CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In 2002(Bypass)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2002-2408 Bypass 2002-12-31 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Gordano Messaging Server (GMS) Mail 8 (a.k.a. NTMail) only filters email messages for the first recipient, which allows remote attackers to bypass JUCE filters by sending a message to more than one user on the GMS server.
2 CVE-2002-2401 264 Bypass 2002-12-31 2019-04-30
3.6
 None Local Low Not required Partial Partial None
NT Virtual DOS Machine (NTVDM.EXE) in Windows 2000, NT and XP does not verify user execution permissions for 16-bit executable files, which allows local users to bypass the loader and execute arbitrary programs.
3 CVE-2002-2397 287 Bypass 2002-12-31 2008-09-05
10.0
 None Remote Low Not required Complete Complete Complete
Sygate personal firewall 5.0 could allow remote attackers to bypass firewall filters via spoofed (1) source IP address of 127.0.0.1 or (2) network address of 127.0.0.0.
4 CVE-2002-2395 264 Exec Code Bypass 2002-12-31 2008-09-05
5.0
 None Remote Low Not required None Partial None
InterScan VirusWall 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 gzip content encoding.
5 CVE-2002-2394 264 Exec Code Bypass 2002-12-31 2008-09-05
5.0
 None Remote Low Not required None Partial None
InterScan VirusWall 3.6 for Linux and 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 chunked transfer encoding.
6 CVE-2002-2351 22 Exec Code Dir. Trav. Bypass 2002-12-31 2008-09-05
6.4
 None Remote Low Not required Partial Partial None
Eudora 5.1 allows remote attackers to bypass security warnings and possibly execute arbitrary code via attachments with names containing a trailing "." (dot).
7 CVE-2002-2323 59 Bypass 2002-12-31 2008-09-05
5.0
 None Remote Low Not required Partial None None
Sun PC NetLink 1.0 through 1.2 does not properly set the access control list (ACL) for files and directories that use symbolic links and have been restored from backup, which could allow local or remote attackers to bypass intended access restrictions.
8 CVE-2002-2293 Bypass 2002-12-31 2017-07-29
4.6
 None Local Low Not required Partial Partial Partial
Webshots Desktop screensaver allows local users to bypass the password on the screensaver by pressing CTRL-ALT-DELETE and (1) hitting the cancel button or (2) killing the screensaver from the task manager.
9 CVE-2002-2285 16 Bypass 2002-12-31 2021-04-09
4.3
 None Remote Medium Not required None Partial None
eTrust InoculateIT 6.0 with the "Incremental Scan" option enabled may certify that a file is free of viruses before the file has been completely downloaded, which allows remote attackers to bypass virus detection.
10 CVE-2002-2284 Exec Code Bypass 2002-12-31 2017-07-29
6.4
 None Remote Low Not required Partial Partial None
Netscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute arbitrary Java code via an applet that loads user-supplied Java classes.
11 CVE-2002-2275 Bypass 2002-12-31 2017-07-29
2.1
 None Local Low Not required None None Partial
Fortres 101 4.1 allows local users to bypass Fortres by pressing the Windows and "F" key together for 30 seconds, which opens multiple windows and eventually causes explorer.exe to crash, which then opens an unrestricted explorer.exe.
12 CVE-2002-2261 264 Bypass 2002-12-31 2017-10-11
7.5
 None Remote Low Not required Partial Partial Partial
Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by the 'check_relay' function by spoofing a blank DNS hostname.
13 CVE-2002-2234 16 Bypass 2002-12-31 2008-09-05
4.3
 None Remote Medium Not required None Partial None
NetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests.
14 CVE-2002-2228 20 Bypass 2002-12-31 2008-09-05
6.4
 None Remote Low Not required Partial Partial None
MailScanner before 4.0 5-1 and before 3.2 6-1 allows remote attackers to bypass protection via attachments with a filename with (1) extra leading spaces, (2) extra trailing spaces, or (3) alternate character encodings that cannot be processed by MailScanner.
15 CVE-2002-2199 Bypass 2002-12-31 2021-08-27
4.6
 None Local Low Not required Partial Partial Partial
The default aide.conf file in Advanced Intrusion Detection Environment (AIDE) before 0.7_1 on FreeBSD before 2002-08-28 does not properly check subdirectories, which could allow local users to bypass detection.
16 CVE-2002-2145 Bypass 2002-12-31 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders via a URL with a hex encoded space (%20) and a '.' (%2e) at the end of the filename.
17 CVE-2002-2109 Bypass 2002-12-31 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized activities via (1) a blank referer, (2) a spoofed referer with a trusted domain/URL after the beginning of the referer, or (3) a spoofed referer with a trusted domain/URL in the beginning (hostname) portion of the referer.
18 CVE-2002-2100 Bypass 2002-12-31 2008-09-05
5.0
 None Remote Low Not required None Partial None
Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content.
19 CVE-2002-2083 Bypass 2002-12-31 2008-09-05
2.1
 None Local Low Not required Partial None None
The Novell Netware client running on Windows 95 allows local users to bypass the login and open arbitrary files via the "What is this?" help feature, which can be launched from the Novell Netware login screen.
20 CVE-2002-2063 Bypass 2002-12-31 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
AtGuard 3.2 allows remote attackers to bypass firwall filters and execute prohibited programs by changing the filenames to permitted filenames.
21 CVE-2002-2034 Exec Code Bypass 2002-12-31 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
The Email Sanitizer before 1.133 for Procmail allows remote attackers to bypass the mail filter and execute arbitrary code via crafted recursive multipart MIME attachments.
22 CVE-2002-1997 Exec Code Bypass 2002-12-31 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
ZoneAlarm Pro 3.0 MailSafe allows remote attackers to bypass filtering and possibly execute arbitrary code via email attachments containing a trailing dot after the file extension.
23 CVE-2002-1979 20 Bypass 2002-12-31 2009-04-03
7.5
 None Remote Low Not required Partial Partial Partial
WatchGuard SOHO products running firmware 5.1.6 and earlier, and Vclass/RSSA using 3.2 SP1 and earlier, allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP server, which generates a response that contains the string, causing IPFilter to treat the response as if it were a legitimate PASV command from the server.
24 CVE-2002-1978 264 Bypass 2002-12-31 2009-04-03
7.5
 None Remote Low Not required Partial Partial Partial
IPFilter 3.1.1 through 3.4.28 allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP server, which generates a response that contains the string, causing IPFilter to treat the response as if it were a legitimate PASV command from the server.
25 CVE-2002-1962 Bypass 2002-12-31 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL with an IP address instead of a hostname.
26 CVE-2002-1961 Bypass 2002-12-31 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL whose hostname portion uses a fully qualified domain name (FQDN) that ends in a "." (dot).
27 CVE-2002-1919 Exec Code Sql Bypass 2002-12-31 2009-04-11
7.5
 None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in shopadmin.asp in VP-ASP 4.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password fields.
28 CVE-2002-1882 Bypass 2002-12-31 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Unknown vulnerability in AolSecurityPrivate.class in Oracle E-Business Suite 11i 11.1 through 11.6 allows remote attackers to bypass user authentication checks via unknown attack vectors.
29 CVE-2002-1877 264 Bypass 2002-12-31 2009-10-14
7.5
 None Remote Low Not required Partial Partial Partial
NETGEAR FM114P allows remote attackers to bypass access restrictions for web sites via a URL that uses the IP address instead of the hostname.
30 CVE-2002-1830 Bypass 2002-12-31 2016-10-18
5.0
 None Remote Low Not required None Partial None
Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to bypass authentication and access modifier options via a direct request to moderator.php with the action and ismod parameters.
31 CVE-2002-1826 Bypass 2002-12-31 2008-09-05
4.6
 None Local Low Not required Partial Partial Partial
grsecurity 1.9.4 for Linux kernel 2.4.18 allows local users to bypass read-only permissions by using mmap to directly map /dev/mem or /dev/kmem to kernel memory.
32 CVE-2002-1790 Bypass 2002-12-31 2020-04-09
5.0
 None Remote Low Not required None Partial None
The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send spam or spoofed messages via encapsulated SMTP addresses, a similar vulnerability to CVE-1999-0682.
33 CVE-2002-1778 Bypass 2002-12-31 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Symantec Norton Personal Firewall 2002 allows remote attackers to bypass the portscan protection by using a (1) SYN/FIN, (2) SYN/FIN/URG, (3) SYN/FIN/PUSH, or (4) SYN/FIN/URG/PUSH scan.
34 CVE-2002-1777 Bypass 2002-12-31 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
** DISPUTED ** NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypass e-mail scanning via a filename in the Content-Type field with an excluded extension such as .nch or .dbx, but a malicious extension in the Content-Disposition field, which is used by Outlook to obtain the file name. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but Norton AntiVirus or the Office plug-in would detect the virus before it is executed.
35 CVE-2002-1776 Bypass 2002-12-31 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
** DISPUTED ** NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the Office plug-in would detect the virus before it is executed.
36 CVE-2002-1775 Bypass 2002-12-31 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
** DISPUTED ** NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypass the initial virus scan and cause NAV to prematurely stop scanning by using a non-RFC compliant MIME header. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the AutoProtect feature would detect the virus before it is executed.
37 CVE-2002-1774 Bypass 2002-12-31 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
** DISPUTED ** NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to send viruses that bypass the e-mail scanning via a NULL character in the MIME header before the virus. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the AutoProtect feature would detect the virus before it is executed.
38 CVE-2002-1757 Bypass 2002-12-31 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
PHProjekt 2.0 through 3.1 relies on the $PHP_SELF variable for authentication, which allows remote attackers to bypass authentication for scripts via a request to a .php file with "sms" in the URL, which is included in the PATH_INFO portion of the $PHP_SELF variable, as demonstrated using "mail_send.php/sms".
39 CVE-2002-1726 Bypass 2002-12-31 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
secure_inc.php in PhotoDB 1.4 allows remote attackers to bypass authentication via a URL with a large Time parameter, non-empty rmtusername and rmtpassword parameter, and an accesslevel parameter that is lower than the access level of the requested page.
40 CVE-2002-1722 Exec Code Bypass 2002-12-31 2017-07-11
4.6
 None Local Low Not required Partial Partial Partial
Logitech iTouch keyboards allows attackers with physical access to the system to bypass the screen locking function and execute user-defined commands that have been assigned to a button.
41 CVE-2002-1720 +Priv Sql Bypass 2002-12-31 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in Spooky Login 2.0 through 2.5 allows remote attackers to bypass authentication and gain privileges via the password field.
42 CVE-2002-1715 Bypass 2002-12-31 2017-07-11
7.2
 None Local Low Not required Complete Complete Complete
SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then executing that script to gain normal shell access.
43 CVE-2002-1699 Sql Bypass 2002-12-31 2017-07-11
10.0
 None Remote Low Not required Complete Complete Complete
SQL injection vulnerability in ASP Client Check (ASPCC) 1.3 and 1.5 allows remote attackers to bypass authentication and gain unauthorized access via the password field.
44 CVE-2002-1618 Bypass 2002-10-16 2017-10-11
7.2
 None Local Low Not required Complete Complete Complete
JFS (JFS3.1 and OnlineJFS) in HP-UX 10.20, 11.00, and 11.04 does not properly implement the sticky bit functionality, which could allow attackers to bypass intended restrictions on filesystems.
45 CVE-2002-1599 Bypass 2002-07-23 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
DansGuardian before 2.4.5-1 allows remote attackers to bypass content filtering rules via hex-encoded URLs.
46 CVE-2002-1591 Bypass 2002-04-08 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user approval, which could allow code from free.aol.com to bypass intended access restrictions.
47 CVE-2002-1336 Bypass 2002-12-11 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users.
48 CVE-2002-1295 DoS Bypass 2002-11-29 2018-10-12
7.5
 None Remote Low Not required Partial Partial Partial
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service (crash) and possibly conduct other unauthorized activities via applet tags in HTML that bypass Java class restrictions (such as private constructors) by providing the class name in the code parameter, aka "Incomplete Java Object Instantiation Vulnerability."
49 CVE-2002-1293 Bypass 2002-11-29 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
The Microsoft Java implementation, as used in Internet Explorer, provides a public load0() method for the CabCracker class (com.ms.vm.loader.CabCracker), which allows remote attackers to bypass the security checks that are performed by the load() method.
50 CVE-2002-1292 DoS Bypass 2002-11-29 2018-10-12
7.5
 None Remote Low Not required Partial Partial Partial
The Microsoft Java virtual machine (VM) build 5.0.3805 and earlier, as used in Internet Explorer, allows remote attackers to extend the Standard Security Manager (SSM) class (com.ms.security.StandardSecurityManager) and bypass intended StandardSecurityManager restrictions by modifying the (1) deniedDefinitionPackages or (2) deniedAccessPackages settings, causing a denial of service by adding Java applets to the list of applets that are prevented from running.
Total number of vulnerabilities : 127   Page : 1 (This Page)2 3
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.