5498 matches found
CVE-2002-0043
sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail program, which could allow local users to gain root privileges by modifying environment variables and changing how the mail program is invoked...
CVE-2002-0010
Bugzilla before 2.14.1 allows remote attackers to inject arbitrary SQL code and create files or gain privileges via 1 the sql parameter in buglist.cgi, 2 invalid field names from the "boolean chart" query in buglist.cgi, 3 the mybugslink parameter in userprefs.cgi, 4 a malformed bug ID in the...
CVE-2002-0009
showbug.cgi in Bugzilla before 2.14.1 allows a user with "Bugs Access" privileges to see other products that are not accessible to the user, by submitting a bug and reading the resulting Product pulldown menu...
CVE-2002-0046
Linux kernel, and possibly other operating systems, allows remote attackers to read portions of memory via a series of fragmented ICMP packets that generate an ICMP TTL Exceeded response, which includes portions of the memory in the response packet...
FAQManager 'faqmanager.cgi' 'toc' Parameter Arbitrary File Access
FAQManager is a Perl-based CGI for maintaining a list of Frequently Asked Questions. Using a specially crafted URL, a remote attacker can use this CGI to view arbitrary files on the web server. For example: http://www.example.com/cgi-bin/faqmanager.cgi?toc=/etc/passwd%00 %NASLMINLEVEL 70300 This...
CVE-2002-0008
Bugzilla before 2.14.1 allows remote attackers to 1 spoof a user comment via an HTTP request to processbug.cgi using the "who" parameter, instead of the Bugzillalogin cookie, or 2 post a bug as another user by modifying the reporter parameter to enterbug.cgi, which is passed to postbug.cgi...
CVE-2002-0008
CVE-2002-0008 affects Bugzilla prior to 2.14.1. The vulnerability allows remote attackers to impersonate users: (1) spoof a user comment by sending a request to process_bug.cgi using the who parameter instead of the Bugzilla_login cookie, and (2) post a bug as another user by altering the reporte...
CVE-2002-0010
Bugzilla prior to 2.14.1 contains multiple input handling flaws that enable remote SQL injection and file creation, potentially elevating privileges. Specifically, via: (1) sql parameter in buglist.cgi, (2) invalid field names in the boolean chart query in buglist.cgi, (3) mybugslink parameter in...
CVE-2002-0010
Bugzilla before 2.14.1 allows remote attackers to inject arbitrary SQL code and create files or gain privileges via 1 the sql parameter in buglist.cgi, 2 invalid field names from the "boolean chart" query in buglist.cgi, 3 the mybugslink parameter in userprefs.cgi, 4 a malformed bug ID in the...
CVE-2002-1596
Cisco SN 5420 Storage Router 1.15 and earlier allows remote attackers to cause a denial of service router crash via an HTTP request with large headers...
CVE-2002-1600
Directory traversal vulnerability in Mike Spice's My Classifieds classifieds.cgi before 1.3 allows remote attackers to overwrite arbitrary files via the category parameter...
CVE-2002-0001
CVE-2002-0001 affects mutt up to versions prior to 1.2.5.1 and 1.3.x prior to 1.3.25. The flaw is in the RFC822 address parser, where an improperly terminated comment or phrase in the address list can allow remote code execution. Debian/OpenVAS entries confirm upstream fixes in 1.2.5.1 and 1.3.25...
CVE-2002-0001
Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list...
[SECURITY] [DSA-096-2] mutt buffer overflow, sparc update
Package : mutt Problem type : buffer overflow Debian-specific: no The sparc binary for the mutt security fix described in DSA-096-1 is now available. wget url will fetch the file for you dpkg -i file.deb will install the referenced file. Debian GNU/Linux 2.2 alias potato -...
OpenBSD - ftp Local Overflow
OpenBSD - ftp Local Overflow / 7350-crocodile - x86/OpenBSD ftp exploit by lorian and scut / TESO=20 TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed t...
CVE-2001-0240
Microsoft Word before Word 2002 is vulnerable to macros being executed automatically when opening an RTF document that links to a template containing the embedded macro. The root cause is Word’s failure to detect macros embedded in templates referenced by RTF documents, allowing a malicious docum...
CVE-2001-0240: Undefined Security Weakness
Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format RTF document that links to a template with the embedded macro...
Security Update, February 13, 2002 (MSXML 4.0)
Security Update, February 13, 2002 MSXML 4.0...