CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In 2002(Execute Code)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2003-0061 Exec Code Overflow 2002-01-11 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in passwd for HP UX B.10.20 allows local users to execute arbitrary commands with root privileges via a long LANG environment variable.
2 CVE-2002-2420 20 Exec Code 2002-12-31 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
site_searcher.cgi in Super Site Searcher allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter.
3 CVE-2002-2411 119 Exec Code Overflow 2002-12-31 2017-07-28
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflow in badmin.c in BannerWheel 1.0 allows remote attackers to execute arbitrary code via a long rcmd command.
4 CVE-2002-2400 119 DoS Exec Code Overflow 2002-12-31 2016-10-17
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflow in the httpdProcessRequest function in LibHTTPD 1.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP POST request.
5 CVE-2002-2396 119 Exec Code Overflow 2002-12-31 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in Advanced TFTP (atftp) 0.5 and 0.6, if installed setuid or setgid, may allow local users to execute arbitrary code via a long argument to the -g option.
6 CVE-2002-2395 264 Exec Code Bypass 2002-12-31 2008-09-05
5.0
 None Remote Low Not required None Partial None
InterScan VirusWall 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 gzip content encoding.
7 CVE-2002-2394 264 Exec Code Bypass 2002-12-31 2008-09-05
5.0
 None Remote Low Not required None Partial None
InterScan VirusWall 3.6 for Linux and 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 chunked transfer encoding.
8 CVE-2002-2392 Exec Code 2002-12-31 2008-09-05
6.4
 None Remote Low Not required Partial Partial None
Winamp 2.65 through 3.0 stores skin files in a predictable file location, which allows remote attackers to execute arbitrary code via a URL reference to (1) wsz and (2) wal files that contain embedded code.
9 CVE-2002-2391 89 Exec Code Sql 2002-12-31 2008-09-05
7.5
 User Remote Low Not required Partial Partial Partial
SQL injection vulnerability in index.php of WebChat 1.5 included in XOOPS 1.0 allows remote attackers to execute arbitrary SQL commands via the roomid parameter.
10 CVE-2002-2390 119 DoS Exec Code Overflow 2002-12-31 2008-09-05
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflow in the IDENT daemon (identd) in Trillian 0.6351, 0.725, 0.73, 0.74 and 1.0 pro allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long request.
11 CVE-2002-2385 119 DoS Exec Code Overflow 2002-12-31 2008-09-05
7.5
 User Remote Low Not required Partial Partial Partial
Buffer overflow in hotfoon4.exe in Hotfoon 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL containing a long voice phone number.
12 CVE-2002-2383 89 Exec Code Sql 2002-12-31 2017-07-28
7.5
 User Remote Low Not required Partial Partial Partial
SQL injection vulnerability in f2html.pl 0.1 through 0.4 allows remote attackers to execute arbitrary SQL commands via file names.
13 CVE-2002-2381 119 DoS Exec Code Overflow 2002-12-31 2008-09-05
7.5
 User Remote Low Not required Partial Partial Partial
Multiple buffer overflows in (1) tetrinet_inmessage, (2) speclist_add and (3) config-getthemeinfo of GTetrinet 0.4.3 and earlier allow remote attackers to casue a denial of service and possibly execute arbitrary code.
14 CVE-2002-2368 119 DoS Exec Code Overflow 2002-12-31 2008-09-05
10.0
 Admin Remote Low Not required Complete Complete Complete
Multiple buffer overflows in NEC SOCKS5 1.0 r11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long username to (1) the GetString function in proxy.c for the SOCKS5 module or (2) the HandleS4Connection function in proxy.c for the SOCKS4 module.
15 CVE-2002-2367 119 DoS Exec Code Overflow 2002-12-31 2008-09-05
7.8
 None Remote Low Not required None None Complete
Off-by-one buffer overflow in NEC SOCKS5 1.0 r11 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hostname.
16 CVE-2002-2366 119 DoS Exec Code Overflow 2002-12-31 2008-09-05
6.8
 None Remote Medium Not required Partial Partial Partial
Buffer overflow in the XML parser of Trillian 0.6351, 0.725 and 0.73 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a skin with a long colors file name in trillian.xml.
17 CVE-2002-2365 20 Exec Code 2002-12-31 2008-09-05
10.0
 Admin Remote Low Not required Complete Complete Complete
Simple WAIS (SWAIS) 1.11 allows remote attackers to execute arbitrary commands via the shell metacharacters in the search field, as demonstrated using the "|" (pipe) character.
18 CVE-2002-2360 264 Exec Code 2002-12-31 2008-09-05
9.3
 Admin Remote Medium Not required Complete Complete Complete
The RPC module in Webmin 0.21 through 0.99, when installed without root or admin privileges, allows remote attackers to read and write to arbitrary files and execute arbitrary commands via remote_foreign_require and remote_foreign_call requests.
19 CVE-2002-2351 22 Exec Code Dir. Trav. Bypass 2002-12-31 2008-09-05
6.4
 None Remote Low Not required Partial Partial None
Eudora 5.1 allows remote attackers to bypass security warnings and possibly execute arbitrary code via attachments with names containing a trailing "." (dot).
20 CVE-2002-2331 16 Exec Code 2002-12-31 2008-09-05
5.8
 None Remote Medium Not required Partial Partial None
W3Mail 1.0.2 through 1.0.5 with server side scripting (SSI) enabled in the attachments directory does not properly restrict the types of files that can be uploaded as attachments, which allows remote attackers to execute arbitrary code by sending code in MIME attachments, then requesting the attachments.
21 CVE-2002-2305 89 Exec Code Sql 2002-12-31 2017-07-28
7.5
 User Remote Low Not required Partial Partial Partial
SQL injection vulnerability in agentadmin.php in Immobilier allows remote attackers to execute arbitrary SQL commands via the (1) agentname or (2) agentpassword parameter.
22 CVE-2002-2304 89 Exec Code Sql 2002-12-31 2017-07-28
7.5
 None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in admin/auth/checksession.php in MyPHPLinks 2.1.9 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the idsession parameter.
23 CVE-2002-2299 94 Exec Code File Inclusion 2002-12-31 2017-07-28
6.8
 User Remote Medium Not required Partial Partial Partial
PHP remote file inclusion vulnerability in thatfile.php in Thatware 0.3 through 0.5.2 allows remote attackers to execute arbitrary PHP code via the root_path parameter.
24 CVE-2002-2298 94 Exec Code File Inclusion 2002-12-31 2017-07-28
6.8
 User Remote Medium Not required Partial Partial Partial
PHP remote file inclusion vulnerability in config.php in Thatware 0.3 through 0.5.3 allows remote attackers to execute arbitrary PHP code via the root_path parameter.
25 CVE-2002-2297 94 Exec Code File Inclusion 2002-12-31 2017-07-28
6.8
 None Remote Medium Not required Partial Partial Partial
PHP remote file inclusion vulnerability in artlist.php in Thatware 0.5.2 and 0.5.3 allows remote attackers to execute arbitrary PHP code via the root_path parameter.
26 CVE-2002-2295 119 DoS Exec Code Overflow 2002-12-31 2017-07-28
7.5
 User Remote Low Not required Partial Partial Partial
Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a 1024-byte TCP stream message, which triggers an off-by-one buffer overflow, or (2) a long method name in an HTTP request, (3) a long version number in an HTTP request, (4) a long User-Agent header, or (5) a long file path.
27 CVE-2002-2287 94 Exec Code File Inclusion 2002-12-31 2017-07-28
7.5
 None Remote Low Not required Partial Partial Partial
PHP remote file inclusion vulnerability in quick_reply.php for phpBB Advanced Quick Reply Hack 1.0.0 and 1.1.0 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter.
28 CVE-2002-2284 Exec Code Bypass 2002-12-31 2017-07-28
6.4
 None Remote Low Not required Partial Partial None
Netscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute arbitrary Java code via an applet that loads user-supplied Java classes.
29 CVE-2002-2281 Exec Code 2002-12-31 2017-07-28
10.0
 None Remote Low Not required Complete Complete Complete
Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute arbitrary Java commands via an applet that uses a jump call, which is not correctly compiled by the JIT compiler.
30 CVE-2002-2277 89 Exec Code Sql 2002-12-31 2017-07-28
7.5
 None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in mod_search/index.php in PortailPHP 0.99 allows remote attackers to execute arbitrary SQL commands via the (1) $rech, (2) $BD_Tab_docs, (3) $BD_Tab_file, (4) $BD_Tab_liens, (5) $BD_Tab_faq, or (6) $chemin variables.
31 CVE-2002-2268 119 Exec Code Overflow 2002-12-31 2017-07-28
9.4
 None Remote Low Not required Complete Complete None
Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL.
32 CVE-2002-2259 119 Exec Code Overflow 2002-12-31 2017-07-28
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in the French documentation patch for Gnuplot 3.7 in SuSE Linux before 8.0 allows local users to execute arbitrary code as root via unknown attack vectors.
33 CVE-2002-2257 119 Exec Code Overflow 2002-12-31 2017-07-28
10.0
 None Remote Low Not required Complete Complete Complete
Stack-based buffer overflow in the parse_field function in cgi_lib.c for LIBCGI 1.0.2 and 1.0.3 allows remote attackers to execute arbitrary code via a long argument.
34 CVE-2002-2253 119 Exec Code Overflow 2002-12-31 2017-07-28
10.0
 None Remote Low Not required Complete Complete Complete
Multiple buffer overflows in Cyrus Sieve / libSieve 2.1.2 and earlier allow remote attackers to execute arbitrary code via (1) a long header name, (2) a long IMAP flag, or (3) a script that generates a large number of errors that overflow the resulting error string.
35 CVE-2002-2252 89 Exec Code Sql 2002-12-31 2017-07-28
7.5
 None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in auth.inc.php in Thatware 0.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via a base64-encoded user parameter.
36 CVE-2002-2251 119 Exec Code Overflow 2002-12-31 2017-07-28
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflow in the changevalue function in libcgi.h for Marcos Luiz Onisto Lib CGI 0.1 allows remote attackers to execute arbitrary code via a long argument.
37 CVE-2002-2250 119 Exec Code Overflow 2002-12-31 2017-07-28
10.0
 Admin Remote Low Not required Complete Complete Complete
Multiple buffer overflows in Sybase Adaptive Server 12.0 and 12.5 allow remote attackers to execute arbitrary code via (1) a long parameter to the xp_freedll extended stored procedure or (2) a long database name argument to the DBCC CHECKVERIFY function.
38 CVE-2002-2249 94 Exec Code File Inclusion 2002-12-31 2017-07-28
7.5
 None Remote Low Not required Partial Partial Partial
PHP remote file inclusion vulnerability in News Evolution 2.0 allows remote attackers to execute arbitrary PHP commands via the neurl parameter to (1) backend.php, (2) screen.php, or (3) admin/modules/comment.php.
39 CVE-2002-2248 119 Exec Code Overflow 2002-12-31 2017-07-28
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the WDefaultFontCharset constructor with a long string and invokes the canConvert method.
40 CVE-2002-2236 20 Exec Code 2002-12-31 2008-09-05
10.0
 None Remote Low Not required Complete Complete Complete
Format string vulnerability in the awp_log function in apt-www-proxy 0.1 allows remote attackers to execute arbitrary code.
41 CVE-2002-2232 119 Exec Code Overflow 2002-12-31 2008-09-05
8.5
 Admin Remote Medium Single system Complete Complete Complete
Buffer overflow in Enceladus Server Suite 3.9 allows remote attackers to execute arbitrary code via a long CD (CWD) command.
42 CVE-2002-2226 119 Exec Code Overflow 2002-12-31 2017-07-28
7.5
 User Remote Low Not required Partial Partial Partial
Buffer overflow in tftpd of TFTP32 2.21 and earlier allows remote attackers to execute arbitrary code via a long filename argument.
43 CVE-2002-2225 DoS Exec Code Overflow 2002-12-31 2008-09-05
5.1
 User Remote High Not required Partial Partial Partial
SafeNet VPN client allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly involving buffer overflows using (1) a large Security Parameter Index (SPI) field, (2) a large number of payloads, or (3) a long payload.
44 CVE-2002-2224 DoS Exec Code Overflow 2002-12-31 2017-07-28
5.1
 User Remote High Not required Partial Partial Partial
Buffer overflow in PGPFreeware 7.03 running on Windows NT 4.0 SP6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) large number of payloads, or (3) a long payload.
45 CVE-2002-2223 DoS Exec Code Overflow 2002-12-31 2017-07-28
5.1
 User Remote High Not required Partial Partial Partial
Buffer overflow in NetScreen-Remote 8.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) large number of payloads, or (3) a long payload.
46 CVE-2002-2217 Exec Code File Inclusion 2002-12-31 2017-10-18
7.5
 User Remote Low Not required Partial Partial Partial
Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal (WSC-WebPortal) 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) l parameter to customize.php or the (2) pg parameter to index.php.
47 CVE-2002-2207 Exec Code Overflow 2002-12-31 2008-09-05
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflow in ssldump 0.9b2 and earlier, when running in decryption mode, allows remote attackers to execute arbitrary code via a long RSA PreMasterSecret.
48 CVE-2002-2205 Exec Code Overflow 2002-12-31 2008-09-05
5.0
 None Remote Low Not required None Partial None
Buffer overflow in Webresolve 0.1.0 and earlier allows remote attackers to execute arbitrary code by connecting to the server from an IP address that resolves to a long hostname.
49 CVE-2002-2201 Exec Code 2002-12-31 2008-09-05
10.0
 Admin Remote Low Not required Complete Complete Complete
The Printer Administration module for Webmin 0.990 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the printer name.
50 CVE-2002-2198 Exec Code Overflow 2002-12-31 2008-09-05
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflow in ZMailer before 2.99.51_1 allows remote attackers to execute arbitrary code during HELO processing from an IPv6 address, possibly using an address that resolves to a long hostname.
Total number of vulnerabilities : 553   Page : 1 (This Page)2 3 4 5 6 7 8 9 10 11 12
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.