Buffer overflow in passwd for HP UX B.10.20 allows local users to execute arbitrary commands with root privileges via a long LANG environment variable.
Max CVSS
7.2
EPSS Score
0.04%
Published
2002-01-11
Updated
2008-09-05
Buffer overflow in badmin.c in BannerWheel 1.0 allows remote attackers to execute arbitrary code via a long rcmd command.
Max CVSS
10.0
EPSS Score
2.42%
Published
2002-12-31
Updated
2017-07-29
Buffer overflow in the httpdProcessRequest function in LibHTTPD 1.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP POST request.
Max CVSS
10.0
EPSS Score
13.09%
Published
2002-12-31
Updated
2016-10-18
Buffer overflow in Advanced TFTP (atftp) 0.5 and 0.6, if installed setuid or setgid, may allow local users to execute arbitrary code via a long argument to the -g option.
Max CVSS
7.2
EPSS Score
0.04%
Published
2002-12-31
Updated
2008-09-05
Buffer overflow in the IDENT daemon (identd) in Trillian 0.6351, 0.725, 0.73, 0.74 and 1.0 pro allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long request.
Max CVSS
10.0
EPSS Score
2.64%
Published
2002-12-31
Updated
2008-09-05
Buffer overflow in hotfoon4.exe in Hotfoon 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL containing a long voice phone number.
Max CVSS
7.5
EPSS Score
7.00%
Published
2002-12-31
Updated
2008-09-05
Multiple buffer overflows in (1) tetrinet_inmessage, (2) speclist_add and (3) config-getthemeinfo of GTetrinet 0.4.3 and earlier allow remote attackers to casue a denial of service and possibly execute arbitrary code.
Max CVSS
7.5
EPSS Score
2.36%
Published
2002-12-31
Updated
2008-09-05
Multiple buffer overflows in NEC SOCKS5 1.0 r11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long username to (1) the GetString function in proxy.c for the SOCKS5 module or (2) the HandleS4Connection function in proxy.c for the SOCKS4 module.
Max CVSS
10.0
EPSS Score
1.11%
Published
2002-12-31
Updated
2008-09-05
Off-by-one buffer overflow in NEC SOCKS5 1.0 r11 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hostname.
Max CVSS
7.8
EPSS Score
2.27%
Published
2002-12-31
Updated
2008-09-05
Buffer overflow in the XML parser of Trillian 0.6351, 0.725 and 0.73 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a skin with a long colors file name in trillian.xml.
Max CVSS
6.8
EPSS Score
1.25%
Published
2002-12-31
Updated
2008-09-05
Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denial of service (crash) via a long CEL command.
Max CVSS
7.5
EPSS Score
10.88%
Published
2002-12-31
Updated
2017-07-29
Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a 1024-byte TCP stream message, which triggers an off-by-one buffer overflow, or (2) a long method name in an HTTP request, (3) a long version number in an HTTP request, (4) a long User-Agent header, or (5) a long file path.
Max CVSS
7.5
EPSS Score
21.87%
Published
2002-12-31
Updated
2017-07-29
Calisto Internet Talker 0.04 and earlier allows remote attackers to cause a denial of service (hang) via a long request, possibly triggering a buffer overflow.
Max CVSS
7.8
EPSS Score
1.14%
Published
2002-12-31
Updated
2017-07-29
Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.
Max CVSS
7.8
EPSS Score
0.72%
Published
2002-12-31
Updated
2017-07-29

CVE-2002-2268

Public exploit
Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL.
Max CVSS
9.4
EPSS Score
89.61%
Published
2002-12-31
Updated
2017-07-29
Buffer overflow in the French documentation patch for Gnuplot 3.7 in SuSE Linux before 8.0 allows local users to execute arbitrary code as root via unknown attack vectors.
Max CVSS
7.2
EPSS Score
0.04%
Published
2002-12-31
Updated
2017-07-29
Stack-based buffer overflow in the parse_field function in cgi_lib.c for LIBCGI 1.0.2 and 1.0.3 allows remote attackers to execute arbitrary code via a long argument.
Max CVSS
10.0
EPSS Score
1.60%
Published
2002-12-31
Updated
2017-07-29
Multiple buffer overflows in Cyrus Sieve / libSieve 2.1.2 and earlier allow remote attackers to execute arbitrary code via (1) a long header name, (2) a long IMAP flag, or (3) a script that generates a large number of errors that overflow the resulting error string.
Max CVSS
10.0
EPSS Score
8.03%
Published
2002-12-31
Updated
2017-07-29
Buffer overflow in the changevalue function in libcgi.h for Marcos Luiz Onisto Lib CGI 0.1 allows remote attackers to execute arbitrary code via a long argument.
Max CVSS
10.0
EPSS Score
4.72%
Published
2002-12-31
Updated
2017-07-29
Multiple buffer overflows in Sybase Adaptive Server 12.0 and 12.5 allow remote attackers to execute arbitrary code via (1) a long parameter to the xp_freedll extended stored procedure or (2) a long database name argument to the DBCC CHECKVERIFY function.
Max CVSS
10.0
EPSS Score
16.20%
Published
2002-12-31
Updated
2017-07-29
Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the WDefaultFontCharset constructor with a long string and invokes the canConvert method.
Max CVSS
10.0
EPSS Score
3.50%
Published
2002-12-31
Updated
2017-07-29
Buffer overflow in Enceladus Server Suite 3.9 allows remote attackers to execute arbitrary code via a long CD (CWD) command.
Max CVSS
8.5
EPSS Score
3.66%
Published
2002-12-31
Updated
2008-09-05

CVE-2002-2226

Public exploit
Buffer overflow in tftpd of TFTP32 2.21 and earlier allows remote attackers to execute arbitrary code via a long filename argument.
Max CVSS
7.5
EPSS Score
38.31%
Published
2002-12-31
Updated
2017-07-29
Buffer overflow in Pedro Lineu Orso chetcpasswd before 1.12, when configured for access from 0.0.0.0, allows local users to gain privileges via unspecified vectors.
Max CVSS
6.2
EPSS Score
0.04%
Published
2002-12-31
Updated
2008-09-05
Buffer overflow in ssldump 0.9b2 and earlier, when running in decryption mode, allows remote attackers to execute arbitrary code via a long RSA PreMasterSecret.
Max CVSS
10.0
EPSS Score
5.42%
Published
2002-12-31
Updated
2008-09-05
292 vulnerabilities found
1 2 3 4 5 6 7 8 9 10 11 12
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!