CVE-2002-2346

CVE-2002-2346 affects phpBB 2.0 through 2.0.3. The vulnerability arises in how avatar file names are generated: they use hex-encoded client IP addresses, allowing remote attackers to obtain the client’s IP address by inspecting the uploaded avatar filename. The connected Red Hat and CVE records c...

CVE-2002-2363

CVE-2002-2363 affects HP-UX 11.00 via the VJE.VJE-RUN component, which adds the bin directory to /etc/PATH, enabling local users to gain privileges. The vulnerability is rooted in PATH modification by VJE.VJE-RUN, with the described impact including potential privilege elevation. Exploitation det...

CVE-2002-2343

CVE-2002-2343 is an XSS vulnerability in NOCC 0.9–0.9.5 that allows remote attackers to inject arbitrary web script or HTML via email messages. Affected product versions: NOCC 0.9 through 0.9.5. The provided documents do not specify a remediation or patch version. If exploitation details are need...

CVE-2002-2337

CVE-2002-2337 affects Kaspersky Anti-Hacker 1.0. When configured to automatically block attacks, the product allows remote attackers to block IP addresses and cause a denial of service via spoofed packets. The provided sources describe the affected product and impact but do not offer concrete rem...

CVE-2002-2349

phpinfo.php in phpBBmod 1.3.3 executes the phpinfo function, which allows remote attackers to obtain sensitive environment information...

CVE-2002-2357

MailEnable 1.5 015 through 1.5 018 is affected by a remote denial-of-service vulnerability (crash) triggered by a long USER string, possibly due to a buffer overflow. The vulnerability is network-exposed with no authentication required and impacts availability. The provided connected sources corr...

CVE-2002-2348

The CVE-2002-2348 issue affects Authoria HR’s athcgi.exe and is a Cross-site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the command parameter. The vulnerability is sourced from multiple records (NVD, CVE lists) and mirrors in Red Hat and ...

CVE-2002-2349

CVE-2002-2349 affects phpBBmod 1.3.3 where a call to phpinfo() can be triggered remotely to reveal sensitive environment information. The provided documents reiterate that phpinfo output exposes configuration and server variables, indicating a partial confidentiality impact. No explicit remediati...

CVE-2002-2351

CVE-2002-2351 affects Eudora 5.1. An attacker could bypass security warnings and possibly execute arbitrary code through email attachments where the name ends with a trailing dot. The connected documents confirm this behavior across Red Hat, CVE listings, and NVD references, all citing the same d...

CVE-2002-2339

CVE-2002-2339 is an XSS vulnerability in Script-Shed GuestBook 1.0, triggered in configure.asp via javascript: URLs in (1) image, (2) img, (3) image=right, (4) img=right, (5) image=left, (6) img=left tags. Affected component: Script-Shed GuestBook 1.0; root cause: improper handling of user-suppli...

CVE-2002-2350

CVE-2002-2350 involves an XSS vulnerability in Zorum 2.4. The affected code path is z_user_show.php within dbtreelistproperty_method.php, where the classifier parameter can be manipulated to inject arbitrary script or HTML. Exploitation details are not provided beyond the XSS claim; no exploit sp...

CVE-2002-2315

The vulnerability CVE-2002-2315 affects Cisco IOS 11.2.x and 12.0.x, where the redirect table can grow without bound, enabling remote DoS via spoofed ICMP redirect packets to the router. Connected sources corroborate the issue and indicate a memory exhaustion vector caused by ICMP redirects. Impa...

CVE-2002-2319

CVE-2002-2319 affects MySimpleNews: a static code injection vulnerability in users.php allows remote attackers to inject arbitrary PHP code and HTML via the LOGIN, DATA, and MESS parameters, which are inserted into news.php3. This indicates input handling flaws that enable arbitrary code executio...

CVE-2002-2309

php.exe in PHP 3.0 through 4.2.2, when running on Apache, does not terminate properly, which allows remote attackers to cause a denial of service via a direct request without arguments...

CVE-2002-2317

CVE-2002-2317 concerns VelociRaptor 1.0, indicating a memory leak in three components: httpd, nntpd, and the vpn driver. The underlying issue is a memory consumption DoS that can be triggered by remote attackers using an unknown method. Referenced sources (NVD, Red Hat, CVE listings) confirm the ...

CVE-2002-2333

CVE-2002-2333 affects Konqueror in KDE 2.1–3.0, including 3.0.2. A buffer overflow in the image handling (IMG tag with oversized width/height) allows a remote attacker to crash the application, causing a denial of service. The connected Red Hat and CVE records confirm the same vulnerability descr...

CVE-2002-2314

CVE-2002-2314 affects Mozilla 1.0. Remote attackers could steal cookies from other domains using a crafted javascript: URL that begins with // and ends in a newline, causing a host/path check to fail. The issue is addressed in Mozilla security fixes for 1.0.1; advisories also reference updates to...

CVE-2002-2334

CVE-2002-2334 affects Joe text editor versions 2.8–2.9.7. Backup files do not have their group and user setuid bits removed, which could allow local users to execute arbitrary setuid/setgid root programs when root edits scripts owned by other users. The NVD CVSS score is 3.6 (LOW) with local atta...

CVE-2002-2324

The CVE-2002-2324 entry concerns Windows XP Professional, where the System Restore directory and possibly other subdirectories within System Volume Information have insecure ACL permissions. The underlying issue is insufficient access controls, allowing local users to access restricted files and ...

CVE-2002-2309

Summary: CVE-2002-2309 affects PHP 3.0–4.2.2 when running on Apache, where php.exe does not terminate properly, enabling a remote attacker to cause a denial of service via a direct request without arguments. The linked Red Hat and CVE records corroborate the vulnerability description across multi...