CVE-2002-0237

Buffer overflow in ISS BlackICE Defender 2.9 and earlier, BlackICE Agent 3.0 and 3.1, and RealSecure Server Sensor 6.0.1 and 6.5 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a flood of large ICMP ping packets...

CVE-2001-1161

Affected software: IBM Domino (Lotus Domino) 5.0.6. Vulnerable component: cross-site scripting due to improper sanitization when requesting a '.nsf' file or URL ending with Javascript; an attacker can craft a URL to execute script in the user’s browser. Impact: remote script execution in the brow...

OpenSSH 3.x - Challenge-Response Buffer Overflow (1)

OpenSSH 3.x - Challenge-Response Buffer Overflow 1 source: https://www.securityfocus.com/bid/5093/info The OpenSSH team has reported two vulnerabilities in OpenSSH that are remotely exploitable and may allow for unauthenticated attackers to obtain root privileges. The conditions are related to th...

CVE-2002-0594

Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet CSS page that causes an HTTP redirect...

CVE-2002-0580

WorkforceROI Xpede 4.1 allows remote attackers to obtain the database username via a request to datasource.asp, which leaks the username in a form and allows the attacker to more easily conduct brute force password guessing attacks...

CVE-2002-0453

CVE-2002-0453 affects Oblix NetPoint 5.2 and earlier. The vulnerability is in the account lockout mechanism, which only locks out a user once for the specified period. This allows remote attackers to repeat brute-force password guessing by waiting for the lockout window to reset and attempting pa...

CVE-2002-0432

Citadel/UX 5.90 and earlier are affected by a buffer overflow in sysdep.c (functions lprintf and cprintf). The flaw can be triggered by long HELO commands sent to the SMTP server, leading to denial of service and possibly arbitrary code execution on a remote attacker. Affected product/version: Ci...

CVE-2002-0518

The CVE-2002-0518 issue affects FreeBSD 4.5 and earlier, where the SYN cache (syncache) and SYN cookie (syncookie) handling can crash a remote host. The described vectors are: (1) a SYN packet accepted with syncookies that leads to a null pointer reference in the socket’s TCP options, and (2) kil...

CVE-2002-0419

The CVE-2002-0419 entry describes information leaks in Microsoft IIS versions 4 through 5.1 where remote attackers can learn sensitive details via server responses. Specifically, when Basic authentication is used, the server may reveal its IP address as the realm, potentially exposing NAT-obscure...

CVE-2001-1377

CVE-2001-1377 affects multiple RADIUS implementations that fail to validate the Vendor-Length of Vendor-Specific attributes, enabling a remote attacker to crash the server when Vendor-Length

CVE-2002-0552

The CVE-2002-0552 entry concerns Melange Chat Server 2.02 with multiple buffer overflows that can be triggered remotely or locally. The documented vectors include: (1) a long argument in the /yell command, (2) long lines in the /etc/melange.conf configuration file, and (3) long file names, among ...

CVE-2002-0419

Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easily conduct brute force attacks via responses from the server in which 2 in certain configurations, the server IP address is provided as the realm for Basic authentication, which...

CVE-2002-0251

Buffer overflow in licq 1.0.4 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string of format string characters such as "%d"...

CVE-2002-0351

CVE-2002-0351 affects the CFS daemon (cfsd) and is caused by buffer overflows in the daemon. The vulnerability allows a remote attacker to cause a denial of service and possibly execute arbitrary code, with affected versions including cfsd before 1.3.3-8.1 and 1.4.x before 1.4.1-5. Remediation is...

CVE-2001-1260

Avaya Argent Office uses weak encryption trivial encoding for passwords, which allows remote attackers to gain administrator privileges by sniffing and decrypting the sniffing the passwords during a system reboot...

CVE-2002-0255

The CVE-2002-0255 entry concerns the Arescom NetDSL 800 where the default configuration does not require authentication. According to the provided documents, this enables remote attackers to cause a denial of service or reconfigure the router. No exploit details, affected firmware versions, or re...

CVE-2002-0346

Technical details about CVE-2002-0346 are not publicly provided in the supplied documents. The connected EUVD/OpenVAS entries reference the CVE but do not disclose affected products, versions, root cause, or remediation. Monitor for updates.

CVE-2001-1318

The CVE-2001-1318 issue affects Qualcomm Eudora WorldMail Server. Vulnerabilities in the LDAP handling code may allow remote attackers to cause a denial-of-service crash and potentially execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite. Affected component: LDAP service in Wo...

CVE-2001-1321

CVE-2001-1321 affects Oracle Internet Directory Server 2.1.1.x and 3.0.1. The issue permits remote attackers to crash the service and potentially execute arbitrary code via invalid encodings of BER OBJECT-IDENTIFIER values, as demonstrated by the PROTOS LDAPv3 test suite. The root cause is in the...

CVE-2001-1249

CVE-2001-1249 : The vulnerability affects vWebServer 1.2.0 and is caused by accepting a URL containing MS-DOS device names, which can trigger a remote denial of service. The information in the provided documents confirms the impact as a denial of service with a network attack vector, but there ar...