CVE Notifier

CVE-2002-0917 CWE-? N/A

CVE-2002-0917

CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users.

MITRE n/a:n/a 31 Aug 2002

CVE-2002-0915 CWE-? N/A

CVE-2002-0915

autorun in Xandros based Linux distributions allows local users to read the first line of arbitrary files via the -c parameter, which causes autorun to print the first line of the file.

MITRE n/a:n/a 31 Aug 2002

CVE-2002-0913 CWE-? N/A

CVE-2002-0913

Format string vulnerability in log_doit function of Slurp NNTP client 1.1.0 allows a malicious news server to execute arbitrary code on the client via format strings in a server response.

MITRE n/a:n/a 31 Aug 2002

CVE-2002-0912 CWE-? N/A

CVE-2002-0912

in.uucpd UUCP server in Debian GNU/Linux 2.2, and possibly other operating systems, does not properly terminate long strings, which allows remote attackers to cause a denial of service, possibly due to a buffer overflow.

MITRE n/a:n/a 31 Aug 2002

CVE-2002-0910 CWE-? N/A

CVE-2002-0910

Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, as observed in the utilities (1) linux-ftpd, (2) pcnfsd, (3) tftp, (4) traceroute, or (5) from/to.

MITRE n/a:n/a 31 Aug 2002

CVE-2002-0909 CWE-? N/A

CVE-2002-0909

Multiple buffer overflows in mnews 1.22 and earlier allow (1) a remote NNTP server to execute arbitrary code via long responses, or local users can gain privileges via long command line arguments (2) -f, (3) -n, (4) -D, …

MITRE n/a:n/a 31 Aug 2002

CVE-2002-0908 CWE-? N/A

CVE-2002-0908

Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTPS request.

MITRE n/a:n/a 31 Aug 2002

CVE-2002-0907 CWE-? N/A

CVE-2002-0907

Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-".

MITRE n/a:n/a 31 Aug 2002

CVE-2002-0905 CWE-? N/A

CVE-2002-0905

Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR environment variable.

MITRE n/a:n/a 31 Aug 2002

CVE-2002-0903 CWE-? N/A

CVE-2002-0903

register.php for WoltLab Burning Board (wbboard) 1.1.1 uses a small number of random values for the "code" parameter that is provided to action.php to approve a new registration, along with predictable new user ID's, whi…

MITRE n/a:n/a 31 Aug 2002

CVE-2002-0902 CWE-? N/A

CVE-2002-0902

Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a http:// and a double-quote (") in the [IMG] tag, which bypasses phpBB's securit…

MITRE n/a:n/a 31 Aug 2002

CVE-2002-0901 CWE-? N/A

CVE-2002-0901

Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow (1) remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certain local users to exe…

MITRE n/a:n/a 31 Aug 2002