18:39:39...
CVE-2002-0273
Buffer overflow in CWMail.exe in NetWin before 2.8a allows remote authenticated users to execute arbitrary code via a long item parameter...
CVE-2002-0275
Falcon web server 2.0.0.1020 and earlier allows remote attackers to bypass authentication and read restricted files via an extra / slash in the requested URL...
CVE-2002-0282
DCP-Portal 3.7 through 4.5 allows remote attackers to obtain the physical path of the server via 1 a direct request to adduser.php, or via an invalid newlanguage parameter in 2 contents.php, 3 categories.php, or 4 files.php, which leaks the path in an error message...
CVE-2002-0298
ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service crash via certain HTTP GET requests containing 1 a %2e%2e encoded dot-dot, 2 several /../ dot dot sequences, 3 a missing URI, or 4 several ../ in a URI that does not begin with a / slash character...