CVE-2002-2413

WebSite Pro 3.1.11.0 on Windows allows remote attackers to read script source code for files with extensions greater than 3 characters via a URL request that uses the equivalent 8.3 file name...

CVE-2002-2424

Cross-site scripting XSS vulnerability in PHPReactor 1.2.7 pl1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the style attribute of an HTML tag...

CVE-2002-2394

InterScan VirusWall 3.6 for Linux and 3.52 for Windows is affected by a vulnerability that allows remote attackers to bypass antivirus protection and potentially execute arbitrary code through HTTP/1.1 chunked transfer encoding. Affected components: VirusWall on Linux (3.6) and Windows (3.52). Ro...

CVE-2002-2396

This CVE (CVE-2002-2396) affects Advanced TFTP (atftp) versions 0.5 and 0.6. The vulnerability is a buffer overflow in code that runs when atftp is installed with setuid or setgid, allowing a local user to potentially execute arbitrary code via a long argument to the -g option. Root cause is a bu...

CVE-2002-2402

The CVE-2002-2402 entry concerns SURECOM broadband router EP-4501, which ships with default SNMP community strings: read = “public” and read/write = “secret.” This default configuration allows remote attackers to read and modify router configuration information. The vulnerability is tied to the d...

CVE-2002-2404

The CVE-2002-2404 issue affects IISPop email server versions 1.161 and 1.181. The root cause is a buffer overflow in the POP3 handling logic that can be triggered by a long request to the POP3 port (TCP 110). This results in a remote denial of service (crash). The available documents do not provi...

CVE-2002-2406

CVE-2002-2406 affects LiteServe’s HTTP server (versions 2.0, 2.0.1, 2.0.2). The vulnerability is a buffer overflow in the HTTP server that can be triggered by a large number of percent characters (%) in an HTTP GET request, leading to a denial of service (hang). Documented impact is partial avail...

CVE-2002-2408

Gordano Messaging Server (GMS) Mail 8 (NTMail) is affected. The vulnerability arises because the server only filters messages for the first recipient, allowing an attacker to bypass JUCE filters by sending a single message to multiple users on the GMS server. The connected Red Hat and CVE records...

CVE-2002-2410

OpenWebMail is affected: Open WebMail 1.7 and 1.71 expose sensitive information via error messages and respond differently for existing vs non-existent users, enabling remote username enumeration and disclosure of certain configuration and version information. Affected component: openwebmail.pl. ...

CVE-2002-2411

CVE-2002-2411 concerns BannerWheel 1.0 where a buffer overflow in badmin.c allows remote code execution via a long rcmd command. The vulnerability enables arbitrary code execution with network access, no authentication, and could impact confidentiality, integrity, and availability. References ind...

CVE-2002-2413

WebSite Pro 3.1.11.0 on Windows is affected by CVE-2002-2413, where a remote attacker can read script source code for files with extensions longer than 3 characters by requesting a URL that uses the equivalent 8.3 file name. The vulnerability is described in multiple sources (RH and NVD entries) ...

CVE-2002-2415

The CVE-2002-2415 entry concerns Allied Telesyn AT-8024 (version 1.3.1) and Rapier 24 switches. The vulnerability allows remote authenticated users to cause a denial of service in the management interface by sending a stream of zero (null) bytes via UDP to a running service. Affected component: m...

CVE-2002-2418

CVE-2002-2418 describes an XSS vulnerability in acFreeProxy (acFP) 1.33 beta 7 where a crafted URL is inserted into an error page, allowing arbitrary script/HTML execution. Impact: partial integrity with no confidentiality/availability impact stated; attack surface is remote over a network with n...

CVE-2002-2419

CVE-2002-2419 affects the Direct Connect text client (DCTC) client version 0.83.3. The vulnerability allows remote attackers to cause a denial of service (crash) by sending a string that ends with a NULL byte. This is the primary detail provided across sources (NVD; CVE List; Red Hat). The connec...

CVE-2002-2420

The CVE-2002-2420 entry describes a remote command execution vulnerability in site_searcher.cgi (Super Site Searcher) that allows an attacker to execute arbitrary shell commands via metacharacters in the page parameter. Connected documents corroborate the basic description but do not provide conc...

CVE-2002-2421

CVE-2002-2421 affects acWEB 1.14 and is triggered by a remote HTTP request for a MS-DOS device name (e.g., COM2), causing a denial of service (crash). The vulnerability is network-exposed with no authentication and results in complete availability impact; CVSSv2 base score 7.8 (HIGH). Publicly av...

CVE-2002-2422

CVE-2002-2422 is a cross-site scripting (XSS) vulnerability affecting Compaq Insight Management Agents in versions 2.0, 2.1, 3.6.0, 4.2 and 4.3.7. The issue allows a remote attacker to inject arbitrary web script or HTML by supplying a crafted URL, which causes the script to appear in the resulti...

CVE-2002-2424

The CVE-2002-2424 entry describes a Cross-site scripting (XSS) vulnerability in PHP(Reactor) 1.2.7 pl1, where remote attackers can inject arbitrary web script or HTML through Javascript placed in the style attribute of an HTML tag. The available details identify the affected product and version a...

CVE-2002-2412

CVE-2002-2412 affects Winamp 2.80, where authentication credentials are stored in plaintext in the winamp.ini file (in the HTTP-AUTH and winamp sections). This plaintext storage enables local users to access other accounts on the same system. Documented sources from multiple feeds (NVD/Red Hat/CV...

CVE-2002-2398

The vulnerability CVE-2002-2398 affects APBoard versions 2.02 and 2.03, where the new thread posting page allows remote attackers to post messages in protected forums by modifying the insertinto parameter. This is the only detail available in the provided documents; no root cause, affected file/f...