Vulnerabilities (CVE)

CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-1690 1 Ibm 1 Aix 2008-09-05 10.0 HIGH N/A
Unknown vulnerability in AIX before 4.0 with unknown attack vectors and unknown impact, aka "security issue," as fixed by APAR IY28225.
CVE-2002-1926 1 Aquonics Scripting 1 Aquonics File Manager 2008-09-05 5.0 MEDIUM N/A
Directory traversal vulnerability in source.php in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP query string.
CVE-2002-1925 1 Tiny Software 1 Tiny Personal Firewall 2008-09-05 5.0 MEDIUM N/A
Tiny Personal Firewall 3.0 through 3.0.6 allows remote attackers to cause a denial of service (crash) by via SYN, UDP, ICMP and TCP portscans when the administrator selects the Log tab of the Personal Firewall Agent module.
CVE-2002-1924 1 Apc 1 Powerchute 2008-09-05 5.0 MEDIUM N/A
PowerChute plus 5.0.2 creates a "Pwrchute" directory during installation that is shared and world writeable, which could allow remote attackers to modify or create files in that directory.
CVE-2002-1922 1 Jelsoft 1 Vbulletin 2008-09-05 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in global.php in Jelsoft vBulletin 2.0.0 through 2.2.8 allows remote attackers to inject arbitrary web script or HTML via the (1) $scriptpath or (2) $url variables.
CVE-2002-1689 1 Ibm 1 Aix 2008-09-05 10.0 HIGH N/A
Unknown vulnerability in the login program on AIX before 4.0 could allow remote users to specify 100 or more environment variables when logging on, which exceeds the length of a certain string, possibly triggering a buffer overflow.
CVE-2002-1816 1 Yann Ramin 1 Atphttpd 2008-09-05 7.5 HIGH N/A
Off-by-one buffer overflow in the sock_gets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
CVE-2002-1831 1 Microsoft 1 Msn Messenger 2008-09-05 5.0 MEDIUM N/A
Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an invite request that contains hex-encoded spaces (%20) in the Invitation-Cookie field.
CVE-2002-1903 1 University Of Washington 1 Pine 2008-09-05 5.0 MEDIUM N/A
Pine 4.2.1 through 4.4.4 puts Unix usernames and/or uid into Sender: and X-Sender: headers, which could allow remote attackers to obtain sensitive information.
CVE-2002-1902 1 Markus Triska 1 Cgiforum 2008-09-05 5.0 MEDIUM N/A
CGIForum 1.0 through 1.05 allows remote attackers to cause a denial of service (infinite recursion) by creating a message board post that is a child of an outdated parent.
CVE-2002-1901 1 Bodo Bauer 1 Bbgallery 2008-09-05 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Bodo Bauer BBGallery 1.0 allows remote attackers to inject arbitrary web script or HTML via image tags.
CVE-2002-1900 1 Pinboard 1 Pinboard 2008-09-05 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Pinboard 1.0 allows remote attackers to inject arbitrary web script or HTML via tasklists.
CVE-2002-1888 1 Commonname 1 Commonname Toolbar 2008-09-05 2.1 LOW N/A
CommonName Toolbar 3.5.2.0 sends unqualified domain name requests to the CommonName organization and possibly other web servers for name resolution, which allows those organizations to obtain internal server names.
CVE-2002-1887 1 Gregory Kokanosky 1 Phpmynewsletter 2008-09-05 7.5 HIGH N/A
PHP remote file inclusion vulnerability in customize.php for phpMyNewsletter 0.6.10 allows remote attackers to execute arbitrary PHP code via the l parameter.
CVE-2002-1886 1 Tightauction 1 Tightauction 2008-09-05 5.0 MEDIUM N/A
TightAuction 3.0 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain the database username and password.
CVE-2002-1885 1 Powerphlogger 1 Powerphlogger 2008-09-05 7.5 HIGH N/A
PHP remote file inclusion vulnerability in showhits.php3 for PowerPhlogger (PPhlogger) 2.0.9 through 2.2.2 allows remote attackers to execute arbitrary PHP code via the rel_path parameter.
CVE-2002-1687 1 Ibm 1 Aix 2008-09-05 2.1 LOW N/A
Buffer overflow in the diagnostics library in AIX allows local users to "cause data and instructions to be overwritten" via a long DIAGNOSTICS environment variable.
CVE-2002-1872 1 Microsoft 1 Sql Server 2008-09-05 5.0 MEDIUM N/A
Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers to sniff and decrypt the password.
CVE-2002-1832 1 Scaramanga 1 Firestorm Ids 2008-09-05 5.0 MEDIUM N/A
Unknown vulnerability in the "ipopts decode" functionality in Firestorm IDS 0.4.0 through 0.4.2 allows remote attackers to cause a denial of service (crash) via certain IP options.
CVE-2002-1870 1 Sws 1 Sws Simple Web Server 2008-09-05 7.5 HIGH N/A
Simple Web Server (SWS) 0.0.4 through 0.1.0 does not properly handle when the recv function call fails, which may allow remote attackers to overwrite program data or perform actions on an uninitialized heap, leading to a denial of service and possibly code execution.
CVE-2002-1686 1 Ibm 1 Aix 2008-09-05 10.0 HIGH N/A
Buffer overflow in lscfg of unknown versions of AIX has unknown impact.
CVE-2002-1858 1 Oracle 1 Application Server 2008-09-05 5.0 MEDIUM N/A
Oracle Oracle9i Application Server 1.0.2.2 and 9.0.2 through 9.0.2.0.1, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF.").
CVE-2002-1857 1 Jo 1 Jo Webserver 2008-09-05 5.0 MEDIUM N/A
jo! jo Webserver 1.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF.").
CVE-2002-1856 1 Hp 1 Application Server 2008-09-05 5.0 MEDIUM N/A
HP Application Server 8.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF.").
CVE-2002-1855 1 Macromedia 1 Jrun 2008-09-05 5.0 MEDIUM N/A
Macromedia JRun 3.0 through 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF.").
CVE-2002-1975 1 Sharp 1 Zaurus 2008-09-05 2.1 LOW N/A
Sharp Zaurus PDA SL-5000D and SL-5500 uses a salt of "A0" to encrypt the screen-locking password as stored in the Security.conf file, which makes it easier for local users to guess the password via brute force methods.
CVE-2002-1812 1 Gdam 1 Gdam 2008-09-05 7.2 HIGH N/A
Buffer overflow in gdam123 0.933 and 0.942 allows local users to execute arbitrary code via a long filename parameter.
CVE-2002-1974 1 Sharp 1 Zaurus 2008-09-05 10.0 HIGH N/A
The FTP service in Zaurus PDAs SL-5000D and SL-5500 does not require authentication, which allows remote attackers to access the file system as root.
CVE-2002-1793 1 Hp 2 Virtualvault, Vvos 2008-09-05 5.0 MEDIUM N/A
HTTP Server mod_ssl module running on HP-UX 11.04 with Virtualvault OS (VVOS) 4.5 through 4.6 closes the connection when the Apache server times out during an SSL request, which may allow attackers to cause a denial of service.
CVE-2002-1805 1 Dacode 1 Dacode 2008-09-05 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in DaCode 1.2.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.
CVE-2002-1934 1 Pingtel 1 Xpressa 2008-09-05 5.0 MEDIUM N/A
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 2.0.1 leaks sensitive information during boot-up, which allows attackers to obtain the MD5 hash of the Admin password, MD5 hash of the physical password, and other registration information.
CVE-2002-1929 1 Php Arena 1 Pafiledb 2008-09-05 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0 allows remote attackers to inject arbitrary web script or HTML via the query string in the (1) rate, (2) email, or (3) download actions.
CVE-2002-1971 1 Sourcecraft 1 Networking Utils 2008-09-05 10.0 HIGH N/A
The ping utility in networking_utils.php in Sourcecraft Networking_Utils 1.0 allows remote attackers to read arbitrary files via shell metacharacters in the Domain name or IP address argument.
CVE-2002-1970 1 Snortcenter 1 Snortcenter 2008-09-05 2.1 LOW N/A
SnortCenter 0.9.5, when configured to push Snort rules, stores the rules in a temporary file with world-readable and world-writable permissions, which allows local users to obtain usernames and passwords for the alert database servers.
CVE-2002-1969 1 The Magic Notebook 1 The Magic Notebook 2008-09-05 5.0 MEDIUM N/A
Magic Notebook 1.0b and 1.1b allows remote attackers to cause a denial of service (crash) via an invalid username during login.
CVE-2002-1968 1 Com21 1 Doxport 1100 2008-09-05 2.1 LOW N/A
Com21 DOXport 1100 series cable modem running firmware 2.1.1.106, and possibly other versions before 2.1.1.108.003, downloads a DOCSIS configuration file from a TFTP server running on the internal network, which allows local users to modify configuration of the modem via a malicious TFTP server.
CVE-2002-1967 1 Mark Hanson 1 Xircon 2008-09-05 5.0 MEDIUM N/A
Buffer overflow in XiRCON 1.0 Beta 4 allows remote attackers to cause a denial of service (disconnect) via a long (1) ctcp, (2) primsg, (3) msg, or (4) notice command.
CVE-2002-1966 1 My Postcards 1 My Postcards Platinum 2008-09-05 5.0 MEDIUM N/A
Directory traversal vulnerability in magiccard.cgi in My Postcards Platinum 5.0 and 6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter.
CVE-2002-1965 1 Imatix 1 Xitami 2008-09-05 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Errors.gsl in Imatix Xitami 2.5b4 and 2.5b5 allows remote attackers to inject arbitrary web script or HTML via the (1) Javascript events, as demonstrated via an onerror event in an IMG SRC tag or (2) User-Agent field in an HTTP GET request.
CVE-2002-1964 1 Wesmo 1 Phpeventcalendar 2008-09-05 7.5 HIGH N/A
Unknown vulnerability in WesMo phpEventCalendar 1.1 allows remote attackers to execute arbitrary commands via unknown attack vectors.
CVE-2002-1963 1 Linux 1 Linux Kernel 2008-09-05 2.1 LOW N/A
Linux kernel 2.4.1 through 2.4.19 sets root's NR_RESERVED_FILES limit to 10 files, which allows local users to cause a denial of service (resource exhaustion) by opening 10 setuid binaries.
CVE-2002-1933 1 Microsoft 1 Windows 2000 Terminal Services 2008-09-05 7.2 HIGH N/A
The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, which could allow local users to gain access to the terminal server window.
CVE-2002-1931 1 Php Arena 1 Pafiledb 2008-09-05 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in PHP Arena paFileDB 1.1.3 and 2.1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the search string.
CVE-2002-1930 1 An 1 An-httpd 2008-09-05 7.5 HIGH N/A
Buffer overflow in AN HTTPd 1.38 through 1.4.1c allows remote attackers to execute arbitrary code via a SOCKS4 request with a long username.
CVE-2002-1911 1 Zonelabs 1 Zonealarm 2008-09-05 5.0 MEDIUM N/A
ZoneAlarm Pro 3.0 and 3.1, when configured to block all traffic, allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of SYN packets (SYN flood). NOTE: the vendor was not able to reproduce the issue.
CVE-2002-1910 1 Click2learn 1 Ingenium Learning Management System 2008-09-05 5.0 MEDIUM N/A
Click2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak encryption for passwords (reversible algorithm), which allows attackers to obtain passwords.
CVE-2002-1909 1 Click2learn 1 Ingenium Learning Management System 2008-09-05 5.0 MEDIUM N/A
Click2Learn Ingenium Learning Management System 5.1 and 6.1 stores the hashed administrative password in a config.txt file under the htdocs directory, which allows remote attackers to obtain the administrative password.
CVE-2002-1907 1 Telcondex 1 Simplewebserver 2008-09-05 5.0 MEDIUM N/A
TelCondex SimpleWebServer 2.06.20817 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.
CVE-2002-1906 1 Polycom 1 Viavideo 2008-09-05 5.0 MEDIUM N/A
The web server for Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (CPU consumption) by sending incomplete HTTP requests and leaving the connections open.
CVE-2002-1905 1 Polycom 1 Viavideo 2008-09-05 5.0 MEDIUM N/A
Buffer overflow in the web server of Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.