CVE-2002-0256

CVE-2002-0256 affects the Telnet service of the Arescom NetDSL 1000 router. Affected component: Telnet port. Root cause: remote attackers can trigger a denial-of-service by sending a sequence of connections containing long strings, causing a large number of login failures and stopping the Telnet ...

CVE-2002-0257

CVE-2002-0257 affects MakeBid Auction Deluxe 3.30 and is a cross-site scripting vulnerability in Auction Deluxe’s auction.pl. The issue allows remote attackers to read other users’ data via multiple form fields (TITLE, DESCTIT, DESC, searchstring, ALIAS, EMAIL, ADDRESS1-3, PHONE1-4). The NASL ent...

CVE-2002-0258

Merak Mail IceWarp Web Mail uses a static user session ID that does not change across sessions. This could allow remote attackers who obtain the session ID to elevate privileges as the targeted user (e.g., via IDs exposed in answers or forward URLs). Affected product: Merak Mail IceWarp Web Mail....

CVE-2002-0259

CVE-2002-0259 affects InstantServers MiniPortal 1.1.5 and earlier. The vulnerability arises from storing sensitive login/account data in plaintext in (1) .pwd files under miniportal/apache, and (2) mplog.txt, enabling local users to gain privileges. Details in connected records confirm the file p...

CVE-2002-0261

CVE-2002-0261 describes a directory traversal in InstantServers MiniPortal 1.1.5 and earlier. A remote authenticated user can read arbitrary files by using a modified dot dot (.. ) in the GET request, exposing sensitive files. The connected documents corroborate this description. No explicit reme...

CVE-2002-0262

CVE-2002-0262 describes a directory traversal vulnerability in the netget component of the Sybex E-Trainer web server . The flaw allows remote attackers to read arbitrary files by supplying a .. (dot dot) sequence in the file parameter. Documents indicate this is a known vulnerability with histor...

CVE-2002-0263

Affected product : EasyBoard 2000 1.27 (EZboard). Vulnerability : buffer overflow in the handling of multipart Content-Type headers enables remote code execution by sending a long boundary value to one of three CGI scripts: ezboard.cgi, ezman.cgi, or ezadmin.cgi. Cause : overflow in the boundary ...

CVE-2002-0268

Identix BioLogon 3 is affected. The vulnerability allows users with physical access to elevate to administrative privileges by triggering CTRL-ALT-DEL and invoking a Browse function that launches Explorer with SYSTEM privileges. The issue is described with a CVSSv2 base score of 7.2 (HIGH) and a ...

CVE-2002-0269

Summary: CVE-2002-0269 concerns Internet Explorer 5.x/6 that treats a loaded object as an HTML document even when its MIME type is text/plain, potentially enabling remote script execution in documents the user trusts not to contain executable content. What is affected: Internet Explorer 5.x and 6...

CVE-2002-0270

CVE-2002-0270 involves Opera. When the option “Determine action by MIME type” is disabled, Opera may treat an object as an HTML document even if its Content-Type is text/plain. This can allow remote attackers to execute arbitrary scripts in documents users do not expect, potentially affecting web...

CVE-2002-0271

CVE-2002-0271 affects the GNU Ada compiler (GNAT) versions 3.12p through 3.14p. The issue arises from a symlink attack on temporary files, allowing local users to modify files belonging to other users. The resulting impact is limited to integrity (partial) and requires local access; no remote or ...

CVE-2002-0272

The CVE-2002-0272 issue affects mpg321 before 0.2.9, with a buffer overflow in the network streaming code. A long URL can be crafted via (1) a command line option, (2) an HTTP request, or (3) an FTP request to trigger arbitrary code execution. The vulnerability is exploitable locally or remotely ...

CVE-2002-0273

CVE-2002-0273 affects NetWin CWMail.exe prior to version 2.8a. The vulnerability is a buffer overflow in CWMail.exe that allows remote authenticated users to execute arbitrary code by submitting a long item parameter. This is the core impact stated across multiple sources in the connected documen...

CVE-2002-0277

CVE-2002-0277 affects Add2it Mailman Free versions 1.73 and earlier. The vulnerability allows remote attackers to execute arbitrary commands by supplying shell metacharacters in the list parameter. This is evidenced by the NVD entry and associated descriptions. The connected documents confirm the...

CVE-2002-0278

CVE-2002-0278: Directory traversal vulnerability in Add2it Mailman Free 1.73 and earlier enables remote attackers to modify arbitrary files via a .. in the list parameter. Affected product: Add2it Mailman Free (version 1.73 and earlier). Root cause: improper handling of directory traversal in the...

CVE-2002-0279

CVE-2002-0279 affects HP-UX 11.11 on HP 9000 servers, where the kernel incorrectly supplies arguments to setrlimit. This could let a local attacker cause a kernel panic (DoS) and potentially gain privileges. HP’s security bulletin #0183 recommends applying patch PHKL_26233 (and reboot) for affect...

CVE-2002-0280

The connected records confirm CVE-2002-0280 affects CodeBlue 4 and earlier, with a buffer overflow that allows remote attackers to execute arbitrary code via a long string in an SMTP reply. The impact is described as remote code execution with partial confidentiality/integrity/availability impact...

CVE-2002-0281

CVE-2002-0281 concerns a cross-site scripting vulnerability in DCP-Portal 4.2 and earlier . The root cause is that an attacker can inject JavaScript in the job information field submitted to the endpoint user_update.php , potentially allowing escalation of privileges to other portal users. The in...

CVE-2002-0282

DCP-Portal versions 3.7–4.5 contain an information disclosure vulnerability that allows remote attackers to obtain the server’s physical path. The issue occurs when an empty request to add_user.php is made, or via an invalid new_language parameter in contents.php, categories.php, or files.php, ca...

CVE-2002-0283

CVE-2002-0283 affects Windows XP where an attacker can induce CPU consumption (DoS) by sending a flood of TCP SYN packets with possibly malformed data to port 445 (SMB). This is a network-vector, low-complexity attack requiring no authentication, with the impact described as partial availability....