CVE Vulnerability Catalog

CVE-2002-1519 describes a format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2. This allows remote attackers to cause a denial of service and potentially execute arbitrary code via format string specifiers in the password parameter.

Buffer overflow in Automatic File Distributor (AFD) version 1.2.14 and earlier allows local users to gain privileges via a long MON_WORK_DIR environment variable or -w (workdir) argument.

In versions 0.5.0 and earlier of the Null HTTP Server, a heap-based buffer overflow allows remote attackers to execute arbitrary code by providing a negative value in the Content-Length HTTP header.

Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long URL or (2) a request with a long method name.

Buffer overflow in Linuxconf before version 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG environment variable, leading to an overflow of an error string.

Unknown vulnerability in the bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www-data user.

Heap-based buffer overflow in the NTLMSSP code for Ethereal 0.9.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.

Buffer overflow in the openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a crash and possibly execute arbitrary code via a long filename argument.

Buffer overflow in the XML parser in wsabi.dll of Winamp 3 (1.0.0.488) allows remote attackers to execute arbitrary code via a skin file (.wal) with a long include file tag.

Buffer overflow in Apple QuickTime Player 5.x and 6.0 for Windows allows remote attackers to execute arbitrary code via a long QuickTime URL.

The HTTP proxy for Symantec Enterprise Firewall (SEF) 7.0 allows proxy users to bypass pattern matching for blocked URLs via requests that are URL-encoded with escapes, Unicode, or UTF-8.

A stack-based buffer overflow in the bsd_queue() function for lpq on Solaris 2.6 and 7 allows local users to gain root privilege.

In gBook 1.4, the index.php file allows remote attackers to bypass authentication and gain administrative privileges by setting the login parameter to true.

Novell eDirectory version 8.6.2 and Netware 5.1 eDir 85.x allows users with expired passwords to gain inappropriate permissions when logging in from Remote Manager.

Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0.

Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3 and OpenBSD 3.2 and earlier allows local users to gain root privileges via long command line arguments such as request ID or user name.

CVE-2002-1553 affects Cisco ONS15454 and ONS15327 devices running ONS versions prior to 3.4. It allows remote attackers to modify system configuration and delete files by establishing an FTP connection to TCC, TCC+, or XTC using a non-existent username and password.

Molly IRC bot version 0.5 allows remote attackers to execute arbitrary commands via shell metacharacters in various script variables.

An unknown vulnerability in autofs on AIX 4.3.0, related to the use of executable maps, allows attackers to execute arbitrary commands as root, possibly related to string handling around how the executable map is called.

The client for Symantec Norton AntiVirus Corporate Edition in versions 7.5.x before 7.5.1 Build 62 and 7.6.x before 7.6.1 Build 35a runs winhlp32 with raised privileges, allowing local users to gain privileges by using certain features of winhlp32.