CVE-2002-0139

Pi-Soft SpoonFTP 1.1 and earlier allows remote attackers to redirect traffic to other sites aka FTP bounce via the PORT command...

CVE-2002-0143

Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary code via a long HOME environment variable...

Fixed in Apache Tomcat 4.0.0

Moderate: Security manager bypass CVE-2002-0493 If errors are encountered during the parsing of web.xml and Tomcat is configured to use a security manager it is possible for Tomcat to start without the security manager in place. Affects: Pre-release builds of 4.0.0...

Apache-SSL < 1.3.23+1.46 i2d_SSL_SESSION Function SSL Client Certificate Overflow

The remote host is using a version of Apache-SSL that is older than 1.3.22+1.46. Such versions are vulnerable to a buffer overflow that, albeit difficult to exploit, may allow an attacker to execute arbitrary commands on this host subject to the privileges under which the web server operates. C...

Security Bulletin MS02-013 &#40;Version 2.0&#41;

---------------------------------------------------------------------- Title: 04 March 2002 Cumulative VM Update Released: 04 March 2002 Revised: 18 March 2002 version 2.0 Software: Microsoft Virtual Machine Impact: Information Disclosure, run code of an attacker's choice Max Risk: Critical...

Immunity Canvas: CACHEFSD_LPD

Name| cachefsdlpd ---|--- CVE| CVE-2002-0084 Exploit Pack| CANVAS Description| cachefsd .cfsmnt File Stack Overflow Notes| References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309 CVE Name: CVE-2002-0084 VENDOR: Sun Development Notes: This vulnerability had been marked only as ...

CVE-2002-0136

Microsoft Internet Explorer 5.5 on Windows 98 allows remote web pages to cause a denial of service hang via extremely long values for form fields such as INPUT and TEXTAREA, which can be automatically filled via Javascript...

CVE-2002-0087

bindsock in Lotus Domino 5.07 on Solaris allows local users to create arbitrary files via a symlink attack on temporary files...

CVE-2002-0089

Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to 1 the -d command line option, or 2 the PRODVERS argument in the .cdtoc file...

CVE-2002-0101

Microsoft Internet Explorer 6.0 and earlier allows local users to cause a denial of service via an infinite loop for modeless dialogs showModelessDialog, which causes CPU usage while the focus for the dialog is not released...

CVE-2002-0131

ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prevent a script from reading files from the client's filesystem, which allows remote attackers to read arbitrary files via a malicious web page containing Python script...

CVE-2002-0142

Pi3Web CGI handler in Windows 2.0 beta 1/2 is vulnerable to a denial of service through very long CGI parameters; vendors indicate FIX in Pi3Web

CVE-2002-0133

CVE-2002-0133 affects Avirt Gateway Suite 4.2. The vulnerability is a buffer overflow in components handling proxies, exploitable by sending excessively long header fields to the HTTP proxy or a long string to the telnet proxy. Reported effects include remote denial of service and potential arbit...

CVE-2002-0116

CVE-2002-0116 describes a denial-of-service in Palm OS 3.5h and possibly earlier versions used in Handspring Visor and Xircom devices. A remote attacker can trigger the DoS via a TCP connect scan (e.g., using nmap) over the network. The connected documents do not provide vendor-specific patch ver...

CVE-2002-0102

CVE-2002-0102 affects Oracle9iAS Web Cache 2.0.0.x. The vulnerability allows a remote attacker to cause a denial of service by sending crafted requests: to TCP ports 1100, 4000, 4001, or 4002 with a large number of null characters to TCP port 4000 with a large number of '.' charactersImpact per t...

CVE-2002-0122

CVE-2002-0122 affects Siemens 3568i WAP mobile phones. The vulnerability enables a remote denial-of-service (crash) when an SMS containing unusual characters is received. The Connected documents provide the affected product and impact but do not specify exploit status or a concrete remediation. N...

CVE-2002-0127

Netgear RP114 Cable/DSL Web Safe Router, Firmware 3.26, is affected. When configured to block traffic below port 1024, remote attackers can cause a Denial of Service (hang) by performing a port scan on the WAN port. The provided documents do not include a confirmed fix or workaround; no additiona...

CVE-2002-0131

CVE-2002-0131 : The ActivePython ActiveX control for Python in the AXScript package, used in Internet Explorer, can be exploited to read arbitrary files from the client’s filesystem via a malicious web page containing Python script. The root cause is that the control does not prevent script from ...

CVE-2002-0145

The CVE-2002-0145 entry concerns chuid 1.2 and earlier, where the process does not properly verify ownership of files that will be changed. This allows remote attackers to modify files owned by other users, including root. The NVD notes a base score of 7.5 (HIGH) with network attack vector and lo...

CVE-2002-0132

CVE-2002-0132 : The vulnerability affects Chinput 3.0 where a buffer overflow can be triggered by a long HOME environment variable, enabling local users to execute arbitrary code. Documents confirm the impact as local code execution with complete confidentiality, integrity, and availability impac...