CVE-2001-0900

The CVE-2001-0900 entry describes a directory traversal in Gallery’s modules.php (Gallery

CVE-2001-0769

The CVE-2001-0769 entries describe a memory leak in GuildFTPd Server 0.97 that can be triggered by a remote attacker sending a request containing a null character, causing a denial of service. The connected documents provide the vulnerability’s existence and impact but do not specify exploit deta...

OpenSSH 3.x - Challenge-Response Buffer Overflow (1)

OpenSSH 3.x - Challenge-Response Buffer Overflow 1 source: https://www.securityfocus.com/bid/5093/info The OpenSSH team has reported two vulnerabilities in OpenSSH that are remotely exploitable and may allow for unauthenticated attackers to obtain root privileges. The conditions are related to th...

CVE-2002-0594

Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet CSS page that causes an HTTP redirect...

CVE-2002-0580

WorkforceROI Xpede 4.1 allows remote attackers to obtain the database username via a request to datasource.asp, which leaks the username in a form and allows the attacker to more easily conduct brute force password guessing attacks...

CVE-2002-0518

The CVE-2002-0518 issue affects FreeBSD 4.5 and earlier, where the SYN cache (syncache) and SYN cookie (syncookie) handling can crash a remote host. The described vectors are: (1) a SYN packet accepted with syncookies that leads to a null pointer reference in the socket’s TCP options, and (2) kil...

CVE-2002-0453

CVE-2002-0453 affects Oblix NetPoint 5.2 and earlier. The vulnerability is in the account lockout mechanism, which only locks out a user once for the specified period. This allows remote attackers to repeat brute-force password guessing by waiting for the lockout window to reset and attempting pa...

CVE-2002-0419

The CVE-2002-0419 entry describes information leaks in Microsoft IIS versions 4 through 5.1 where remote attackers can learn sensitive details via server responses. Specifically, when Basic authentication is used, the server may reveal its IP address as the realm, potentially exposing NAT-obscure...

CVE-2002-0432

Citadel/UX 5.90 and earlier are affected by a buffer overflow in sysdep.c (functions lprintf and cprintf). The flaw can be triggered by long HELO commands sent to the SMTP server, leading to denial of service and possibly arbitrary code execution on a remote attacker. Affected product/version: Ci...

CVE-2002-0419

Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easily conduct brute force attacks via responses from the server in which 2 in certain configurations, the server IP address is provided as the realm for Basic authentication, which...

CVE-2001-1377

CVE-2001-1377 affects multiple RADIUS implementations that fail to validate the Vendor-Length of Vendor-Specific attributes, enabling a remote attacker to crash the server when Vendor-Length

CVE-2002-0552

The CVE-2002-0552 entry concerns Melange Chat Server 2.02 with multiple buffer overflows that can be triggered remotely or locally. The documented vectors include: (1) a long argument in the /yell command, (2) long lines in the /etc/melange.conf configuration file, and (3) long file names, among ...

CVE-2002-0251

Buffer overflow in licq 1.0.4 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string of format string characters such as "%d"...

CVE-2001-1260

Avaya Argent Office uses weak encryption trivial encoding for passwords, which allows remote attackers to gain administrator privileges by sniffing and decrypting the sniffing the passwords during a system reboot...

CVE-2001-1321

CVE-2001-1321 affects Oracle Internet Directory Server 2.1.1.x and 3.0.1. The issue permits remote attackers to crash the service and potentially execute arbitrary code via invalid encodings of BER OBJECT-IDENTIFIER values, as demonstrated by the PROTOS LDAPv3 test suite. The root cause is in the...

CVE-2002-0255

The CVE-2002-0255 entry concerns the Arescom NetDSL 800 where the default configuration does not require authentication. According to the provided documents, this enables remote attackers to cause a denial of service or reconfigure the router. No exploit details, affected firmware versions, or re...

CVE-2001-1318

The CVE-2001-1318 issue affects Qualcomm Eudora WorldMail Server. Vulnerabilities in the LDAP handling code may allow remote attackers to cause a denial-of-service crash and potentially execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite. Affected component: LDAP service in Wo...

CVE-2002-0346

Technical details about CVE-2002-0346 are not publicly provided in the supplied documents. The connected EUVD/OpenVAS entries reference the CVE but do not disclose affected products, versions, root cause, or remediation. Monitor for updates.

CVE-2002-0351

CVE-2002-0351 affects the CFS daemon (cfsd) and is caused by buffer overflows in the daemon. The vulnerability allows a remote attacker to cause a denial of service and possibly execute arbitrary code, with affected versions including cfsd before 1.3.3-8.1 and 1.4.x before 1.4.1-5. Remediation is...

CVE-2002-0297

The CVE-2002-0297 entry applies to ScriptEase MiniWeb Server 0.95, where a buffer overflow in URL handling during HTTP requests can lead to a denial of service and may allow arbitrary code execution. Impact is described as availability impact (DoS) with potential code execution, but exploitation ...