CVE-2002-0050

Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitrary code via long authentication data...

CVE-2002-0021

Network Product Identification PID Checker in Microsoft Office v. X for Mac allows remote attackers to cause a denial of service crash via a malformed product announcement...

CVE-2002-0024

File Download box in Internet Explorer 5.01, 5.5 and 6.0 allows an attacker to use the Content-Disposition and Content-Type HTML header fields to modify how the name of the file is displayed, which could trick a user into believing that a file is safe to download...

CVE-2002-0055

SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer BDAT request...

CVE-2002-0054

SMTP service in 1 Microsoft Windows 2000 and 2 Internet Mail Connector IMC in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials...

Apache mod_ssl i2d_SSL_SESSION Function SSL Client Certificate Overflow

According to the web server banner, the remote host is using a vulnerable version of modssl. This version has a buffer overflow vulnerability. A remote attacker could exploit this issue to execute arbitrary code. Some vendors patched older versions of modssl, so this might be a false positive...

CVE-2002-0085

CVE-2002-0085 affects Sun Solaris cachefsd on Solaris 2.6, 7, and 8. A remote attacker can cause a denial of service (crash) by sending an RPC request with an invalid procedure call. The vulnerability is in the cachefsd daemon used for NFS/cachefs, with advisory materials (CERT/CA-2002-11 and eSO...

CVE-2002-0089

The CVE-2002-0089 issue affects Sun Solaris admintool across Solaris 2.5 through 8 (SPARC/x86). The vulnerability is a buffer overflow in admintool triggered by long strings in two input vectors: (1) the -d command line option and (2) the PRODVERS variable in the .cdtoc file. This can allow a loc...

CVE-2002-0085

cachefsd in Solaris 2.6, 7, and 8 allows remote attackers to cause a denial of service crash via an invalid procedure call in an RPC request...

CVE-2002-0091

CVE-2002-0091 affects CIDER SHADOW 1.5 and 1.6. The vulnerability consists of CGI scripts that allow remote execution of arbitrary commands through certain form fields due to insufficient input verification. Impact is remote code execution with the privileges of the web server process; exploitati...

CVE-2002-0087

CVE-2002-0087 affects Lotus Domino 5.07 on Solaris. A local user can create arbitrary files through a symlink attack on temporary files used by bindsock, enabling file creation via local access. No remediation details are provided in the supplied documents.

CVE-2002-0086

CVE-2002-0086 involves a buffer overflow in the Linux version of Lotus Domino’s bindsock utility (affected: Domino 5.0.4 and 5.0.7). The vulnerability is triggered by excessively long environment variables (Notes_ExecDirectory or PATH), allowing a local attacker to execute code with root privileg...

CVE-2002-0058

Vulnerability in Java Runtime Environment JRE allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in 1 Netscape 6.0 through 6.1 and 4.79 and earlier, 2 Microsoft VM...

CVE-2002-0084

Buffer overflow in the fscachesetup function of cachefsd in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long mount argument...

CVE-2002-0087

bindsock in Lotus Domino 5.07 on Solaris allows local users to create arbitrary files via a symlink attack on temporary files...

CVE-2002-0089

Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to 1 the -d command line option, or 2 the PRODVERS argument in the .cdtoc file...

CVE-2002-0088

CVE-2002-0088 affects Sun Solaris admintool (2.6, 7, 8). A buffer overflow in the installation path handling allows a local user to gain root privileges by supplying a long media installation path. The underlying cause is insufficient bounds checking on the installation path. Impact is local priv...

PHP mime_split Function POST Request Overflow

The remote host is running a version of PHP earlier than 4.1.2. There are several flaws in how PHP handles multipart/form-data POST requests, any one of which could allow an attacker to gain remote access to the system. %NASLMINLEVEL 70300 This script was written by Thomas Reinke Modified by H D...

CVE-2002-0028

Buffer overflow in ICQ before 2001B Beta v5.18 Build 3659 allows remote attackers to execute arbitrary code via a Voice Video & Games request...

CVE-2002-0048

Multiple signedness errors mixed signed and unsigned numbers in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary code in the rsync client or server...