CVE Notifier

CVE-2002-0489 CWE-? N/A

CVE-2002-0489

Linux Directory Penguin NsLookup CGI script (nslookup.pl) 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the (1) query or (2) type parameters.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0487 CWE-? N/A

CVE-2002-0487

Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, which could allow local users with access to gain privileges of other Xpede users by reading the password…

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0486 CWE-? N/A

CVE-2002-0486

Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users with access to the cookies to gain privileges.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0485 CWE-? N/A

CVE-2002-0485

Norton Anti-Virus (NAV) allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headers are mixed upper and lower case, which is ignored by some mail clients.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0483 CWE-? N/A

CVE-2002-0483

index.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of the web server when the file parameter is set to index.php, which triggers an error message that leaks the pathname.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0482 CWE-? N/A

CVE-2002-0482

Directory traversal vulnerability in PCI Netsupport Manager before version 7, when running web extensions, allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP GET request.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0481 CWE-? N/A

CVE-2002-0481

An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security settings and execute Javascript via an IFRAME in an HTML email message that references .WMS (Windows M…

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0480 CWE-? N/A

CVE-2002-0480

ISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d is configured to allow a user "skank" on a machine "starscream" to become a key manager when the "first time connection" feature is enabled and before any …

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0479 CWE-? N/A

CVE-2002-0479

Gravity Storm Service Pack Manager 2000 creates a hidden share (SPM2000c$) mapped to the C drive, which may allow local users to bypass access restrictions on certain directories in the C drive, such as system32, by acce…

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0478 CWE-? N/A

CVE-2002-0478

The default configuration of Foundry Networks EdgeIron 4802F allows remote attackers to modify sensitive information via arbitrary SNMP community strings.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0477 CWE-? N/A

CVE-2002-0477

Standalone Macromedia Flash Player 5.0 before 5,0,30,2 allows remote attackers to execute arbitrary programs via a .SWF file containing the "exec" FSCommand.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0476 CWE-? N/A

CVE-2002-0476

Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file containing the undocumented "save" FSCommand.

MITRE n/a:n/a 11 Jun 2002