CVE-2002-0127

Netgear RP114 Cable/DSL Web Safe Router, Firmware 3.26, is affected. When configured to block traffic below port 1024, remote attackers can cause a Denial of Service (hang) by performing a port scan on the WAN port. The provided documents do not include a confirmed fix or workaround; no additiona...

CVE-2002-0101

Microsoft Internet Explorer 6.0 and earlier allows local users to cause a denial of service via an infinite loop for modeless dialogs showModelessDialog, which causes CPU usage while the focus for the dialog is not released...

CVE-2002-0110

Nevrona Designs MiraMail (Windows) up to version 1.04 stores user credentials (POP usernames and passwords) in plaintext in an .ini file. The underlying issue is unencrypted storage of authentication data, allowing anyone with file access to read passwords and potentially gain privileges. Public ...

CVE-2002-0116

Palm OS 3.5h and possibly other versions, as used in Handspring Visor and Xircom products, allows remote attackers to cause a denial of service via a TCP connect scan, e.g. from nmap...

CVE-2002-0101

CVE-2002-0101 affects Microsoft Internet Explorer 6.0 and earlier. The issue is a local denial of service caused by an infinite loop triggered by modeless dialogs (showModelessDialog), leading to high CPU usage when the dialog’s focus is not released. The available documents do not specify a root...

CVE-2002-0137

CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file...

CVE-2002-0106

BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an MS-DOS device name...

CVE-2002-0138

CDRDAO 1.1.4 and 1.1.5 are affected by CVE-2002-0138: local users can read arbitrary files via the show-data command. The issue is documented in Mandrake advisory MDKSA-2005:089, which notes a patch is available for the affected packages. Exploitation details are not provided in the supplied docu...

CVE-2002-0125

CVE-2002-0125 concerns a buffer overflow in ClanLib library 0.5 that can allow local users to execute arbitrary code in games using the library (e.g., Super Methane Brothers, Star War, Kwirk, Clankanoid) via a long HOME environment variable. Affected: ClanLib 0.5 in games; root cause: unchecked l...

CVE-2002-0103

CVE-2002-0103 affects Oracle9iAS Web Cache 2.0.0.x. An installer creates executable and configuration files with insecure permissions, enabling local privilege escalation. Impacted scenarios include (1) executing webcached to gain privileges and (2) reading webcache.xml to obtain the administrato...

CVE-2002-0105

CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable...

CVE-2002-0137

CVE-2002-0137 affects CDRDAO 1.1.4 and 1.1.5, where a local user can exploit a symlink to overwrite the user’s ~/.cdrdao configuration file and potentially escalate. The Mandrake advisory (MDKSA-2005:089) notes a second vulnerability (read arbitrary files) and confirms that the packages have been...

CVE-2002-0109

CVE-2002-0109 affects Linksys EtherFast BEFN2PS4, BEFSR41, BEFSR81 routers (and possibly other products). A remote attacker can query with the default SNMP community string “public,” which may cause the device to reveal information and modify configuration, triggering SNMP traps back to the attac...

CVE-2002-0113

CVE-2002-0113 concerns EMC NetWorker (formerly Legato NetWorker) before version 7.0. The affected component is the log storage path, where logs are written to “/nsr/logs/” with world-readable permissions, allowing local users to read potentially sensitive information and possibly gain privileges....

CVE-2002-0112

The CVE-2002-0112 entry affects Etype Eserv 2.97 . Affected component: password-protected file disclosure via a crafted URL containing /./ , enabling remote attackers over the network to view protected files. The available data confirms the vulnerability and impact (partial confidentiality) but p...

CVE-2002-0129

The CVE-2002-0129 issue affects efax 0.9 and earlier when installed setuid root. The vulnerability allows local users to read arbitrary files by using the -d option, which prints the file contents in a warning message. The underlying flaw is a local privilege issue that exposes sensitive data (co...

CVE-2002-0114

CVE-2002-0114 affects EMC NetWorker (Legato NetWorker) prior to version 7.0, where passwords are stored in plaintext in the daemon.log. This enables local users to gain privileges by reading the password from that file. The description notes the issue was originally reported for Legato NetWorker ...

CVE-2002-0119

The CVE-2002-0119 entry concerns the Alcatel Speed Touch Home ADSL Modem. The vulnerability is triggered by remote network scanning using unusual packets (e.g., Nmap with OS detection), which leads to a denial of service (reboot). The NVD entry lists a network-based attack vector with low complex...

CVE-2002-0141

Maelstrom GPL 3.0.1 allows local users to overwrite arbitrary files of other Maelstrom users via a symlink attack on the /tmp/f file...

CVE-2002-0134

CVE-2002-0134 describes an insecure telnet proxy in Avirt Gateway Suite 4.2 where the proxy does not require authentication. This allows remote attackers to connect to the proxy system, list file contents, and execute arbitrary commands via the “dos” command. The vulnerability is reflected across...