CVE Notifier

CVE-2002-0680 CWE-? N/A

CVE-2002-0680

Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / (%5C) in a .. (dot dot) sequence. NOTE: it is highly likely that this candidate wil…

MITRE n/a:n/a 12 Jul 2002

CVE-2002-0677 CWE-? N/A

CVE-2002-0677

CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is…

MITRE n/a:n/a 12 Jul 2002

CVE-2002-0643 CWE-? N/A

CVE-2002-0643

The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with insecure permissions and does not delete them after installation, which allows local users to obtain se…

MITRE n/a:n/a 12 Jul 2002

CVE-2002-0641 CWE-? N/A

CVE-2002-0641

Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database administration privileges to execute arbitrary code via a l…

MITRE n/a:n/a 12 Jul 2002

CVE-2002-0624 CWE-? N/A

CVE-2002-0624

Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain control of the database and execute arbitrary c…

MITRE n/a:n/a 12 Jul 2002

CVE-2002-0637 CWE-? N/A

CVE-2002-0637

InterScan VirusWall 3.52 build 1462 allows remote attackers to bypass virus protection via e-mail messages with headers that violate RFC specifications by having (or missing) space characters in unexpected places (aka "s…

MITRE n/a:n/a 04 Jul 2002

CVE-2002-0652 CWE-? N/A

CVE-2002-0652

xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered from several calls to the popen() function, such as export_fs().

MITRE n/a:n/a 01 Jul 2002

CVE-2002-0620 CWE-? N/A

CVE-2002-0620

Buffer overflow in the Profile Service of Microsoft Commerce Server 2000 allows remote attackers to cause the server to fail or run arbitrary code in the LocalSystem security context via an input field using an affected …

MITRE n/a:n/a 01 Jul 2002

CVE-2002-1056 CWE-? N/A

CVE-2002-1056

Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editing email messages in HTML or Rich Text Format (RTF), which could allow remote at…

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0265 CWE-? N/A

CVE-2002-0265

Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows local users to gain privileges by modifying the file.

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0251 CWE-? N/A

CVE-2002-0251

Buffer overflow in licq 1.0.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string of format string characters such as "%d".

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0237 CWE-? N/A

CVE-2002-0237

Buffer overflow in ISS BlackICE Defender 2.9 and earlier, BlackICE Agent 3.0 and 3.1, and RealSecure Server Sensor 6.0.1 and 6.5 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary …

MITRE n/a:n/a 25 Jun 2002