CVE Notifier

CVE-2002-0208 CWE-? N/A

CVE-2002-0208

PGP Security PGPfire 7.1 for Windows alters the system's TCP/IP stack and modifies packets in ICMP error messages in a way that allows remote attackers to determine that the system is running PGPfire.

MITRE n/a:n/a 03 May 2002

CVE-2002-0206 CWE-? N/A

CVE-2002-0206

index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by specifying a URL to the malicious code in the file parameter.

MITRE n/a:n/a 03 May 2002

CVE-2002-0205 CWE-? N/A

CVE-2002-0205

Cross-site scripting (CSS) vulnerability in error.asp for Plumtree Corporate Portal 3.5 through 4.5 allows remote attackers to execute arbitrary script on other clients via the "Description" parameter.

MITRE n/a:n/a 03 May 2002

CVE-2002-0204 CWE-? N/A

CVE-2002-0204

Buffer overflow in GNU Chess (gnuchess) 5.02 and earlier, if modified or used in a networked capacity contrary to its own design as a single-user application, may allow local or remote attackers to execute arbitrary code…

MITRE n/a:n/a 03 May 2002

CVE-2002-0203 CWE-? N/A

CVE-2002-0203

ttawebtop.cgi in Tarantella Enterprise 3.20 on SPARC Solaris and Linux, and 3.1x and 3.0x including 3.11.903, allows remote attackers to view directory contents via an empty pg parameter.

MITRE n/a:n/a 03 May 2002

CVE-2002-0202 CWE-? N/A

CVE-2002-0202

PaintBBS 1.2 installs certain files and directories with insecure permissions, which allows local users to (1) obtain the encrypted server password via the world-readable oekakibbs.conf file, or (2) modify the server con…

MITRE n/a:n/a 03 May 2002

CVE-2002-0201 CWE-? N/A

CVE-2002-0201

Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request, possibly triggering a buffer overflow.

MITRE n/a:n/a 03 May 2002

CVE-2002-0200 CWE-? N/A

CVE-2002-0200

Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name.

MITRE n/a:n/a 03 May 2002

CVE-2002-0199 CWE-? N/A

CVE-2002-0199

Buffer overflow in admin.cgi for Nullsoft Shoutcast Server 1.8.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an argument with a large number of backslashes.

MITRE n/a:n/a 03 May 2002

CVE-2002-0198 CWE-? N/A

CVE-2002-0198

Buffer overflow in plDaniels ripMime 1.2.6 and earlier, as used in other programs such as xamime and inflex, allows remote attackers to execute arbitrary code via an attachment in a long filename.

MITRE n/a:n/a 03 May 2002

CVE-2001-1348 CWE-? N/A

CVE-2001-1348

TWIG 2.6.2 and earlier allows remote attackers to perform unauthorized database operations via a SQL injection attack on the id parameter.

MITRE n/a:n/a 03 May 2002

CVE-2001-1346 CWE-? N/A

CVE-2001-1346

Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files via a symlink attack on the temporary files (1) asagent.tmp or (2) inetd.tmp.

MITRE n/a:n/a 03 May 2002