CVE-2002-0222

The CVE-2002-0222 entry concerns Etype Eserv 2.97, where the PORT command enables an FTP bounce attack. An attacker can redirect data connections to arbitrary hosts, potentially affecting confidentiality, integrity, and availability. The NVD notes a network-accessible, low-complexity exploit with...

CVE-2002-0204

CVE-2002-0204 : Buffer overflow in GNU Chess (gnuchess) 5.02 and earlier. When modified or used in a networked capacity contrary to its single‑user design, it may allow local or remote attackers to execute arbitrary code via a long command. The vulnerability is described in the NVD entry; no fixe...

CVE-2002-0199

The CVE-2002-0199 entry concerns Nullsoft Shoutcast Server 1.8.3 and specifically the admin.cgi component. The vulnerability is a buffer overflow triggered by an argument containing a large number of backslashes, allowing a remote attacker to cause a denial of service and, per some sources, poten...

CVE-2002-0268

Identix BioLogon 3 is affected. The vulnerability allows users with physical access to elevate to administrative privileges by triggering CTRL-ALT-DEL and invoking a Browse function that launches Explorer with SYSTEM privileges. The issue is described with a CVSSv2 base score of 7.2 (HIGH) and a ...

CVE-2002-0311

CVE-2002-0311 describes a vulnerability in WebTop on UnixWare 7.1.1 and Open UNIX 8.0.0 where local and possibly remote attackers can gain root privileges by supplying shell metacharacters in the -c argument of the CGI scripts scoadminreg.cgi or service_action.cgi. The affected components are the...

CVE-2002-0296

The CVE-2002-0296 issue affects Tarantella Enterprise 3, where local users can overwrite arbitrary files through a symlink attack on the spinning temporary file. Root cause: improper handling of temporary files enabling a symlink-based overwrite. Impact: local/x local user access with partial int...

CVE-2002-0263

Affected product : EasyBoard 2000 1.27 (EZboard). Vulnerability : buffer overflow in the handling of multipart Content-Type headers enables remote code execution by sending a long boundary value to one of three CGI scripts: ezboard.cgi, ezman.cgi, or ezadmin.cgi. Cause : overflow in the boundary ...

CVE-2002-0215

Agora.cgi versions 3.2r through 4.0 in debug mode disclose the full pathname of the agora.cgi file when a non-existent .html file is requested, enabling remote disclosure of server file paths. This is an information disclosure vulnerability in the web application component. The affected component...

CVE-2002-0285

Outlook Express 5.5 and 6.0 on Windows is affected. A CR in a message header is treated as a valid CR/LF, allowing header splitting that can bypass virus protection and other filters by sending a mail message whose headers contain only the CR, which causes Outlook to create separate headers. Root...

CVE-2002-0206

The CVE-2002-0206 issue affects PHP-Nuke: index.php may include a URL to remote code via the file parameter, enabling remote arbitrary PHP code execution on servers running PHP-Nuke 5.3.1 and earlier (and possibly versions before 5.5). Root cause is PHP’s include() reading a URL without validatin...

CVE-2002-0202

CVE-2002-0202 affects PaintBBS 1.2. The vulnerability arises from insecure permissions on installed files/directories, enabling local users to access the encrypted server password via the world-readable oekakibbs.conf and to modify the server configuration through the world-writable /oekaki/ dire...

CVE-2002-0336

CVE-2002-0336 describes a buffer overflow in Galacticomm Worldgroup FTP server 3.20 and earlier. The issue can be triggered by a LIST command containing a large number of /, *, and .. characters, enabling remote attackers to cause a denial of service and potentially execute arbitrary code. The pr...

CVE-2002-0325

CVE-2002-0325 describes a directory traversal vulnerability in BadBlue prior to 1.6.1 that allows remote attackers to read arbitrary files via a modified dot-dot sequence in the URL. The vulnerability is confirmed in multiple sources (NVD and CVE listings) and is categorized with medium severity ...

CVE-2002-0227

KICQ 2.0.0b1 is affected by a remote denial-of-service via a malformed message. The provided sources state that sending a malformed message can cause the application to crash, indicating a network-accessible trigger without required authentication. The exact root cause, vulnerable component, affe...

CVE-2002-0214

CVE-2002-0214 affects the Compaq Intel PRO/Wireless 2011B LAN USB Device Driver versions 1.5.16.0–1.5.18.0. The root cause is that the 128-bit WEP key is stored in plaintext in a registry key with weak permissions, allowing local users to read the key and decrypt network traffic. The vulnerabilit...

CVE-2002-0288

Directory traversal vulnerability in Phusion web server 1.0 allows remote attackers to read arbitrary files via a ... triple dot dot in the HTTP request...

CVE-2002-0277

Add2it Mailman Free 1.73 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the list parameter...

CVE-2002-0347

Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. dot dot in an HTTP request...

CVE-2002-0259

InstantServers MiniPortal 1.1.5 and earlier stores sensitive login and account data in plaintext in 1 .pwd files in the miniportal/apache directory, or 2 mplog.txt, which could allow local users to gain privileges...

CVE-2002-0340

Windows Media Player WMP 8.00.00.4477, and possibly other versions, automatically detects and executes .wmf and other content, even when the file's extension or content type does not specify .wmf, which could make it easier for attackers to conduct unauthorized activities via Trojan horse files...