CVE Notifier

CVE-2002-0253 CWE-? N/A

CVE-2002-0253

PHP, when not configured with the "display_errors = Off" setting in php.ini, allows remote attackers to obtain the physical path for an include file via a trailing slash in a request to a directly accessible PHP program,…

MITRE n/a:n/a 03 May 2002

CVE-2002-0252 CWE-? N/A

CVE-2002-0252

Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute arbitrary code via a response containing a long Content-Type MIME header.

MITRE n/a:n/a 03 May 2002

CVE-2002-0249 CWE-? N/A

CVE-2002-0249

PHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote attackers to obtain the physical path of the php.exe via a request with malformed arguments such as /123, which leaks the pa…

MITRE n/a:n/a 03 May 2002

CVE-2002-0248 CWE-? N/A

CVE-2002-0248

wmtv 0.6.5 and earlier allows local users to modify arbitrary files via a symlink attack on a configuration file.

MITRE n/a:n/a 03 May 2002

CVE-2002-0247 CWE-? N/A

CVE-2002-0247

Buffer overflows in wmtv 0.6.5 and earlier may allow local users to gain privileges.

MITRE n/a:n/a 03 May 2002

CVE-2002-0245 CWE-? N/A

CVE-2002-0245

Lotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to (1) determine the physical path of the server via a request for a nonexistent file with a .pl (Perl) extension, which leaks the pathname in the e…

MITRE n/a:n/a 03 May 2002

CVE-2002-0244 CWE-? N/A

CVE-2002-0244

Directory traversal vulnerability in chroot function in AtheOS 0.3.7 allows attackers to escape the jail via a .. (dot dot) in the pathname argument to chdir.

MITRE n/a:n/a 03 May 2002

CVE-2002-0243 CWE-? N/A

CVE-2002-0243

Cross-site scripting vulnerability in Opera 6.0 and earlier allows remote attackers to execute arbitrary script via an Extended HTML Form, whose output from the remote server is not properly cleansed.

MITRE n/a:n/a 03 May 2002

CVE-2002-0242 CWE-? N/A

CVE-2002-0242

Cross-site scripting vulnerability in Internet Explorer 6 earlier allows remote attackers to execute arbitrary script via an Extended HTML Form, whose output from the remote server is not properly cleansed.

MITRE n/a:n/a 03 May 2002

CVE-2002-0240 CWE-? N/A

CVE-2002-0240

PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in t…

MITRE n/a:n/a 03 May 2002

CVE-2002-0239 CWE-? N/A

CVE-2002-0239

Buffer overflow in hanterm 3.3.1 and earlier allows local users to execute arbitrary code via a long string in the (1) -fn, (2) -hfb, or (3) -hfn argument.

MITRE n/a:n/a 03 May 2002

CVE-2002-0238 CWE-? N/A

CVE-2002-0238

Cross-site scripting vulnerability in web administration interface for NetGear RT314 and RT311 Gateway Routers allows remote attackers to execute arbitrary script on another client via a URL that contains the script.

MITRE n/a:n/a 03 May 2002