CVE Database

CVE Database Year: 2002

CVE-2002-0001: Remote Code Execution Vulnerability in Mutt Email Client
CVE-2002-0002: Remote Code Execution via Format String Vulnerability in stunnel Client Mode for SMTP, POP, and NNTP
CVE-2002-0003: Buffer Overflow Vulnerability in groff Preprocessor Allows Privilege Escalation via LPRng LPD
CVE-2002-0004: Heap Corruption Vulnerability in at Program Allows Arbitrary Code Execution
CVE-2002-0005: Buffer Overflow Vulnerability in AOL Instant Messenger (AIM) Allows Remote Code Execution
CVE-2002-0006: Arbitrary IRC Command Execution Vulnerability in XChat 1.8.7 and Earlier
CVE-2002-0007: LDAP Anonymous Bind Vulnerability in Bugzilla
CVE-2002-0008: User Comment Spoofing and Bug Posting Vulnerability in Bugzilla
CVE-2002-0009: Information Disclosure Vulnerability in Bugzilla
CVE-2002-0010: Arbitrary SQL Injection and Privilege Escalation in Bugzilla
CVE-2002-0011: Bugzilla Information Leak Vulnerability in doeditvotes.cgi
CVE-2002-0012: SNMPv1 Trap Handling Vulnerabilities
CVE-2002-0013: SNMPv1 Request Handling Vulnerabilities
CVE-2002-0014: Arbitrary Command Execution via URL Handling in Pine 4.43 and Earlier
CVE-2002-0017: Remote Code Execution Vulnerability in SGI IRIX SNMP Daemon (snmpd)
CVE-2002-0018: SID Injection Vulnerability in Microsoft Windows NT and Windows 2000
CVE-2002-0020: Remote Code Execution Vulnerability in Telnet Server in Windows 2000 and Interix 2.2
CVE-2002-0021: Denial of Service Vulnerability in Microsoft Office v. X for Mac
CVE-2002-0022: Buffer Overflow in HTML Directive Implementation in Internet Explorer 5.5 and 6.0
CVE-2002-0023: Arbitrary File Reading Vulnerability in Internet Explorer 5.01, 5.5, and 6.0
CVE-2002-0024: File Download Box Content-Disposition and Content-Type HTML Header Manipulation Vulnerability
CVE-2002-0025: Content-Type HTML Header Field Manipulation Vulnerability
CVE-2002-0026: Script Execution Bypass Vulnerability in Internet Explorer 5.5 and 6.0
CVE-2002-0027: URL Spoofing and File Reading Vulnerability in Internet Explorer 5.5 and 6.0
CVE-2002-0028: ICQ Buffer Overflow Vulnerability in Voice Video & Games Request
CVE-2002-0029: LIBRESOLV: Buffer Overrun in DNS Stub Resolver Library
CVE-2002-0030: Digital Signature Verification Vulnerability in Adobe Acrobat PDF Viewer
CVE-2002-0031: Buffer Overflow Vulnerability in Yahoo! Messenger 5,0,0,1064 and Earlier
CVE-2002-0032: Arbitrary Script Execution Vulnerability in Yahoo! Messenger 5,0,0,1064 and Earlier
CVE-2002-0033: Heap-based Buffer Overflow in Solaris cachefsd's cfsd_calloc Function
CVE-2002-0034: Insecure Permissions During File System Conversion on Windows 2000 and Windows XP
CVE-2002-0036: Denial of Service Vulnerability in MIT Kerberos V5 ASN.1 Decoder
CVE-2002-0037: Bypassing Reader and Author Access Control in Lotus Domino Servers
CVE-2002-0038: Cache-Limiting Function Vulnerability in IRIX Unified Name Service Daemon (nsd) Allows Remote Denial of Service
CVE-2002-0039: Denial of Service Vulnerability in rpcbind on SGI IRIX 6.5
CVE-2002-0040: Privilege Escalation via HOSTALIASES Environment Variable in SGI IRIX 6.5.11-6.5.15f
CVE-2002-0041: Mail for SGI IRIX 6.5 through 6.5.15f Vulnerability: Core Dump via -R Option
CVE-2002-0042: Denial of Service Vulnerability in XFS File System for SGI IRIX
CVE-2002-0043: Privilege Escalation via Environment Variable Manipulation in sudo 1.6.0 through 1.6.3p7
CVE-2002-0044: Symlink Attack Vulnerability in GNU Enscript 1.6.1 and Earlier
CVE-2002-0045: Vulnerability: Unauthorized replace Action in OpenLDAP Allows Deletion of Protected Attributes
CVE-2002-0046: ICMP Fragmented Packet Memory Disclosure Vulnerability
CVE-2002-0047: Denial of Service Vulnerability in CIPE VPN Package
CVE-2002-0048: Signedness Errors in rsync I/O Functions: Remote Code Execution and Denial of Service Vulnerability
CVE-2002-0049: Privilege Escalation Vulnerability in Microsoft Exchange Server 2000 System Attendant
CVE-2002-0050: Buffer Overflow in AuthFilter ISAPI Filter on Microsoft Commerce Server 2000
CVE-2002-0051: Windows 2000 Local Users Can Prevent Application of New Group Policy Settings
CVE-2002-0052: Arbitrary File Reading Vulnerability in Internet Explorer 6.0 and Earlier
CVE-2002-0053: Buffer Overflow Vulnerability in SNMP Agent Service in Windows Operating Systems
CVE-2002-0054: SMTP Service and IMC in Windows 2000 and Exchange Server 5.5 Vulnerability: Remote Mail Relaying via Null Session Credentials
CVE-2002-0055: SMTP Service Denial of Service Vulnerability
CVE-2002-0056: Remote Code Execution via Buffer Overflow in SQL Server 7.0 and 2000
CVE-2002-0057: Arbitrary File Reading Vulnerability in XMLHTTP Control
CVE-2002-0058: Remote Session Hijacking Vulnerability in Java Runtime Environment (JRE)
CVE-2002-0059: Double Free Vulnerability in zlib 1.1.3 and Earlier
CVE-2002-0060: Improper Mask Setting in IRC Connection Tracking Helper Module
CVE-2002-0061: Arbitrary Command Execution via Shell Metacharacters in Apache for Win32
CVE-2002-0062: Privilege Escalation via Buffer Overflow in ncurses 5.0
CVE-2002-0063: Buffer Overflow in ippRead Function of CUPS: Arbitrary Code Execution Vulnerability
CVE-2002-0064: Insecure Permissions in Funk Software Proxy Host 3.x
CVE-2002-0065: Weak Encryption in Funk Software Proxy Host 3.x Allows Privilege Escalation
CVE-2002-0066: Insecure Access Control in Funk Software Proxy Host 3.x before 3.09A
CVE-2002-0067: Squid 2.4 STABLE3 and Earlier HTCP Bypass Vulnerability
CVE-2002-0068: Buffer Overflow Vulnerability in Squid 2.4 STABLE3 and Earlier
CVE-2002-0069: SNMP Memory Leak Vulnerability in Squid 2.4 STABLE3 and Earlier
CVE-2002-0070: Windows Shell Buffer Overflow Vulnerability
CVE-2002-0071: Buffer Overflow Vulnerability in ism.dll ISAPI Extension in IIS 4.0 and 5.0
CVE-2002-0072: Denial of Service Vulnerability in w3svc.dll ISAPI Filter
CVE-2002-0073: Denial of Service Vulnerability in IIS FTP Service via Specially Crafted Status Request
CVE-2002-0074: Cross-Site Scripting Vulnerability in IIS Help File Search Facility
CVE-2002-0075: Arbitrary Script Execution via URL Redirect in IIS 4.0, 5.0, and 5.1
CVE-2002-0076: Remote Code Execution via Illegal Cast Operation in Java Runtime Environment (JRE) Bytecode Verifier
CVE-2002-0077: Local Executable Invocation via Object tag vulnerability in Microsoft Internet Explorer 5.01, 5.5, and 6.0
CVE-2002-0078: Cookie-based Script Execution Vulnerability in Microsoft Internet Explorer 5.5 and 6.0
CVE-2002-0079: Chunked Encoding Buffer Overflow Vulnerability in IIS 4.0 and 5.0 Active Server Pages
CVE-2002-0080: Improper Privilege Dropping in rsync Daemon Mode
CVE-2002-0081: Arbitrary Code Execution via Buffer Overflow in PHP MIME Split Functions
CVE-2002-0082: Buffer Overflow Vulnerability in mod_ssl and Apache-SSL
CVE-2002-0083: Privilege Escalation Vulnerability in OpenSSH 2.0 through 3.0.2
CVE-2002-0084: Buffer Overflow in fscache_setup Function of cachefsd in Solaris 2.6, 7, and 8: Local Privilege Escalation via Long Mount Argument
CVE-2002-0085: Remote Denial of Service Vulnerability in cachefsd in Solaris 2.6, 7, and 8
CVE-2002-0086: Buffer Overflow in bindsock in Lotus Domino 5.0.4 and 5.0.7 on Linux
CVE-2002-0087: Arbitrary File Creation Vulnerability in Lotus Domino 5.07 on Solaris
CVE-2002-0088: Buffer Overflow Vulnerability in Solaris Admintool Allows Local Privilege Escalation
CVE-2002-0089: Buffer Overflow Vulnerability in Solaris Admintool Allows Local Privilege Escalation
CVE-2002-0090: Buffer Overflow in Low BandWidth X Proxy (lbxproxy) in Solaris 8: Local Code Execution Vulnerability
CVE-2002-0091: Arbitrary Command Execution in CIDER SHADOW 1.5 and 1.6 via CGI Scripts
CVE-2002-0092: Uninitialized Global Variable in CVS Allows Remote Denial of Service
CVE-2002-0093: Buffer Overflow Vulnerability in ipcs for HP Tru64 UNIX 4.0f through 5.1a
CVE-2002-0094: Arbitrary Command Execution via Filename Conversion in BSCW (Basic Support for Cooperative Work) 3.x and versions before 4.06
CVE-2002-0095: User self-registration vulnerability in BSCW 3.x and possibly version 4
CVE-2002-0096: Unintended Administrative Privileges Vulnerability in Geeklog 1.3 Installation
CVE-2002-0097: Remote Account Hijacking Vulnerability in Geeklog 1.3
CVE-2002-0098: Buffer Overflow in Boozt! Standard 0.9.8 Index.cgi Administration Interface
CVE-2002-0099: Buffer Overflow Vulnerability in Michael Lamont Savant Web Server 3.0
CVE-2002-0100: AOLserver 3.4.2 Win32 Authentication Bypass and File Access Vulnerability
CVE-2002-0101: Denial of Service Vulnerability in Microsoft Internet Explorer 6.0 and Earlier
CVE-2002-0102: Denial of Service Vulnerability in Oracle9iAS Web Cache 2.0.0.x
CVE-2002-0103: Insecure Permissions in Oracle9iAS Web Cache Installer Program
CVE-2002-0104: Remote Code Execution Vulnerability in AFTPD 5.4.4 via CD (CWD) ~ Command
CVE-2002-0105: Privilege Escalation via Symlink Attack on CDE dtlogin in Caldera UnixWare 7.1.0
CVE-2002-0106: Denial of Service Vulnerability in BEA Systems Weblogic Server 6.1
CVE-2002-0107: Information Leakage in CacheFlow CacheOS Web Administration Interface
CVE-2002-0108: User impersonation vulnerability in Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1
CVE-2002-0109: Vulnerability: SNMP Query Exploit in Linksys EtherFast Routers
CVE-2002-0110: Plaintext Storage of Authentication Information in Nevrona Designs MiraMail 1.04 and Earlier
CVE-2002-0111: Funsoft Dino's Webserver 1.2 and Earlier Directory Traversal Vulnerability
CVE-2002-0112: Remote File Disclosure Vulnerability in Etype Eserv 2.97
CVE-2002-0113: World-readable log files in EMC NetWorker (formerly Legato NetWorker) before 7.0
CVE-2002-0114: Plaintext Password Storage Vulnerability in EMC NetWorker
CVE-2002-0115: ICMP Header Size Vulnerability in Snort 1.8.3
CVE-2002-0116: Denial of Service Vulnerability in Palm OS 3.5h and Handspring Visor/Xircom Products
CVE-2002-0117: Cross-Site Scripting (XSS) Vulnerability in YaBB 1 Gold SP 1 and Earlier
CVE-2002-0118: Cross-Site Scripting (XSS) Vulnerability in Infopop UBB 6.2.0 Beta Release 1.0
CVE-2002-0119: Denial of Service Vulnerability in Alcatel Speed Touch Home ADSL Modem
CVE-2002-0120: World-readable backup files and folders in Apple Palm Desktop 4.0b76 and 4.0b77 during hotsync
CVE-2002-0121: Session ID Hijacking Vulnerability in PHP 4.0 through 4.1.1
CVE-2002-0122: Denial of Service Vulnerability in Siemens 3568i WAP Mobile Phones
CVE-2002-0123: Denial of Service and Arbitrary Command Execution Vulnerability in MDG Computer Services Web Server 4D WS4D/eCommerce
CVE-2002-0124: Directory Traversal Vulnerability in MDG Computer Services Web Server 4D/eCommerce 3.5.3
CVE-2002-0125: Buffer Overflow Vulnerability in ClanLib Library 0.5 Allows Arbitrary Code Execution in Games
CVE-2002-0126: Buffer Overflow Vulnerability in BlackMoon FTP Server 1.0 through 1.5
CVE-2002-0127: Denial of Service Vulnerability in Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26
CVE-2002-0128: Denial of Service and Remote Code Execution Vulnerability in Sambar Server 5.1 before Beta 4