CVE-2002-0855

Removed by vendor...

CVE-2002-0855

Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the 1 adminpw or 2 info parameters to the ml-name feature...

CVE-2002-0855

CVE-2002-0855 describes a cross-site scripting vulnerability in Mailman prior to 2.0.12. Theissue allows remote attackers to execute script as other users by crafting a subscriber’s list subscription options in the ml-name feature via the (1) adminpw or (2) info parameters. Connected advisories c...

CVE-2002-0518

The SYN cache syncache and SYN cookie syncookie mechanism in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service crash 1 via a SYN packet that is accepted using syncookies that causes a null pointer to be referenced for the socket's TCP options, or 2 by killing and...

FreeBSD-SA-02:31.openssh

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:31 Security Advisory The FreeBSD Project Topic: openssh contains remote vulnerability Category: core Module: OpenSSH Announced: 2002-07-15 Credits: ISS X-Force Theo...

CVE-2002-0604

Snapgear Lite+ firewall 1.5.3 and 1.5.4 allows remote attackers to cause a denial of service crash via a large number of packets with malformed IP options...

CVE-2002-0527

Watchguard SOHO firewall before 5.0.35 allows remote attackers to cause a denial of service crash and reboot when SOHO forwards a packet with bad IP options...

CVE-2002-0604

Snapgear Lite+ firewall 1.5.3 and 1.5.4 allows remote attackers to cause a denial of service crash via a large number of packets with malformed IP options...

CVE-2002-0518: Undefined Security Weakness

The SYN cache syncache and SYN cookie syncookie mechanism in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service crash 1 via a SYN packet that is accepted using syncookies that causes a null pointer to be referenced for the socket's TCP options, or 2 by killing and...

CVE-2002-0527: Undefined Security Weakness

Watchguard SOHO firewall before 5.0.35 allows remote attackers to cause a denial of service crash and reboot when SOHO forwards a packet with bad IP options...

CVE-2002-0604: Undefined Security Weakness

Snapgear Lite+ firewall 1.5.3 and 1.5.4 allows remote attackers to cause a denial of service crash via a large number of packets with malformed IP options...

CVE-2002-0240

PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message...

Security holes in OpenBB

Product : OpenBB http://www.prolixmedia.com Versions : 1.0.0 RC3 and less ? Problems : - XSS - Access to moderators' options Exploits : - /myhome.php?action=messages&box=form20name=ainput 20name=i20value=XSS/formscriptalert document.a.i.value/script - imghttp://" onerror="SCRIPT"/img - glow...

FreeBSD 4.x - Process Concealment Bypass

source: https://www.securityfocus.com/bid/4768/info In FreeBSD, setting kern.psshowallprocs=0 via the sysctl call is meant to disable normal users from seeing any running processes that are not owned by them. The current implementation of this feature fails to protest system process information. ...

CVE-2002-0240

PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message...

CVE-2002-0240

CVE-2002-0240 affects PHP when deployed with Apache and configured to serve index.php by default. The vulnerability allows remote attackers to learn the server’s full pathname via the HTTP OPTIONS method, leaking a partial confidentiality breach (PARTIAL) without impact to integrity/availability,...

KPMG-2002017: Snapgear Lite+ Firewall Denial of Service

-------------------------------------------------------------------- Title: Snapgear Lite+ Firewall Denial of Service BUG-ID: 2002017 Released: 02nd May 2002 -------------------------------------------------------------------- Problem: ======== Several issues with the Snapgear Lite+ Firewall coul...

CVE-2002-0240: Undefined Security Weakness

PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message...

CVE-2000-0839

Technical details about CVE-2000-0839 are not publicly available in the provided connected documents. Monitor for updates to confirm affected products, impact, and fixes.

CVE-2001-0554

The BSD-based telnetd telnet daemon is vulnerable to a buffer overflow across various operating systems. The root cause is the improper handling of a set of options, specifically AYT (Are You There) , by the telrcv function . This flaw allows remote attackers to execute arbitrary commands . While...