CVE-2002-0272

The CVE-2002-0272 issue affects mpg321 before 0.2.9, with a buffer overflow in the network streaming code. A long URL can be crafted via (1) a command line option, (2) an HTTP request, or (3) an FTP request to trigger arbitrary code execution. The vulnerability is exploitable locally or remotely ...

CVE-2002-0346

Technical details about CVE-2002-0346 are not publicly provided in the supplied documents. The connected EUVD/OpenVAS entries reference the CVE but do not disclose affected products, versions, root cause, or remediation. Monitor for updates.

CVE-2002-0256

CVE-2002-0256 affects the Telnet service of the Arescom NetDSL 1000 router. Affected component: Telnet port. Root cause: remote attackers can trigger a denial-of-service by sending a sequence of connections containing long strings, causing a large number of login failures and stopping the Telnet ...

CVE-2002-0349

CVE-2002-0349 affects Tiny Personal Firewall (TPF) 2.0.15. In certain configurations, it can pop up an alert to the system even when the screen is locked, which could allow a physically proximate attacker to hide activities or bypass access restrictions. The provided connected documents describe ...

CVE-2002-0354

The CVE-2002-0354 issue concerns the XMLHttpRequest (XMLHTTP) object in Netscape 6.1 and Mozilla 0.9.7. It permits remote attackers to read arbitrary files and list directories on a client by directing the browser to a file via a URL redirect and then reading the result through responseText. This...

CVE-2002-0225

Tac_plus Tacacs+ daemon F4.0.4.alpha (originally Cisco) is vulnerable because the accounting directive creates files with world-readable and world-writable permissions, allowing local users to access and modify sensitive files. Affected component: tac_plus Tacacs+ daemon; root cause: insecure fil...

CVE-2002-0308

Affected software : AdMentor (2.11). Vulnerability : admin.asp authentication bypass via SQL injection on the Login and Password arguments. Root cause : improper input handling in the login routine enabling SQL injection. Impact : remote attacker can bypass authentication and gain privileges. Exp...

CVE-2002-0253

PHP, when not configured with the "displayerrors = Off" setting in php.ini, allows remote attackers to obtain the physical path for an include file via a trailing slash in a request to a directly accessible PHP program, which modifies the base path, causes the include directive to fail, and...

CVE-2002-0201

CVE-2002-0201 affects Cyberstop Web Server for Windows 0.1. The vulnerability is in the HTTP GET request handling and could allow a buffer overflow, enabling remote attackers to cause a denial of service and may potentially execute arbitrary code. The available sources indicate remote exploitatio...

CVE-2002-0232

Directory traversal vulnerability in Multi Router Traffic Grapher MRTG allows remote attackers to read portions of arbitrary files via a .. dot dot in the cfg parameter for 1 14all.cgi, 2 14all-1.1.cgi, 3 traffic.cgi, or 4 mrtg.cgi...

CVE-2002-0319

Cross-site scripting vulnerability in edituser.php for pforum 1.14 and earlier allows remote attackers to execute script and steal cookies from other users via Javascript in a username...

CVE-2002-0244

The CVE-2002-0244 entry concerns a directory traversal vulnerability in the chroot function of the AtheOS 0.3.7 environment, where an attacker can escape jail confines via a .. segment in the pathname passed to chdir. Affected software: AtheOS 0.3.7. Root cause: improper handling of relative path...

CVE-2002-0297

The CVE-2002-0297 entry applies to ScriptEase MiniWeb Server 0.95, where a buffer overflow in URL handling during HTTP requests can lead to a denial of service and may allow arbitrary code execution. Impact is described as availability impact (DoS) with potential code execution, but exploitation ...

CVE-2002-0263

Buffer overflow in EasyBoard 2000 1.27 aka EZboard allows remote attackers to execute arbitrary code via a long boundary value in a multipart Content-Type header to 1 ezboard.cgi, 2 ezman.cgi, or 3 ezadmin.cgi...

CVE-2002-0262

Directory traversal vulnerability in netget for Sybex E-Trainer web server allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2002-0304

Lil HTTP Server 2.1 allows remote attackers to read password-protected files via a /./ in the HTTP request...

CVE-2002-0289

The CVE-2002-0289 issue affects the Phusion web server 1.0 and is caused by a buffer overflow in processing a long HTTP request. This vulnerability can enable a remote attacker to cause a denial of service and to execute arbitrary code on affected systems. The available sources (NVD/CVE entries) ...

CVE-2002-0221

Etype Eserv 2.97 allows remote attackers to cause a denial of service resource exhaustion via a large number of PASV commands that consume ports 1024 through 5000, which prevents the server from accepting valid PASV...

CVE-2002-0203

ttawebtop.cgi in Tarantella Enterprise 3.20 on SPARC Solaris and Linux, and 3.1x and 3.0x including 3.11.903, allows remote attackers to view directory contents via an empty pg parameter...

CVE-2002-0279

The kernel in HP-UX 11.11 does not properly provide arguments for setrlimit, which could allow local attackers to cause a denial of service kernel panic and possibly gain privileges...