5 matches found
CVE-2002-2174
The CVE-2002-2174 entry concerns the Telnet proxy in 602Pro LAN SUITE 2002, which does not limit outstanding connections to the local host. This can allow remote attackers to cause denial of service through memory consumption by opening a large number of connections. The available sources identif...
CVE-2004-0336
The CVE-2004-0336 issue affects LAN SUITE Web Mail 602Pro, where a vulnerability in the mail login form allows remote attackers to obtain the path to the mail directory, exposing sensitive information. The core cause is disclosure of internal file paths via the login interface. Impact is informat...
CVE-2002-2152
The CVE-2002-2152 entry concerns the Czech edition of Software602’s Web Server prior to 2002.0.02.0916. Affected component: web server software; vulnerability: remote attackers can gain administrator privileges by directly requesting /admin/, which is not password protected. Underlying cause: lac...
CVE-2004-0337
The CVE-2004-0337 entry documents a cross-site scripting vulnerability in LAN SUITE Web Mail 602Pro. An attacker could craft a URL to index.html with a trailing slash and script payload to execute arbitrary script/HTML as another user. The vendor notes the bug could not be reproduced, leaving unc...
CVE-2002-1928
The CVE-2002-1928 entry concerns 602Pro LAN SUITE 2002, where remote attackers can view the directory tree by issuing an HTTP GET request with a trailing tilde (~) or a .bak extension. The connected sources reiterate this same behavior but do not provide additional technical details, affected ver...