CVE-2002-0310

CVE-2002-0310 affects Netwin WebNews 1.1k CGI. The issue arises from default usernames and cleartext passwords that cannot be deleted by the administrator, enabling remote attackers to gain privileges using the listed credential pairs (testweb/newstest, alwn3845/imaptest, alwi3845/wtest3452, test...

CVE-2002-0280

The connected records confirm CVE-2002-0280 affects CodeBlue 4 and earlier, with a buffer overflow that allows remote attackers to execute arbitrary code via a long string in an SMTP reply. The impact is described as remote code execution with partial confidentiality/integrity/availability impact...

CVE-2002-0238

CVE-2002-0238 affects the web administration interface of NetGear RT314 and RT311 Gateway Routers. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to cause script execution in a user’s browser by providing a malicious URL. The CVSS-like metrics indicate network...

CVE-2002-0245

Lotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to 1 determine the physical path of the server via a request for a nonexistent file with a .pl Perl extension, which leaks the pathname in the error message, or 2 make any request that causes an HTTP 500 error, which leaks th...

CVE-2002-0346

Technical details about CVE-2002-0346 are not publicly provided in the supplied documents. The connected EUVD/OpenVAS entries reference the CVE but do not disclose affected products, versions, root cause, or remediation. Monitor for updates.

CVE-2002-0351

CVE-2002-0351 affects the CFS daemon (cfsd) and is caused by buffer overflows in the daemon. The vulnerability allows a remote attacker to cause a denial of service and possibly execute arbitrary code, with affected versions including cfsd before 1.3.3-8.1 and 1.4.x before 1.4.1-5. Remediation is...

CVE-2002-0326

The CVE-2002-0326 entry concerns a cross-site scripting vulnerability in BadBlue prior to version 1.6.1 beta. The issue allows remote attackers to run arbitrary script via a URL containing Javascript, enabling partial confidentiality/ integrity/ availability impact as described in the NVD metrics...

CVE-2002-0198

Buffer overflow in plDaniels ripMime 1.2.6 and earlier, as used in other programs such as xamime and inflex, allows remote attackers to execute arbitrary code via an attachment in a long filename...

CVE-2002-0273

Buffer overflow in CWMail.exe in NetWin before 2.8a allows remote authenticated users to execute arbitrary code via a long item parameter...

CVE-2002-0231

Product/affected version: mIRC up to and including 5.91. Vulnerability: Buffer overflow in the nickname handling. Impact: Remote code execution on the client when a long nickname is processed by a remote server. Root cause: Overflow in nickname parsing leads to arbitrary code execution. Exploitat...

CVE-2002-0348

CVE-2002-0348: The vulnerability affects Cobalt RAQ 4, where service.cgi is susceptible to a long argument leading to remote denial of service and potential arbitrary code execution. The available sources describe the issue framework (remote access via network, low complexity, partial confidentia...

CVE-2002-0352

Phorum 3.3.2 is vulnerable to an information-disclosure issue in stats.php that allows remote attackers to determine the email addresses of the 10 most active users via an unauthenticated direct HTTP request. The root cause is the lack of authentication for stats.php, enabling access to user-iden...

CVE-2002-0262

CVE-2002-0262 describes a directory traversal vulnerability in the netget component of the Sybex E-Trainer web server . The flaw allows remote attackers to read arbitrary files by supplying a .. (dot dot) sequence in the file parameter. Documents indicate this is a known vulnerability with histor...

CVE-2002-0200

The CVE-2002-0200 entry concerns Cyberstop Web Server for Windows 0.1. Affected: the HTTP handling of the server. Root cause: an HTTP request for an MS-DOS device name (e.g., CON\CON, AUX.*) can trigger a denial of service by freezing/rebooting Windows. Impact: Partial availability loss as the se...

CVE-2002-0321

Yahoo! Messenger 5.0 is affected by a vulnerability that lets a remote attacker spoof another user’s name in messages, enabling social engineering or a denial-of-service via flooding. The issue arises from the ability to modify the source username used in messages. Impact is described as potentia...

CVE-2002-0228

CVE-2002-0228 affects Microsoft MSN Messenger. The vulnerability allows remote attackers to use Javascript referencing an ActiveX object to obtain sensitive information (e.g., display names, web site navigation) when the user is connected to certain Microsoft sites or DNS-spoofed sites. OpenVAS/O...

CVE-2002-0311

Vulnerability in webtop in UnixWare 7.1.1 and Open UNIX 8.0.0 allows local and possibly remote attackers to gain root privileges via shell metacharacters in the -c argument for 1 in scoadminreg.cgi or 2 serviceaction.cgi...

CVE-2002-0331

CVE-2002-0331 describes a directory traversal vulnerability in the HTTP server of BPM Studio Pro 4.2, enabling remote attackers to read arbitrary files by using a dot-dot sequence in the HTTP request. Per the provided records, the impact is listed as confidentiality: none , integrity: partial , a...

CVE-2002-0233

The CVE-2002-0233 entry concerns the eshare Expressions 4 Web server. The vulnerability is a directory traversal flaw that allows an attacker to read arbitrary files by using a .. (dot dot) in an HTTP request. Affected component: the web server’s request handling. Underlying cause: improper valid...

CVE-2002-0215

Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi file by requesting a non-existent .html file, which leaks the pathname in an error message...