CVE-2002-0056

Buffer overflow in SQL Server 7.0 and 2000 allows remote attackers to execute arbitrary code via a long OLE DB provider name to 1 OpenDataSource or 2 OpenRowset in an ad hoc connection...

CVE-2002-0057

XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifying a local file as an XML Data Source...

CVE-2002-0027

Internet Explorer 5.5 and 6.0 allows remote attackers to read certain files and spoof the URL in the address bar by using the Document.open function to pass information between two frames from different domains, a new variant of the "Frame Domain Verification" vulnerability described in...

CVE-2002-0050

Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitrary code via long authentication data...

CVE-2002-0055

SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer BDAT request...

CVE-2002-0024

File Download box in Internet Explorer 5.01, 5.5 and 6.0 allows an attacker to use the Content-Disposition and Content-Type HTML header fields to modify how the name of the file is displayed, which could trick a user into believing that a file is safe to download...

CVE-2002-0054

SMTP service in 1 Microsoft Windows 2000 and 2 Internet Mail Connector IMC in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials...

CVE-2002-0021

Network Product Identification PID Checker in Microsoft Office v. X for Mac allows remote attackers to cause a denial of service crash via a malformed product announcement...

Apache mod_ssl i2d_SSL_SESSION Function SSL Client Certificate Overflow

According to the web server banner, the remote host is using a vulnerable version of modssl. This version has a buffer overflow vulnerability. A remote attacker could exploit this issue to execute arbitrary code. Some vendors patched older versions of modssl, so this might be a false positive...

CVE-2002-0085

cachefsd in Solaris 2.6, 7, and 8 allows remote attackers to cause a denial of service crash via an invalid procedure call in an RPC request...

CVE-2002-0085

CVE-2002-0085 affects Sun Solaris cachefsd on Solaris 2.6, 7, and 8. A remote attacker can cause a denial of service (crash) by sending an RPC request with an invalid procedure call. The vulnerability is in the cachefsd daemon used for NFS/cachefs, with advisory materials (CERT/CA-2002-11 and eSO...

CVE-2002-0089

The CVE-2002-0089 issue affects Sun Solaris admintool across Solaris 2.5 through 8 (SPARC/x86). The vulnerability is a buffer overflow in admintool triggered by long strings in two input vectors: (1) the -d command line option and (2) the PRODVERS variable in the .cdtoc file. This can allow a loc...

CVE-2002-0086

CVE-2002-0086 involves a buffer overflow in the Linux version of Lotus Domino’s bindsock utility (affected: Domino 5.0.4 and 5.0.7). The vulnerability is triggered by excessively long environment variables (Notes_ExecDirectory or PATH), allowing a local attacker to execute code with root privileg...

CVE-2002-0058

Vulnerability in Java Runtime Environment JRE allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in 1 Netscape 6.0 through 6.1 and 4.79 and earlier, 2 Microsoft VM...

CVE-2002-0084

Buffer overflow in the fscachesetup function of cachefsd in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long mount argument...

CVE-2002-0087

bindsock in Lotus Domino 5.07 on Solaris allows local users to create arbitrary files via a symlink attack on temporary files...

CVE-2002-0091

CVE-2002-0091 affects CIDER SHADOW 1.5 and 1.6. The vulnerability consists of CGI scripts that allow remote execution of arbitrary commands through certain form fields due to insufficient input verification. Impact is remote code execution with the privileges of the web server process; exploitati...

CVE-2002-0087

CVE-2002-0087 affects Lotus Domino 5.07 on Solaris. A local user can create arbitrary files through a symlink attack on temporary files used by bindsock, enabling file creation via local access. No remediation details are provided in the supplied documents.

CVE-2002-0089

Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to 1 the -d command line option, or 2 the PRODVERS argument in the .cdtoc file...

CVE-2002-0088

CVE-2002-0088 affects Sun Solaris admintool (2.6, 7, 8). A buffer overflow in the installation path handling allows a local user to gain root privileges by supplying a long media installation path. The underlying cause is insufficient bounds checking on the installation path. Impact is local priv...