CVE-2002-0206

index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by specifying a URL to the malicious code in the file parameter...

CVE-2002-0291

Dino's Webserver 1.2 allows remote attackers to cause a denial of service CPU consumption and possibly execute arbitrary code via several large HTTP requests within a short time...

CVE-2002-0236

Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote attackers to bypass authentication via a direct HTTP request to the VsSetCookie.exe program, which returns a valid cookie for the desired user...

CVE-2002-0219

Buffer overflow in 1 sastcpd in SAS/Base 8.0 and 8.1 or 2 objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via large command line argument...

CVE-2002-0354

The XMLHttpRequest object XMLHTTP in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files and list directories on a client system by opening a URL that redirects the browser to the file on the client, then reading the result using the responseText property...

CVE-2002-0305

CVE-2002-0305 concerns the Zero One Tech (ZOT) P100s print server, which does not properly disable the SNMP service or change the default password. The underlying issue allows potential unauthorized access without administrator awareness, as described in the NVD entry. The impact is described as ...

CVE-2002-0345

Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, enabling privilege escalation if an attacker accesses the registry. The CVE-2002-0345 entry documents this plaintext credential storage as the underlying issue with a base impact of partial confide...

CVE-2002-0312

CVE-2002-0312 describes a directory traversal vulnerability in Essentia Web Server 2.1 that allows remote attackers to read arbitrary files by using a .. in the URL. The vulnerability affects the server’s handling of path traversal and can expose sensitive files from the server filesystem. The pr...

CVE-2002-0254

CVE-2002-0254 affects ICQ 2001b Build 3659. The vulnerability allows a remote attacker to cause a denial-of-service (crash) by supplying a malformed picture containing abnormally large height and width values, which triggers the crash when the image is viewed in Userdetails. The available records...

CVE-2002-0347

The CVE-2002-0347 entry concerns a directory traversal vulnerability in the Cobalt RAQ 4 web server. An attacker can leverage a .. (dot dot) in an HTTP request to read files, including password-protected files, and potentially access files outside the web root. The issue is described in the NVD e...

CVE-2002-0203

CVE-2002-0203 affects Tarantella Enterprise where the CGI ttawebtop.cgi in versions 3.0x–3.20 (and 3.11.903) on SPARC Solaris and Linux allows remote attackers to view directory contents by supplying an empty pg parameter. The root cause is an unprotected handling of the pg parameter in ttawebtop...

CVE-2002-0198

CVE-2002-0198 describes a buffer overflow in plDaniels ripMime 1.2.6 and earlier , used in programs like xamime and inflex , that allows remote code execution via an attachment in a long filename . The root cause is a buffer overflow in handling long filenames. Impact is described as execution of...

CVE-2002-0350

CVE-2002-0350 affects HP Procurve Switch 4000M running firmware C.08.22 and C.09.09. The issue allows a remote attacker to trigger a denial of service by port scanning the management IP address, resulting in the telnet service being disabled. The vulnerability is described in multiple sources (NV...

CVE-2002-0224

MSDTC DoS (CVE-2002-0224) affects Microsoft Windows 2000, IIS 5.x, and SQL Server up to 2000. A DoS can be triggered by sending malformed input to the MSDTC service, potentially causing crashes or hangs. OpenVAS/Nessus refer to MS02-018 as the patch that mitigates related issues; applying that pa...

CVE-2002-0353

Concrete details found: CVE-2002-0353 affects Ethereal 0.9.2 and earlier, stemming from the ASN.1 parser, enabling remote denial of service via a malformed packet that triggers improper memory allocation (possibly due to zero-length fields). Public advisories reference multiple vendors (Debian, R...

CVE-2002-0243

CVE-2002-0243 describes a cross-site scripting vulnerability in Opera 6.0 and earlier. An Extended HTML Form output from the remote server is not properly cleansed, allowing remote attackers to execute arbitrary script. The NVD record lists a base score of 7.5 (HIGH) with NETWORK attack vector an...

CVE-2002-0279

CVE-2002-0279 affects HP-UX 11.11 on HP 9000 servers, where the kernel incorrectly supplies arguments to setrlimit. This could let a local attacker cause a kernel panic (DoS) and potentially gain privileges. HP’s security bulletin #0183 recommends applying patch PHKL_26233 (and reboot) for affect...

CVE-2002-0314

Technical details about CVE-2002-0314 are not publicly available in the provided connected documents; the materials here only reiterate the generic description from the NVD listings. Monitor for updates.

CVE-2002-0247

The CVE-2002-0247 entry concerns the wmtv package (

CVE-2002-0304

Lil HTTP Server 2.1 is affected by a path traversal vulnerability that lets remote attackers read password-protected files by including a /./ sequence in the HTTP request. The available documents confirm the affected product and the vulnerable behavior but do not provide details on attacker explo...