CVE-2002-1529

CVE-2002-1529 describes a cross-site scripting (XSS) vulnerability in the administrative web interface (STEMWADM) of SurfControl SuperScout Email Filter. The flaw arises in the msgError.asp page, where an attacker can inject arbitrary script or HTML through the Reason parameter. The available doc...

CVE-2002-1532

The CVE-2002-1532 affects the admin web interface (STEMWADM) of SurfControl SuperScout Email Filter. A remote attacker can trigger a denial of service (resource exhaustion) by issuing a GET request lacking the terminating CRLF sequence, causing the interface to wait for the sequence and blocking ...

CVE-2002-1531: Undefined Security Weakness

The administrative web interface STEMWADM for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service crash via an HTTP request without a Content-Length parameter...

CVE-2002-1529: Undefined Security Weakness

Cross-site scripting XSS vulnerability in msgError.asp for the administrative web interface STEMWADM for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter...

CVE-2002-1532: Undefined Security Weakness

The administrative web interface STEMWADM for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service resource exhaustion via a GET request without the terminating /r/n/r/n CRLF sequence, which causes the interface to wait for the sequence and blocks other users...

CVE-2002-1530: Undefined Security Weakness

The administrative web interface STEMWADM for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to the userlist.asp program, which includes the passwords in a user editing form...

CVE-2002-1531

The administrative web interface STEMWADM for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service crash via an HTTP request without a Content-Length parameter...