2002 CVEs (page 11)
Page 11 of 24 — CVEs published in 2002, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2002-1635 | | 2002-12-31 | The Apache configuration file (httpd.conf) in Oracle 9i Application Server (9iAS) uses a Location alias for /perl directory instead of a ScriptAlias, which all… | |
CVE-2002-1634 | | 2002-12-31 | Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) ndsobj.nlm, (2) allfield.jse, (3) websinfo… | |
CVE-2002-1633 | | 2002-12-31 | Multiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long command line arguments to (1) sample, (2) ex, (3) du, (4) find… | |
CVE-2002-1632 | | 2002-12-31 | Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to obtain environment variables and other sensitive information… | |
CVE-2002-1631 | | 2002-12-31 | SQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS) allows remote attackers to execute arbitrary code via the sql… | |
CVE-2002-1630 | | 2002-12-31 | The sendmail.jsp sample page in Oracle 9i Application Server (9iAS) allows remote attackers to send arbitrary emails. | |
CVE-2002-1629 | | 2002-12-31 | Multi-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200 ship with a null password, which allows remote attackers to ga… | |
CVE-2002-1628 | | 2002-12-31 | Directory traversal vulnerability in vote.cgi for Mike Spice Mike's Vote CGI before 1.3 allows remote attackers to write arbitrary files via .. (dot dot) seque… | |
CVE-2002-1627 | | 2002-12-31 | Directory traversal vulnerability in quiz.cgi for Mike Spice Quiz Me! before 0.6 allows remote attackers to write arbitrary files via .. (dot dot) sequences in… | |
CVE-2002-1626 | | 2002-12-31 | Directory traversal vulnerability in Mike Spice My Calendar before 1.5 allows remote attackers to write arbitrary files via .. (dot dot) sequences in a URL. | |
CVE-2002-1625 | | 2002-12-31 | Macromedia Flash Player 6 does not terminate connections when the user leaves the web page, which allows remote attackers to cause a denial of service (bandwid… | |
CVE-2002-1624 | | 2002-12-31 | Buffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows remote attackers to cause a denial of service (crash) and possibl… | |
CVE-2002-1623 | | 2002-12-31 | The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared secret authentication, does not encrypt initiator or responder id… | |
CVE-2002-1622 | | 2002-12-31 | Buffer overflow in certain RPC routines in IBM AIX 4.3 may allow attackers to execute arbitrary code, related to a "variable data type." | |
CVE-2002-1617 | | 2002-12-31 | Multiple buffer overflows in HP Tru64 UNIX 5.x allow local users to execute arbitrary code via (1) a long -contextDir argument to dtaction, (2) a long -p argum… | |
CVE-2002-1573 | | 2002-12-31 | Unspecified vulnerability in the pcilynx ieee1394 firewire driver (pcilynx.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors, related to "… | |
CVE-2002-1572 | | 2002-12-31 | Signed integer overflow in the bttv_read function in the bttv driver (bttv-driver.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors. | |
CVE-2002-1571 | | 2002-12-31 | The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on processors that do not… | |
CVE-2002-1584 | | 2002-12-27 | Unknown vulnerability in the AUTH_DES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other platforms, allows remote… | |
CVE-2002-1385 | | 2002-12-26 | openwebmail_init in Open WebMail 1.81 and earlier allows local users to execute arbitrary code via .. (dot dot) sequences in a login name, such as the name pro… | |
CVE-2002-1383 | | 2002-12-26 | Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via (1) the CUPSd HTTP… | |
CVE-2002-1372 | High | 7.5 | 2002-12-26 | Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a r… |
CVE-2002-1371 | | 2002-12-26 | filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attacke… | |
CVE-2002-1369 | | 2002-12-26 | jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which al… | |
CVE-2002-1368 | | 2002-12-26 | Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by ca… | |
CVE-2002-1367 | | 2002-12-26 | Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can the… | |
CVE-2002-1366 | | 2002-12-26 | Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions… | |
CVE-2002-1363 | | 2002-12-26 | Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to cause a denial of servi… | |
CVE-2002-1327 | | 2002-12-26 | Buffer overflow in the Windows Shell function in Microsoft Windows XP allows remote attackers to execute arbitrary code via an .MP3 or .WMA audio file with a c… | |
CVE-2002-1177 | | 2002-12-26 | Multiple buffer overflows in Winamp 3.0, when displaying an MP3 in the Media Library window, allows remote attackers to execute arbitrary code via an MP3 file… | |
CVE-2002-1176 | | 2002-12-26 | Buffer overflow in Winamp 2.81 allows remote attackers to execute arbitrary code via a long Artist ID3v2 tag in an MP3 file. | |
CVE-2002-1351 | | 2002-12-24 | Buffer overflow in Melange Chat System 1.10 allows remote attackers to cause a denial of service (chat server crash) and possibly execute arbitrary code via th… | |
CVE-2002-1382 | | 2002-12-23 | Macromedia Flash Player before 6.0.65.0 allows remote attackers to execute arbitrary code via certain malformed data headers in Shockwave Flash file format (SW… | |
CVE-2002-1381 | | 2002-12-23 | Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code by modifyin… | |
CVE-2002-1380 | | 2002-12-23 | Linux kernel 2.2.x allows local users to cause a denial of service (crash) by using the mmap() function with a PROT_READ parameter to access non-readable memor… | |
CVE-2002-1377 | | 2002-12-23 | vim 6.0 and 6.1, and possibly other versions, allows attackers to execute arbitrary commands using the libcall feature in modelines, which are not sandboxed bu… | |
CVE-2002-1376 | | 2002-12-23 | libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (… | |
CVE-2002-1375 | | 2002-12-23 | The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response. | |
CVE-2002-1374 | | 2002-12-23 | The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-… | |
CVE-2002-1373 | | 2002-12-23 | Signed integer vulnerability in the COM_TABLE_DUMP package for MySQL 3.23.x before 3.23.54 allows remote attackers to cause a denial of service (crash or hang)… | |
CVE-2002-1365 | | 2002-12-23 | Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the "@" character when determining buffer lengths for local addresses, which all… | |
CVE-2002-1364 | | 2002-12-23 | Buffer overflow in the get_origin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOIS responses. | |
CVE-2002-1362 | | 2002-12-23 | mICQ 0.4.9 and earlier allows remote attackers to cause a denial of service (crash) via malformed ICQ message types without a 0xFE separator character. | |
CVE-2002-1361 | | 2002-12-23 | overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to execute arbitrary code via a POST requ… | |
CVE-2002-1360 | | 2002-12-23 | Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a length field, which coul… | |
CVE-2002-1359 | | 2002-12-23 | Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possib… | |
CVE-2002-1358 | | 2002-12-23 | Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or… | |
CVE-2002-1357 | | 2002-12-23 | Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote attackers to cause a… | |
CVE-2002-1356 | | 2002-12-23 | Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed packets to the (1) LM… | |
CVE-2002-1355 | | 2002-12-23 | Multiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a denial of service (infinite loop) via m… | |
CVE-2002-1350 | | 2002-12-23 | The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers to cause a denial of service (application crash). | |
CVE-2002-1345 | | 2002-12-23 | Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user… | |
CVE-2002-1325 | | 2002-12-23 | Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet that accesses the user… | |
CVE-2002-1296 | | 2002-12-23 | Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via ".." sequences in the pc_clname fiel… | |
CVE-2002-1260 | | 2002-12-23 | The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security checks and access d… | |
CVE-2002-1258 | | 2002-12-23 | Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer and other applications, allow remote att… | |
CVE-2002-1257 | | 2002-12-23 | Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java applet that invokes COM… | |
CVE-2002-1256 | | 2002-12-23 | The SMB signing capability in the Server Message Block (SMB) protocol in Microsoft Windows 2000 and Windows XP allows attackers to disable the digital signing… | |
CVE-2002-1643 | | 2002-12-19 | Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a long Transport fiel… | |
CVE-2002-1354 | | 2002-12-18 | Directory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the contents of arbitrary directories via a ... (dot dot dot) in the… | |
CVE-2002-1349 | | 2002-12-18 | Buffer overflow in pop3trap.exe for PC-cillin 2000, 2002, and 2003 allows local users to execute arbitrary code via a long input string to TCP port 110 (POP3). | |
CVE-2002-1347 | Critical | 9.8 | 2002-12-18 | Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (… |
CVE-2002-1344 | | 2002-12-18 | Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filenames containing (1)… | |
CVE-2002-1342 | | 2002-12-18 | Unknown vulnerability in smb2www 980804-16 and earlier allows remote attackers to execute arbitrary commands. | |
CVE-2002-1341 | | 2002-12-18 | Cross-site scripting (XSS) vulnerability in read_body.php for SquirrelMail 1.2.10, 1.2.9, and earlier allows remote attackers to insert script and HTML via the… | |
CVE-2002-1340 | | 2002-12-18 | The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the existence of local… | |
CVE-2002-1339 | | 2002-12-18 | The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to determine the exist… | |
CVE-2002-1338 | | 2002-12-18 | The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist, which allows remote… | |
CVE-2002-1262 | | 2002-12-18 | Internet Explorer 5.5 and 6.0 does not perform complete security checks on external caching, which allows remote attackers to read arbitrary files. | |
CVE-2002-1255 | | 2002-12-18 | Microsoft Outlook 2002 allows remote attackers to cause a denial of service (repeated failure) via an email message with a certain invalid header field that is… | |
CVE-2002-1159 | | 2002-12-18 | Canna 3.6 and earlier does not properly validate requests, which allows remote attackers to cause a denial of service or information leak. | |
CVE-2002-1158 | | 2002-12-18 | Buffer overflow in the irw_through function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as the bin user. | |
CVE-2002-1336 | | 2002-12-11 | TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the… | |
CVE-2002-1335 | | 2002-12-11 | Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitrary web script or H… | |
CVE-2002-1334 | | 2002-12-11 | Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1… | |
CVE-2002-1323 | | 2002-12-11 | Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using… | |
CVE-2002-1322 | | 2002-12-11 | Rational ClearCase 4.1, 2002.05, and possibly other versions allows remote attackers to cause a denial of service (crash) via certain packets to port 371, e.g… | |
CVE-2002-1321 | | 2002-12-11 | Multiple buffer overflows in RealOne and RealPlayer allow remote attackers to execute arbitrary code via (1) a Synchronized Multimedia Integration Language (SM… | |
CVE-2002-1320 | | 2002-12-11 | Pine 4.44 and earlier allows remote attackers to cause a denial of service (core dump and failed restart) via an email message with a From header that contains… | |
CVE-2002-1319 | | 2002-12-11 | The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a denial of service (hang) via the emulation mode, whi… | |
CVE-2002-1318 | | 2002-12-11 | Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password… | |
CVE-2002-1317 | | 2002-12-11 | Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or… | |
CVE-2002-1272 | | 2002-12-11 | Alcatel OmniSwitch 7700/7800 switches running AOS 5.1.1 contains a back door telnet server that was intended for development but not removed before distributio… | |
CVE-2002-1270 | | 2002-12-11 | Mac OS X 10.2.2 allows local users to read files that only allow write access via the map_fd() Mach system call. | |
CVE-2002-1269 | | 2002-12-11 | Unknown vulnerability in NetInfo Manager application in Mac OS X 10.2.2 allows local users to access restricted parts of a filesystem. | |
CVE-2002-1268 | | 2002-12-11 | Mac OS X 10.2.2 allows local users to gain privileges via a mounted ISO 9600 CD, aka "User Privilege Elevation via Mounting an ISO 9600 CD." | |
CVE-2002-1267 | | 2002-12-11 | Mac OS X 10.2.2 allows remote attackers to cause a denial of service by accessing the CUPS Printing Web Administration utility, aka "CUPS Printing Web Administ… | |
CVE-2002-1266 | | 2002-12-11 | Mac OS X 10.2.2 allows local users to gain privileges by mounting a disk image file that was created on another system, aka "Local User Privilege Elevation via… | |
CVE-2002-1254 | | 2002-12-11 | Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system or in other domains… | |
CVE-2002-1188 | | 2002-12-11 | Internet Explorer 5.01 through 6.0 allows remote attackers to identify the path to the Temporary Internet Files folder and obtain user information such as cook… | |
CVE-2002-1187 | | 2002-12-11 | Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and execute files on the local system via web pa… | |
CVE-2002-1186 | | 2002-12-11 | Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remote attacker to stea… | |
CVE-2002-1185 | | 2002-12-11 | Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of… | |
CVE-2002-1183 | | 2002-12-11 | Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka "N… | |
CVE-2002-1587 | | 2002-12-04 | The libthread library (libthread.so.1) for Solaris 2.5.1 through 8 allows local users to cause a denial of service (hang) of an application that uses libthread… | |
CVE-2002-1586 | | 2002-12-03 | Solaris 2.5.1 through 9 allows local users to cause a denial of service (kernel panic) by setting the sd_struiowrq variable in the struioget function to null… | |
CVE-2002-1588 | | 2002-11-29 | Mailtool for OpenWindows 3.6, 3.6.1, and 3.6.2 allows remote attackers to cause a denial of service (mailtool segmentation violation and crash) via a malformed… | |
CVE-2002-1316 | | 2002-11-29 | importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell metacharacters in th… | |
CVE-2002-1315 | | 2002-11-29 | Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as th… | |
CVE-2002-1313 | | 2002-11-29 | nullmailer 1.00RC5 and earlier allows local users to cause a denial of service via an email to a local user that does not exist, which generates an error that… |