CVE-2002-0222

Etype Eserv 2.97 allows remote attackers to redirect traffic to other sites aka FTP bounce via the PORT command...

CVE-2001-1310

IBM SecureWay 3.2.1 is affected by a vulnerability in the LDAP handling code where invalid BER L-field encodings can crash the server or allow remote code execution, demonstrated by PROTOS LDAPv3 tests. CERT/CC reports this as DoS with potential for privilege/escalation on Solaris and Windows 200...

CVE-2001-1249

CVE-2001-1249 : The vulnerability affects vWebServer 1.2.0 and is caused by accepting a URL containing MS-DOS device names, which can trigger a remote denial of service. The information in the provided documents confirms the impact as a denial of service with a network attack vector, but there ar...

CVE-2001-1239

PowerNet IX is identified as the affected product. The CVE-2001-1239 entry describes a remote-denial-of-service condition triggered by a port scan. The available documents do not provide root cause details, affected versions, specific vulnerable components, exploit code, or remediation steps. Exp...

CVE-2001-1305

CVE-2001-1305 affects ICQ 2001a Alpha and earlier. A remote attacker can cause an ICQ user’s contact list to automatically include arbitrary UINs by visiting a web page whose Content-Type is set to application/x-icq, which IE processes. The connected documents consistently describe ICQ as vulnera...

CVE-2001-1320

Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via exceptional BER encodings possibly buffer overflows, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1241

Un-CGI 1.9 and earlier fail to verify that a CGI script has execution bits set before executing it, allowing remote attackers to run arbitrary commands by pointing Un-CGI at a document that starts with "#!" and the target program name.

CVE-2002-0325

CVE-2002-0325 describes a directory traversal vulnerability in BadBlue prior to 1.6.1 that allows remote attackers to read arbitrary files via a modified dot-dot sequence in the URL. The vulnerability is confirmed in multiple sources (NVD and CVE listings) and is categorized with medium severity ...

CVE-2001-1263

In CVE-2001-1263, telnet95.exe in Pragma InterAccess 4.0 build 5 is affected. The vulnerability allows remote attackers to crash the service (DoS) by sending a large number of characters to port 23, suggesting a possible buffer overflow in the Telnet handling. The available sources describe the v...

CVE-2001-1242

The CVE-2001-1242 entry concerns a directory traversal in Un-CGI 1.9 and earlier, where an attacker can trigger arbitrary code execution by supplying a .. (dot dot) in an HTML form. The vulnerability arises in the way path components are processed, enabling remote exploitation. Affected software:...

IRIX 6.5.x - Performance Co-Pilot Remote Denial of Service

IRIX 6.5.x - Performance Co-Pilot Remote Denial of Service source: https://www.securityfocus.com/bid/4642/info Performance Co-Pilot PCP is a set of services to support system-level performance monitoring developed by SGI. It has traditionally been an IRIX product, however SGI has made it open...

Microsoft IIS Multiple Vulnerabilities (MS02-018)

This IIS Server appears to be vulnerable to one of the cross-site scripting attacks described in MS02-018. The default '404' file returned by IIS uses scripting to output a link to the top level domain part of the url requested. By crafting a particular URL, it is possible to insert arbitrary...

CVE-2002-0077

CVE-2002-0077 affects Microsoft Internet Explorer 5.01, 5.5 and 6.0. The vulnerability arises when objects invoked on HTML pages use CODEBASE/local object handling, causing the Local Computer zone to potentially execute local executables via certain objects (e.g., popup). This could allow remote ...

CVE-2002-0124

MDG Computer Services Web Server 4D/eCommerce 3.5.3 allows remote attackers to exploit directory traversal vulnerability via a ../ dot dot containing URL-encoded slashes in the HTTP request...

CVE-2002-0122

CVE-2002-0122 affects Siemens 3568i WAP mobile phones. The vulnerability enables a remote denial-of-service (crash) when an SMS containing unusual characters is received. The Connected documents provide the affected product and impact but do not specify exploit status or a concrete remediation. N...

CVE-2002-0124

MDG Computer Services Web Server 4D/eCommerce 3.5.3 allows remote attackers to exploit directory traversal vulnerability via a ../ dot dot containing URL-encoded slashes in the HTTP request...

CVE-2002-0116

Palm OS 3.5h and possibly other versions, as used in Handspring Visor and Xircom products, allows remote attackers to cause a denial of service via a TCP connect scan, e.g. from nmap...

CVE-2001-1151

Affected product : Trend Micro OfficeScan Corporate Edition (Virus Buster Corporate Edition). Vulnerability : Remote disclosure of sensitive configuration data via unauthenticated access to /officescan/hotdownload, specifically reading the configuration file ofcscan.ini which contains a weakly en...

CVE-2001-1210

CVE-2001-1210 concerns Cisco UBR900 series DOCSIS routers that ship without SNMP access restrictions, enabling remote read/write of MIB data via arbitrary SNMP community strings. The root cause is lack of SNMP access controls on the management plane; impact is partial confidentiality/integrity of...

CVE-2001-1107

CVE-2001-1107 affects SnapStream PVS 1.2a, where passwords are stored in plaintext in the SSD.ini file. This storage flaw could allow a remote attacker to gain privileges on the affected server. The available documents do not specify a patch or version that fixes the issue, nor provide exploit de...