CVE Notifier

CVE-2002-0327 CWE-? N/A

CVE-2002-0327

Buffer overflow in Century Software TERM allows local users to gain root privileges via a long tty argument to the callin program.

MITRE n/a:n/a 03 May 2002

CVE-2002-0326 CWE-? N/A

CVE-2002-0326

Cross-site scripting vulnerability in BadBlue before 1.6.1 beta allows remote attackers to execute arbitrary script and possibly additional commands via a URL that contains Javascript.

MITRE n/a:n/a 03 May 2002

CVE-2002-0325 CWE-? N/A

CVE-2002-0325

Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the URL.

MITRE n/a:n/a 03 May 2002

CVE-2002-0324 CWE-? N/A

CVE-2002-0324

Greymatter 1.21c and earlier with the Bookmarklet feature enabled allows remote attackers to read a cleartext password and gain administrative privileges by guessing the name of a gmrightclick-*.reg file which contains t…

MITRE n/a:n/a 03 May 2002

CVE-2002-0323 CWE-? N/A

CVE-2002-0323

comment2.jse in ScriptEase:WebServer allows remote attackers to read arbitrary files by specifying the target file as an argument in the URL.

MITRE n/a:n/a 03 May 2002

CVE-2002-0322 CWE-? N/A

CVE-2002-0322

Yahoo! Messenger 4.0 sends user passwords in cleartext, which could allow remote attackers to gain privileges of other users via sniffing.

MITRE n/a:n/a 03 May 2002

CVE-2002-0321 CWE-? N/A

CVE-2002-0321

Yahoo! Messenger 5.0 allows remote attackers to spoof other users by modifying the username and using the spoofed username for social engineering or denial of service (flooding) attacks.

MITRE n/a:n/a 03 May 2002

CVE-2002-0320 CWE-? N/A

CVE-2002-0320

Buffer overflow in Yahoo! Messenger 5.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) message or (2) IMvironment field.

MITRE n/a:n/a 03 May 2002

CVE-2002-0319 CWE-? N/A

CVE-2002-0319

Cross-site scripting vulnerability in edituser.php for pforum 1.14 and earlier allows remote attackers to execute script and steal cookies from other users via Javascript in a username.

MITRE n/a:n/a 03 May 2002

CVE-2002-0317 CWE-? N/A

CVE-2002-0317

Gator ActiveX component (IEGator.dll) 3.0.6.1 allows remote web sites to install arbitrary software by specifying a Trojan Gator installation file (setup.ex_) in the src parameter.

MITRE n/a:n/a 03 May 2002

CVE-2002-0316 CWE-? N/A

CVE-2002-0316

Cross-site scripting vulnerability in eXtreme message board (XMB) 1.6x and earlier allows remote attackers to execute script as other XMB users by inserting the script into an IMG tag.

MITRE n/a:n/a 03 May 2002

CVE-2002-0315 CWE-? N/A

CVE-2002-0315

fasttrack p2p, as used in (1) KaZaA, (2) grokster, and (3) morpheus allows remote attackers to spoof other users by modifying the username and network information in the message header.

MITRE n/a:n/a 03 May 2002