CVE-2002-0240

CVE-2002-0240 affects PHP when deployed with Apache and configured to serve index.php by default. The vulnerability allows remote attackers to learn the server’s full pathname via the HTTP OPTIONS method, leaking a partial confidentiality breach (PARTIAL) without impact to integrity/availability,...

CVE-2002-0343

CVE-2002-0343 affects Hotline Client 1.8.5, where passwords and other sensitive user data are stored in plaintext in the bookmarks file. The underlying issue is plaintext storage accessible to local users, enabling privilege escalation by extracting passwords from the bookmarks file. Impact is de...

CVE-2002-0298

Summary: CVE-2002-0298 affects ScriptEase MiniWeb Server 0.95. Vulnerability: remotely trigger a denial of service (crash) via crafted HTTP GET requests that include (1) encoded dot-dot (%2e%2e), (2) multiple /../ sequences, (3) a missing URI, or (4) ..// in a URI that does not start with a slash...

CVE-2002-0348

CVE-2002-0348: The vulnerability affects Cobalt RAQ 4, where service.cgi is susceptible to a long argument leading to remote denial of service and potential arbitrary code execution. The available sources describe the issue framework (remote access via network, low complexity, partial confidentia...

CVE-2002-0215

Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi file by requesting a non-existent .html file, which leaks the pathname in an error message...

CVE-2002-0281

CVE-2002-0281 concerns a cross-site scripting vulnerability in DCP-Portal 4.2 and earlier . The root cause is that an attacker can inject JavaScript in the job information field submitted to the endpoint user_update.php , potentially allowing escalation of privileges to other portal users. The in...

CVE-2002-0291

Dino's Webserver 1.2 is affected by CVE-2002-0291. The vulnerability allows remote attackers to cause a denial of service (CPU consumption) and potentially execute arbitrary code by sending several large HTTP requests in a short period. The commonly cited impact is partial availability compromise...

CVE-2002-0333

CVE-2002-0333 affects xtell/xtelld prior to 2.7 and 1.91.1 and allows directory traversal via a .. in the TTY argument. The vulnerability lets remote attackers read files with short names, and local users read more files through a short-name symlink. Impact described in public records includes cr...

CVE-2002-0231

Product/affected version: mIRC up to and including 5.91. Vulnerability: Buffer overflow in the nickname handling. Impact: Remote code execution on the client when a long nickname is processed by a remote server. Root cause: Overflow in nickname parsing leads to arbitrary code execution. Exploitat...

CVE-2002-0338

The Bat! 1.53d and 1.54beta, and possibly other versions, allows remote attackers to cause a denial of service crash via an attachment whose name includes an MS-DOS device name...

CVE-2002-0239

CVE-2002-0239 affects hanterm (Hangul terminal for X11). The vulnerability is a buffer overflow in the font handling code that reads Korean characters, triggered by long strings in the (1) -fn, (2) -hfb, or (3) -hfn arguments, for hanterm versions 3.3.1 and earlier. The issue can let a local atta...

CVE-2002-0303

GroupWise 6, when using LDAP authentication and when Post Office has a blank username and password, allows attackers to gain privileges of other users by logging in without a password...

CVE-2002-0307

The CVE-2002-0307 vulnerability affects Avenger's News System (ANS) versions 2.11 and earlier, specifically in the script file ans.pl. The flaw is a directory traversal via the p parameter, allowing an attacker to read arbitrary files and, by feeding content to Perl’s eval, potentially execute co...

CVE-2002-0306

CVE-2002-0306 affects Avenger's News System (ANS) up to version 2.11. The flaw allows remote attackers to execute arbitrary commands by supplying shell metacharacters in the p (plugin) parameter of ans.pl. This is a command‑injection vulnerability impacting the plugin parameter, with the NVD indi...

CVE-2002-0271

CVE-2002-0271 affects the GNU Ada compiler (GNAT) versions 3.12p through 3.14p. The issue arises from a symlink attack on temporary files, allowing local users to modify files belonging to other users. The resulting impact is limited to integrity (partial) and requires local access; no remote or ...

CVE-2002-0233

The CVE-2002-0233 entry concerns the eshare Expressions 4 Web server. The vulnerability is a directory traversal flaw that allows an attacker to read arbitrary files by using a .. (dot dot) in an HTTP request. Affected component: the web server’s request handling. Underlying cause: improper valid...

CVE-2002-0316

The connected Nessus NASL confirms that XMB Forum (PHP) versions older than 1.9.1 are affected by multiple cross-site scripting (XSS) flaws, including CVE-2002-0316. The vulnerability allows an attacker to inject scripts that run in the context of other XMB users’ browsers. Affected software: XMB...

CVE-2002-0249

PHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote attackers to obtain the physical path of the php.exe via a request with malformed arguments such as /123, which leaks the pathname in the error message...

CVE-2002-0252

Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute arbitrary code via a response containing a long Content-Type MIME header...

CVE-2002-0200

The CVE-2002-0200 entry concerns Cyberstop Web Server for Windows 0.1. Affected: the HTTP handling of the server. Root cause: an HTTP request for an MS-DOS device name (e.g., CON\CON, AUX.*) can trigger a denial of service by freezing/rebooting Windows. Impact: Partial availability loss as the se...