CVE-2002-0333

CVE-2002-0333 affects xtell/xtelld prior to 2.7 and 1.91.1 and allows directory traversal via a .. in the TTY argument. The vulnerability lets remote attackers read files with short names, and local users read more files through a short-name symlink. Impact described in public records includes cr...

CVE-2002-0334

CVE-2002-0334 affects xtell/xtelld; vulnerable are xtell 1.91.1 and earlier, and 2.x before 2.7. The issue is a local symlink attack on the temporary .xtell-log file that allows local users to modify files. OpenVAS/Nessus entries confirm Debian/DSA advisories; remediation involves upgrading to fi...

CVE-2002-0336

CVE-2002-0336 describes a buffer overflow in Galacticomm Worldgroup FTP server 3.20 and earlier. The issue can be triggered by a LIST command containing a large number of /, *, and .. characters, enabling remote attackers to cause a denial of service and potentially execute arbitrary code. The pr...

CVE-2002-0337

The CVE-2002-0337 entry concerns RealPlayer 8 and a denial-of-service condition triggered by processing malformed MP3 files. The vulnerability allows a remote attacker to induce high CPU usage, leading to service disruption. Affected software is RealPlayer 8; the exact component/file and root cau...

CVE-2002-0338

The CVE-2002-0338 issue affects The Bat! mail client, specifically version 1.53d and 1.54beta (and possibly others). A remote attacker can trigger a denial of service (crash) by sending an attachment whose filename includes an MS-DOS device name. The available references confirm the consequence a...

CVE-2002-0340

CVE-2002-0340 concerns Windows Media Player (WMP) 8.00.00.4477 and potentially other versions, where the player can automatically detect and execute .wmf and similar content even if the file extension or content type does not indicate .wmf. This behavior could enable attackers to trigger unauthor...

CVE-2002-0341

CVE-2002-0341 affects GroupWise Web Access 5.5 (GWWEB.EXE) where an HTTP request with an invalid HTMLVER parameter can disclose information about the remote host. OpenVAS details extend this to potential local-file read access via the GroupWise Web Interface, indicating information disclosure on ...

CVE-2002-0342

Kmail 1.2 on KDE 2.1.1 is affected by a vulnerability that allows remote attackers to cause a denial-of-service (crash) by sending an email with a body of about 55 KB. The available sources confirm the affected product and the nature of the impact (availability impact: crash) but do not provide a...

CVE-2002-0343

CVE-2002-0343 affects Hotline Client 1.8.5, where passwords and other sensitive user data are stored in plaintext in the bookmarks file. The underlying issue is plaintext storage accessible to local users, enabling privilege escalation by extracting passwords from the bookmarks file. Impact is de...

CVE-2002-0345

Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, enabling privilege escalation if an attacker accesses the registry. The CVE-2002-0345 entry documents this plaintext credential storage as the underlying issue with a base impact of partial confide...

CVE-2002-0346

Technical details about CVE-2002-0346 are not publicly provided in the supplied documents. The connected EUVD/OpenVAS entries reference the CVE but do not disclose affected products, versions, root cause, or remediation. Monitor for updates.

CVE-2002-0349

CVE-2002-0349 affects Tiny Personal Firewall (TPF) 2.0.15. In certain configurations, it can pop up an alert to the system even when the screen is locked, which could allow a physically proximate attacker to hide activities or bypass access restrictions. The provided connected documents describe ...

CVE-2002-0350

CVE-2002-0350 affects HP Procurve Switch 4000M running firmware C.08.22 and C.09.09. The issue allows a remote attacker to trigger a denial of service by port scanning the management IP address, resulting in the telnet service being disabled. The vulnerability is described in multiple sources (NV...

CVE-2002-0351

CVE-2002-0351 affects the CFS daemon (cfsd) and is caused by buffer overflows in the daemon. The vulnerability allows a remote attacker to cause a denial of service and possibly execute arbitrary code, with affected versions including cfsd before 1.3.3-8.1 and 1.4.x before 1.4.1-5. Remediation is...

CVE-2002-0352

Phorum 3.3.2 is vulnerable to an information-disclosure issue in stats.php that allows remote attackers to determine the email addresses of the 10 most active users via an unauthenticated direct HTTP request. The root cause is the lack of authentication for stats.php, enabling access to user-iden...

CVE-2002-0353

Concrete details found: CVE-2002-0353 affects Ethereal 0.9.2 and earlier, stemming from the ASN.1 parser, enabling remote denial of service via a malformed packet that triggers improper memory allocation (possibly due to zero-length fields). Public advisories reference multiple vendors (Debian, R...

CVE-2002-0354

The CVE-2002-0354 issue concerns the XMLHttpRequest (XMLHTTP) object in Netscape 6.1 and Mozilla 0.9.7. It permits remote attackers to read arbitrary files and list directories on a client by directing the browser to a file via a URL redirect and then reading the result through responseText. This...

CVE-2002-0199

The CVE-2002-0199 entry concerns Nullsoft Shoutcast Server 1.8.3 and specifically the admin.cgi component. The vulnerability is a buffer overflow triggered by an argument containing a large number of backslashes, allowing a remote attacker to cause a denial of service and, per some sources, poten...

CVE-2002-0200

The CVE-2002-0200 entry concerns Cyberstop Web Server for Windows 0.1. Affected: the HTTP handling of the server. Root cause: an HTTP request for an MS-DOS device name (e.g., CON\CON, AUX.*) can trigger a denial of service by freezing/rebooting Windows. Impact: Partial availability loss as the se...

CVE-2002-0201

CVE-2002-0201 affects Cyberstop Web Server for Windows 0.1. The vulnerability is in the HTTP GET request handling and could allow a buffer overflow, enabling remote attackers to cause a denial of service and may potentially execute arbitrary code. The available sources indicate remote exploitatio...