CVE Notifier

CVE-2002-1149 CWE-? N/A

CVE-2002-1149

The installation procedure for Invision Board suggests that users install the phpinfo.php program under the web root, which leaks sensitive information such as absolute pathnames, OS information, and PHP settings.

MITRE n/a:n/a 01 Oct 2002

CVE-2002-0863 CWE-? N/A

CVE-2002-0863

Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encryp…

MITRE n/a:n/a 01 Oct 2002

CVE-2002-0838 CWE-? N/A

CVE-2002-0838

Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a mal…

MITRE n/a:n/a 01 Oct 2002

CVE-2002-0399 CWE-? N/A

CVE-2002-0399

Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to overwrite arbitrary files during archive extraction via a (1) "/.." or (2) "./.." string, which remov…

MITRE n/a:n/a 01 Oct 2002

CVE-2002-1134 CWE-? N/A

CVE-2002-1134

Unknown vulnerability in Compaq WEBES Service Tools 2.0 through WEBES 4.0 (Service Pack 5) allows local users to read privileged files.

MITRE n/a:n/a 24 Sep 2002

CVE-2002-1133 CWE-? N/A

CVE-2002-1133

Encoded directory traversal vulnerability in Dino's web server 2.1 allows remote attackers to read arbitrary files via ".." (dot dot) sequences with URL-encoded (1) "/" (%2f") or (2) "\" (%5c) characters.

MITRE n/a:n/a 24 Sep 2002

CVE-2002-1131 CWE-? N/A

CVE-2002-1131

Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) addressbook.php, (2) options.php, (3) search.php, or (4) help.php.

MITRE n/a:n/a 24 Sep 2002

CVE-2002-1129 CWE-? N/A

CVE-2002-1129

Buffer overflow in dxterm allows local users to execute arbitrary code via a long -xrm argument.

MITRE n/a:n/a 24 Sep 2002

CVE-2002-1128 CWE-? N/A

CVE-2002-1128

Buffer overflow in inc mail utility for Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long MH environment variable.

MITRE n/a:n/a 24 Sep 2002

CVE-2002-1127 CWE-? N/A

CVE-2002-1127

Buffer overflow in uucp in Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long source (-s) command line parameter.

MITRE n/a:n/a 24 Sep 2002

CVE-2002-1125 CWE-? N/A

CVE-2002-1125

FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including (1) asmon, (2) ascpu, (3) bubblemon, (4) wmmon, and (5) wmnet2, leave open file descriptors for /dev/mem and /dev/kmem, which allows …

MITRE n/a:n/a 17 Sep 2002

CVE-2002-1124 CWE-? N/A

CVE-2002-1124

Multiple buffer overflows in purity 1-16 allow local users to gain privileges and modify high scores tables.

MITRE n/a:n/a 17 Sep 2002