CVE-2002-0064

Funk Software Proxy Host 3.x is installed with insecure permissions for the registry and the file system...

CVE-2002-0079

Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server IIS 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code...

CVE-2002-0159

Format string vulnerability in the administration function in Cisco Secure Access Control Server ACS for Windows, 2.6.x and earlier and 3.x through 3.01 build 40, allows remote attackers to crash the CSADMIN module only denial of service of administration function or execute arbitrary code via...

CVE-2002-0167

Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service crash and possibly execute arbitrary code via certain weaknesses of NetPBM...

CVE-2002-0152

Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service crash or execute arbitrary code by invoking the file:// directive with a large number of / characters, which affects Internet Explorer 5.1, Outlook Express 5.0 through 5.0.2,...

CVE-2002-0041

Unknown vulnerability in Mail for SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, when running with the -R option, allows local and remote attackers to cause a core dump...

CVE-2002-0147

Buffer overflow in the ASP data transfer mechanism in Internet Information Server IIS 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service or execute code, aka "Microsoft-discovered variant of Chunked Encoding buffer overrun."...

CVE-2002-0177

Buffer overflows in icecast 1.3.11 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 client...

CVE-2002-0180

Buffer overflow in Webalizer 2.01-06, when configured to use reverse DNS lookups, allows remote attackers to execute arbitrary code by connecting to the monitored web server from an IP address that resolves to a long hostname...

CVE-2002-0037

Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call NSFDbReadObject that directly accesses the object...

CVE-2002-0160

The administration function in Cisco Secure Access Control Server ACS for Windows, 2.6.x and earlier and 3.x through 3.01 build 40, allows remote attackers to read HTML, Java class, and image files outside the web root via a .... modified .. in the URL to port 2002...

CVE-2002-0181

Cross-site scripting vulnerability in status.php3 for IMP 2.2.8 and HORDE 1.2.7 allows remote attackers to execute arbitrary web script and steal cookies of other IMP/HORDE users via the script parameter...

Fixed in Apache Tomcat 4.1.0

Important: Denial of service CVE-2003-0866 A malformed HTTP request can cause the request processing thread to become unresponsive. A sequence of such requests will cause all request processing threads, and hence Tomcat as a whole, to become unresponsive. Affects: 4.0.0-4.0.6 Low: Information...

DOS for Icq 2001&2002

Icq2001b & Icq2002a Denial Of Service --------------------------------------------------- If you send a malicious "contact" message, you can freeze target icq. Let's look at the contact packet taken from Massimo Melina documentation contacts-msg content is: contacts number 0xFE uin 0xFE nick 0xFE...

CVE-2002-0180

CVE-2002-0180, a buffer overflow in Webalizer when reverse DNS lookups are enabled, can allow remote code execution by connecting from an IP whose hostname resolves long. Affected versions include Webalizer prior to 2.01-10; Red Hat advisory RHSA-2002:255 fixes with Webalizer 2.01-09 backported p...

CVE-2002-0177

Summary: CVE-2002-0177 affects Icecast 1.3.11 and earlier, allowing remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 client due to a remote buffer overflow. Affected product/version: Icecast, version

Apache on Windows < 1.3.24 / 2.0.x < 2.0.34 DOS Batch File Arbitrary Command Execution

Apache for Win32 prior to 1.3.24 and 2.0.x prior to 2.0.34-beta is shipped with a default script, '/cgi-bin/test-cgi.bat', that allows an attacker to remotely execute arbitrary commands on the host subject to the permissions of the affected application. An attacker can send a pipe character '|'...

CVE-2002-0041

Unknown vulnerability in Mail for SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, when running with the -R option, allows local and remote attackers to cause a core dump...

CVE-2002-0037

Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call NSFDbReadObject that directly accesses the object...

CVE-2002-0037

CVE-2002-0037 affects Lotus Domino/Notes prior to R5.0.10. The vulnerability allows an attacker to bypass the intended Reader and Author access lists for a document’s object by using the NSFDbReadObject API call that directly accesses the object, potentially exposing object data despite document ...