CVE-2002-2284

The CVE-2002-2284 entry concerns Netscape Communicator 4.0–4.79, where an applet loading user-supplied Java classes can bypass the JVM security model and allow remote arbitrary Java code execution. The vulnerability affects the applet/JVM interaction and is exploitable via a remote attacker, as i...

CVE-2002-2289

The CVE concerns BadBlue 1.7.1 where soinfo.php calls the PHP phpinfo function, exposing sensitive information and potentially ODBC passwords. The root cause is the phpinfo output being exposed remotely, enabling information disclosure. Publicly documented details are limited to this information;...

CVE-2002-2300

CVE-2002-2300: Buffer overflow in VxWorks ftpd (5.4) on 3Com NBX, affecting NBX 4.0.17 and 4.1.4 with CEL command; remote attacker can crash the FTP server (DoS). Root cause: overflow triggered by a long CEL command. Affected products/components: VxWorks ftpd, 3Com NBX NBX 4.x; exploit details an...

CVE-2002-2275

Fortres 101 4.1 is affected. A local bypass allows a user to press Windows+F for about 30 seconds, opening multiple windows and ultimately crashing explorer.exe, which then launches an unrestricted explorer.exe. The material does not provide remediation details.

CVE-2002-2268

CVE-2002-2268 refers to a buffer overflow in the Webster HTTP Server that enables remote code execution through a long URL. The connected documents corroborate an exploitation path via buffer overflows (e.g., Webster HTTP Server GET Buffer Overflow) and show associated exploit activities in Metas...

CVE-2002-2295

CVE-2002-2295 affects Pico Server (pServ) 2.0 beta 1–beta 5. The issue is a buffer overflow in the HTTP handling path, triggered by: (1) a 1024-byte TCP stream message (off-by-one overflow), (2) long method name, (3) long version number, (4) long User-Agent header, or (5) long file path. This can...

CVE-2002-2297

PHP remote file inclusion vulnerability in artlist.php in Thatware 0.5.2 and 0.5.3 allows remote attackers to execute arbitrary PHP code via the rootpath parameter...

CVE-2002-2292

The CVE-2002-2292 entry describes a directory traversal vulnerability in the Remote Console Applet of Halycon Software iASP 1.0.9, where an attacker can read arbitrary files by using a .. sequence in an HTTP request to port 9095. The affected component is the Remote Console Applet within Halycon ...

CVE-2002-2272

CVE-2002-2272 affects Tomcat 4.0–4.1.12 when using mod_jk 1.2.1 with Apache 1.3–1.3.27. A remote attacker can cause a denial of service by sending an HTTP GET request that uses a Transfer-Encoding chunked field with invalid values, leading to desynchronized communications between Apache and Tomca...

CVE-2002-2267

CVE-2002-2267 affects bogofilter 0.9.0.4 through a symlink attack on the bogopass temporary file, enabling local users to overwrite arbitrary files. Root cause: symlink race allowing file overwrite. Impact: local privilege/ integrity concerns as described (no public details on exploits). Remediat...

CVE-2002-2261

CVE-2002-2261 affects Sendmail versions 8.9.0–8.12.6. The flaw allows remote attackers to bypass relaying restrictions enforced by the check_relay function by spoofing a blank DNS hostname. Root cause is related to how the relay check handles DNS hostnames, enabling unauthorized relaying. No expl...

CVE-2002-2271

The CVE concerns BigFun 1.51b IRC client with Direct Client Connection (DCC) enabled. A buffer overflow is triggered by a long string, allowing a remote attacker to cause a denial of service (crash). No additional technical details (versions beyond 1.51b, specific vulnerable file/byte offset, or ...

CVE-2002-2279

CVE-2002-2279 affects aldap 0.09, with a vulnerability in the bind function in config.inc. This flaw could allow remote attackers to authenticate with Manager permissions. The connected documents provide the affected component and impact but do not specify a fix/patch version or remediation steps...

CVE-2002-2270

The CVE-2002-2270 entry concerns HP-UX (versions 10.10, 10.20, 11.0) with an unspecified vulnerability in the built‑in ied command that allows local users to view normally invisible data via unknown attack vectors. The affected component is the ied command on those HP-UX releases; the underlying ...

CVE-2002-2288

CVE-2002-2288 affects Mambo Site Server 4.0.11. The vulnerability allows a remote attacker to disclose the server’s physical path by issuing an HTTP request to index.php containing a non-existent parameter, which triggers an error message revealing the path. No explicit remediation or patch detai...

CVE-2002-2259

CVE-2002-2259 describes a buffer overflow in the French documentation patch for Gnuplot 3.7 in SuSE Linux before 8.0, enabling local users to execute arbitrary code as root via unknown attack vectors. The public records indicate the vulnerable component is the patch used in SuSE Linux packaging f...

CVE-2002-2264

Technical details for CVE-2002-2264 are not publicly provided in the supplied documents; the connected entries do not specify the affected product, impact, or fix for this CVE. Monitor for updates.

CVE-2002-2265

CVE-2002-2265 affects Open Source Internet Solutions OSIS 5.4 on Tru64 UNIX 4.0G/4.0F, specifically the LDAP Module in System Authentication. The description states a vulnerability allowing remote attackers to gain access to arbitrary files or privileges via unknown attack vectors. No explicit ro...

CVE-2002-2301

CVE-2002-2301 affects Lawson Financials 8.0 when configured to use a third‑party relational database. The underlying issue is that usernames and passwords are stored in a world‑readable file, enabling local users to obtain credentials and log onto the database. The description does not provide ve...

CVE-2002-2302

ShopFactory 5.5–5.8 (3D3.Com) is affected by CVE-2002-2302: remote attackers can modify prices in shopping carts by altering the price value in a hidden form field. The vulnerability arises from client-side price manipulation in the cart, enabling potential price integrity issues. The available s...