5354 matches found
CVE-2002-2387
Hyperion FTP server 2.8.1 is affected by a directory traversal vulnerability that allows remote attackers to read arbitrary files via a .. (dot dot) in the LS command. The issue is documented across multiple sources (NVD entry, Red Hat CVE page, CVE listing). The connected documents do not provid...
CVE-2002-2391
The CVE-2002-2391 entry describes a SQL injection in WebChat 1.5 (included with XOOPS 1.0) via the roomid parameter in index.php, enabling remote arbitrary SQL commands. The connected documents provide concrete details (affected software and vulnerable parameter) but do not include exploitation s...
CVE-2002-2366
The CVE-2002-2366 entry concerns Trillian (versions 0.6351, 0.725 and 0.73) with a buffer overflow in the XML parser. The vulnerability can be triggered by a skin with a long colors filename in trillian.xml, allowing remote attackers to cause a crash and possibly execute arbitrary code. The descr...
CVE-2002-2376
CVE-2002-2376 is an XSS vulnerability in E-Guest_sign.pl for E-Guest 1.1. The issue allows remote attackers to inject arbitrary SSI directives, web script, and HTML through the (1) full name, (2) email, (3) homepage, and (4) location parameters. The description notes possible overlap with CVE-200...
CVE-2002-2386
CVE-2002-2386 describes a cross-site scripting (XSS) vulnerability in the Quizz module for XOOPS 1.0. The issue occurs when online question development allows a javascript: URL in the SRC attribute of an IMG tag, enabling remote attackers to inject arbitrary script/HTML. The provided documents id...
CVE-2002-2383
Technical details sufficient to assess affected products, vulnerable components, impact, or fixes are not provided in the supplied documents; monitor for updates from authoritative sources.
CVE-2002-2377
The provided data confirms a cross-site scripting (XSS) vulnerability in ZAP 1.0.3, specifically in addentry.cgi. The flaw allows remote attackers to inject arbitrary SSI directives, web scripts, and HTML through the entry field. Affected component: addentry.cgi function of ZAP 1.0.3. Underlying ...
CVE-2002-2393
The CVE-2002-2393 entry affects Serv-U FTP server versions 3.0, 3.1, and 4.0.0.4. The issue causes denial of service by preventing new connections while validating user folder access rights, triggered by a series of MKD commands. No exploitation details are provided in the connected documents. No...
CVE-2002-2382
The CVE-2002-2382 issue affects CVSup 1.2: a vulnerability in cvsupd.sh that allows a local attacker to overwrite arbitrary files and gain privileges through a symlink attack on /var/tmp/cvsupd.out. Root cause is a symlink-based path manipulation enabling file overwrite and privilege escalation. ...
CVE-2002-2353
CVE-2002-2353 concerns TFTPD32, where versions 2.50 and 2.50.2 allow a remote attacker to read or write arbitrary files by using a full pathname in GET and PUT requests. The issue is network-triggered and arises from the TFTP server’s handling of pathnames (no authentication implied in the entry)...
CVE-2002-2341
CVE-2002-2341 affects SonicWALL SOHO3 version 6.3.0.0 and is described as a cross-site scripting (XSS) vulnerability in content blocking. The issue allows remote attackers to inject arbitrary web script or HTML by supplying a specially crafted blocked URL, enabling potential session or credential...
CVE-2002-2361
The vulnerability CVE-2002-2361 affects Yahoo! Messenger installers (versions 4.0, 5.0, 5.5). The root cause is that the installer does not verify package signatures, allowing a remote attacker to substitute a trojan-laden package via DNS spoofing. Practical impact is installation of unauthentica...
CVE-2002-2355
CVE-2002-2355 affects Netgear FM114P firmware 1.3 wireless firewall. When configured to back up configuration information, it stores DDNS username and password, MAC address filtering table, and possibly other data in cleartext, enabling local users to obtain sensitive information. The available c...
CVE-2002-2359
CVE-2002-2359 describes a cross-site scripting (XSS) vulnerability in the Mozilla 1.0 FTP view feature. The issue allows an attacker to inject arbitrary script or HTML via the title tag of an ftp URL. The affected component is Mozilla 1.0’s FTP view functionality; the root cause is an input handl...
CVE-2002-2338
The CVE-2002-2338 issue affects the POP3 client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier. A remote attacker can trigger a denial of service (no new mail) by sending a mail message containing a dot (.) at a newline, which is treated as the end of the message. The root ...
CVE-2002-2356
CVE-2002-2356 affects HAMweather 2.x. The vulnerability enables remote attackers to modify administrative settings and access sensitive information via a direct request to hwadmin.cgi. According to the NVD entry, the impact includes partial confidentiality and partial integrity with network attac...
CVE-2002-2336
Summary: CVE-2002-2336 affects Norton Personal Firewall 2002 4.0. When configured to automatically block attacks, it allows remote attackers to block IP addresses and cause a denial of service through spoofed packets. The available sources (NVD/Red Hat/Rapid CVE entries) describe the same behavio...
CVE-2002-2342
The CVE-2002-2342 entry describes Bannermatic 1, 2, and 3 failing to protect files (ban.log, ban.bak, ban.dat, banmat.pwd) under the web document root. The vulnerability arises from insufficient access control, allowing direct requests to these files and resulting in exposure of sensitive informa...
CVE-2002-2362
CVE-2002-2362 affects MyMarket 1.71, specifically the form_header.php noticemsg parameter, enabling cross-site scripting (XSS) by remote attackers to inject arbitrary scripts/HTML. The vulnerability is described as XSS with the noticemsg field; no exploitation details or patches are provided in t...
