CVE Notifier

CVE-2002-0118 CWE-? N/A

CVE-2002-0118

Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an I…

MITRE n/a:n/a 15 Mar 2002

CVE-2002-0116 CWE-? N/A

CVE-2002-0116

Palm OS 3.5h and possibly other versions, as used in Handspring Visor and Xircom products, allows remote attackers to cause a denial of service via a TCP connect scan, e.g. from nmap.

MITRE n/a:n/a 15 Mar 2002

CVE-2002-0114 CWE-? N/A

CVE-2002-0114

EMC NetWorker (formerly Legato NetWorker) before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain privileges by reading the password from the file. NOTE: this was originally rep…

MITRE n/a:n/a 15 Mar 2002

CVE-2002-0113 CWE-? N/A

CVE-2002-0113

EMC NetWorker (formerly Legato NetWorker) before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which allows local users to read sensitive information and possibly gain privileges. NOT…

MITRE n/a:n/a 15 Mar 2002

CVE-2002-0112 CWE-? N/A

CVE-2002-0112

Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL.

MITRE n/a:n/a 15 Mar 2002

CVE-2002-0110 CWE-? N/A

CVE-2002-0110

Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plaintext in a .ini file, which allows an attacker to gain privileges by reading the passwords from the f…

MITRE n/a:n/a 15 Mar 2002

CVE-2002-0109 CWE-? N/A

CVE-2002-0109

Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via an SNMP query for the default community string…

MITRE n/a:n/a 15 Mar 2002

CVE-2002-0108 CWE-? N/A

CVE-2002-0108

Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.

MITRE n/a:n/a 15 Mar 2002

CVE-2002-0106 CWE-? N/A

CVE-2002-0106

BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an MS-DOS device name.

MITRE n/a:n/a 15 Mar 2002

CVE-2002-0105 CWE-? N/A

CVE-2002-0105

CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable.

MITRE n/a:n/a 15 Mar 2002

CVE-2002-0104 CWE-? N/A

CVE-2002-0104

AFTPD 5.4.4 allows remote attackers to gain sensitive information via a CD (CWD) ~ (tilde) command, which causes a core dump.

MITRE n/a:n/a 15 Mar 2002

CVE-2002-0103 CWE-? N/A

CVE-2002-0103

An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2) obtaining the admini…

MITRE n/a:n/a 15 Mar 2002