CVE Notifier

CVE-2002-0226 CWE-? N/A

CVE-2002-0226

retrieve_password.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remote attackers to request a new password on behalf of another user and use the sessionID to calculate …

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0211 CWE-? N/A

CVE-2002-0211

Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary "gunzip" program before executing it, which could allow local users to execute arbitrary command…

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0209 CWE-? N/A

CVE-2002-0209

Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing (SLB) and Cookie-Based Persistence features enabled, allows remote attackers to determine the real IP address of a web server with a half-closed session…

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0207 CWE-? N/A

CVE-2002-0207

Buffer overflow in Real Networks RealPlayer 8.0 and earlier allows remote attackers to execute arbitrary code via a header length value that exceeds the actual length of the header.

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0197 CWE-? N/A

CVE-2002-0197

psyBNC 2.3 beta and earlier allows remote attackers to spoof encrypted, trusted messages by sending lines that begin with the "[B]" sequence, which makes the message appear legitimate.

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0196 CWE-? N/A

CVE-2002-0196

GetRelativePath in ACD Incorporated CwpAPI 1.1 only verifies if the server root is somewhere within the path, which could allow remote attackers to read or write files outside of the web root, in other directories whose …

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0179 CWE-? N/A

CVE-2002-0179

Buffer overflow in xpilot-server for XPilot 4.5.0 and earlier allows remote attackers to execute arbitrary code.

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0176 CWE-? N/A

CVE-2002-0176

The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe.

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0175 CWE-? N/A

CVE-2002-0175

libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe.

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0168 CWE-? N/A

CVE-2002-0168

Vulnerability in Imlib before 1.9.13 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by manipulating arguments that are passed to malloc, which results in a heap corruption.

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0167 CWE-? N/A

CVE-2002-0167

Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain weaknesses of NetPBM.

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0166 CWE-? N/A

CVE-2002-0166

Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute Javascript via an HTTP request containing the script, which is entered into a web logfile and not properly filtered by analog du…

MITRE n/a:n/a 25 Jun 2002