CVE Notifier

CVE-2002-0236 CWE-? N/A

CVE-2002-0236

Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote attackers to bypass authentication via a direct HTTP request to the VsSetCookie.exe program, which returns a v…

MITRE n/a:n/a 03 May 2002

CVE-2002-0235 CWE-? N/A

CVE-2002-0235

Castelle FaxPress, possibly 6.3 and other versions, when configured to use the Network print queue, allows attackers to obtain the username and password by submitting an incorrect login, which causes Faxpress to leak the…

MITRE n/a:n/a 03 May 2002

CVE-2002-0234 CWE-? N/A

CVE-2002-0234

NetScreen ScreenOS before 2.6.1 does not support a maximum number of concurrent sessions for a system, which allows an attacker on the trusted network to cause a denial of service (resource exhaustion) via a port scan to…

MITRE n/a:n/a 03 May 2002

CVE-2002-0233 CWE-? N/A

CVE-2002-0233

Directory traversal vulnerability in eshare Expressions 4 Web server allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request.

MITRE n/a:n/a 03 May 2002

CVE-2002-0232 CWE-? N/A

CVE-2002-0232

Directory traversal vulnerability in Multi Router Traffic Grapher (MRTG) allows remote attackers to read portions of arbitrary files via a .. (dot dot) in the cfg parameter for (1) 14all.cgi, (2) 14all-1.1.cgi, (3) traff…

MITRE n/a:n/a 03 May 2002

CVE-2002-0231 CWE-? N/A

CVE-2002-0231

Buffer overflow in mIRC 5.91 and earlier allows a remote server to execute arbitrary code on the client via a long nickname.

MITRE n/a:n/a 03 May 2002

CVE-2002-0230 CWE-? N/A

CVE-2002-0230

Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascript on other clients via the cmd parameter, which causes the script to be inserted into an error mess…

MITRE n/a:n/a 03 May 2002

CVE-2002-0229 CWE-? N/A

CVE-2002-0229

Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using "LOAD DATA INFILE LOCAL" SQL statements.

MITRE n/a:n/a 03 May 2002

CVE-2002-0228 CWE-? N/A

CVE-2002-0228

Microsoft MSN Messenger allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information such as display names and web site navigation, and possibly more when the user is connec…

MITRE n/a:n/a 03 May 2002

CVE-2002-0227 CWE-? N/A

CVE-2002-0227

KICQ 2.0.0b1 allows remote attackers to cause a denial of service (crash) via a malformed message.

MITRE n/a:n/a 03 May 2002

CVE-2002-0225 CWE-? N/A

CVE-2002-0225

tac_plus Tacacs+ daemon F4.0.4.alpha, originally maintained by Cisco, creates files from the accounting directive with world-readable and writable permissions, which allows local users to access and modify sensitive file…

MITRE n/a:n/a 03 May 2002

CVE-2002-0224 CWE-? N/A

CVE-2002-0224

The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through SQL 2000 0.0 allows remote attackers to cause a denial of service (crash or hang)…

MITRE n/a:n/a 03 May 2002