CVE Notifier

CVE-2002-0781 CWE-? N/A

CVE-2002-0781

RTSP proxy for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a GET request to port 9090 followed by a series of carriage returns, which causes proxy.nlm to ABEND.

MITRE n/a:n/a 26 Jul 2002

CVE-2002-0780 CWE-? N/A

CVE-2002-0780

IP/IPX gateway for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a connection to port 8225 with a large amount of random data, which causes ipipxgw.nlm to ABEND.

MITRE n/a:n/a 26 Jul 2002

CVE-2002-0779 CWE-? N/A

CVE-2002-0779

FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service (network connectivity loss) via a connection to port 21 with a large amount of random data.

MITRE n/a:n/a 26 Jul 2002

CVE-2002-0775 CWE-? N/A

CVE-2002-0775

browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter.

MITRE n/a:n/a 26 Jul 2002

CVE-2002-0774 CWE-? N/A

CVE-2002-0774

Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the password is not changed.

MITRE n/a:n/a 26 Jul 2002

CVE-2002-0773 CWE-? N/A

CVE-2002-0773

imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to imp_rootdir.asp and modifying parameters such as (1) ftp, (2) owwwPath, and (3) oft…

MITRE n/a:n/a 26 Jul 2002

CVE-2002-0772 CWE-? N/A

CVE-2002-0772

Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. (dot dot) in the RootName parameter.

MITRE n/a:n/a 26 Jul 2002

CVE-2002-0771 CWE-? N/A

CVE-2002-0771

Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the (1) cvsroot or (2) sortby parameters.

MITRE n/a:n/a 26 Jul 2002

CVE-2002-0770 CWE-? N/A

CVE-2002-0770

Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin commands via a client that does not expand "$" macros, which cau…

MITRE n/a:n/a 26 Jul 2002

CVE-2002-0769 CWE-? N/A

CVE-2002-0769

The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass authentication via an HTTP POST request with a single byte, which allows the attackers to (1) obtain …

MITRE n/a:n/a 26 Jul 2002

CVE-2002-0767 CWE-? N/A

CVE-2002-0767

simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a child process, which allows the child process to cause simpleinit to execute arbitrary programs with root privileges.

MITRE n/a:n/a 26 Jul 2002

CVE-2002-0764 CWE-? N/A

CVE-2002-0764

Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php that modifies the PHORUM[settings_dir] variable to point to a directory that contai…

MITRE n/a:n/a 26 Jul 2002