CVE Notifier

CVE-2002-0526 CWE-? N/A

CVE-2002-0526

Vulnerability in (1) inews or (2) rnews for INN 2.2.3 and earlier, related to insecure open() calls.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0525 CWE-? N/A

CVE-2002-0525

Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gain privileges via format string specifiers in NTTP responses.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0524 CWE-? N/A

CVE-2002-0524

ASP-Nuke RC2 and earlier allows remote attackers to determine the absolute path of the server by (1) calling database-inc.asp with incorrect cookies, or (2) calling Post.asp with certain arguments, which leak the pathnam…

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0523 CWE-? N/A

CVE-2002-0523

ASP-Nuke RC2 and earlier allows remote attackers to list all logged-in users by submitting an invalid "pseudo" cookie.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0522 CWE-? N/A

CVE-2002-0522

ASP-Nuke RC2 and earlier allows remote attackers to bypass authentication and gain privileges by modifying the "pseudo" cookie.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0521 CWE-? N/A

CVE-2002-0521

Cross-site scripting vulnerabilities in ASP-Nuke RC2 and earlier allow remote attackers to execute script or gain privileges as other ASP-Nuke users via script in (1) the name parameter in downloads.asp, (2) the message …

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0520 CWE-? N/A

CVE-2002-0520

Cross-site scripting vulnerability in functions-inc.asp for ASP-Nuke RC1 allows remote attackers to execute script as other ASP-Nuke users by embedding it within an IMG tag.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0518 CWE-? N/A

CVE-2002-0518

The SYN cache (syncache) and SYN cookie (syncookie) mechanism in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service (crash) (1) via a SYN packet that is accepted using syncookies that causes a n…

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0517 CWE-? N/A

CVE-2002-0517

Buffer overflow in X11 library (libX11) on Caldera Open UNIX 8.0.0, UnixWare 7.1.1, and possibly other operating systems, allows local users to gain root privileges via a long -xrm argument to programs such as (1) dtterm…

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0515 CWE-? N/A

CVE-2002-0515

IPFilter 3.4.25 and earlier sets a different TTL when a port is being filtered than when it is not being filtered, which allows remote attackers to identify filtered ports by comparing TTLs.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0514 CWE-? N/A

CVE-2002-0514

PF in OpenBSD 3.0 with the return-rst rule sets the TTL to 128 in the RST packet, which allows remote attackers to determine if a port is being filtered because the TTL is different than the default TTL.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0510 CWE-? N/A

CVE-2002-0510

The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine that a target system is running Linux.

MITRE n/a:n/a 11 Jun 2002