CVE-2002-0115

Snort 1.8.3 does not properly define the minimum ICMP header size, which allows remote attackers to cause a denial of service crash and core dump via a malformed ICMP packet...

CVE-2002-0126

Buffer overflow in BlackMoon FTP Server 1.0 through 1.5 allows remote attackers to execute arbitrary code via a long argument to 1 USER, 2 PASS, or 3 CWD...

Fixed in Apache Tomcat 4.0.0

Moderate: Security manager bypass CVE-2002-0493 If errors are encountered during the parsing of web.xml and Tomcat is configured to use a security manager it is possible for Tomcat to start without the security manager in place. Affects: Pre-release builds of 4.0.0...

Apache-SSL < 1.3.23+1.46 i2d_SSL_SESSION Function SSL Client Certificate Overflow

The remote host is using a version of Apache-SSL that is older than 1.3.22+1.46. Such versions are vulnerable to a buffer overflow that, albeit difficult to exploit, may allow an attacker to execute arbitrary commands on this host subject to the privileges under which the web server operates. C...

Security Bulletin MS02-013 &#40;Version 2.0&#41;

---------------------------------------------------------------------- Title: 04 March 2002 Cumulative VM Update Released: 04 March 2002 Revised: 18 March 2002 version 2.0 Software: Microsoft Virtual Machine Impact: Information Disclosure, run code of an attacker's choice Max Risk: Critical...

CVE-2002-0122

CVE-2002-0122 affects Siemens 3568i WAP mobile phones. The vulnerability enables a remote denial-of-service (crash) when an SMS containing unusual characters is received. The Connected documents provide the affected product and impact but do not specify exploit status or a concrete remediation. N...

CVE-2002-0145

The CVE-2002-0145 entry concerns chuid 1.2 and earlier, where the process does not properly verify ownership of files that will be changed. This allows remote attackers to modify files owned by other users, including root. The NVD notes a base score of 7.5 (HIGH) with network attack vector and lo...

CVE-2002-0131

CVE-2002-0131 : The ActivePython ActiveX control for Python in the AXScript package, used in Internet Explorer, can be exploited to read arbitrary files from the client’s filesystem via a malicious web page containing Python script. The root cause is that the control does not prevent script from ...

CVE-2002-0116

CVE-2002-0116 describes a denial-of-service in Palm OS 3.5h and possibly earlier versions used in Handspring Visor and Xircom devices. A remote attacker can trigger the DoS via a TCP connect scan (e.g., using nmap) over the network. The connected documents do not provide vendor-specific patch ver...

CVE-2002-0099

CVE-2002-0099 affects Michael Lamont Savant Web Server 3.0. A buffer overflow occurs when handling a long HTTP request to the cgi-bin directory in which the CGI program name contains a large number of dots, allowing remote attackers to cause a denial of service (crash). The available public refer...

Immunity Canvas: CACHEFSD_LPD

Name| cachefsdlpd ---|--- CVE| CVE-2002-0084 Exploit Pack| CANVAS Description| cachefsd .cfsmnt File Stack Overflow Notes| References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309 CVE Name: CVE-2002-0084 VENDOR: Sun Development Notes: This vulnerability had been marked only as ...

CVE-2002-0106

BEA Systems WebLogic Server 6.1 is affected. The vulnerability allows remote attackers to cause a denial of service by sending a sequence of requests to JSP files that contain an MS-DOS device name. The available documents describe the impact as a DoS but do not provide an exploit vector, affecte...

CVE-2002-0133

CVE-2002-0133 affects Avirt Gateway Suite 4.2. The vulnerability is a buffer overflow in components handling proxies, exploitable by sending excessively long header fields to the HTTP proxy or a long string to the telnet proxy. Reported effects include remote denial of service and potential arbit...

CVE-2002-0136

Microsoft Internet Explorer 5.5 on Windows 98 allows remote web pages to cause a denial of service hang via extremely long values for form fields such as INPUT and TEXTAREA, which can be automatically filled via Javascript...

CVE-2002-0102

CVE-2002-0102 affects Oracle9iAS Web Cache 2.0.0.x. The vulnerability allows a remote attacker to cause a denial of service by sending crafted requests: to TCP ports 1100, 4000, 4001, or 4002 with a large number of null characters to TCP port 4000 with a large number of '.' charactersImpact per t...

CVE-2002-0142

Pi3Web CGI handler in Windows 2.0 beta 1/2 is vulnerable to a denial of service through very long CGI parameters; vendors indicate FIX in Pi3Web

CVE-2002-0132

CVE-2002-0132 : The vulnerability affects Chinput 3.0 where a buffer overflow can be triggered by a long HOME environment variable, enabling local users to execute arbitrary code. Documents confirm the impact as local code execution with complete confidentiality, integrity, and availability impac...

CVE-2002-0087

bindsock in Lotus Domino 5.07 on Solaris allows local users to create arbitrary files via a symlink attack on temporary files...

CVE-2002-0089

Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to 1 the -d command line option, or 2 the PRODVERS argument in the .cdtoc file...

CVE-2002-0131

ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prevent a script from reading files from the client's filesystem, which allows remote attackers to read arbitrary files via a malicious web page containing Python script...