5498 matches found
CVE-2002-0126
CVE-2002-0126 : Buffer overflow in BlackMoon FTP Server 1.0–1.5 allows remote code execution via a long argument to (1) USER, (2) PASS, or (3) CWD. Affected software is BlackMoon FTP Server; underlying cause is overflow in handling overly long commands/arguments. Impact per the entry is remote ar...
CVE-2002-0105
CVE-2002-0105 affects Caldera UnixWare 7.1.0 (and possibly other OSes) where /var/dt is world-writable. A local attacker can exploit a symlink attack on /var/dt/Xerrors to gain privileges. The root cause is the world-writable /var/dt directory enabling a symlink-based workaround. The provided doc...
CVE-2002-0135
Netopia Timbuktu Pro 6.0.1 and earlier are affected by a denial of service vulnerability discovered via a series of connections to ports 1417–1420. The issue allows remote attackers to crash the service, impacting availability (Partial impact per CVSS). The provided documents identify the affecte...
CVE-2002-0082
The dbm and shm session cache code in modssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the i2dSSLSESSION function, which allows remote attackers to use a buffer overflow to execute arbitrary code via a large client certificate that is signed...
CVE-2001-0718
The CVE-2001-0718 issue affects Microsoft Excel and PowerPoint (across Windows and Macintosh releases up to 2002). Affected components are the macro handling/data stream processing; attackers can bypass macro restrictions by modifying the document data stream, enabling arbitrary code execution wh...
CVE-2001-0538
CVE-2001-0538 describes a vulnerability in the Microsoft Outlook View ActiveX control used by Outlook 2002 and earlier. The flaw allows remote attackers to execute arbitrary code by presenting a malicious HTML email or web page that invokes the control, effectively running code with the caller’s ...
CVE-2002-0005
Buffer overflow in AOL Instant Messenger AIM 4.7.2480, 4.8.2616, and other versions allows remote attackers to execute arbitrary code via a long argument in a game request AddGame...
CVE-2002-0005
CVE-2002-0005 describes a remote buffer overflow in AOL Instant Messenger (AIM) on Windows triggered by a crafted AddGame request, allowing arbitrary code execution. Vulnerable AIM Windows clients include versions 1.0–3.0.1415 and 4.3.2229+ (4.8.2616 cited); the issue involves parsing a long argu...
CVE-2001-0501: Undefined Security Weakness
Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manner that escapes detection by the security scanner...
CVE-2001-0718: Undefined Security Weakness
Vulnerability in 1 Microsoft Excel 2002 and earlier and 2 Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by modifying the data stream in the document...
CVE-2002-0022
Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via a web page that specifies embedded ActiveX controls in a way that causes 2 Unicode strings to be concatenated...
CVE-2002-0062
Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to "routines for moving the physical cursor and scrolling."...
CVE-2002-0023
Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function, which bypass some of GetObject's security checks...
CVE-2002-0053
Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a denial of service or execute arbitrary code via a malformed management request. NOTE: this candidate may be split or merged with other candidates. This and...
CVE-2002-0069
Memory leak in SNMP in Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service...
CVE-2002-0081
Buffer overflows in 1 phpmimesplit in PHP 4.1.0, 4.1.1, and 4.0.6 and earlier, and 2 php3mimesplit in PHP 3.0.x allows remote attackers to execute arbitrary code via a multipart/form-data HTTP POST request when fileuploads is enabled...
CVE-2002-0026
Internet Explorer 5.5 and 6.0 allows remote attackers to bypass restrictions for executing scripts via an object that processes asynchronous events after the initial security checks have been made...
CVE-2002-0060
IRC connection tracking helper module in the netfilter subsystem for Linux 2.4.18-pre9 and earlier does not properly set the mask for conntrack expectations for incoming DCC connections, which could allow remote attackers to bypass intended firewall restrictions...