CVE-2002-0212

The CVE-2002-0212 issue affects Hosting Controller 1.1–1.4.1, where login error messages differ between valid and invalid usernames, enabling remote enumeration of valid accounts and facilitating brute-force attempts. Root cause: inconsistent authentication responses revealing user existence. Imp...

CVE-2002-0341

CVE-2002-0341 affects GroupWise Web Access 5.5 (GWWEB.EXE) where an HTTP request with an invalid HTMLVER parameter can disclose information about the remote host. OpenVAS details extend this to potential local-file read access via the GroupWise Web Interface, indicating information disclosure on ...

CVE-2002-0221

CVE-2002-0221 affects Etype Eserv 2.97. The issue is caused by remote attackers sending a large number of PASV commands, exhausting ports 1024–5000 and preventing the server from accepting valid PASV connections, resulting in a denial of service. Exploit details and mitigation are not provided in...

CVE-2002-0245

CVE-2002-0245 affects Lotus Domino server 5.0.8 with NoBanner enabled. The vulnerability enables two information disclosures: (1) by requesting a non-existent file with a .pl extension, an error message reveals the server’s physical path; (2) any request that triggers an HTTP 500 error leaks the ...

CVE-2002-0315

The CVE-2002-0315 entry describes a flaw in the FastTrack P2P protocol used by KaZaA, Grokster, and Morpheus where remote attackers can spoof other users by modifying the username and network information in the message header. Affected software involves the FastTrack P2P components integrated int...

CVE-2002-0317

CVE-2002-0317 involves the Gator ActiveX component (IEGator.dll) 3.0.6.1. The vulnerability allows remote websites to install arbitrary software by specifying a Trojan Gator installation file (setup.ex_) in the src parameter, enabling a remote-initiated installation via the ActiveX control. This ...

CVE-2002-0323

comment2.jse in ScriptEase:WebServer allows remote attackers to read arbitrary files by specifying the target file as an argument in the URL...

CVE-2002-0340

CVE-2002-0340 concerns Windows Media Player (WMP) 8.00.00.4477 and potentially other versions, where the player can automatically detect and execute .wmf and similar content even if the file extension or content type does not indicate .wmf. This behavior could enable attackers to trigger unauthor...

CVE-2002-0214

Compaq Intel PRO/Wireless 2011B LAN USB Device Driver 1.5.16.0 through 1.5.18.0 stores the 128-bit WEP Wired Equivalent Privacy key in plaintext in a registry key with weak permissions, which allows local users to decrypt network traffic by reading the WEP key from the registry key...

CVE-2002-0319

CVE-2002-0319 describes a cross-site scripting vulnerability in edituser.php for pforum versions 1.14 and earlier. The issue allows remote attackers to inject JavaScript via the username, enabling them to execute script and potentially steal cookies from other users. Affected component: pforum’s ...

CVE-2002-0249

CVE-2002-0249 affects PHP for Windows when used as a standalone CGI module on Apache 2.0.28 beta, where a crafted request with malformed arguments can disclose the physical path to php.exe in error messages. Affects PHP for Windows running under Apache CGI; the issue stems from error handling tha...

CVE-2002-0242

The CVE-2002-0242 entry concerns Internet Explorer 6 and describes a cross-site scripting vulnerability where output from a remote server via an Extended HTML Form is not properly cleansed, allowing remote script execution. Affected component: Internet Explorer 6 (Extended HTML Form handling). Ro...

CVE-2002-0255

The CVE-2002-0255 entry concerns the Arescom NetDSL 800 where the default configuration does not require authentication. According to the provided documents, this enables remote attackers to cause a denial of service or reconfigure the router. No exploit details, affected firmware versions, or re...

CVE-2002-0229

CVE-2002-0229 affects PHP 3.0–4.1.0 Safe Mode. The vulnerability lets an attacker with access to the MySQL database bypass Safe Mode restrictions and read arbitrary files via LOAD DATA INFILE LOCAL SQL statements. Documented impact is partial confidentiality/read access. The connected documents c...

CVE-2002-0253

CVE-2002-0253 affects PHP: when display_errors is not Off in php.ini, remote attackers can cause a PHP program to disclose the physical path of an include file by exploiting a trailing slash, as the base path is altered and the include directive fails, leaking the path in the error message. Remed...

CVE-2002-0252

CVE-2002-0252 affects Apple QuickTime Player 5.01 and 5.02. A buffer overflow is triggered by a remote web server sending a response with a long Content-Type MIME header, allowing arbitrary code execution. The vulnerability is tied to the Content-Type handling in the RTSP/HTTP response parsing. E...

CVE-2002-0338

The CVE-2002-0338 issue affects The Bat! mail client, specifically version 1.53d and 1.54beta (and possibly others). A remote attacker can trigger a denial of service (crash) by sending an attachment whose filename includes an MS-DOS device name. The available references confirm the consequence a...

CVE-2002-0280

The connected records confirm CVE-2002-0280 affects CodeBlue 4 and earlier, with a buffer overflow that allows remote attackers to execute arbitrary code via a long string in an SMTP reply. The impact is described as remote code execution with partial confidentiality/integrity/availability impact...

CVE-2002-0238

CVE-2002-0238 affects the web administration interface of NetGear RT314 and RT311 Gateway Routers. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to cause script execution in a user’s browser by providing a malicious URL. The CVSS-like metrics indicate network...

CVE-2002-0245

Lotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to 1 determine the physical path of the server via a request for a nonexistent file with a .pl Perl extension, which leaks the pathname in the error message, or 2 make any request that causes an HTTP 500 error, which leaks th...