CVE-2002-0742: Buffer overflow in pioout on AIX 4.3.3.
Buffer overflow in pioout on AIX 4.3.3.
Published Jul 26, 2002 · Updated Aug 8, 2024
CVE archive
July 2002
Browse CVE records published in July 2002, with severity, affected products, CWE, KEV, and source-backed vulnerability context.
Showing 27 of 177 matching CVEs · Page 4 of 4.
CVE-2002-0681: Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as o...
Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web users via script in a URL that generates a "404 not found" message, which does not quote the script.
Published Jul 12, 2002 · Updated Aug 8, 2024
CVE-2002-0730: Cross-site scripting vulnerability in guestbook.pl for Philip Chinery's Guestbook 1.1 allows remote attacke...
Cross-site scripting vulnerability in guestbook.pl for Philip Chinery's Guestbook 1.1 allows remote attackers to execute Javascript or HTML via fields such as (1) Name, (2) EMail, or (3) Homepage.
Published Jul 26, 2002 · Updated Aug 8, 2024
CVE-2002-0745: Buffer overflow in uucp in AIX 4.3.3.
Buffer overflow in uucp in AIX 4.3.3.
Published Jul 26, 2002 · Updated Aug 8, 2024
CVE-2002-0715: Vulnerability in Squid before 2.4.STABLE6 related to proxy authentication credentials may allow remote web...
Vulnerability in Squid before 2.4.STABLE6 related to proxy authentication credentials may allow remote web sites to obtain the user's proxy login and password.
Published Jul 23, 2002 · Updated Aug 8, 2024
CVE-2002-0675: Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privile...
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges to perform a firmware upgrade, which allows unauthorized users to upgrade the phone.
Published Jul 15, 2002 · Updated Aug 8, 2024
CVE-2002-0731: Cross-site scripting vulnerability in demonstration scripts for vqServer allows remote attackers to execute...
Cross-site scripting vulnerability in demonstration scripts for vqServer allows remote attackers to execute arbitrary script via a link that contains the script in arguments to demo scripts such as respond.pl.
Published Jul 26, 2002 · Updated Aug 8, 2024
CVE-2002-0684: Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BI...
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.
Published Jul 31, 2002 · Updated Aug 8, 2024
CVE-2002-0686: Buffer overflow in the search component for iPlanet Web Server (iWS) 4.1 and Sun ONE Web Server 6.0 allows...
Buffer overflow in the search component for iPlanet Web Server (iWS) 4.1 and Sun ONE Web Server 6.0 allows remote attackers to execute arbitrary code via a long argument to the NS-rel-doc-name parameter.
Published Jul 15, 2002 · Updated Aug 8, 2024
CVE-2002-0683: Directory traversal vulnerability in Carello 1.3 allows remote attackers to execute programs on the server...
Directory traversal vulnerability in Carello 1.3 allows remote attackers to execute programs on the server via a .. (dot dot) in the VBEXE parameter.
Published Jul 12, 2002 · Updated Aug 8, 2024
CVE-2002-0740: Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to ga...
Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument.
Published Jul 26, 2002 · Updated Aug 8, 2024
CVE-2002-0624: Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL S...
Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain control of the database and execute arbitrary code via SQL Server Authentication, aka "Unchecked Buffer in Password Encryption Procedure."
Published Jul 12, 2002 · Updated Aug 8, 2024
CVE-2002-0680: Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files...
Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / (%5C) in a .. (dot dot) sequence. NOTE: it is highly likely that this candidate will be REJECTED because it has been reported to be a duplicate of CVE-2001-0228.
Published Jul 12, 2002 · Updated Aug 8, 2024
CVE-2002-0659: The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cau...
The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.
Published Jul 31, 2002 · Updated Aug 8, 2024
CVE-2002-0641: Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Deskt...
Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database administration privileges to execute arbitrary code via a long filename in the BULK INSERT query.
Published Jul 12, 2002 · Updated Aug 8, 2024
CVE-2002-0637: InterScan VirusWall 3.52 build 1462 allows remote attackers to bypass virus protection via e-mail messages...
InterScan VirusWall 3.52 build 1462 allows remote attackers to bypass virus protection via e-mail messages with headers that violate RFC specifications by having (or missing) space characters in unexpected places (aka "space gap"), such as (1) Content-Type :", (2) "Content-Transfer-Encoding :", (3) no space before a boundary declaration, or (4) "boundary= ", which is processed by Outlook Express.
Published Jul 4, 2002 · Updated Aug 8, 2024
CVE-2002-0645: SQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft Desktop Engine...
SQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 may allow authenticated users to execute arbitrary commands.
Published Jul 26, 2002 · Updated Aug 8, 2024
CVE-2002-0656: Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to exec...
Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.
Published Jul 31, 2002 · Updated Aug 8, 2024
CVE-2002-0670: The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 uses Base64 encod...
The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 uses Base64 encoded usernames and passwords for HTTP basic authentication, which allows remote attackers to steal and easily decode the passwords via sniffing.
Published Jul 15, 2002 · Updated Aug 8, 2024
CVE-2002-0649: Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Eng...
Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.
Published Jul 26, 2002 · Updated Aug 8, 2024
CVE-2002-0655: OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of...
OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code.
Published Jul 31, 2002 · Updated Aug 8, 2024
CVE-2002-0652: xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacter...
xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered from several calls to the popen() function, such as export_fs().
Published Jul 1, 2002 · Updated Aug 8, 2024
CVE-2002-0667: Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 has a default null administrator passwo...
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 has a default null administrator password, which could allow remote attackers to gain access to the phone.
Published Jul 15, 2002 · Updated Aug 8, 2024
CVE-2002-0643: The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss f...
The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with insecure permissions and does not delete them after installation, which allows local users to obtain sensitive data, including weakly encrypted passwords, to gain privileges, aka "SQL Server Installation Process May Leave Passwords on System."
Published Jul 12, 2002 · Updated Aug 8, 2024
CVE-2002-0657: Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arb...
Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master key.
Published Jul 31, 2002 · Updated Aug 8, 2024
CVE-2002-0644: Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsof...
Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the db_owner and db_ddladmin roles to execute arbitrary code.
Published Jul 26, 2002 · Updated Aug 8, 2024
CVE-2002-0620: Buffer overflow in the Profile Service of Microsoft Commerce Server 2000 allows remote attackers to cause t...
Buffer overflow in the Profile Service of Microsoft Commerce Server 2000 allows remote attackers to cause the server to fail or run arbitrary code in the LocalSystem security context via an input field using an affected API.
Published Jul 1, 2002 · Updated Aug 8, 2024