CVE Notifier

CVE-2002-0475 CWE-? N/A

CVE-2002-0475

Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within an IMG image tag while editing a message.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0474 CWE-? N/A

CVE-2002-0474

Cross-site scripting vulnerability in ZeroForum allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within IMG image tag.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0472 CWE-? N/A

CVE-2002-0472

MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from other users.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0471 CWE-? N/A

CVE-2002-0471

PHPNetToolpack 0.1 allows remote attackers to execute arbitrary code via shell metacharacters in the a_query variable.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0470 CWE-? N/A

CVE-2002-0470

PHPNetToolpack 0.1 relies on its environment's PATH to find and execute the traceroute program, which could allow local users to gain privileges by inserting a Trojan horse program into the search path.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0469 CWE-? N/A

CVE-2002-0469

Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier does not properly drop privileges when Ecartis is installed setuid-root, "lock-to-user" is not set, and ecartis is called by certain MTA's, which could all…

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0468 CWE-? N/A

CVE-2002-0468

Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileges via (1) a long command line argument, which is not properly handled in core.c, or possibly via bad…

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0467 CWE-? N/A

CVE-2002-0467

Buffer overflows in Ecartis (formerly Listar) 1.0.0 before snapshot 20020125 allows remote attackers to execute arbitrary code via (1) address_match() of mystring.c or (2) other functions in tolist.c.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0466 CWE-? N/A

CVE-2002-0466

Hosting Controller 1.4.1 and earlier allows remote attackers to browse arbitrary directories via a full C: style pathname in the filepath arguments to (1) Statsbrowse.asp, (2) servubrowse.asp, (3) browsedisk.asp, (4) bro…

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0465 CWE-? N/A

CVE-2002-0465

Directory traversal vulnerability in filemanager.asp for Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files, and execute commands, via a .. (dot dot) in the OpenPath parameter…

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0461 CWE-? N/A

CVE-2002-0461

Internet Explorer 5.01 through 6 allows remote attackers to cause a denial of service (application crash) via Javascript in a web page that calls location.replace on itself, causing a loop.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0460 CWE-? N/A

CVE-2002-0460

Bitvise WinSSHD before 2002-03-16 allows remote attackers to cause a denial of service (resource exhaustion) via a large number of incomplete connections that are not properly terminated, which are not properly freed by …

MITRE n/a:n/a 11 Jun 2002