CVE-2002-0252

Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute arbitrary code via a response containing a long Content-Type MIME header...

CVE-2002-0281

Cross-site scripting vulnerability in DCP-Portal 4.2 and earlier allows remote attackers to gain privileges of other portal users by providing Javascript in the job information field to userupdate.php...

CVE-2002-0320

CVE-2002-0320: Buffer overflow in Yahoo! Messenger 5.0 allows a remote attacker to cause a denial of service and possibly execute arbitrary code via a long message or the IMvironment field. The CERT advisories specify a remotely exploitable overflow in the message field and in the IMvironment fie...

CVE-2002-0283

CVE-2002-0283 affects Windows XP where an attacker can induce CPU consumption (DoS) by sending a flood of TCP SYN packets with possibly malformed data to port 445 (SMB). This is a network-vector, low-complexity attack requiring no authentication, with the impact described as partial availability....

CVE-2002-0291

Dino's Webserver 1.2 is affected by CVE-2002-0291. The vulnerability allows remote attackers to cause a denial of service (CPU consumption) and potentially execute arbitrary code by sending several large HTTP requests in a short period. The commonly cited impact is partial availability compromise...

CVE-2002-0307

The CVE-2002-0307 vulnerability affects Avenger's News System (ANS) versions 2.11 and earlier, specifically in the script file ans.pl. The flaw is a directory traversal via the p parameter, allowing an attacker to read arbitrary files and, by feeding content to Perl’s eval, potentially execute co...

CVE-2002-0271

CVE-2002-0271 affects the GNU Ada compiler (GNAT) versions 3.12p through 3.14p. The issue arises from a symlink attack on temporary files, allowing local users to modify files belonging to other users. The resulting impact is limited to integrity (partial) and requires local access; no remote or ...

CVE-2002-0324

Greymatter 1.21c and earlier with the Bookmarklet feature enabled is affected. The vulnerability allows remote attackers to read a cleartext password and gain administrative privileges by guessing the name of a gmrightclick-*.reg file that contains the administrator name and password in cleartext...

CVE-2002-0297

The CVE-2002-0297 entry applies to ScriptEase MiniWeb Server 0.95, where a buffer overflow in URL handling during HTTP requests can lead to a denial of service and may allow arbitrary code execution. Impact is described as availability impact (DoS) with potential code execution, but exploitation ...

CVE-2002-0281

CVE-2002-0281 concerns a cross-site scripting vulnerability in DCP-Portal 4.2 and earlier . The root cause is that an attacker can inject JavaScript in the job information field submitted to the endpoint user_update.php , potentially allowing escalation of privileges to other portal users. The in...

CVE-2002-0306

CVE-2002-0306 affects Avenger's News System (ANS) up to version 2.11. The flaw allows remote attackers to execute arbitrary commands by supplying shell metacharacters in the p (plugin) parameter of ans.pl. This is a command‑injection vulnerability impacting the plugin parameter, with the NVD indi...

CVE-2002-0308

Affected software : AdMentor (2.11). Vulnerability : admin.asp authentication bypass via SQL injection on the Login and Password arguments. Root cause : improper input handling in the login routine enabling SQL injection. Impact : remote attacker can bypass authentication and gain privileges. Exp...

CVE-2002-0333

CVE-2002-0333 affects xtell/xtelld prior to 2.7 and 1.91.1 and allows directory traversal via a .. in the TTY argument. The vulnerability lets remote attackers read files with short names, and local users read more files through a short-name symlink. Impact described in public records includes cr...

CVE-2002-0288

Phusion web server 1.0 contains a directory traversal vulnerability (CVE-2002-0288) that allows remote attackers to read arbitrary files via a malformed HTTP request containing a ... sequence. Affected software: Phusion web server 1.0. Root cause: improper handling of path traversal in HTTP reque...

CVE-2002-0230

CVE-2002-0230 covers a cross-site scripting (XSS) flaw in Faq-O-Matic’s fom.cgi (v2.712) that allows an attacker to inject arbitrary Javascript on other clients via the cmd parameter. Multiple connected sources corroborate an XSS issue in Faq-O-Matic, with OpenVAS and Tenable plugins referencing ...

CVE-2002-0201

CVE-2002-0201 affects Cyberstop Web Server for Windows 0.1. The vulnerability is in the HTTP GET request handling and could allow a buffer overflow, enabling remote attackers to cause a denial of service and may potentially execute arbitrary code. The available sources indicate remote exploitatio...

CVE-2002-0289

The CVE-2002-0289 issue affects the Phusion web server 1.0 and is caused by a buffer overflow in processing a long HTTP request. This vulnerability can enable a remote attacker to cause a denial of service and to execute arbitrary code on affected systems. The available sources (NVD/CVE entries) ...

CVE-2002-0244

The CVE-2002-0244 entry concerns a directory traversal vulnerability in the chroot function of the AtheOS 0.3.7 environment, where an attacker can escape jail confines via a .. segment in the pathname passed to chdir. Affected software: AtheOS 0.3.7. Root cause: improper handling of relative path...

CVE-2002-0240

CVE-2002-0240 affects PHP when deployed with Apache and configured to serve index.php by default. The vulnerability allows remote attackers to learn the server’s full pathname via the HTTP OPTIONS method, leaking a partial confidentiality breach (PARTIAL) without impact to integrity/availability,...

CVE-2002-0277

CVE-2002-0277 affects Add2it Mailman Free versions 1.73 and earlier. The vulnerability allows remote attackers to execute arbitrary commands by supplying shell metacharacters in the list parameter. This is evidenced by the NVD entry and associated descriptions. The connected documents confirm the...