CVE-2002-2356

CVE-2002-2356 affects HAMweather 2.x. The vulnerability enables remote attackers to modify administrative settings and access sensitive information via a direct request to hwadmin.cgi. According to the NVD entry, the impact includes partial confidentiality and partial integrity with network attac...

CVE-2002-2357

MailEnable 1.5 015 through 1.5 018 is affected by a remote denial-of-service vulnerability (crash) triggered by a long USER string, possibly due to a buffer overflow. The vulnerability is network-exposed with no authentication required and impacts availability. The provided connected sources corr...

CVE-2002-2361

The vulnerability CVE-2002-2361 affects Yahoo! Messenger installers (versions 4.0, 5.0, 5.5). The root cause is that the installer does not verify package signatures, allowing a remote attacker to substitute a trojan-laden package via DNS spoofing. Practical impact is installation of unauthentica...

CVE-2002-2363

CVE-2002-2363 affects HP-UX 11.00 via the VJE.VJE-RUN component, which adds the bin directory to /etc/PATH, enabling local users to gain privileges. The vulnerability is rooted in PATH modification by VJE.VJE-RUN, with the described impact including potential privilege elevation. Exploitation det...

CVE-2002-2362

CVE-2002-2362 affects MyMarket 1.71, specifically the form_header.php noticemsg parameter, enabling cross-site scripting (XSS) by remote attackers to inject arbitrary scripts/HTML. The vulnerability is described as XSS with the noticemsg field; no exploitation details or patches are provided in t...

CVE-2002-2349

phpinfo.php in phpBBmod 1.3.3 executes the phpinfo function, which allows remote attackers to obtain sensitive environment information...

CVE-2002-2348

The CVE-2002-2348 issue affects Authoria HR’s athcgi.exe and is a Cross-site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the command parameter. The vulnerability is sourced from multiple records (NVD, CVE lists) and mirrors in Red Hat and ...

CVE-2002-2337

CVE-2002-2337 affects Kaspersky Anti-Hacker 1.0. When configured to automatically block attacks, the product allows remote attackers to block IP addresses and cause a denial of service via spoofed packets. The provided sources describe the affected product and impact but do not offer concrete rem...

CVE-2002-2341

CVE-2002-2341 affects SonicWALL SOHO3 version 6.3.0.0 and is described as a cross-site scripting (XSS) vulnerability in content blocking. The issue allows remote attackers to inject arbitrary web script or HTML by supplying a specially crafted blocked URL, enabling potential session or credential...

CVE-2002-2355

CVE-2002-2355 affects Netgear FM114P firmware 1.3 wireless firewall. When configured to back up configuration information, it stores DDNS username and password, MAC address filtering table, and possibly other data in cleartext, enabling local users to obtain sensitive information. The available c...

CVE-2002-2336

Summary: CVE-2002-2336 affects Norton Personal Firewall 2002 4.0. When configured to automatically block attacks, it allows remote attackers to block IP addresses and cause a denial of service through spoofed packets. The available sources (NVD/Red Hat/Rapid CVE entries) describe the same behavio...

CVE-2002-2346

CVE-2002-2346 affects phpBB 2.0 through 2.0.3. The vulnerability arises in how avatar file names are generated: they use hex-encoded client IP addresses, allowing remote attackers to obtain the client’s IP address by inspecting the uploaded avatar filename. The connected Red Hat and CVE records c...

CVE-2002-2359

CVE-2002-2359 describes a cross-site scripting (XSS) vulnerability in the Mozilla 1.0 FTP view feature. The issue allows an attacker to inject arbitrary script or HTML via the title tag of an ftp URL. The affected component is Mozilla 1.0’s FTP view functionality; the root cause is an input handl...

CVE-2002-2353

CVE-2002-2353 concerns TFTPD32, where versions 2.50 and 2.50.2 allow a remote attacker to read or write arbitrary files by using a full pathname in GET and PUT requests. The issue is network-triggered and arises from the TFTP server’s handling of pathnames (no authentication implied in the entry)...

CVE-2002-2342

The CVE-2002-2342 entry describes Bannermatic 1, 2, and 3 failing to protect files (ban.log, ban.bak, ban.dat, banmat.pwd) under the web document root. The vulnerability arises from insufficient access control, allowing direct requests to these files and resulting in exposure of sensitive informa...

CVE-2002-2349

CVE-2002-2349 affects phpBBmod 1.3.3 where a call to phpinfo() can be triggered remotely to reveal sensitive environment information. The provided documents reiterate that phpinfo output exposes configuration and server variables, indicating a partial confidentiality impact. No explicit remediati...

CVE-2002-2336: Undefined Security Weakness

Norton Personal Firewall 2002 4.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets...

CVE-2002-2311

Microsoft Internet Explorer 6.0 and possibly others allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript 1 event.ctrlKey or 2 event.shiftKey onkeydown event contained in a webpage. NOTE: it was reported that the vendor has disputed the...

CVE-2002-2321

Cross-site scripting XSS vulnerability in 1 showcat.php and 2 addyoursite.php in phpLinkat 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

CVE-2002-2307

The CVE-2002-2307 entry describes a vulnerability in BenHur Firewall release 3 update 066 fix 2 where remote attackers can access services by connecting from source port 20, due to an ACL restriction bypass. Connected documents corroborate a port-20 bypass vulnerability and reference published ad...