CVE Notifier

CVE-2002-0560 CWE-? N/A

CVE-2002-0560

PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to obtain sensitive information via the OWA_UTIL stored procedures (1) OWA_UTIL.signature, (2) OWA_UTIL.listprint, or (3) OWA_UTIL.s…

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0559 CWE-? N/A

CVE-2002-0559

Buffer overflows in PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allow remote attackers to cause a denial of service or execute arbitrary code via (1) a long help page request without a dadname, which …

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0558 CWE-? N/A

CVE-2002-0558

Directory traversal vulnerability in TYPSoft FTP server 0.97.1 and earlier allows a remote authenticated user (possibly anonymous) to list arbitrary directories via a .. in a LIST (ls) command ending in wildcard *.* char…

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0557 CWE-? N/A

CVE-2002-0557

Vulnerability in OpenBSD 3.0, when using YP with netgroups in the password database, causes (1) rexec or (2) rsh to run another user's shell, or (3) atrun to change to a different user's directory, possibly due to memory…

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0556 CWE-? N/A

CVE-2002-0556

Directory traversal vulnerability in Quik-Serv HTTP server 1.1B allows remote attackers to read arbitrary files via a .. (dot dot) in a URL.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0555 CWE-? N/A

CVE-2002-0555

IBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which could allow remote attackers to execute SQL code in a web form even when the developer has attempted to escape it.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0554 CWE-? N/A

CVE-2002-0554

webdriver in IBM Informix Web DataBlade 4.12 allows remote attackers to bypass user access levels or read arbitrary files via a SQL injection attack in an HTTP request.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0552 CWE-? N/A

CVE-2002-0552

Multiple buffer overflows in Melange Chat server 2.02 allow remote or local attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a long argument in the /yell command, (2) long lines …

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0551 CWE-? N/A

CVE-2002-0551

Cross-site scripting vulnerability in Dynamic Guestbook 3.0 allows remote attackers to execute code in clients who access guestbook pages via the parameters (1) name, (2) mail, or (3) kommentar.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0550 CWE-? N/A

CVE-2002-0550

Dynamic Guestbook 3.0 allows remote attackers to execute arbitrary code via shell metacharacters in the gbdaten parameter.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0549 CWE-? N/A

CVE-2002-0549

Cross-site scripting vulnerabilities in Anthill allow remote attackers to execute script as other Anthill users.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0548 CWE-? N/A

CVE-2002-0548

Anthill allows remote attackers to bypass authentication and file bug reports by directly accessing the postbug.php program instead of enterbug.php.

MITRE n/a:n/a 11 Jun 2002