CVE Notifier

CVE-2002-0282 CWE-? N/A

CVE-2002-0282

DCP-Portal 3.7 through 4.5 allows remote attackers to obtain the physical path of the server via (1) a direct request to add_user.php, or via an invalid new_language parameter in (2) contents.php, (3) categories.php, or …

MITRE n/a:n/a 03 May 2002

CVE-2002-0281 CWE-? N/A

CVE-2002-0281

Cross-site scripting vulnerability in DCP-Portal 4.2 and earlier allows remote attackers to gain privileges of other portal users by providing Javascript in the job information field to user_update.php.

MITRE n/a:n/a 03 May 2002

CVE-2002-0280 CWE-? N/A

CVE-2002-0280

Buffer overflow in CodeBlue 4 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via a long string in an SMTP reply.

MITRE n/a:n/a 03 May 2002

CVE-2002-0279 CWE-? N/A

CVE-2002-0279

The kernel in HP-UX 11.11 does not properly provide arguments for setrlimit, which could allow local attackers to cause a denial of service (kernel panic) and possibly gain privileges.

MITRE n/a:n/a 03 May 2002

CVE-2002-0278 CWE-? N/A

CVE-2002-0278

Directory traversal vulnerability in Add2it Mailman Free 1.73 and earlier allows remote attackers to modify arbitrary files via a .. (dot dot) in the list parameter.

MITRE n/a:n/a 03 May 2002

CVE-2002-0277 CWE-? N/A

CVE-2002-0277

Add2it Mailman Free 1.73 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the list parameter.

MITRE n/a:n/a 03 May 2002

CVE-2002-0273 CWE-? N/A

CVE-2002-0273

Buffer overflow in CWMail.exe in NetWin before 2.8a allows remote authenticated users to execute arbitrary code via a long item parameter.

MITRE n/a:n/a 03 May 2002

CVE-2002-0272 CWE-? N/A

CVE-2002-0272

Buffer overflows in mpg321 before 0.2.9 allows local and possibly remote attackers to execute arbitrary code via a long URL to (1) a command line option, (2) an HTTP request, or (3) an FTP request.

MITRE n/a:n/a 03 May 2002

CVE-2002-0271 CWE-? N/A

CVE-2002-0271

Runtime library in GNU Ada compiler (GNAT) 3.12p through 3.14p allows local users to modify files of other users via a symlink attack on temporary files.

MITRE n/a:n/a 03 May 2002

CVE-2002-0270 CWE-? N/A

CVE-2002-0270

Opera, when configured with the "Determine action by MIME type" option disabled, interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote attackers to execute arbit…

MITRE n/a:n/a 03 May 2002

CVE-2002-0269 CWE-? N/A

CVE-2002-0269

Internet Explorer 5.x and 6 interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote attackers to execute arbitrary script in documents that the user does not expec…

MITRE n/a:n/a 03 May 2002

CVE-2002-0268 CWE-? N/A

CVE-2002-0268

Identix BioLogon 3 allows users with physical access to the system to gain administrative privileges by using CTRL-ALT-DEL and running a "Browse" function, which runs Explorer with SYSTEM privileges.

MITRE n/a:n/a 03 May 2002