CVE-2002-1515

Directory traversal vulnerability in avatar.php in CoolForum 0.5 beta allows remote attackers to read arbitrary files via .. dot dot sequences in the img parameter...

AntiHacker

я принимал участие в бета-тестировании этого продукта и указал эту ошибку ещё в ноябре 2002 года, но от разработчиков не получил никаких сообщений, хотя и задавал вопрос об этой ошибке многократно до февраля 2003. эта ошибка была найдена в продукте Kaspersky AntiHacker v. 1.0.xxx на ОС win2k рус....

PT-2002-1027 · Dump · Dump

Name of the Vulnerable Software and Affected Versions: dump versions 0.4 b10 through 0.4 b29 Description: The issue allows local users to cause a denial of service, preventing execution, by using the flock function to lock the /etc/dumpdates file. This can lead to a disruption in the availability...

bogofilter contrib/bogopass temp file vulnerability

bogofilter-SA-2002:01.bogopass Topic: vulnerability in bogopass Announcement: bogofilter-SA-2002:01 Writer: Matthias Andree Version: 1.00 Announced: 2002-11-29 Category: contrib Type: temporary file created insecurely Impact: anonymous local file destruction or change Credits: - Danger: medium th...

KeyFocus KF Web Server File Disclosure Vulnerability

KeyFocus Web server is a Win32 HTTP server with web administration, a variety of logging formats, such as NCSA and W3C, CGI, compression, memory caching of static documents, directory indexing, pre-defined MIME settings, internal authentication with support for multiple realms, and a variety of U...

PT-2002-2004 · Care 2002 · Care 2002

Name of the Vulnerable Software and Affected Versions: CARE 2002 versions prior to beta 1.0.02 Description: The issue allows remote attackers to read arbitrary files via .. dot dot sequences and null characters in the lang parameter, which is processed by a call to the include function...

CVE-2002-0197

Technical details (affected products, versions, vulnerabilities, exploitation) are not publicly provided in the connected documents. Monitor for updates.

CVE-2002-0492

DCShop 1.002 Beta is affected by CVE-2002-0492. The vulnerability lies in dcshop.cgi, allowing remote attackers to delete arbitrary setup files via a null character in the database parameter. Practical impact described in sources is the unauthorized deletion of setup files; no further exploit det...

CVE-2002-0249

PHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote attackers to obtain the physical path of the php.exe via a request with malformed arguments such as /123, which leaks the pathname in the error message...

dnstools: authentication bypass vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ppp-design found the following authentication bypass vulnerability in dnstools: Details - ------- Product: dnstools Affected Version: 2.0 beta 4 and maybe all versions before Immune Version: 2.0 beta 5 OS affected: Linux only Vendor-URL:...

CVE-2002-0142

CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of service crash via a series of requests whose physical path is exactly 260 characters long and ends in a series of . dot characters...

DCShop Beta 1.0 - Form Manipulation

source: https://www.securityfocus.com/bid/4356/info DCShop Beta is a freely available shopping cart system, written in Perl. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. It is possible to overwrite setup files .setup by submitting attacker-supplied...

CVE-2002-0142

Pi3Web CGI handler in Windows 2.0 beta 1/2 is vulnerable to a denial of service through very long CGI parameters; vendors indicate FIX in Pi3Web

CVE-2001-0558

CVE-2001-0558 affects Jana Webserver 2.01 beta 1 and earlier. A remote attacker can cause a denial of service by sending a URL request that includes an MS-DOS device name (e.g., GET /aux HTTP/1.0). Connected sources corroborate the DOS impact via MS-DOS device names; OpenVAS/Nessus references lis...

CVE-2001-0500

A buffer overflow vulnerability exists in the ISAPI extension (idq.dll) within Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier versions. A remote attacker can execute arbitrary commands by sending a specially crafted request to Internet Data Administration (.ida) and Intern...

CVE-2001-0500: Undefined Security Weakness

Buffer overflow in ISAPI extension idq.dll in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration .ida and Internet Data Query .idq files such as default.ida, as commonly...

AIM including the beta 4.8.2646 Local/Remote Buffer Oveflow

.--------. / Bugs +-----------------------------------------------------------------------. : Affected : All versions of AIM including the beta 4.8.2646 : Type : Local/Remote Buffer Oveflow : Date : 29-02-2002 : Author : NtWaK0 & Recon @ www.SafeHack.com :...

CVE-1999-1115: Undefined Security Weakness

Vulnerability in the /etc/suidexec program in HP Apollo Domain/OS sr10.2 and sr10.3 beta, related to the Korn Shell ksh...

ICQ For Mac OSX 2.6 Client - Denial of Service

ICQ For Mac OSX 2.6 Client - Denial of Service // source: https://www.securityfocus.com/bid/4031/info ICQ For MacOS X is a port of the popular Mirabilis ICQ client to the Apple MacOS X platform. It is freely available. It is possible to cause MacOS X ICQ clients to crash by sending an excessively...

psyBNC 2.3 Beta - encrypted text "spoofable" in others' irc terminal

BACKGROUND: psyBNC http://www.psychoid.lam3rz.de is an IRC bouncer with a variety of fantastic features. one of these features in encryption of irc text, with keys set on a per-channel basis. SUMMARY: someone call them person A in an irc channel where psyBNC users are chatting encrypted can...