CVE-2002-0092

CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service server crash via the diff capability...

CVE-2002-0140

CVE-2002-0140 affects Domain Name Relay Daemon (dnrd) version 2.10 and earlier. The vulnerability arises when processing DNS responses; long or malformed replies are not properly handled by parse_query and get_objectname (and possibly other functions), allowing remote DNS sites to trigger a denia...

CVE-2002-0136

CVE-2002-0136 affects Microsoft Internet Explorer 5.5 on Windows 98. The vulnerability enables a remote web page to trigger a denial-of-service (hang) by sending extremely long values in form fields (INPUT/TEXTAREA) that can be auto-filled via JavaScript. The available sources describe the affect...

CVE-2002-0130

CVE-2002-0130 is a buffer overflow in efax 0.9 and earlier when installed setuid root, allowing local users to execute arbitrary code via a long -x argument. Affected package reference appears as efax 0.9a-34 in at least one listing. The vulnerability is exploitable locally; the documents do not ...

CVE-2002-0099

Buffer overflow in Michael Lamont Savant Web Server 3.0 allows remote attackers to cause a denial of service crash via a long HTTP request to the cgi-bin directory in which the CGI program name contains a large number of . dot characters...

CVE-2002-0142

CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of service crash via a series of requests whose physical path is exactly 260 characters long and ends in a series of . dot characters...

CVE-2002-0124

MDG Computer Services Web Server 4D/eCommerce 3.5.3 is affected by a directory traversal vulnerability exposed via a URL containing ../ and URL-encoded slashes in the HTTP request. This vulnerability allows remote attackers to access restricted paths within the server. The CVE entry describes the...

CVE-2002-0126

CVE-2002-0126 : Buffer overflow in BlackMoon FTP Server 1.0–1.5 allows remote code execution via a long argument to (1) USER, (2) PASS, or (3) CWD. Affected software is BlackMoon FTP Server; underlying cause is overflow in handling overly long commands/arguments. Impact per the entry is remote ar...

CVE-2002-0082

The dbm and shm session cache code in modssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the i2dSSLSESSION function, which allows remote attackers to use a buffer overflow to execute arbitrary code via a large client certificate that is signed...

CVE-2002-0138

CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command...

CVE-2002-0108

Allaire Forums 2.0.4/2.0.5 and Forums! 3.0/3.1 allow remote authenticated users to spoof messages by modifying hidden form fields that carry the name and e-mail address. The root cause is lack of verification of user information submitted via hidden fields, enabling impersonation of other users w...

CVE-2002-0104

CVE-2002-0104 affects AFTPD 5.4.4. A remote attacker can trigger a CD (CWD) ~ (tilde) command that causes a core dump, which may lead to partial disclosure of sensitive information. The connected documents do not provide a published fix or remediation details.

CVE-2002-0090

Buffer overflow in Low BandWidth X proxy lbxproxy in Solaris 8 allows local users to execute arbitrary code via a long display command line option...

CVE-2002-0105

CVE-2002-0105 affects Caldera UnixWare 7.1.0 (and possibly other OSes) where /var/dt is world-writable. A local attacker can exploit a symlink attack on /var/dt/Xerrors to gain privileges. The root cause is the world-writable /var/dt directory enabling a symlink-based workaround. The provided doc...

CVE-2002-0129

efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which prints the contents of the file in a warning message...

CVE-2002-0145

chuid 1.2 and earlier does not properly verify the ownership of files that will be changed, which allows remote attackers to change files owned by other users, such as root...

CVE-2002-0140

Domain Name Relay Daemon dnrd 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parsequery, getobjectname, and possibly other functions...

CVE-2002-0126

Buffer overflow in BlackMoon FTP Server 1.0 through 1.5 allows remote attackers to execute arbitrary code via a long argument to 1 USER, 2 PASS, or 3 CWD...

CVE-2002-0144

CVE-2002-0144 is a directory traversal vulnerability in chuid 1.2 and earlier that allows remote attackers to change ownership of files outside the upload directory via a .. path traversal. Affected: chuid 1.2 and earlier. Impact: unauthorized ownership changes; remote exploitation. Exploit detai...

CVE-2002-0144

Directory traversal vulnerability in chuid 1.2 and earlier allows remote attackers to change the ownership of files outside of the upload directory via a .. dot dot attack...