Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to execute arbitrary code via (1) msgchk or (2) .upd..loader.
Max CVSS
7.2
EPSS Score
0.04%
Published
2002-09-13
Updated
2017-07-11
Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at.
Max CVSS
7.2
EPSS Score
0.04%
Published
2002-09-09
Updated
2017-07-11
Buffer overflow in ps in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
Max CVSS
7.2
EPSS Score
0.04%
Published
2002-09-10
Updated
2017-07-11
Buffer overflow in mailcv in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
Max CVSS
7.2
EPSS Score
0.06%
Published
2002-09-13
Updated
2017-07-11
Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable to (1) dxpause, (2) dxconsole, or (3) dtsession.
Max CVSS
7.5
EPSS Score
2.30%
Published
2002-09-02
Updated
2017-07-11
Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliver.
Max CVSS
7.5
EPSS Score
4.01%
Published
2002-09-02
Updated
2017-07-11
mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a denial of service (CPU consumption) in a preforked multi-processing module.
Max CVSS
5.0
EPSS Score
2.71%
Published
2002-09-25
Updated
2021-06-06
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunload handler.
Max CVSS
2.6
EPSS Score
0.30%
Published
2002-09-24
Updated
2016-10-18
FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including (1) asmon, (2) ascpu, (3) bubblemon, (4) wmmon, and (5) wmnet2, leave open file descriptors for /dev/mem and /dev/kmem, which allows local users to read kernel memory.
Max CVSS
2.1
EPSS Score
0.04%
Published
2002-09-24
Updated
2016-10-18
Multiple buffer overflows in purity 1-16 allow local users to gain privileges and modify high scores tables.
Max CVSS
7.2
EPSS Score
0.04%
Published
2002-09-24
Updated
2008-09-05

CVE-2002-1123

Public exploit
Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the "Hello" overflow.
Max CVSS
7.5
EPSS Score
96.18%
Published
2002-09-24
Updated
2018-10-12
Buffer overflow in the parsing mechanism for ISS Internet Scanner 6.2.1, when using the license banner HTTP check, allows remote attackers to execute arbitrary code via a long web server response.
Max CVSS
7.5
EPSS Score
3.53%
Published
2002-09-24
Updated
2008-09-10
SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 ("Message Fragmentation and Reassembly") and supported in such products as Outlook Express, which allows remote attackers to bypass content filtering, including virus checking, via fragmented emails of the message/partial content type.
Max CVSS
7.5
EPSS Score
1.12%
Published
2002-09-24
Updated
2016-10-18

CVE-2002-1120

Public exploit
Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
Max CVSS
7.5
EPSS Score
20.43%
Published
2002-09-24
Updated
2017-10-05
The URL handler in the manual browser option for Gaim before 0.59.1 allows remote attackers to execute arbitrary script via shell metacharacters in a link.
Max CVSS
7.5
EPSS Score
2.18%
Published
2002-09-24
Updated
2016-10-18
Buffer overflow in X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities.
Max CVSS
10.0
EPSS Score
0.65%
Published
2002-09-24
Updated
2008-09-10
X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges.
Max CVSS
7.2
EPSS Score
0.04%
Published
2002-09-24
Updated
2008-09-10
The mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments, which could allow remote attackers to modify mail message content, including mail headers, and possibly use PHP as a "spam proxy."
Max CVSS
5.0
EPSS Score
2.83%
Published
2002-09-24
Updated
2017-10-10
Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify command line arguments to the MTA (e.g. sendmail) in the 5th argument to mail(), altering MTA behavior and possibly executing commands.
Max CVSS
7.5
EPSS Score
1.54%
Published
2002-09-24
Updated
2024-02-13
The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC allows remote attackers to execute arbitrary code if the user joins a channel whose topic includes EPIC4 code.
Max CVSS
7.5
EPSS Score
2.64%
Published
2002-09-24
Updated
2008-09-10
IRC client irssi in irssi-text before 0.8.4 allows remote attackers to cause a denial of service (crash) via an IRC channel that has a long topic followed by a certain string, possibly triggering a buffer overflow.
Max CVSS
5.0
EPSS Score
0.81%
Published
2002-09-24
Updated
2017-07-11
Microsoft SQL Server 2000 SP2, when configured as a distributor, allows attackers to execute arbitrary code via the @scriptfile parameter to the sp_MScopyscript stored procedure.
Max CVSS
7.5
EPSS Score
0.31%
Published
2002-09-24
Updated
2016-10-18
Buffer overflow in ndcfg command for UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to execute arbitrary code via a long command line.
Max CVSS
7.2
EPSS Score
0.04%
Published
2002-09-24
Updated
2008-09-10
The Web Folder component for Internet Explorer 5.5 and 6.0 writes an error message to a known location in the temporary folder, which allows remote attackers to execute arbitrary code by injecting it into the error message, then referring to the error message file via a mhtml: URL.
Max CVSS
7.5
EPSS Score
74.68%
Published
2002-09-24
Updated
2021-07-23
The Java logging feature for the Java Virtual Machine in Internet Explorer writes output from functions such as System.out.println to a known pathname, which can be used to execute arbitrary code.
Max CVSS
7.5
EPSS Score
13.23%
Published
2002-09-24
Updated
2016-10-18
68 vulnerabilities found
1 2 3
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!