CVE-2002-2269

The CVE-2002-2269 entry concerns a directory traversal vulnerability in Webster HTTP Server. The vulnerability allows remote attackers to read arbitrary files by using a .. (dot dot) in the URL path. The provided documents state the issue and its impact (read access to arbitrary files) but do not...

CVE-2002-2281

Technical details about CVE-2002-2281 are not publicly available in the provided connected documents. Monitor for updates from authoritative sources.

CVE-2002-2280

This CVE affects syslogd on OpenBSD 2.9–3.2 . The vulnerability occurs because the daemon does not update the source IP address of syslog packets when the host’s IP is changed (e.g., via ifconfig) without rebooting. As a result, the syslog server may receive messages with an outdated or incorrect...

CVE-2002-2250

CVE-2002-2250 affects Sybase Adaptive Server 12.0 and 12.5, with two described vectors causing remote arbitrary code execution via (1) a long parameter to xp_freedll and (2) a long database name argument to DBCC CHECKVERIFY. Root cause: multiple buffer overflows in these entry points. Impact is r...

CVE-2002-2235

CVE-2002-2235 affects vBulletin 2.2.9 and earlier, where member2.php mishandles the $perpage parameter by not enforcing an integer type. This can cause an error message to be reflected back to the user without quoting, facilitating cross-site scripting (XSS) and potentially other attacks. Connect...

CVE-2002-2239

The Cisco Optical Service Module (OSM) in Catalyst 6500/7600 chassis with IOS 12.1(8)E–12.1(13.4)E is affected. A malformed-packet can be sent remotely to cause a denial of service (hang) via the OSM, as documented in multiple sources (OSM LC IOS vulnerability). The issue originates from how spec...

CVE-2002-2253

CVE-2002-2253 affects Cyrus Sieve / libSieve 2.1.2 and earlier. The issue arises from multiple buffer overflows in code handling (1) long header names, (2) long IMAP flags, and (3) a script generating many errors that overflow the error string. This allows remote attackers to execute arbitrary co...

CVE-2002-2229

The vulnerability CVE-2002-2229 affects Sapio Design Ltd. WebReflex 1.53. A directory traversal flaw allows remote attackers to read arbitrary files by manipulating … in an HTTP request. The issue is caused by improper validation of path components, enabling access beyond the web root. Impact is ...

CVE-2002-2254

The CVE describes a vulnerability in the Linux kernel’s Netfilter/IPTables: the experimental IP packet queuing feature in kernels 2.4 (up to 2.4.19) and 2.5 (up to 2.5.31). If a privileged process exits while traffic is not queued, a later process with the same PID may access network traffic that...

CVE-2002-2252

The CVE-2002-2252 entry affects Thatware versions up to and including 0.5.0, with the vulnerability located in auth.inc.php. The root cause is a SQL injection flaw that allows remote attackers to execute arbitrary SQL commands via a base64-encoded user parameter. Impact is remote data manipulatio...

CVE-2002-2243

CVE-2002-2243 affects akfingerd (0.5 and possibly earlier). The issue is a denial-of-service vulnerability where the daemon allows only one connection at a time and does not time out connections, enabling an attacker to cause refused connections by opening a connection and not closing it. Connect...

CVE-2002-2238

CVE-2002-2238 describes a directory traversal vulnerability in Kunani ODBC FTP Server 1.0.10 that allows remote attackers to read arbitrary files by supplying a ..\ in a GET request. The affected component is the server software; the underlying issue is improper path validation enabling access ou...

CVE-2002-2257

CVE-2002-2257 affects LIBCGI 1.0.2 and 1.0.3. A stack-based overflow in the parse_field function (cgi_lib.c) allows remote attackers to execute arbitrary code by sending a long argument. Documented impact is remote code execution with a CVSSv2 base score of 10.0 (HIGH). No remediation or patch de...

CVE-2002-2228

CVE-2002-2228 affects MailScanner prior to 4.0 5-1 and prior to 3.2 6-1. The vulnerability allows remote attackers to bypass protection by crafting attachments whose filenames contain (1) extra leading spaces, (2) extra trailing spaces, or (3) alternate character encodings that MailScanner cannot...

CVE-2002-2237

CVE-2002-2237 affects TFTPD32 TFTP server 2.21 and earlier, allowing remote denial of service via a GET request containing a DOS device name (e.g., com1/aux). The CERT advisory associates this with Wyse TFTPD32 in Wyse Simple Imager (WSI) and lists a fixed version path: 2.51 for this CVE, with WS...

CVE-2002-2258

CVE-2002-2258 affects Moby NetSuite. A remote attacker can crash the service by sending an HTTP POST with a Content-Length header containing a large integer or non-numeric value, triggering an access violation after a failed atoi(). The documents do not provide any remediation, exploit details, o...

CVE-2002-2250

Multiple buffer overflows in Sybase Adaptive Server 12.0 and 12.5 allow remote attackers to execute arbitrary code via 1 a long parameter to the xpfreedll extended stored procedure or 2 a long database name argument to the DBCC CHECKVERIFY function...

CVE-2002-2242

The CVE-2002-2242 entry concerns the Apple Package Manager in KisMAC 0.02a and earlier, which modifies file permissions of sensitive files after installation. This behavior could enable attackers to perform unauthorized activities on those files. The connected documents confirm the affected softw...

CVE-2002-2232

CVE-2002-2232 describes a buffer overflow in Enceladus Server Suite 3.9 that allows a remote attacker to execute arbitrary code through a long CD (CWD) command. Connected entries (Red Hat CVE, CVE lists, EUVD, NVD) corroborate the same description. There are no details in the provided documents a...

CVE-2002-2233

CVE-2002-2233 affects Enceladus Server Suite 3.9. It is a directory traversal vulnerability that lets remote attackers list arbitrary directories and may cause a denial of service through misused @ characters in a CD (CWD) command (e.g., @/...., @@@/..c:, @/..@/..). The provided sources confirm t...