CVE-2002-2307

The CVE-2002-2307 entry describes a vulnerability in BenHur Firewall release 3 update 066 fix 2 where remote attackers can access services by connecting from source port 20, due to an ACL restriction bypass. Connected documents corroborate a port-20 bypass vulnerability and reference published ad...

CVE-2002-2310

Technical details about CVE-2002-2310 are not publicly available in the provided documents. No affected products/versions or remediation specifics are described here. Monitor for updates from connected sources.

CVE-2002-2332

CVE-2002-2332 concerns a buffer overflow in Opera 6.01 triggered by an IMG tag with oversized width/height attributes, enabling a remote attacker to cause a denial-of-service crash. The connected documents confirm the issue but do not provide exploitation details or a fix. No remediation is speci...

CVE-2002-2326

The CVE concerns Mail.app in macOS X 10.0–10.0.4 and 10.1–10.1.5, where iDisk credentials are sent in cleartext when connecting to Mac.com. The root cause is the default Mail.app configuration allowing unencrypted authentication, enabling an attacker on the network to sniff passwords. The provide...

CVE-2002-2321

Cross-site scripting XSS vulnerability in 1 showcat.php and 2 addyoursite.php in phpLinkat 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

CVE-2002-2330

CVE-2002-2330 is a documented XSS vulnerability in StatsPlus 1.25, affecting the stat.pl script. The issue allows remote attackers to inject arbitrary script/HTML by manipulating HTTP_USER_AGENT or HTTP_REFERER, which is written to stats.html and executed in client browsers. The vulnerability is ...

CVE-2002-2335

CVE-2002-2335 affects Killer Protection 1.0, where the vars.inc include file is stored under the web root with insufficient access control. This allows remote attackers to obtain user names and passwords and to log in using protection.php. The connected documents confirm the vulnerability descrip...

CVE-2002-2316

Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 may fail to learn MAC addresses from a single initial packet, causing unicast traffic to be broadcast and allowing remote attackers to sniff sensitive network information. The connected Red Hat and CVE registries confirm th...

CVE-2002-2311

Microsoft Internet Explorer 6.0 and possibly others allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript 1 event.ctrlKey or 2 event.shiftKey onkeydown event contained in a webpage. NOTE: it was reported that the vendor has disputed the...

CVE-2002-2321

CVE-2002-2321 is a cross-site scripting (XSS) vulnerability affecting phpLinkat 0.1.0, exploitable via the catid parameter in showcat.php and addyoursite.php. The provided documents identify remote injection of arbitrary web script or HTML, but do not include explicit exploit details, affected ve...

CVE-2002-2318

CVE-2002-2318 affects Falcon Web Server 2.0.0.1009 through 2.0.0.1021. The vulnerability is a cross-site scripting (XSS) flaw where an attacker can inject arbitrary script/HTML via the request URI, which is then embedded in 301 error messages and rendered by 404 error responses. The underlying ca...

CVE-2002-2328

Technical details for CVE-2002-2328 are not publicly available in the provided documents. No affected products, versions, or remediation are specified here. Monitor for updates from Red Hat/NVD/CVE sources.

CVE-2002-2313

The vulnerability CVE-2002-2313 affects Eudora email client 5.1.1 when the “use Microsoft viewer” option is enabled. An HTML email containing a META refresh tag that references an embedded .mhtml file with ActiveX controls can trigger execution of a second embedded program processed by Internet E...

CVE-2002-2318

Cross-site scripting XSS vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and executed by 404 error messages...

CVE-2002-2312

Technical details about CVE-2002-2312 are not publicly available in the provided connected documents. The available records repeat the basic description without added affected versions, impact specifics, or remediation guidance. Monitor for updates from official advisories.

CVE-2002-2322

CVE-2002-2322 affects Ultimate PHP Board (UPB) 1.0b, where the users.dat data file is stored under the web root with insufficient access control. This exposes usernames and passwords to remote attackers via the exposed file. The vulnerability is caused by improper access control rather than code ...

CVE-2002-2311

Microsoft Internet Explorer 6.0 (and possibly others) is affected by CVE-2002-2311. The issue arises when a webpage contains a onkeydown handler that checks event.ctrlKey or event.shiftKey; with those keys pressed, a remote attacker can upload arbitrary file contents. This is the underlying vulne...

CVE-2002-2323

CVE-2002-2323 affects Sun PC NetLink 1.0–1.2. The issue is an improper setting of ACLs for files/directories that use symbolic links and have been restored from backup, potentially allowing bypass of access restrictions for local or remote attackers. Connected advisories (Red Hat, PT Security) re...

CVE-2002-2308

Technical details (affected products, versions, root cause, impact, or fixes) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2002-2306

The vulnerability CVE-2002-2306 affects Sharman Networks KaZaA Media Desktop 1.7.1. It allows remote attackers to cause a Denial of Service by sending several large messages, leading to CPU consumption on the affected host. The available documents identify the affected software and the impact (av...