5354 matches found
CVE-2002-0046
Linux kernel, and possibly other operating systems, allows remote attackers to read portions of memory via a series of fragmented ICMP packets that generate an ICMP TTL Exceeded response, which includes portions of the memory in the response packet...
FAQManager 'faqmanager.cgi' 'toc' Parameter Arbitrary File Access
FAQManager is a Perl-based CGI for maintaining a list of Frequently Asked Questions. Using a specially crafted URL, a remote attacker can use this CGI to view arbitrary files on the web server. For example: http://www.example.com/cgi-bin/faqmanager.cgi?toc=/etc/passwd%00 %NASLMINLEVEL 70300 This...
CVE-2002-0010
Bugzilla prior to 2.14.1 contains multiple input handling flaws that enable remote SQL injection and file creation, potentially elevating privileges. Specifically, via: (1) sql parameter in buglist.cgi, (2) invalid field names in the boolean chart query in buglist.cgi, (3) mybugslink parameter in...
CVE-2002-0008
CVE-2002-0008 affects Bugzilla prior to 2.14.1. The vulnerability allows remote attackers to impersonate users: (1) spoof a user comment by sending a request to process_bug.cgi using the who parameter instead of the Bugzilla_login cookie, and (2) post a bug as another user by altering the reporte...
CVE-2002-0008
Bugzilla before 2.14.1 allows remote attackers to 1 spoof a user comment via an HTTP request to processbug.cgi using the "who" parameter, instead of the Bugzillalogin cookie, or 2 post a bug as another user by modifying the reporter parameter to enterbug.cgi, which is passed to postbug.cgi...
CVE-2002-0010
Bugzilla before 2.14.1 allows remote attackers to inject arbitrary SQL code and create files or gain privileges via 1 the sql parameter in buglist.cgi, 2 invalid field names from the "boolean chart" query in buglist.cgi, 3 the mybugslink parameter in userprefs.cgi, 4 a malformed bug ID in the...
CVE-2002-1596
Cisco SN 5420 Storage Router 1.15 and earlier allows remote attackers to cause a denial of service router crash via an HTTP request with large headers...
CVE-2002-1600
Directory traversal vulnerability in Mike Spice's My Classifieds classifieds.cgi before 1.3 allows remote attackers to overwrite arbitrary files via the category parameter...
CVE-2002-0001
CVE-2002-0001 affects mutt up to versions prior to 1.2.5.1 and 1.3.x prior to 1.3.25. The flaw is in the RFC822 address parser, where an improperly terminated comment or phrase in the address list can allow remote code execution. Debian/OpenVAS entries confirm upstream fixes in 1.2.5.1 and 1.3.25...
CVE-2002-0001
Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list...
[SECURITY] [DSA-096-2] mutt buffer overflow, sparc update
Package : mutt Problem type : buffer overflow Debian-specific: no The sparc binary for the mutt security fix described in DSA-096-1 is now available. wget url will fetch the file for you dpkg -i file.deb will install the referenced file. Debian GNU/Linux 2.2 alias potato -...
OpenBSD - ftp Local Overflow
OpenBSD - ftp Local Overflow / 7350-crocodile - x86/OpenBSD ftp exploit by lorian and scut / TESO=20 TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed t...
CVE-2001-0240
Microsoft Word before Word 2002 is vulnerable to macros being executed automatically when opening an RTF document that links to a template containing the embedded macro. The root cause is Word’s failure to detect macros embedded in templates referenced by RTF documents, allowing a malicious docum...
Security Update, February 13, 2002 (MSXML 4.0)
Security Update, February 13, 2002 MSXML 4.0...
Critical Update, February 10, 2002
Critical Update, February 10, 2002...
Windows XP Application Compatibility Update, April 2002
Windows XP Application Compatibility Update, April 2002...
Office 2002/XP Italian (it)
Office 2002/XP Italian it...
Security Update, February 13, 2002 (MSXML 4.0)
This update resolves the "XMLHTTP Control Can Allow Access to Local Files" security vulnerability in Microsoft XML MSXML 4.0 and is discussed in Microsoft Security Bulletin MS02-008. Download now to help prevent a malicious user from reading the files on your computer when you visit a specially...
Security Update for Microsoft Publisher 2002 (KB2284692)
A security vulnerability exists in Microsoft Publisher 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...