CVE Notifier

CVE-2002-0440 CWE-? N/A

CVE-2002-0440

Trend Micro InterScan VirusWall HTTP proxy 3.6 with the "Skip scanning if Content-length equals 0" option enabled allows malicious web servers to bypass content scanning via a Content-length header set to 0, which is oft…

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0439 CWE-? N/A

CVE-2002-0439

Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal credit card numbers or delete items by injecting the script …

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0438 CWE-? N/A

CVE-2002-0438

ZyXEL ZyWALL 10 before 3.50 allows remote attackers to cause a denial of service via an ARP packet with the firewall's IP address and an incorrect MAC address, which causes the firewall to disable the LAN interface.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0436 CWE-? N/A

CVE-2002-0436

sscd_suncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address parameter.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0434 CWE-? N/A

CVE-2002-0434

Marcus S. Xenakis directory.php script allows remote attackers to execute arbitrary commands via shell metacharacters in the dir parameter.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0433 CWE-? N/A

CVE-2002-0433

Pi3Web 2.0.0 allows remote attackers to view restricted files via an HTTP request containing a "*" (wildcard or asterisk) character.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0432 CWE-? N/A

CVE-2002-0432

Buffer overflow in (1) lprintf and (2) cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attacks such as a long HELO c…

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0430 CWE-? N/A

CVE-2002-0430

MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to M…

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0428 CWE-? N/A

CVE-2002-0428

Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1 allows clients to bypass the "authentication timeout" by modifying the to_expire or expire values in the client's users.C configuration file.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0427 CWE-? N/A

CVE-2002-0427

Buffer overflows in fpexec in mod_frontpage before 1.6.1 may allow attackers to gain root privileges.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0426 CWE-? N/A

CVE-2002-0426

VPN Server module in Linksys EtherFast BEFVP41 Cable/DSL VPN Router before 1.40.1 reduces the key lengths for keys that are supplied via manual key entry, which makes it easier for attackers to crack the keys.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0422 CWE-? N/A

CVE-2002-0422

IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (which may be obscured by NAT) via (1) a PROPFIND HTTP request with a blank Host header, which leaks the …

MITRE n/a:n/a 11 Jun 2002