2002 CVEs (page 17)
Page 17 of 24 — CVEs published in 2002, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2002-0801 | | 2002-08-12 | Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a lon… | |
CVE-2002-0800 | | 2002-08-12 | BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at the end. | |
CVE-2002-0799 | | 2002-08-12 | Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argument. | |
CVE-2002-0798 | | 2002-08-12 | Vulnerability in swinstall for HP-UX 11.00 and 11.11 allows local users to view obtain data views for files that cannot be directly read by the user, which rep… | |
CVE-2002-0797 | | 2002-08-12 | Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges. | |
CVE-2002-0796 | | 2002-08-12 | Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gain root privileges. | |
CVE-2002-0795 | | 2002-08-12 | The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attack on X Windows lock files. | |
CVE-2002-0794 | | 2002-08-12 | The accept_filter mechanism in FreeBSD 4 through 4.5 does not properly remove entries from the incomplete listen queue when adding a syncache, which allows rem… | |
CVE-2002-0793 | Medium | 5.5 | 2002-08-12 | Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrite arbitrary files via (1) the -f argume… |
CVE-2002-0792 | | 2002-08-12 | The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to cause a denial of service (soft reset) via (1) an… | |
CVE-2002-0791 | | 2002-08-12 | Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) via a connection to the server followed by… | |
CVE-2002-0790 | | 2002-08-12 | clchkspuser and clpasswdremote in AIX expose an encrypted password in the cspoc.log file, which could allow local users to gain privileges. | |
CVE-2002-0789 | | 2002-08-12 | Buffer overflow in search.cgi in mnoGoSearch 3.1.19 and earlier allows remote attackers to execute arbitrary code via a long query (q) parameter. | |
CVE-2002-0788 | Medium | 5.5 | 2002-08-12 | An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files th… |
CVE-2002-0787 | | 2002-08-12 | Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 allow remote attackers to execute script a… | |
CVE-2002-0786 | | 2002-08-12 | iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators to read arbitrary files by specifying t… | |
CVE-2002-0785 | | 2002-08-12 | AOL Instant Messenger (AIM) allows remote attackers to cause a denial of service (crash) via an "AddBuddy" link with the ScreenName parameter set to a large nu… | |
CVE-2002-0784 | | 2002-08-12 | Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HTTP request with a ... (modified dot dot). | |
CVE-2002-0783 | | 2002-08-12 | Opera 6.01, 6.0, and 5.12 allows remote attackers to execute arbitrary JavaScript in the security context of other sites by setting the location of a frame or… | |
CVE-2002-0782 | | 2002-08-12 | Novell BorderManager 3.5 with PAT (Port-Address Translate) enabled allows remote attackers to cause a denial of service by filling the connection table with a… | |
CVE-2002-0781 | | 2002-08-12 | RTSP proxy for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a GET request to port 9090 followed by a series of carri… | |
CVE-2002-0780 | | 2002-08-12 | IP/IPX gateway for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a connection to port 8225 with a large amount of ran… | |
CVE-2002-0779 | | 2002-08-12 | FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service (network connectivity loss) via a connection to port 2… | |
CVE-2002-0778 | | 2002-08-12 | The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP add… | |
CVE-2002-0777 | | 2002-08-12 | Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary code via a long "bind DN" parameter. | |
CVE-2002-0776 | | 2002-08-12 | getuserdesc.asp in Hosting Controller 2002 allows remote attackers to change the passwords of arbitrary users and gain privileges by modifying the username par… | |
CVE-2002-0775 | | 2002-08-12 | browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter. | |
CVE-2002-0774 | | 2002-08-12 | Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the password is not cha… | |
CVE-2002-0773 | | 2002-08-12 | imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to imp_rootdir.asp and mo… | |
CVE-2002-0772 | | 2002-08-12 | Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. (dot dot) i… | |
CVE-2002-0771 | | 2002-08-12 | Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the (1) cvsroot or (2) sortb… | |
CVE-2002-0770 | | 2002-08-12 | Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin com… | |
CVE-2002-0769 | | 2002-08-12 | The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass authentication via an HTTP POST request… | |
CVE-2002-0768 | | 2002-08-12 | Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code v… | |
CVE-2002-0767 | | 2002-08-12 | simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a child process, which allows the child process to cause simpleini… | |
CVE-2002-0766 | | 2002-08-12 | OpenBSD 2.9 through 3.1 allows local users to cause a denial of service (resource exhaustion) and gain root privileges by filling the kernel's file descriptor… | |
CVE-2002-0765 | | 2002-08-12 | sshd in OpenSSH 3.2.2, when using YP with netgroups and under certain conditions, may allow users to successfully authenticate and log in with another user's p… | |
CVE-2002-0764 | | 2002-08-12 | Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php that modifies the PHOR… | |
CVE-2002-0763 | | 2002-08-12 | Vulnerability in administration server for HP VirtualVault 4.5 on HP-UX 11.04 allows remote web servers or privileged external processes to bypass access restr… | |
CVE-2002-0762 | | 2002-08-12 | shadow package in SuSE 8.0 allows local users to destroy the /etc/passwd and /etc/shadow files or assign extra group privileges to some users by changing files… | |
CVE-2002-0761 | | 2002-08-12 | bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly systems, uses the permissions of symbolic links instead of the actual file… | |
CVE-2002-0760 | | 2002-08-12 | Race condition in bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, decompresses files with world-r… | |
CVE-2002-0759 | | 2002-08-12 | bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, does not use the O_EXCL flag to create files duri… | |
CVE-2002-0758 | | 2002-08-12 | ifup-dhcp script in the sysconfig package for SuSE 8.0 allows remote attackers to execute arbitrary commands via spoofed DHCP responses, which are stored and e… | |
CVE-2002-0757 | | 2002-08-12 | (1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass authentication and gain privileges via… | |
CVE-2002-0756 | | 2002-08-12 | Cross-site scripting vulnerability in the authentication page for (1) Webmin 0.96 and (2) Usermin 0.90 allows remote attackers to insert script into an error p… | |
CVE-2002-0755 | | 2002-08-12 | Kerberos 5 su (k5su) in FreeBSD 4.5 and earlier does not verify that a user is a member of the wheel group before granting superuser privileges, which could al… | |
CVE-2002-0754 | | 2002-08-12 | Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-init… | |
CVE-2002-0753 | | 2002-08-12 | Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie. | |
CVE-2002-0752 | | 2002-08-12 | CGIscript.net csMailto.cgi program exports feedback to a file that is accessible from the web document root, which could allow remote attackers to obtain sensi… | |
CVE-2002-0751 | | 2002-08-12 | CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a "spam proxy" and send mail to arbitrary users via modified (1) form-to, (2) for… | |
CVE-2002-0750 | | 2002-08-12 | CGIscript.net csMailto.cgi program allows remote attackers to read arbitrary files by specifying the target filename in the form-attachment field. | |
CVE-2002-0749 | | 2002-08-12 | CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the form-attachment field. | |
CVE-2002-0748 | | 2002-08-12 | LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request that ends in two newline characters… | |
CVE-2002-0747 | | 2002-08-12 | Buffer overflow in lsmcode in AIX 4.3.3. | |
CVE-2002-0746 | | 2002-08-12 | Vulnerability in template.dhcpo in AIX 4.3.3 related to an insecure linker argument. | |
CVE-2002-0745 | | 2002-08-12 | Buffer overflow in uucp in AIX 4.3.3. | |
CVE-2002-0744 | | 2002-08-12 | namerslv in AIX 4.3.3 core dumps when called with a very long argument, possibly as a result of a buffer overflow. | |
CVE-2002-0743 | | 2002-08-12 | mail and mailx in AIX 4.3.3 core dump when called with a very long argument, an indication of a buffer overflow. | |
CVE-2002-0742 | | 2002-08-12 | Buffer overflow in pioout on AIX 4.3.3. | |
CVE-2002-0741 | | 2002-08-12 | psyBNC 2.3 allows remote attackers to cause a denial of service (CPU consumption and resource exhaustion) by sending a PASS command with a long password argume… | |
CVE-2002-0740 | | 2002-08-12 | Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument. | |
CVE-2002-0739 | | 2002-08-12 | Cross-site scripting in PostCalendar 3.02 allows remote attackers to insert arbitrary HTML and script, and steal cookies, by modifying a calendar entry in its… | |
CVE-2002-0738 | | 2002-08-12 | MHonArc 2.5.2 and earlier does not properly filter Javascript from archived e-mail messages, which could allow remote attackers to execute script in web client… | |
CVE-2002-0737 | | 2002-08-12 | Sambar web server before 5.2 beta 1 allows remote attackers to obtain source code of server-side scripts, or cause a denial of service (resource exhaustion) vi… | |
CVE-2002-0736 | | 2002-08-12 | Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administra… | |
CVE-2002-0735 | | 2002-08-12 | Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.2 and earlier allows remote attackers to… | |
CVE-2002-0734 | | 2002-08-12 | b2edit.showposts.php in B2 2.0.6pre2 and earlier does not properly load the b2config.php file in some configurations, which allows remote attackers to execute… | |
CVE-2002-0733 | | 2002-08-12 | Cross-site scripting vulnerability in thttpd 2.20 and earlier allows remote attackers to execute arbitrary script via a URL to a nonexistent page, which causes… | |
CVE-2002-0732 | | 2002-08-12 | Cross-site scripting vulnerability in MyGuestbook 1.0 allows remote attackers to execute arbitrary script or inject HTML via fields such as (1) user name or (2… | |
CVE-2002-0731 | | 2002-08-12 | Cross-site scripting vulnerability in demonstration scripts for vqServer allows remote attackers to execute arbitrary script via a link that contains the scrip… | |
CVE-2002-0730 | | 2002-08-12 | Cross-site scripting vulnerability in guestbook.pl for Philip Chinery's Guestbook 1.1 allows remote attackers to execute Javascript or HTML via fields such as… | |
CVE-2002-0729 | | 2002-08-12 | Microsoft SQL Server 2000 allows remote attackers to cause a denial of service via a malformed 0x08 packet that is missing a colon separator. | |
CVE-2002-0728 | | 2002-08-12 | Buffer overflow in the progressive reader for libpng 1.2.x before 1.2.4, and 1.0.x before 1.0.14, allows attackers to cause a denial of service (crash) via a P… | |
CVE-2002-0719 | | 2002-08-12 | SQL injection vulnerability in the function that services for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to execute arbitrary comm… | |
CVE-2002-0718 | | 2002-08-12 | Web authoring command in Microsoft Content Management Server (MCMS) 2001 allows attackers to authenticate and upload executable content, by modifying the uploa… | |
CVE-2002-0710 | | 2002-08-12 | Directory traversal vulnerability in sendform.cgi 1.44 and earlier allows remote attackers to read arbitrary files by specifying the desired files in the Blurb… | |
CVE-2002-0700 | | 2002-08-12 | Buffer overflow in a system function that performs user authentication for Microsoft Content Management Server (MCMS) 2001 allows attackers to execute code in… | |
CVE-2002-0698 | | 2002-08-12 | Buffer overflow in Internet Mail Connector (IMC) for Microsoft Exchange Server 5.5 allows remote attackers to execute arbitrary code via an EHLO request from a… | |
CVE-2002-0697 | | 2002-08-12 | Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP client to directly conne… | |
CVE-2002-0695 | | 2002-08-12 | Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7.0 or 2000 allows r… | |
CVE-2002-0684 | | 2002-08-12 | Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allo… | |
CVE-2002-0661 | | 2002-08-12 | Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to read arbitrary files and execute command… | |
CVE-2002-0660 | | 2002-08-12 | Buffer overflow in libpng 1.0.12-3.woody.2 and libpng3 1.2.1-1.1.woody.2 on Debian GNU/Linux 3.0, and other operating systems, may allow attackers to cause a d… | |
CVE-2002-0659 | | 2002-08-12 | The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings. | |
CVE-2002-0658 | | 2002-08-12 | OSSP mm library (libmm) before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack. | |
CVE-2002-0657 | | 2002-08-12 | Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master key. | |
CVE-2002-0656 | | 2002-08-12 | Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key… | |
CVE-2002-0655 | | 2002-08-12 | OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow atta… | |
CVE-2002-0650 | | 2002-08-12 | The keep-alive mechanism for Microsoft SQL Server 2000 allows remote attackers to cause a denial of service (bandwidth consumption) via a "ping" style packet t… | |
CVE-2002-0649 | | 2002-08-12 | Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a de… | |
CVE-2002-0645 | | 2002-08-12 | SQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 may allow authenticated users to execut… | |
CVE-2002-0644 | | 2002-08-12 | Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the d… | |
CVE-2002-0638 | | 2002-08-12 | setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when m… | |
CVE-2002-0619 | | 2002-08-12 | The Mail Merge Tool in Microsoft Word 2002 for Windows, when Microsoft Access is present on a system, allows remote attackers to execute Visual Basic (VBA) scr… | |
CVE-2002-0618 | | 2002-08-12 | The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code in the Local Computer zone by embedding HTML scri… | |
CVE-2002-0617 | | 2002-08-12 | The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creating a hyperlink on a drawing shape in a s… | |
CVE-2002-0616 | | 2002-08-12 | The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by attaching an inline macro to an object within… | |
CVE-2002-0534 | | 2002-08-12 | PostBoard 2.0.1 and earlier with BBcode allows remote attackers to cause a denial of service (CPU consumption) and corrupt the database via null \0 characters… | |
CVE-2002-0533 | | 2002-08-12 | phpBB 1.4.4 and earlier with BBcode allows remote attackers to cause a denial of service (CPU consumption) and corrupt the database via null \0 characters with… |