5354 matches found
CVE-2002-2411
CVE-2002-2411 concerns BannerWheel 1.0 where a buffer overflow in badmin.c allows remote code execution via a long rcmd command. The vulnerability enables arbitrary code execution with network access, no authentication, and could impact confidentiality, integrity, and availability. References ind...
CVE-2002-2403
Technical details for CVE-2002-2403 are not provided in the connected documents; the initial description includes a vulnerability summary but no additional specifics. Monitor for updates.
CVE-2002-2401
NTVDM.EXE in Windows 2000/NT/XP fails to verify user execution permissions for 16‑bit executables, allowing local users to bypass the loader and run arbitrary programs. Root cause: missing permission verification on 16‑bit file execution. Mitigation/remediation details are not provided in the con...
CVE-2002-2413
WebSite Pro 3.1.11.0 on Windows allows remote attackers to read script source code for files with extensions greater than 3 characters via a URL request that uses the equivalent 8.3 file name...
CVE-2002-2396
This CVE (CVE-2002-2396) affects Advanced TFTP (atftp) versions 0.5 and 0.6. The vulnerability is a buffer overflow in code that runs when atftp is installed with setuid or setgid, allowing a local user to potentially execute arbitrary code via a long argument to the -g option. Root cause is a bu...
CVE-2002-2409
Photon microGUI in QNX Neutrino RTOS 6.1.0/6.2.0 is affected: a vulnerability allowing attackers to read clipboard information by sending a direct request to the 1.TEXT file in a hex-encoded user-ID directory. The underlying issue is a confidentiality exposure in the clipboard handling path. Expl...
CVE-2002-2414
Opera 6.0.3, when used with Squid 2.4 as an HTTPS proxy, does not properly handle accepting a non-global certificate authority (CA) certificate from a site before establishing a subsequent HTTPS connection, which can allow remote attackers to cause a denial of service (crash). The connected docum...
CVE-2002-2420
The CVE-2002-2420 entry describes a remote command execution vulnerability in site_searcher.cgi (Super Site Searcher) that allows an attacker to execute arbitrary shell commands via metacharacters in the page parameter. Connected documents corroborate the basic description but do not provide conc...
CVE-2002-2423
CVE-2002-2423 affects Sendmail versions 8.12.0 through 8.12.6. The vulnerability arises because log messages longer than 100 characters are truncated, allowing a remote attacker to prevent the IP address from being logged via a long IDENT response. The connected Red Hat entry and other CVE record...
CVE-2002-2399
Directory traversal vulnerability in viewAttachment.cgi in W3Mail 1.0.6 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...
CVE-2002-2398
The vulnerability CVE-2002-2398 affects APBoard versions 2.02 and 2.03, where the new thread posting page allows remote attackers to post messages in protected forums by modifying the insertinto parameter. This is the only detail available in the provided documents; no root cause, affected file/f...
CVE-2002-2396
Buffer overflow in Advanced TFTP atftp 0.5 and 0.6, if installed setuid or setgid, may allow local users to execute arbitrary code via a long argument to the -g option...
CVE-2002-2394
InterScan VirusWall 3.6 for Linux and 3.52 for Windows is affected by a vulnerability that allows remote attackers to bypass antivirus protection and potentially execute arbitrary code through HTTP/1.1 chunked transfer encoding. Affected components: VirusWall on Linux (3.6) and Windows (3.52). Ro...
CVE-2002-2412
CVE-2002-2412 affects Winamp 2.80, where authentication credentials are stored in plaintext in the winamp.ini file (in the HTTP-AUTH and winamp sections). This plaintext storage enables local users to access other accounts on the same system. Documented sources from multiple feeds (NVD/Red Hat/CV...
CVE-2002-2408
Gordano Messaging Server (GMS) Mail 8 (NTMail) is affected. The vulnerability arises because the server only filters messages for the first recipient, allowing an attacker to bypass JUCE filters by sending a single message to multiple users on the GMS server. The connected Red Hat and CVE records...
CVE-2002-2404
The CVE-2002-2404 issue affects IISPop email server versions 1.161 and 1.181. The root cause is a buffer overflow in the POP3 handling logic that can be triggered by a long request to the POP3 port (TCP 110). This results in a remote denial of service (crash). The available documents do not provi...
CVE-2002-2422
CVE-2002-2422 is a cross-site scripting (XSS) vulnerability affecting Compaq Insight Management Agents in versions 2.0, 2.1, 3.6.0, 4.2 and 4.3.7. The issue allows a remote attacker to inject arbitrary web script or HTML by supplying a crafted URL, which causes the script to appear in the resulti...
CVE-2002-2419
CVE-2002-2419 affects the Direct Connect text client (DCTC) client version 0.83.3. The vulnerability allows remote attackers to cause a denial of service (crash) by sending a string that ends with a NULL byte. This is the primary detail provided across sources (NVD; CVE List; Red Hat). The connec...
CVE-2002-2409
Photon microGUI in QNX Neutrino realtime operating system RTOS 6.1.0 and 6.2.0 allows attackers to read user clipboard information via a direct request to the 1.TEXT file in a directory whose name is a hex-encoded user ID...