CVE-2002-0106

BEA Systems WebLogic Server 6.1 is affected. The vulnerability allows remote attackers to cause a denial of service by sending a sequence of requests to JSP files that contain an MS-DOS device name. The available documents describe the impact as a DoS but do not provide an exploit vector, affecte...

CVE-2002-0099

CVE-2002-0099 affects Michael Lamont Savant Web Server 3.0. A buffer overflow occurs when handling a long HTTP request to the cgi-bin directory in which the CGI program name contains a large number of dots, allowing remote attackers to cause a denial of service (crash). The available public refer...

CVE-2002-0133

CVE-2002-0133 affects Avirt Gateway Suite 4.2. The vulnerability is a buffer overflow in components handling proxies, exploitable by sending excessively long header fields to the HTTP proxy or a long string to the telnet proxy. Reported effects include remote denial of service and potential arbit...

CVE-2002-0137

CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file...

CVE-2002-0134

CVE-2002-0134 describes an insecure telnet proxy in Avirt Gateway Suite 4.2 where the proxy does not require authentication. This allows remote attackers to connect to the proxy system, list file contents, and execute arbitrary commands via the “dos” command. The vulnerability is reflected across...

CVE-2002-0138

CDRDAO 1.1.4 and 1.1.5 are affected by CVE-2002-0138: local users can read arbitrary files via the show-data command. The issue is documented in Mandrake advisory MDKSA-2005:089, which notes a patch is available for the affected packages. Exploitation details are not provided in the supplied docu...

CVE-2002-0125

CVE-2002-0125 concerns a buffer overflow in ClanLib library 0.5 that can allow local users to execute arbitrary code in games using the library (e.g., Super Methane Brothers, Star War, Kwirk, Clankanoid) via a long HOME environment variable. Affected: ClanLib 0.5 in games; root cause: unchecked l...

CVE-2002-0129

The CVE-2002-0129 issue affects efax 0.9 and earlier when installed setuid root. The vulnerability allows local users to read arbitrary files by using the -d option, which prints the file contents in a warning message. The underlying flaw is a local privilege issue that exposes sensitive data (co...

CVE-2002-0119

The CVE-2002-0119 entry concerns the Alcatel Speed Touch Home ADSL Modem. The vulnerability is triggered by remote network scanning using unusual packets (e.g., Nmap with OS detection), which leads to a denial of service (reboot). The NVD entry lists a network-based attack vector with low complex...

CVE-2002-0141

Maelstrom GPL 3.0.1 allows local users to overwrite arbitrary files of other Maelstrom users via a symlink attack on the /tmp/f file...

CVE-2002-0106

BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an MS-DOS device name...

CVE-2002-0103

CVE-2002-0103 affects Oracle9iAS Web Cache 2.0.0.x. An installer creates executable and configuration files with insecure permissions, enabling local privilege escalation. Impacted scenarios include (1) executing webcached to gain privileges and (2) reading webcache.xml to obtain the administrato...

CVE-2002-0110

Nevrona Designs MiraMail (Windows) up to version 1.04 stores user credentials (POP usernames and passwords) in plaintext in an .ini file. The underlying issue is unencrypted storage of authentication data, allowing anyone with file access to read passwords and potentially gain privileges. Public ...

CVE-2002-0116

Palm OS 3.5h and possibly other versions, as used in Handspring Visor and Xircom products, allows remote attackers to cause a denial of service via a TCP connect scan, e.g. from nmap...

CVE-2002-0101

CVE-2002-0101 affects Microsoft Internet Explorer 6.0 and earlier. The issue is a local denial of service caused by an infinite loop triggered by modeless dialogs (showModelessDialog), leading to high CPU usage when the dialog’s focus is not released. The available documents do not specify a root...

CVE-2002-0092

CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service server crash via the diff capability...

CVE-2002-0085

cachefsd in Solaris 2.6, 7, and 8 allows remote attackers to cause a denial of service crash via an invalid procedure call in an RPC request...

CVE-2002-0114

CVE-2002-0114 affects EMC NetWorker (Legato NetWorker) prior to version 7.0, where passwords are stored in plaintext in the daemon.log. This enables local users to gain privileges by reading the password from that file. The description notes the issue was originally reported for Legato NetWorker ...

CVE-2002-0109

CVE-2002-0109 affects Linksys EtherFast BEFN2PS4, BEFSR41, BEFSR81 routers (and possibly other products). A remote attacker can query with the default SNMP community string “public,” which may cause the device to reveal information and modify configuration, triggering SNMP traps back to the attac...

CVE-2002-0112

The CVE-2002-0112 entry affects Etype Eserv 2.97 . Affected component: password-protected file disclosure via a crafted URL containing /./ , enabling remote attackers over the network to view protected files. The available data confirms the vulnerability and impact (partial confidentiality) but p...