CVE Notifier

CVE-2002-0979 CWE-? N/A

CVE-2002-0979

The Java logging feature for the Java Virtual Machine in Internet Explorer writes output from functions such as System.out.println to a known pathname, which can be used to execute arbitrary code.

MITRE n/a:n/a 23 Aug 2002

CVE-2002-0978 CWE-? N/A

CVE-2002-0978

Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to upload or download arbitrary files to arbitrary locations via a man-in-the-middle attack with modified TGT and TGN parameters in…

MITRE n/a:n/a 23 Aug 2002

CVE-2002-0977 CWE-? N/A

CVE-2002-0977

Buffer overflow in Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to execute arbitrary code via a long TS value.

MITRE n/a:n/a 23 Aug 2002

CVE-2002-0976 CWE-? N/A

CVE-2002-0976

Internet Explorer 4.0 and later allows remote attackers to read arbitrary files via a web page that accesses a legacy XML Datasource applet (com.ms.xml.dso.XMLDSO.class) and modifies the base URL to point to the local sy…

MITRE n/a:n/a 23 Aug 2002

CVE-2002-0975 CWE-? N/A

CVE-2002-0975

Buffer overflow in Microsoft DirectX Files Viewer ActiveX control (xweb.ocx) 2.0.6.15 and earlier allows remote attackers to execute arbitrary via a long File parameter.

MITRE n/a:n/a 23 Aug 2002

CVE-2002-0973 CWE-? N/A

CVE-2002-0973

Integer signedness error in several system calls for FreeBSD 4.6.1 RELEASE-p10 and earlier may allow attackers to access sensitive kernel memory via large negative values to the (1) accept, (2) getsockname, and (3) getpe…

MITRE n/a:n/a 23 Aug 2002

CVE-2002-0972 CWE-? N/A

CVE-2002-0972

Buffer overflows in PostgreSQL 7.2 allow attackers to cause a denial of service and possibly execute arbitrary code via long arguments to the functions (1) lpad or (2) rpad.

MITRE n/a:n/a 23 Aug 2002

CVE-2002-0971 CWE-? N/A

CVE-2002-0971

Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the Win32 Messaging System to bypass the VNC GUI and access the "Add new clients" dialogue box.

MITRE n/a:n/a 23 Aug 2002

CVE-2002-0861 CWE-? N/A

CVE-2002-0861

Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy method of the Cell object or (2) the Paste…

MITRE n/a:n/a 23 Aug 2002

CVE-2002-0834 CWE-? N/A

CVE-2002-0834

Buffer overflow in the ISIS dissector for Ethereal 0.9.5 and earlier allows remote attackers to cause a denial of service or execute arbitrary code via malformed packets.

MITRE n/a:n/a 23 Aug 2002

CVE-2002-0874 CWE-? N/A

CVE-2002-0874

Vulnerability in Interchange 4.8.6, 4.8.3, and other versions, when running in INET mode, allows remote attackers to read arbitrary files.

MITRE n/a:n/a 20 Aug 2002

CVE-2002-0870 CWE-? N/A

CVE-2002-0870

The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability (CVE-2001-0622) was incomplete, which still allows remote attackers to gain additional privileges by directly reque…

MITRE n/a:n/a 20 Aug 2002