5356 matches found
CVE-2002-0041
CVE-2002-0041 affects SGI Mail for IRIX 6.5 through 6.5.15f (and possibly earlier) and is triggered when the -R option is used, allowing local and remote attackers to cause a core dump. The available sources identify the affected software as Mail for SGI IRIX and describe the vulnerability as a f...
KPMG-2002009: Microsoft IIS W3SVC Denial of Service
-------------------------------------------------------------------- -=Microsoft IIS W3SVC Denial of Service=- courtesy of KPMG Denmark BUG-ID: 2002009 CVE: CAN-2002-0072 Released: 11th Apr 2002 -------------------------------------------------------------------- Problem: ======== A flaw in...
MS02-018: Microsoft IIS FTP Status Request DoS (uncredentialed check)
It was possible to make the remote FTP server crash by sending the command 'STAT ?AAAAA....AAAAA'. There is a bug in certain versions of Microsoft's FTP server that can be exploited in this fashion. Other FTP servers may also react adversely to such a string. An attacker may leverage this issue t...
CVE-2002-1598
Buffer overflows in Computer Associates MLink CA-MLink 6.5 and earlier may allow local users to execute arbitrary code via long command line arguments to 1 mlclear or 2 mllock...
CVE-2002-0165
CVE-2002-0165 concerns LogWatch 2.5, where local users could gain root privileges via a symlink attack in the logwatch temporary directory. The initial description provides the vulnerability scope but does not specify affected patch versions, mitigations, or other details. No connected documents ...
CVE-2002-0151
Buffer overflow in Multiple UNC Provider MUP in Microsoft Windows operating systems allows local users to cause a denial of service or possibly gain SYSTEM privileges via a long UNC request...
CVE-2002-0165
LogWatch 2.5 allows local users to gain root privileges via a symlink attack, a different vulnerability than CVE-2002-0162...
CVE-2002-0158
Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co color database command line argument...
CVE-2002-1639
Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain sensitive information via a request to the oracle.apps.cz.servlet.UiServlet servlet with the test parameter set to "version" or "host"...
CVE-2002-0039
CVE-2002-0039 affects SGI IRIX 6.5 (and older) where rpcbind is vulnerable to remote DoS via malformed RPC packets with invalid lengths, causing a crash. The issue is in the rpcbind/portmap handling and can be triggered remotely without local credentials. SGI released patches and fixes in IRIX 6....
CVE-2002-0162
LogWatch before 2.5 allows local users to execute arbitrary code via a symlink attack on the logwatch temporary directory...
CVE-2002-0039
rpcbind in SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, allows remote attackers to cause a denial of service crash via malformed RPC packets with invalid lengths...
CVE-2002-0162
Technical details for CVE-2002-0162 are not publicly provided in the supplied documents; no concrete affected products, versions, or fixes are listed here. Monitor for updates.
CVE-2002-0078
The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone by embedding the script in a cookie, aka the "Cookie-based Script Execution" vulnerability...
CVE-2002-0095
The default configuration of BSCW Basic Support for Cooperative Work 3.x and possibly version 4 enables user self registration, which could allow remote attackers to upload files and possibly join a user community that was intended to be closed...
CVE-2002-0099
Buffer overflow in Michael Lamont Savant Web Server 3.0 allows remote attackers to cause a denial of service crash via a long HTTP request to the cgi-bin directory in which the CGI program name contains a large number of . dot characters...
CVE-2002-0100
AOL AOLserver 3.4.2 Win32 allows remote attackers to bypass authentication and read password-protected files via a URL that directly references the file...
CVE-2002-0108
Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address...