5498 matches found
CVE-2002-0296
The CVE-2002-0296 issue affects Tarantella Enterprise 3, where local users can overwrite arbitrary files through a symlink attack on the spinning temporary file. Root cause: improper handling of temporary files enabling a symlink-based overwrite. Impact: local/x local user access with partial int...
CVE-2002-0336
CVE-2002-0336 describes a buffer overflow in Galacticomm Worldgroup FTP server 3.20 and earlier. The issue can be triggered by a LIST command containing a large number of /, *, and .. characters, enabling remote attackers to cause a denial of service and potentially execute arbitrary code. The pr...
CVE-2002-0227
KICQ 2.0.0b1 is affected by a remote denial-of-service via a malformed message. The provided sources state that sending a malformed message can cause the application to crash, indicating a network-accessible trigger without required authentication. The exact root cause, vulnerable component, affe...
CVE-2002-0263
Affected product : EasyBoard 2000 1.27 (EZboard). Vulnerability : buffer overflow in the handling of multipart Content-Type headers enables remote code execution by sending a long boundary value to one of three CGI scripts: ezboard.cgi, ezman.cgi, or ezadmin.cgi. Cause : overflow in the boundary ...
CVE-2002-0198
CVE-2002-0198 describes a buffer overflow in plDaniels ripMime 1.2.6 and earlier , used in programs like xamime and inflex , that allows remote code execution via an attachment in a long filename . The root cause is a buffer overflow in handling long filenames. Impact is described as execution of...
CVE-2002-0199
The CVE-2002-0199 entry concerns Nullsoft Shoutcast Server 1.8.3 and specifically the admin.cgi component. The vulnerability is a buffer overflow triggered by an argument containing a large number of backslashes, allowing a remote attacker to cause a denial of service and, per some sources, poten...
CVE-2002-0254
ICQ 2001b Build 3659 allows remote attackers to cause a denial of service crash via a malformed picture that contains large height and width values, which causes the crash when viewed in Userdetails...
CVE-2002-0258
Merak Mail IceWarp Web Mail uses a static user session ID that does not change across sessions. This could allow remote attackers who obtain the session ID to elevate privileges as the targeted user (e.g., via IDs exposed in answers or forward URLs). Affected product: Merak Mail IceWarp Web Mail....
CVE-2002-0259
InstantServers MiniPortal 1.1.5 and earlier stores sensitive login and account data in plaintext in 1 .pwd files in the miniportal/apache directory, or 2 mplog.txt, which could allow local users to gain privileges...
CVE-2002-0206
index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by specifying a URL to the malicious code in the file parameter...
CVE-2002-0340
Windows Media Player WMP 8.00.00.4477, and possibly other versions, automatically detects and executes .wmf and other content, even when the file's extension or content type does not specify .wmf, which could make it easier for attackers to conduct unauthorized activities via Trojan horse files...
CVE-2002-0254
CVE-2002-0254 affects ICQ 2001b Build 3659. The vulnerability allows a remote attacker to cause a denial-of-service (crash) by supplying a malformed picture containing abnormally large height and width values, which triggers the crash when the image is viewed in Userdetails. The available records...
CVE-2002-0219
Buffer overflow in 1 sastcpd in SAS/Base 8.0 and 8.1 or 2 objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via large command line argument...
CVE-2002-0332
The CVE-2002-0332 issue affects xtell/xtelld (Debian xtell package) and is described to allow remote code execution through three vectors: (1) a long DNS hostname obtained via reverse DNS, (2) a long AUTH string, and (3) certain data in the xtell request, across xtell versions 1.91.1 and earlier ...
CVE-2002-0311
CVE-2002-0311 describes a vulnerability in WebTop on UnixWare 7.1.1 and Open UNIX 8.0.0 where local and possibly remote attackers can gain root privileges by supplying shell metacharacters in the -c argument of the CGI scripts scoadminreg.cgi or service_action.cgi. The affected components are the...
CVE-2002-0216
userinfo.php in XOOPS 1.0 RC1 allows remote attackers to obtain sensitive information via a SQL injection attack in the "uid" parameter...
CVE-2002-0312
CVE-2002-0312 describes a directory traversal vulnerability in Essentia Web Server 2.1 that allows remote attackers to read arbitrary files by using a .. in the URL. The vulnerability affects the server’s handling of path traversal and can expose sensitive files from the server filesystem. The pr...
CVE-2002-0347
Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. dot dot in an HTTP request...
CVE-2002-0206
The CVE-2002-0206 issue affects PHP-Nuke: index.php may include a URL to remote code via the file parameter, enabling remote arbitrary PHP code execution on servers running PHP-Nuke 5.3.1 and earlier (and possibly versions before 5.5). Root cause is PHP’s include() reading a URL without validatin...