CVE Notifier

CVE-2002-0107 CWE-? N/A

CVE-2002-0107

Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another version string, which …

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0098 CWE-? N/A

CVE-2002-0098

Buffer overflow in index.cgi administration interface for Boozt! Standard 0.9.8 allows local users to execute arbitrary code via a long name field when creating a new banner.

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0097 CWE-? N/A

CVE-2002-0097

Geeklog 1.3 allows remote attackers to hijack user accounts, including the administrator account, by modifying the UID of a user's permanent cookie to the target account.

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0096 CWE-? N/A

CVE-2002-0096

The installation of Geeklog 1.3 creates an extra group_assignments record which is not properly deleted, which causes the first newly created user to be added to the GroupAdmin and UserAdmin groups, which could provide t…

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0092 CWE-? N/A

CVE-2002-0092

CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (server crash) via the diff capability.

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0083 CWE-? N/A

CVE-2002-0083

Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0082 CWE-? N/A

CVE-2002-0082

The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the i2d_SSL_SESSION function, which allows remote attackers to use a buffer …

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0081 CWE-? N/A

CVE-2002-0081

Buffer overflows in (1) php_mime_split in PHP 4.1.0, 4.1.1, and 4.0.6 and earlier, and (2) php3_mime_split in PHP 3.0.x allows remote attackers to execute arbitrary code via a multipart/form-data HTTP POST request when f…

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0080 CWE-? N/A

CVE-2002-0080

rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be…

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0078 CWE-? N/A

CVE-2002-0078

The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone by embedding the script in a cookie, aka the "Cookie-based Script Execution" vu…

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0070 CWE-? N/A

CVE-2002-0070

Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute arbitrary code via a custom URL handler that has not been removed for an application that has been impr…

MITRE n/a:n/a 25 Jun 2002

CVE-2002-0066 CWE-? N/A

CVE-2002-0066

Funk Software Proxy Host 3.x before 3.09A creates a Named Pipe that does not require authentication and is installed with insecure access control, which allows local and possibly remote users to use the Proxy Host's conf…

MITRE n/a:n/a 25 Jun 2002