CVE-2002-0515

IPFilter 3.4.25 and earlier sets a different TTL when a port is being filtered than when it is not being filtered, which allows remote attackers to identify filtered ports by comparing TTLs...

CVE-2002-0738

MHonArc 2.5.2 and earlier does not properly filter Javascript from archived e-mail messages, which could allow remote attackers to execute script in web clients by 1 splitting the SCRIPT tag into smaller pieces, 2 including the script in a SRC argument to an IMG tag, or 3 using "&=script" syntax...

Exploiting the Google toolbar (GM#001-MC)

GreyMagic Security Advisory GM001-MC ===================================== By GreyMagic Software, Israel. 08 Aug 2002. Available in HTML format at http://security.greymagic.com/adv/gm001-mc/. Topic: Exploiting the Google toolbar. Discovery date: 31 Jul 2002. Affected applications:...

Vulnerability in OpenSSL CVE-2002-0659

A flaw in the ASN1 library allowed remote attackers to cause a denial of service by sending invalid encodings...

CVE-2002-0787

Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 allow remote attackers to execute script as the administrator via administrator URLs with modified 1 LOCID or 2 OC parameters...

CVE-2001-1072

CVE-2001-1072 affects Apache with mod_rewrite enabled on UNIX systems. The vulnerability arises when an attacker can insert extra / characters into the requested path, causing the RewriteRule’s regular expression to fail and allowing the path to bypass RewriteRules. The affected component is mod_...

CVE-2001-1183

PPTP implementation in Cisco IOS 12.1 and 12.2 allows remote attackers to cause a denial of service crash via a malformed packet...

CVE-2001-0901

CVE-2001-0901 involves Hypermail and remote command execution via Server Side Includes (SSI). A malicious user can attach a file with a .shtml extension, which is archived on the server and can be executed by requesting the attachment’s URL, allowing arbitrary commands to run on the server. The c...

CVE-2001-0962

The CVE-2001-0962 entry concerns IBM WebSphere Application Server versions 3.02 through 3.53, where session IDs used in cookies are predictable. This predictability enables remote attackers to brute-force session IDs and gain privileges of WebSphere users. The documented impact is privilege escal...

CVE-2001-1161

Affected software: IBM Domino (Lotus Domino) 5.0.6. Vulnerable component: cross-site scripting due to improper sanitization when requesting a '.nsf' file or URL ending with Javascript; an attacker can craft a URL to execute script in the user’s browser. Impact: remote script execution in the brow...

CVE-2002-0237

Buffer overflow in ISS BlackICE Defender 2.9 and earlier, BlackICE Agent 3.0 and 3.1, and RealSecure Server Sensor 6.0.1 and 6.5 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a flood of large ICMP ping packets...

CVE-2001-0769

The CVE-2001-0769 entries describe a memory leak in GuildFTPd Server 0.97 that can be triggered by a remote attacker sending a request containing a null character, causing a denial of service. The connected documents provide the vulnerability’s existence and impact but do not specify exploit deta...

CVE-2001-0900

The CVE-2001-0900 entry describes a directory traversal in Gallery’s modules.php (Gallery

OpenSSH 3.x - Challenge-Response Buffer Overflow (1)

OpenSSH 3.x - Challenge-Response Buffer Overflow 1 source: https://www.securityfocus.com/bid/5093/info The OpenSSH team has reported two vulnerabilities in OpenSSH that are remotely exploitable and may allow for unauthenticated attackers to obtain root privileges. The conditions are related to th...

CVE-2002-0594

Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet CSS page that causes an HTTP redirect...

CVE-2002-0580

WorkforceROI Xpede 4.1 allows remote attackers to obtain the database username via a request to datasource.asp, which leaks the username in a form and allows the attacker to more easily conduct brute force password guessing attacks...

CVE-2002-0518

The CVE-2002-0518 issue affects FreeBSD 4.5 and earlier, where the SYN cache (syncache) and SYN cookie (syncookie) handling can crash a remote host. The described vectors are: (1) a SYN packet accepted with syncookies that leads to a null pointer reference in the socket’s TCP options, and (2) kil...

CVE-2002-0453

CVE-2002-0453 affects Oblix NetPoint 5.2 and earlier. The vulnerability is in the account lockout mechanism, which only locks out a user once for the specified period. This allows remote attackers to repeat brute-force password guessing by waiting for the lockout window to reset and attempting pa...

CVE-2002-0419

The CVE-2002-0419 entry describes information leaks in Microsoft IIS versions 4 through 5.1 where remote attackers can learn sensitive details via server responses. Specifically, when Basic authentication is used, the server may reveal its IP address as the realm, potentially exposing NAT-obscure...

CVE-2002-0432

Citadel/UX 5.90 and earlier are affected by a buffer overflow in sysdep.c (functions lprintf and cprintf). The flaw can be triggered by long HELO commands sent to the SMTP server, leading to denial of service and possibly arbitrary code execution on a remote attacker. Affected product/version: Ci...