CVE Notifier

CVE-2002-0160 CWE-? N/A

CVE-2002-0160

The administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to read HTML, Java class, and image files outside the web ro…

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0159 CWE-? N/A

CVE-2002-0159

Format string vulnerability in the administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to crash the CSADMIN module …

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0153 CWE-? N/A

CVE-2002-0153

Internet Explorer 5.1 for Macintosh allows remote attackers to bypass security checks and invoke local AppleScripts within a specific HTML element, aka the "Local Applescript Invocation" vulnerability.

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0152 CWE-? N/A

CVE-2002-0152

Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large number of / characters…

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0151 CWE-? N/A

CVE-2002-0151

Buffer overflow in Multiple UNC Provider (MUP) in Microsoft Windows operating systems allows local users to cause a denial of service or possibly gain SYSTEM privileges via a long UNC request.

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0143 CWE-? N/A

CVE-2002-0143

Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary code via a long HOME environment variable.

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0139 CWE-? N/A

CVE-2002-0139

Pi-Soft SpoonFTP 1.1 and earlier allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command.

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0128 CWE-? N/A

CVE-2002-0128

cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long argument.

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0121 CWE-? N/A

CVE-2002-0121

PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections.

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0117 CWE-? N/A

CVE-2002-0117

Cross-site scripting vulnerability in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 and earlier allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG …

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0115 CWE-? N/A

CVE-2002-0115

Snort 1.8.3 does not properly define the minimum ICMP header size, which allows remote attackers to cause a denial of service (crash and core dump) via a malformed ICMP packet.

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0111 CWE-? N/A

CVE-2002-0111

Directory traversal vulnerability in Funsoft Dino's Webserver 1.2 and earlier allows remote attackers to read files or execute arbitrary commands via a .. (dot dot) in the URL.

MITRE n/a:n/a 25 Jun 2002