CVE-2002-2378

The CVE-2002-2378 entry documents a Cross-site Scripting (XSS) vulnerability in AN HTTP 1.41d. The issue arises from accepting a colon (:) in the query string, which is then reflected into the resulting error page. This allows remote attackers to inject arbitrary web script or HTML. Connected ref...

CVE-2002-2382

The CVE-2002-2382 issue affects CVSup 1.2: a vulnerability in cvsupd.sh that allows a local attacker to overwrite arbitrary files and gain privileges through a symlink attack on /var/tmp/cvsupd.out. Root cause is a symlink-based path manipulation enabling file overwrite and privilege escalation. ...

CVE-2002-2388

The vulnerability CVE-2002-2388 affects INweb POP3 mail server 2.01. The root cause is a buffer overflow triggered by a long HELO command, allowing remote attackers to cause a denial of service (crash). This is described in the CVE entry and corroborated by Red Hat and CVE records. No remediation...

CVE-2002-2367

CVE-2002-2367 affects NEC SOCKS5 1.0 r11 and earlier. The issue is an off-by-one buffer overflow in hostname handling, enabling a remote attacker to cause a denial of service and potentially execute arbitrary code. Exploitation is described via a long hostname. No remediation details are provided...

CVE-2002-2370

CVE-2002-2370 affects SWS Web Server versions 0.0.4, 0.0.3 and 0.1.0. The vulnerability is a denial-of-service via a URL request that does not end with a newline, causing the server to crash. Multiple in-depth sources (NVD, Red Hat, CVE List, Nessus/OpenVAS entries) confirm remote, unauthenticate...

CVE-2002-2391

The CVE-2002-2391 entry describes a SQL injection in WebChat 1.5 (included with XOOPS 1.0) via the roomid parameter in index.php, enabling remote arbitrary SQL commands. The connected documents provide concrete details (affected software and vulnerable parameter) but do not include exploitation s...

CVE-2002-2386

CVE-2002-2386 describes a cross-site scripting (XSS) vulnerability in the Quizz module for XOOPS 1.0. The issue occurs when online question development allows a javascript: URL in the SRC attribute of an IMG tag, enabling remote attackers to inject arbitrary script/HTML. The provided documents id...

CVE-2002-2376

CVE-2002-2376 is an XSS vulnerability in E-Guest_sign.pl for E-Guest 1.1. The issue allows remote attackers to inject arbitrary SSI directives, web script, and HTML through the (1) full name, (2) email, (3) homepage, and (4) location parameters. The description notes possible overlap with CVE-200...

CVE-2002-2371

The CVE-2002-2371 issue affects Linksys WET11 firmware versions 1.31 and 1.32. A remote attacker can cause a denial of service by sending a packet whose DLC header uses the device’s hardware address as the source MAC address, leading to a crash. The provided connected documents confirm the affect...

CVE-2002-2390

CVE-2002-2390 concerns a buffer overflow in the IDENT daemon (identd) used by Trillian. Affects Trillian versions 0.6351, 0.725, 0.73, 0.74 and 1.0 pro; vulnerability arises from handling a long request, enabling remote denial of service (crash) and potentially arbitrary code execution. Public de...

CVE-2002-2374

Technical details about CVE-2002-2374 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2002-2383

Technical details sufficient to assess affected products, vulnerable components, impact, or fixes are not provided in the supplied documents; monitor for updates from authoritative sources.

CVE-2002-2368

CVE-2002-2368 affects NEC SOCKS5 1.0 r11 and earlier, with buffer overflows in proxy.c (GetString for SOCKS5) and in proxy.c (HandleS4Connection for SOCKS4) that can be triggered by a long username. Multiple sources (NVD/Red Hat/CVE/Nessus OpenVAS) describe remote denial of service and potential ...

CVE-2002-2369

CVE-2002-2369 affects Perception LiteServe 2.0. The issue enables an attacker to read password-protected files by using a URL containing a leading "/./" sequence, implying a path-traversal flaw in the web-access interface. The provided documents do not specify affected versions beyond LiteServe 2...

CVE-2002-2358

Cross-site scripting XSS vulnerability in the FTP view feature in Opera 6.0 and 6.01 through 6.04 allows remote attackers to inject arbitrary web script or HTML via the title tag of an FTP URL...

CVE-2002-2338

The CVE-2002-2338 issue affects the POP3 client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier. A remote attacker can trigger a denial of service (no new mail) by sending a mail message containing a dot (.) at a newline, which is treated as the end of the message. The root ...

CVE-2002-2339

CVE-2002-2339 is an XSS vulnerability in Script-Shed GuestBook 1.0, triggered in configure.asp via javascript: URLs in (1) image, (2) img, (3) image=right, (4) img=right, (5) image=left, (6) img=left tags. Affected component: Script-Shed GuestBook 1.0; root cause: improper handling of user-suppli...

CVE-2002-2343

CVE-2002-2343 is an XSS vulnerability in NOCC 0.9–0.9.5 that allows remote attackers to inject arbitrary web script or HTML via email messages. Affected product versions: NOCC 0.9 through 0.9.5. The provided documents do not specify a remediation or patch version. If exploitation details are need...

CVE-2002-2350

CVE-2002-2350 involves an XSS vulnerability in Zorum 2.4. The affected code path is z_user_show.php within dbtreelistproperty_method.php, where the classifier parameter can be manipulated to inject arbitrary script or HTML. Exploitation details are not provided beyond the XSS claim; no exploit sp...

CVE-2002-2351

CVE-2002-2351 affects Eudora 5.1. An attacker could bypass security warnings and possibly execute arbitrary code through email attachments where the name ends with a trailing dot. The connected documents confirm this behavior across Red Hat, CVE listings, and NVD references, all citing the same d...