CVE Notifier

CVE-2002-0297 CWE-? N/A

CVE-2002-0297

Buffer overflow in ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL in an HTTP request.

MITRE n/a:n/a 03 May 2002

CVE-2002-0296 CWE-? N/A

CVE-2002-0296

The installation of Tarantella Enterprise 3 allows local users to overwrite arbitrary files via a symlink attack on the "spinning" temporary file.

MITRE n/a:n/a 03 May 2002

CVE-2002-0295 CWE-? N/A

CVE-2002-0295

Alcatel OmniPCX 4400 installs files with world-writable permissions, which allows local users to reconfigure the system and possibly gain privileges.

MITRE n/a:n/a 03 May 2002

CVE-2002-0294 CWE-? N/A

CVE-2002-0294

Alcatel 4400 installs the /chetc/shutdown command with setgid privileges, which allows many different local users to shut down the system.

MITRE n/a:n/a 03 May 2002

CVE-2002-0293 CWE-? N/A

CVE-2002-0293

FTP service in Alcatel OmniPCX 4400 allows the "halt" user to gain root privileges by modifying root's .profile file.

MITRE n/a:n/a 03 May 2002

CVE-2002-0291 CWE-? N/A

CVE-2002-0291

Dino's Webserver 1.2 allows remote attackers to cause a denial of service (CPU consumption) and possibly execute arbitrary code via several large HTTP requests within a short time.

MITRE n/a:n/a 03 May 2002

CVE-2002-0289 CWE-? N/A

CVE-2002-0289

Buffer overflow in Phusion web server 1.0 allows remote attackers to cause a denial of service and execute arbitrary code via a long HTTP request.

MITRE n/a:n/a 03 May 2002

CVE-2002-0288 CWE-? N/A

CVE-2002-0288

Directory traversal vulnerability in Phusion web server 1.0 allows remote attackers to read arbitrary files via a ... (triple dot dot) in the HTTP request.

MITRE n/a:n/a 03 May 2002

CVE-2002-0286 CWE-? N/A

CVE-2002-0286

The GetPassword function in function.php of SiteNews 0.10 and 0.11 allows remote attackers to gain privileges and add users by providing a non-existent user name and the MD5 checksum for an empty password to add_user.php…

MITRE n/a:n/a 03 May 2002

CVE-2002-0285 CWE-? N/A

CVE-2002-0285

Outlook Express 5.5 and 6.0 on Windows treats a carriage return ("CR") in a message header as if it were a valid carriage return/line feed combination (CR/LF), which could allow remote attackers to bypass virus protectio…

MITRE n/a:n/a 03 May 2002

CVE-2002-0284 CWE-? N/A

CVE-2002-0284

Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Files directory to the web page that is processing the license, which could allow malicious web servers…

MITRE n/a:n/a 03 May 2002

CVE-2002-0283 CWE-? N/A

CVE-2002-0283

Windows XP with port 445 open allows remote attackers to cause a denial of service (CPU consumption) via a flood of TCP SYN packets containing possibly malformed data.

MITRE n/a:n/a 03 May 2002