CVE-2002-2409

Photon microGUI in QNX Neutrino RTOS 6.1.0/6.2.0 is affected: a vulnerability allowing attackers to read clipboard information by sending a direct request to the 1.TEXT file in a hex-encoded user-ID directory. The underlying issue is a confidentiality exposure in the clipboard handling path. Expl...

CVE-2002-2409

Photon microGUI in QNX Neutrino realtime operating system RTOS 6.1.0 and 6.2.0 allows attackers to read user clipboard information via a direct request to the 1.TEXT file in a directory whose name is a hex-encoded user ID...

CVE-2002-2423

CVE-2002-2423 affects Sendmail versions 8.12.0 through 8.12.6. The vulnerability arises because log messages longer than 100 characters are truncated, allowing a remote attacker to prevent the IP address from being logged via a long IDENT response. The connected Red Hat entry and other CVE record...

CVE-2002-2405

CVE-2002-2405 affects Check Point FireWall-1 4.1 and NG when UserAuth is configured to proxy HTTP traffic only, permitting remote attackers to pass unauthorized HTTPS, FTP and possibly other traffic through the firewall. The root cause and actionable remediation details are not provided in the co...

CVE-2002-2397

The CVE-2002-2397 entry concerns Sygate Personal Firewall 5.0, where a remote attacker could bypass firewall filters by spoofing the source IP to 127.0.0.1 or the 127.0.0.0 network. The connected records reiterate the same description (product/version and bypass via spoofed loopback addresses) bu...

CVE-2002-2414

Opera 6.0.3, when used with Squid 2.4 as an HTTPS proxy, does not properly handle accepting a non-global certificate authority (CA) certificate from a site before establishing a subsequent HTTPS connection, which can allow remote attackers to cause a denial of service (crash). The connected docum...

CVE-2002-2396

Buffer overflow in Advanced TFTP atftp 0.5 and 0.6, if installed setuid or setgid, may allow local users to execute arbitrary code via a long argument to the -g option...

CVE-2002-2401

NTVDM.EXE in Windows 2000/NT/XP fails to verify user execution permissions for 16‑bit executables, allowing local users to bypass the loader and run arbitrary programs. Root cause: missing permission verification on 16‑bit file execution. Mitigation/remediation details are not provided in the con...

CVE-2002-2403

Technical details for CVE-2002-2403 are not provided in the connected documents; the initial description includes a vulnerability summary but no additional specifics. Monitor for updates.

CVE-2002-2399

The CVE-2002-2399 entry describes a directory traversal vulnerability in W3Mail 1.0.6, specifically in viewAttachment.cgi, where an attacker can read arbitrary files by supplying a .. sequence in the file parameter. This is supported by multiple sources (NVD entry and Red Hat security page) that ...

CVE-2002-2365

Technical details about CVE-2002-2365 are not publicly available in the provided documents. No affected products, versions, or fixes are disclosed here; monitor for updates.

CVE-2002-2366

The CVE-2002-2366 entry concerns Trillian (versions 0.6351, 0.725 and 0.73) with a buffer overflow in the XML parser. The vulnerability can be triggered by a skin with a long colors filename in trillian.xml, allowing remote attackers to cause a crash and possibly execute arbitrary code. The descr...

CVE-2002-2368

CVE-2002-2368 affects NEC SOCKS5 1.0 r11 and earlier, with buffer overflows in proxy.c (GetString for SOCKS5) and in proxy.c (HandleS4Connection for SOCKS4) that can be triggered by a long username. Multiple sources (NVD/Red Hat/CVE/Nessus OpenVAS) describe remote denial of service and potential ...

CVE-2002-2371

The CVE-2002-2371 issue affects Linksys WET11 firmware versions 1.31 and 1.32. A remote attacker can cause a denial of service by sending a packet whose DLC header uses the device’s hardware address as the source MAC address, leading to a crash. The provided connected documents confirm the affect...

CVE-2002-2372

The CVE-2002-2372 entry concerns the telnet server in Infoprint 21 controller software prior to version 1.056007. The issue is a possible buffer overflow that allows remote attackers to cause a denial of service (crash) by sending a long username. The connected documents corroborate the same affe...

CVE-2002-2377

The provided data confirms a cross-site scripting (XSS) vulnerability in ZAP 1.0.3, specifically in addentry.cgi. The flaw allows remote attackers to inject arbitrary SSI directives, web scripts, and HTML through the entry field. Affected component: addentry.cgi function of ZAP 1.0.3. Underlying ...

CVE-2002-2381

GTetrinet 0.4.3 and earlier is affected by CVE-2002-2381 due to multiple buffer overflows in tetrinet_inmessage, speclist_add, and config-getthemeinfo. Exploitation allows remote denial of service and potentially arbitrary code execution. Affected components are within GTetrinet; root cause is bu...

CVE-2002-2383

Technical details sufficient to assess affected products, vulnerable components, impact, or fixes are not provided in the supplied documents; monitor for updates from authoritative sources.

CVE-2002-2384

The CVE-2002-2384 entry concerns Hotfoon 4.00. hotfoon4.exe stores user names and passwords in cleartext in the hotfoon2 registry key, enabling local users to gain access to user accounts and steal phone service. Root cause: credentials stored in plaintext in a registry location. Impact: local ac...

CVE-2002-2385

CVE-2002-2385 affects Hotfoon 4.0, specifically the hotfoon4.exe component. Connected sources (Red Hat, CVE List, NVD, EUVD, etc.) describe a buffer overflow vulnerability in Hotfoon 4.0 that can be triggered by a URL containing a long voice phone number. Impact stated: remote denial of service (...