5498 matches found
CVE-2002-0125
CVE-2002-0125 concerns a buffer overflow in ClanLib library 0.5 that can allow local users to execute arbitrary code in games using the library (e.g., Super Methane Brothers, Star War, Kwirk, Clankanoid) via a long HOME environment variable. Affected: ClanLib 0.5 in games; root cause: unchecked l...
CVE-2002-0134
CVE-2002-0134 describes an insecure telnet proxy in Avirt Gateway Suite 4.2 where the proxy does not require authentication. This allows remote attackers to connect to the proxy system, list file contents, and execute arbitrary commands via the “dos” command. The vulnerability is reflected across...
CVE-2002-0140
CVE-2002-0140 affects Domain Name Relay Daemon (dnrd) version 2.10 and earlier. The vulnerability arises when processing DNS responses; long or malformed replies are not properly handled by parse_query and get_objectname (and possibly other functions), allowing remote DNS sites to trigger a denia...
CVE-2002-0136
CVE-2002-0136 affects Microsoft Internet Explorer 5.5 on Windows 98. The vulnerability enables a remote web page to trigger a denial-of-service (hang) by sending extremely long values in form fields (INPUT/TEXTAREA) that can be auto-filled via JavaScript. The available sources describe the affect...
CVE-2002-0135
Netopia Timbuktu Pro 6.0.1 and earlier allows remote attackers to cause a denial of service crash via a series of connections to one of the ports 1417 - 1420...
CVE-2002-0141
Maelstrom GPL 3.0.1 is affected by CVE-2002-0141: a local user can overwrite arbitrary files of other Maelstrom users via a symlink attack on the /tmp/f file. Root cause is a symlink race condition. The provided documents describe the vulnerability but do not include a remediation or patched vers...
CVE-2002-0129
efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which prints the contents of the file in a warning message...
CVE-2002-0144
CVE-2002-0144 is a directory traversal vulnerability in chuid 1.2 and earlier that allows remote attackers to change ownership of files outside the upload directory via a .. path traversal. Affected: chuid 1.2 and earlier. Impact: unauthorized ownership changes; remote exploitation. Exploit detai...
CVE-2002-0145
chuid 1.2 and earlier does not properly verify the ownership of files that will be changed, which allows remote attackers to change files owned by other users, such as root...
CVE-2002-0144
Directory traversal vulnerability in chuid 1.2 and earlier allows remote attackers to change the ownership of files outside of the upload directory via a .. dot dot attack...
CVE-2002-0108
Allaire Forums 2.0.4/2.0.5 and Forums! 3.0/3.1 allow remote authenticated users to spoof messages by modifying hidden form fields that carry the name and e-mail address. The root cause is lack of verification of user information submitted via hidden fields, enabling impersonation of other users w...
CVE-2002-0124
MDG Computer Services Web Server 4D/eCommerce 3.5.3 is affected by a directory traversal vulnerability exposed via a URL containing ../ and URL-encoded slashes in the HTTP request. This vulnerability allows remote attackers to access restricted paths within the server. The CVE entry describes the...
CVE-2002-0130
CVE-2002-0130 is a buffer overflow in efax 0.9 and earlier when installed setuid root, allowing local users to execute arbitrary code via a long -x argument. Affected package reference appears as efax 0.9a-34 in at least one listing. The vulnerability is exploitable locally; the documents do not ...
CVE-2002-0138
CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command...
CVE-2002-0142
CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of service crash via a series of requests whose physical path is exactly 260 characters long and ends in a series of . dot characters...
CVE-2002-0099
Buffer overflow in Michael Lamont Savant Web Server 3.0 allows remote attackers to cause a denial of service crash via a long HTTP request to the cgi-bin directory in which the CGI program name contains a large number of . dot characters...
CVE-2002-0104
CVE-2002-0104 affects AFTPD 5.4.4. A remote attacker can trigger a CD (CWD) ~ (tilde) command that causes a core dump, which may lead to partial disclosure of sensitive information. The connected documents do not provide a published fix or remediation details.
CVE-2002-0140
Domain Name Relay Daemon dnrd 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parsequery, getobjectname, and possibly other functions...
CVE-2002-0135
Netopia Timbuktu Pro 6.0.1 and earlier are affected by a denial of service vulnerability discovered via a series of connections to ports 1417–1420. The issue allows remote attackers to crash the service, impacting availability (Partial impact per CVSS). The provided documents identify the affecte...