CVE-2002-2415

The CVE-2002-2415 entry concerns Allied Telesyn AT-8024 (version 1.3.1) and Rapier 24 switches. The vulnerability allows remote authenticated users to cause a denial of service in the management interface by sending a stream of zero (null) bytes via UDP to a running service. Affected component: m...

CVE-2002-2424

The CVE-2002-2424 entry describes a Cross-site scripting (XSS) vulnerability in PHP(Reactor) 1.2.7 pl1, where remote attackers can inject arbitrary web script or HTML through Javascript placed in the style attribute of an HTML tag. The available details identify the affected product and version a...

CVE-2002-2413

WebSite Pro 3.1.11.0 on Windows is affected by CVE-2002-2413, where a remote attacker can read script source code for files with extensions longer than 3 characters by requesting a URL that uses the equivalent 8.3 file name. The vulnerability is described in multiple sources (RH and NVD entries) ...

CVE-2002-2410

OpenWebMail is affected: Open WebMail 1.7 and 1.71 expose sensitive information via error messages and respond differently for existing vs non-existent users, enabling remote username enumeration and disclosure of certain configuration and version information. Affected component: openwebmail.pl. ...

CVE-2002-2405

CVE-2002-2405 affects Check Point FireWall-1 4.1 and NG when UserAuth is configured to proxy HTTP traffic only, permitting remote attackers to pass unauthorized HTTPS, FTP and possibly other traffic through the firewall. The root cause and actionable remediation details are not provided in the co...

CVE-2002-2369

CVE-2002-2369 affects Perception LiteServe 2.0. The issue enables an attacker to read password-protected files by using a URL containing a leading "/./" sequence, implying a path-traversal flaw in the web-access interface. The provided documents do not specify affected versions beyond LiteServe 2...

CVE-2002-2374

Technical details about CVE-2002-2374 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2002-2372

The CVE-2002-2372 entry concerns the telnet server in Infoprint 21 controller software prior to version 1.056007. The issue is a possible buffer overflow that allows remote attackers to cause a denial of service (crash) by sending a long username. The connected documents corroborate the same affe...

CVE-2002-2367

CVE-2002-2367 affects NEC SOCKS5 1.0 r11 and earlier. The issue is an off-by-one buffer overflow in hostname handling, enabling a remote attacker to cause a denial of service and potentially execute arbitrary code. Exploitation is described via a long hostname. No remediation details are provided...

CVE-2002-2388

The vulnerability CVE-2002-2388 affects INweb POP3 mail server 2.01. The root cause is a buffer overflow triggered by a long HELO command, allowing remote attackers to cause a denial of service (crash). This is described in the CVE entry and corroborated by Red Hat and CVE records. No remediation...

CVE-2002-2370

CVE-2002-2370 affects SWS Web Server versions 0.0.4, 0.0.3 and 0.1.0. The vulnerability is a denial-of-service via a URL request that does not end with a newline, causing the server to crash. Multiple in-depth sources (NVD, Red Hat, CVE List, Nessus/OpenVAS entries) confirm remote, unauthenticate...

CVE-2002-2385

CVE-2002-2385 affects Hotfoon 4.0, specifically the hotfoon4.exe component. Connected sources (Red Hat, CVE List, NVD, EUVD, etc.) describe a buffer overflow vulnerability in Hotfoon 4.0 that can be triggered by a URL containing a long voice phone number. Impact stated: remote denial of service (...

CVE-2002-2371

The CVE-2002-2371 issue affects Linksys WET11 firmware versions 1.31 and 1.32. A remote attacker can cause a denial of service by sending a packet whose DLC header uses the device’s hardware address as the source MAC address, leading to a crash. The provided connected documents confirm the affect...

CVE-2002-2368

CVE-2002-2368 affects NEC SOCKS5 1.0 r11 and earlier, with buffer overflows in proxy.c (GetString for SOCKS5) and in proxy.c (HandleS4Connection for SOCKS4) that can be triggered by a long username. Multiple sources (NVD/Red Hat/CVE/Nessus OpenVAS) describe remote denial of service and potential ...

CVE-2002-2392

Affected product: Winamp 2.65 through 3.0. Vulnerable component: skin files (wsz and wal) stored in a predictable location. Root cause: a URL reference to these skin files can cause embedded code to be executed. Impact: remote attackers could execute arbitrary code. Exploitation details: CVE desc...

CVE-2002-2384

The CVE-2002-2384 entry concerns Hotfoon 4.00. hotfoon4.exe stores user names and passwords in cleartext in the hotfoon2 registry key, enabling local users to gain access to user accounts and steal phone service. Root cause: credentials stored in plaintext in a registry location. Impact: local ac...

CVE-2002-2365

Technical details about CVE-2002-2365 are not publicly available in the provided documents. No affected products, versions, or fixes are disclosed here; monitor for updates.

CVE-2002-2378

The CVE-2002-2378 entry documents a Cross-site Scripting (XSS) vulnerability in AN HTTP 1.41d. The issue arises from accepting a colon (:) in the query string, which is then reflected into the resulting error page. This allows remote attackers to inject arbitrary web script or HTML. Connected ref...

CVE-2002-2381

GTetrinet 0.4.3 and earlier is affected by CVE-2002-2381 due to multiple buffer overflows in tetrinet_inmessage, speclist_add, and config-getthemeinfo. Exploitation allows remote denial of service and potentially arbitrary code execution. Affected components are within GTetrinet; root cause is bu...

CVE-2002-2390

CVE-2002-2390 concerns a buffer overflow in the IDENT daemon (identd) used by Trillian. Affects Trillian versions 0.6351, 0.725, 0.73, 0.74 and 1.0 pro; vulnerability arises from handling a long request, enabling remote denial of service (crash) and potentially arbitrary code execution. Public de...