CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   

Security Vulnerabilities Published In August 2002

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2002-1616 Overflow +Priv 2002-08-01 2017-07-11
7.2
 None Local Low Not required Complete Complete Complete
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc.
2 CVE-2002-1611 Overflow +Priv 2002-08-30 2017-07-11
4.6
 None Local Low Not required Partial Partial Partial
Buffer overflow in quot in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
3 CVE-2002-1610 DoS 2002-08-30 2017-07-11
2.1
 None Local Low Not required None None Partial
Unknown vulnerability in ping in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to cause a denial of service.
4 CVE-2002-1609 Overflow +Priv 2002-08-30 2017-07-11
4.6
 None Local Low Not required Partial Partial Partial
Buffer overflow in binmail in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
5 CVE-2002-1608 Exec Code Overflow 2002-08-31 2017-07-11
4.6
 None Local Low Not required Partial Partial Partial
Buffer overflow in traceroute in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code.
6 CVE-2002-1607 Exec Code Overflow 2002-08-31 2017-07-11
4.6
 None Local Low Not required Partial Partial Partial
Buffer overflow in ypmatch in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code.
7 CVE-2002-1606 Overflow +Priv 2002-08-30 2017-07-11
4.6
 None Local Low Not required Partial Partial Partial
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain privileges via (1) lpc, (2) lpd, (3) lpq, (4) lpr, or (5) lprm.
8 CVE-2002-1453 XSS 2002-08-14 2016-10-18
4.3
 None Remote Medium Not required None Partial None
Cross-site scripting (XSS) vulnerability in MyWebServer 1.0.2 allows remote attackers to insert script and HTML via a long request followed by the malicious script, which is echoed back to the user in an error message.
9 CVE-2002-1452 Exec Code Overflow 2002-08-14 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in the search capability for MyWebServer 1.0.2 allows remote attackers to execute arbitrary code via a long searchTarget parameter.
10 CVE-2002-1451 2002-08-24 2008-09-05
5.0
 None Remote Low Not required Partial None None
Blazix before 1.2.2 allows remote attackers to read source code of JSP scripts or list restricted web directories via an HTTP request that ends in a (1) "+" or (2) "\" (backslash) character.
11 CVE-2002-1446 2002-08-01 2008-09-05
5.0
 None Remote Low Not required None Partial None
The error checking routine used for the C_Verify call on a symmetric verification key in the nCipher PKCS#11 library 1.2.0 and later returns the CKR_OK status even when it detects an invalid signature, which could allow remote attackers to modify or forge messages.
12 CVE-2002-1445 XSS 2002-08-12 2008-09-05
4.3
 None Remote Medium Not required None Partial None
Cross-site scripting (XSS) vulnerability in CERN Proxy Server allows remote attackers to execute script as other users via a link to a non-existent page whose name contains the script, which is inserted into the resulting error page.
13 CVE-2002-1444 DoS 2002-08-15 2021-07-23
2.6
 None Remote High Not required None None Partial
The Google toolbar 1.1.60, when running on Internet Explorer 5.5 and 6.0, allows remote attackers to cause a denial of service (crash with an exception in oleaut32.dll) via malicious HTML, possibly related to small width and height parameters or an incorrect call to the Google.Search() function.
14 CVE-2002-1353 2002-08-29 2017-07-11
5.0
 None Remote Low Not required Partial None None
LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst.
15 CVE-2002-0849 +Priv 2002-08-12 2016-10-18
4.6
 None Local Low Not required Partial Partial Partial
Linux-iSCSI iSCSI implementation installs the iscsi.conf file with world-readable permissions on some operating systems, including Red Hat Linux Limbo Beta #1, which could allow local users to gain privileges by reading the cleartext CHAP password.
16 CVE-2002-0848 2002-08-12 2018-10-30
5.0
 None Remote Low Not required Partial None None
Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type of Password Authentication Protocol (PAP) or Challenge, sends the user password in cleartext in a validation retry request, which could allow remote attackers to steal passwords via sniffing.
17 CVE-2002-0847 Exec Code 2002-08-12 2016-12-08
7.5
 None Remote Low Not required Partial Partial Partial
tinyproxy HTTP proxy 1.5.0, 1.4.3, and earlier allows remote attackers to execute arbitrary code via memory that is freed twice (double-free).
18 CVE-2002-0846 Exec Code 2002-08-12 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
The decoder for Macromedia Shockwave Flash allows remote attackers to execute arbitrary code via a malformed SWF header that contains more data than the specified length.
19 CVE-2002-0845 Exec Code Overflow 2002-08-12 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HTTP request using chunked transfer encoding.
20 CVE-2002-0844 Exec Code Overflow 2002-08-12 2017-10-10
4.6
 None Local Low Not required Partial Partial Partial
Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to execute arbitrary code.
21 CVE-2002-0833 Exec Code Overflow 2002-08-12 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in Eudora 5.1.1 and 5.0-J for Windows, and possibly other versions, allows remote attackers to execute arbitrary code via a multi-part message with a long boundary string.
22 CVE-2002-0832 Bypass 2002-08-12 2021-07-23
7.5
 None Remote Low Not required Partial Partial Partial
Internet Explorer 5, 5.6, and 6 allows remote attackers to bypass cookie privacy settings and store information across browser sessions via the userData (storeuserData) feature.
23 CVE-2002-0831 DoS 2002-08-12 2016-10-18
2.1
 None Local Low Not required None None Partial
The kqueue mechanism in FreeBSD 4.3 through 4.6 STABLE allows local users to cause a denial of service (kernel panic) via a pipe call in which one end is terminated and an EVFILT_WRITE filter is registered for the other end.
24 CVE-2002-0830 DoS 2002-08-12 2017-10-10
5.0
 None Remote Low Not required None None Partial
Network File System (NFS) in FreeBSD 4.6.1 RELEASE-p7 and earlier, NetBSD 1.5.3 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service (hang) via an RPC message with a zero length payload, which causes NFS to reference a previous payload and enter an infinite loop.
25 CVE-2002-0829 Overflow +Priv 2002-08-12 2016-10-18
4.6
 None Local Low Not required Partial Partial Partial
Integer overflow in the Berkeley Fast File System (FFS) in FreeBSD 4.6.1 RELEASE-p4 and earlier allows local users to access arbitrary file contents within FFS to gain privileges by creating a file that is larger than allowed by the virtual memory system.
26 CVE-2002-0827 +Priv 2002-08-12 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
Vulnerability in pppd on UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to gain root privileges via (1) ppptalk or (2) ppp, a different vulnerability than CVE-2002-0824.
27 CVE-2002-0826 Exec Code Overflow 2002-08-12 2019-08-13
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in WS_FTP FTP Server 3.1.1 allows remote authenticated users to execute arbitrary code via a long SITE CPWD command.
28 CVE-2002-0825 DoS Exec Code Overflow 2002-08-12 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in the DNS SRV code for nss_ldap before nss_ldap-198 allows remote attackers to cause a denial of service and possibly execute arbitrary code.
29 CVE-2002-0824 59 2002-08-12 2021-03-11
6.9
 None Local Medium Not required Complete Complete Complete
BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specified as a tty device.
30 CVE-2002-0823 Exec Code Overflow 2002-08-12 2019-04-30
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in Winhlp32.exe allows remote attackers to execute arbitrary code via an HTML document that calls the HTML Help ActiveX control (HHCtrl.ocx) with a long pathname in the Item parameter.
31 CVE-2002-0822 DoS 2002-08-12 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Ethereal 0.9.4 and earlier allows remote attackers to cause a denial of service and possibly excecute arbitrary code via the (1) SOCKS, (2) RSVP, (3) AFS, or (4) LMP dissectors, which can be caused to core dump.
32 CVE-2002-0821 DoS Exec Code Overflow 2002-08-12 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflows in Ethereal 0.9.4 and earlier allow remote attackers to cause a denial of service or execute arbitrary code via (1) the BGP dissector, or (2) the WCP dissector.
33 CVE-2002-0820 +Priv 2002-08-12 2016-10-18
7.2
 None Local Low Not required Complete Complete Complete
FreeBSD kernel 4.6 and earlier closes the file descriptors 0, 1, and 2 after they have already been assigned to /dev/null when the descriptors reference procfs or linprocfs, which could allow local users to reuse the file descriptors in a setuid or setgid program to modify critical data and gain privileges.
34 CVE-2002-0819 +Priv 2002-08-12 2016-10-18
7.2
 None Local Low Not required Complete Complete Complete
Format string vulnerability in artsd, when called by artswrapper, allows local users to gain privileges via format strings in the -a argument, which results in an error message that is not properly handled in a call to the arts_fatal function.
35 CVE-2002-0818 DoS Exec Code 2002-08-12 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
wwwoffled in World Wide Web Offline Explorer (WWWOFFLE) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a negative Content-Length value.
36 CVE-2002-0817 +Priv 2002-08-12 2016-10-18
7.2
 None Local Low Not required Complete Complete Complete
Format string vulnerability in super for Linux allows local users to gain root privileges via a long command line argument.
37 CVE-2002-0816 Overflow +Priv 2002-08-12 2016-10-18
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in su in Tru64 Unix 5.x allows local users to gain root privileges via a long username and argument.
38 CVE-2002-0815 2002-08-12 2021-07-23
7.5
 None Remote Low Not required Partial Partial Partial
The Javascript "Same Origin Policy" (SOP), as implemented in (1) Netscape, (2) Mozilla, and (3) Internet Explorer, allows a remote web server to access HTTP and SOAP/XML content from restricted sites by mapping the malicious server's parent DNS domain name to the restricted site, loading a page from the restricted site into one frame, and passing the information to the attacker-controlled frame, which is allowed because the document.domain of the two frames matches on the parent domain.
39 CVE-2002-0814 Exec Code Overflow 2002-08-12 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in VMware Authorization Service for VMware GSX Server 2.0.0 build-2050 allows remote authenticated users to execute arbitrary code via a long GLOBAL argument.
40 CVE-2002-0813 119 DoS Overflow 2002-08-12 2016-10-18
7.1
 None Remote Medium Not required None None Complete
Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote attackers to cause a denial of service (reset) or modify configuration via a long filename.
41 CVE-2002-0812 200 +Info 2002-08-12 2020-12-09
6.4
 None Remote Low Not required Partial Partial None
Information leak in Compaq WL310, and the Orinoco Residential Gateway access point it is based on, uses a system identification string as a default SNMP read/write community string, which allows remote attackers to obtain and modify sensitive configuration information by querying for the identification string.
42 CVE-2002-0811 DoS Sql 2002-08-12 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, may allow remote attackers to cause a denial of service or execute certain queries via a SQL injection attack on the sort order parameter to buglist.cgi.
43 CVE-2002-0810 +Info 2002-08-12 2008-09-05
5.0
 None Remote Low Not required Partial None None
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML output, which could leak sensitive information, including plaintext passwords, if syncshadowdb fails.
44 CVE-2002-0809 2002-08-12 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, does not properly handle URL-encoded field names that are generated by some browsers, which could cause certain fields to appear to be unset, which has the effect of removing group permissions on bugs when buglist.cgi is provided with the encoded field names.
45 CVE-2002-0808 2002-08-12 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when performing a mass change, sets the groupset of all bugs to the groupset of the first bug, which could inadvertently cause insecure groupset permissions to be assigned to some bugs.
46 CVE-2002-0807 XSS 2002-08-12 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
Cross-site scripting vulnerabilities in Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, could allow remote attackers to execute script as other Bugzilla users via the full name (real name) field, which is not properly quoted by editusers.cgi.
47 CVE-2002-0806 2002-08-12 2008-09-05
2.1
 None Local Low Not required None Partial None
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows authenticated users with editing privileges to delete other users by directly calling the editusers.cgi script with the "del" option.
48 CVE-2002-0805 Exec Code 2002-08-12 2008-09-05
4.6
 None Local Low Not required Partial Partial Partial
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, (1) creates new directories with world-writable permissions, and (2) creates the params file with world-writable permissions, which allows local users to modify the files and execute code.
49 CVE-2002-0804 Bypass 2002-08-12 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when configured to perform reverse DNS lookups, allows remote attackers to bypass IP restrictions by connecting from a system with a spoofed reverse DNS hostname.
50 CVE-2002-0803 2002-08-12 2008-09-10
5.0
 None Remote Low Not required Partial None None
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows remote attackers to display restricted products and components via a direct HTTP request to queryhelp.cgi.
Total number of vulnerabilities : 255   Page : 1 (This Page)2 3 4 5 6
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.