5673 matches found
CVE-2002-0513
CVE-2002-0513 affects the popper_mod PHP administration script (versions 1.2.1 and earlier). The vulnerability arises because the admin interface relies on Apache .htaccess authentication, enabling remote attackers to gain administrative privileges if the administrator does not configure the scri...
CVE-2002-0014
CVE-2002-0014 affects Pine up to version 4.43 and earlier. The vulnerability lies in URL-handling code that allows remote attackers to execute arbitrary commands when a URL enclosed in single quotes and containing shell metacharacters is processed. Impact is remote code execution with network acc...
CVE-2002-0431
CVE-2002-0431 affects the XTux system, where remote attackers can trigger a denial of service by sending random inputs during the initial connection. The vulnerability is described as causing CPU consumption, with no details about affected versions, exploit methods, or available fixes in the prov...
CVE-2002-0392
The Apache HTTP Server versions 1.3 through 1.3.24 and 2.0 through 2.0.36 are vulnerable to a flaw where handling invalid requests with chunk-encoded HTTP requests can cause the server to use an incorrect size. This allows remote attackers to trigger a denial of service (DoS) and potentially achi...
CVE-2002-0011
Information leak in doeditvotes.cgi in Bugzilla before 2.14.1 may allow remote attackers to more easily conduct attacks on the login...
CVE-2002-1495
Cross-site scripting XSS vulnerability in JAWmail 1.0-rc1 allows remote attackers to insert arbitrary script or HTML via 1 attached file names in the Read Mail feature, 2 text/html mails that are displayed in a pop-up window, and 3 certain malicious attributes within otherwise safe tags, such as...
CVE-2002-0163
Vulnerability: Squid earlier than 2.4 STABLE4 and some 2.5/2.6 builds were exposed to a heap-based buffer overflow in the internal DNS code when handling compressed DNS responses, caused by improper bounds/checks in lib/rfc1035.c. Impact per sources: potential denial of service and possible remot...
APC < 3.8.0 apcupsd Multiple Vulnerabilities
The remote host is running the apcupsd client which, according to its version number, is affected by multiple vulnerabilities : - The configuration file '/var/run/apcupsd.pid' is by default world-writable. A local attacker could re-write this file with other process IDs in order to crash the...
MDKSA-2003:036 - Updated netpbm packages fix math overflow errors
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: netpbm Advisory ID: MDKSA-2003:036 Date: March 25th, 2003 Affected versions: 8.2, 9.0, 9.1, Corporate Server 2.1, Multi Network Firewall 8.2 Problem Description: Several math overflow errors were...
CVE-2002-1484
DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems port scan via a request for a URL that specifies the target IP address and port, which produces a connection status in the resulting error...
CVE-2002-1455
CVE-2002-1455 describes multiple cross-site scripting (XSS) vulnerabilities in OmniHTTPd that allow remote attackers to inject script or HTML into web pages. Exploitation via (1) test.php, (2) test.shtml, or (3) redir.exe is indicated in the description. The connected documents corroborate the pr...
[SECURITY] [DSA 263-1] New tcpdump packages fix denial of service vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 263-1 [email protected] http://www.debian.org/security/ Martin Schulze March 17th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA 243-1] New kdemultimedia packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 243-1 [email protected] http://www.debian.org/security/ Martin Schulze January 24th, 2003 http://www.debian.org/security/faq -...
CVE-2002-1379
OpenLDAP2 OpenLDAP 2 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads the .ldaprc file within applications that are running with extra privileges...
CVE-2002-1833
The default configurations for DocuTech 6110 and DocuTech 6115 have a default administrative password of 1 "service!" on Solaris 8.0 or 2 "administ" on Windows NT, which allows remote attackers to gain privileges...
CVE-2002-2321
Cross-site scripting XSS vulnerability in 1 showcat.php and 2 addyoursite.php in phpLinkat 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the catid parameter...
CVE-2002-2347
Cross-site scripting XSS vulnerability in Oracle Java Server Page OJSP demo files 1 hellouser.jsp, 2 welcomeuser.jsp and 3 usebean.jsp in Oracle 9i Application Server 9.0.2, 1.0.2.2, 1.0.2.1s and 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the text entry field...
CVE-2002-2075
ICQ 2001a and 2002b allows remote attackers to cause a denial of service memory consumption and hang via a contact message with a large contacts number...
CVE-2002-2339
Cross-site scripting XSS vulnerability in configure.asp in Script-Shed GuestBook 1.0 allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in 1 image, 2 img, 3 image=right, 4 img=right, 5 image=left, and 6 img=left tags...