# CVEs published 2002-03-15

131 CVEs were published on March 15, 2002: 1 critical, 0 high. Days are UTC.

- [CVE-2001-1086](https://cve.now/CVE-2001-1086.md): XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows (no CVSS)
- [CVE-2001-1087](https://cve.now/CVE-2001-1087.md): The default configuration of the config.http.tunnel.allow\_ports option on NetCache devices is set to +all, which allows remote attackers to (no CVSS)
- [CVE-2001-1090](https://cve.now/CVE-2001-1090.md): nss\_postgresql 0.6.1 and before allows a remote attacker to execute arbitrary SQL queries by inserting SQL code into an HTTP request. (no CVSS)
- [CVE-2001-1091](https://cve.now/CVE-2001-1091.md): The (1) dump and (2) dump\_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain (no CVSS)
- [CVE-2001-1092](https://cve.now/CVE-2001-1092.md): msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mh\_profil (no CVSS)
- [CVE-2001-1093](https://cve.now/CVE-2001-1093.md): Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute arbitrary code via a long command line argument. (no CVSS)
- [CVE-2001-1094](https://cve.now/CVE-2001-1094.md): NetOp School 1.5 allows local users to bypass access restrictions on the administration version by logging into the student version, closing (no CVSS)
- [CVE-2001-1097](https://cve.now/CVE-2001-1097.md): Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a flood of UDP packets. (no CVSS)
- [CVE-2001-1101](https://cve.now/CVE-2001-1101.md): The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files (no CVSS)
- [CVE-2001-1102](https://cve.now/CVE-2001-1102.md): Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy (no CVSS)
- [CVE-2001-1104](https://cve.now/CVE-2001-1104.md): SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions. (no CVSS)
- [CVE-2001-1105](https://cve.now/CVE-2001-1105.md): RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attac (no CVSS)
- [CVE-2001-1107](https://cve.now/CVE-2001-1107.md): SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain privileges on the ser (no CVSS)
- [CVE-2001-1109](https://cve.now/CVE-2001-1109.md): Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory contents via a .. (no CVSS)
- [CVE-2001-1110](https://cve.now/CVE-2001-1110.md): EFTP 2.0.7.337 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which c (no CVSS)
- [CVE-2001-1111](https://cve.now/CVE-2001-1111.md): EFTP 2.0.7.337 stores user passwords in plaintext in the eftp2users.dat file. (no CVSS)
- [CVE-2001-1112](https://cve.now/CVE-2001-1112.md): Buffer overflow in EFTP 2.0.7.337 allows remote attackers to execute arbitrary code by uploading a .lnk file containing a large number of ch (no CVSS)
- [CVE-2001-1114](https://cve.now/CVE-2001-1114.md): book.cgi in NetCode NC Book 0.2b allows remote attackers to execute arbitrary commands via shell metacharacters in the "current" parameter. (no CVSS)
- [CVE-2001-1115](https://cve.now/CVE-2001-1115.md): generate.cgi in SIX-webboard 2.01 and before allows remote attackers to read arbitrary files via a dot dot (..) in the content parameter. (no CVSS)
- [CVE-2001-1120](https://cve.now/CVE-2001-1120.md): Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusi (no CVSS)
- [CVE-2001-1122](https://cve.now/CVE-2001-1122.md): Windows NT 4.0 SP 6a allows a local user with write access to winnt/system32 to cause a denial of service (crash in lsass.exe) by running th (no CVSS)
- [CVE-2001-1123](https://cve.now/CVE-2001-1123.md): Vulnerability in Network Node Manager (NNM) 6.2 and earlier in HP OpenView allows a local user to execute arbitrary code, possibly via a buf (no CVSS)
- [CVE-2001-1124](https://cve.now/CVE-2001-1124.md): rpcbind in HP-UX 11.00, 11.04 and 11.11 allows remote attackers to cause a denial of service (core dump) via a malformed RPC portmap request (no CVSS)
- [CVE-2001-1125](https://cve.now/CVE-2001-1125.md): Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute (CVSS 9.8)
- [CVE-2001-1126](https://cve.now/CVE-2001-1126.md): Symantec LiveUpdate 1.4 through 1.6, and possibly later versions, allows remote attackers to cause a denial of service (flood) via DNS spoof (no CVSS)
- [CVE-2001-1127](https://cve.now/CVE-2001-1127.md): Buffer overflow in Progress database 8.3D and 9.1C could allow a local user to execute arbitrary code via (1) \_proapsv, (2) \_mprosrv, (3) \_m (no CVSS)
- [CVE-2001-1128](https://cve.now/CVE-2001-1128.md): Buffer overflow in Progress database 8.3D and 9.1C allows local users to execute arbitrary code via long entries in files that are specified (no CVSS)
- [CVE-2001-1129](https://cve.now/CVE-2001-1129.md): Format string vulnerabilities in (1) \_probuild, (2) \_dbutil, (3) \_mprosrv, (4) \_mprshut, (5) \_proapsv, (6) \_progres, (7) \_proutil, (8) \_rfut (no CVSS)
- [CVE-2001-1131](https://cve.now/CVE-2001-1131.md): Directory traversal vulnerability in WhitSoft Development SlimFTPd 2.2 allows an attacker to read arbitrary files and directories via a ... (no CVSS)
- [CVE-2001-1133](https://cve.now/CVE-2001-1133.md): Vulnerability in a system call in BSDI 3.0 and 3.1 allows local users to cause a denial of service (reboot) in the kernel via a particular s (no CVSS)
- [CVE-2001-1134](https://cve.now/CVE-2001-1134.md): Xerox DocuPrint N40 Printers allow remote attackers to cause a denial of service via malformed data, such as that produced by the Code Red w (no CVSS)
- [CVE-2001-1135](https://cve.now/CVE-2001-1135.md): ZyXEL Prestige 642R and 642R-I routers do not filter the routers' Telnet and FTP ports on the external WAN interface from inside access, all (no CVSS)
- [CVE-2001-1136](https://cve.now/CVE-2001-1136.md): The libsecurity library in HP-UX 11.04 (VVOS) allows attackers to cause a denial of service. (no CVSS)
- [CVE-2001-1137](https://cve.now/CVE-2001-1137.md): D-Link DI-704 Internet Gateway firmware earlier than V2.56b6 allows remote attackers to cause a denial of service (reboot) via malformed IP (no CVSS)
- [CVE-2001-1138](https://cve.now/CVE-2001-1138.md): Directory traversal vulnerability in r.pl (aka r.cgi) of Randy Parker Power Up HTML 0.8033beta allows remote attackers to read arbitrary fil (no CVSS)
- [CVE-2001-1139](https://cve.now/CVE-2001-1139.md): Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-1140](https://cve.now/CVE-2001-1140.md): BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by appending a %00 (null byte) to th (no CVSS)
- [CVE-2001-1142](https://cve.now/CVE-2001-1142.md): ArGoSoft FTP Server 1.2.2.2 uses weak encryption for user passwords, which allows an attacker with access to the password file to gain privi (no CVSS)
- [CVE-2001-1143](https://cve.now/CVE-2001-1143.md): IBM DB2 7.0 allows a remote attacker to cause a denial of service (crash) via a single byte to (1) db2ccs.exe on port 6790, or (2) db2jds.ex (no CVSS)
- [CVE-2001-1148](https://cve.now/CVE-2001-1148.md): Multiple buffer overflows in programs used by scoadmin and sysadmsh in SCO OpenServer 5.0.6a and earlier allow local users to gain privilege (no CVSS)
- [CVE-2001-1150](https://cve.now/CVE-2001-1150.md): Vulnerability in cgiWebupdate.exe in Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.5.2 through 3.5.4 allows remote attackers (no CVSS)
- [CVE-2001-1151](https://cve.now/CVE-2001-1151.md): Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownloa (no CVSS)
- [CVE-2001-1152](https://cve.now/CVE-2001-1152.md): Baltimore Technologies WEBsweeper 4.02, when used to manage URL blacklists, allows remote attackers to bypass blacklist restrictions and con (no CVSS)
- [CVE-2001-1154](https://cve.now/CVE-2001-1154.md): Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service (hang) using PHP IMAP (no CVSS)
- [CVE-2001-1156](https://cve.now/CVE-2001-1156.md): TYPSoft FTP 0.95 allows remote attackers to cause a denial of service (CPU consumption) via a "../../\*" argument to (1) STOR or (2) RETR. (no CVSS)
- [CVE-2001-1157](https://cve.now/CVE-2001-1157.md): Baltimore Technologies WEBsweeper 4.0 and 4.02 does not properly filter Javascript from HTML pages, which could allow remote attackers to by (no CVSS)
- [CVE-2001-1159](https://cve.now/CVE-2001-1159.md): load\_prefs.php and supporting include files in SquirrelMail 1.0.4 and earlier do not properly initialize certain PHP variables, which allows (no CVSS)
- [CVE-2001-1163](https://cve.now/CVE-2001-1163.md): Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT argument to port 6500. (no CVSS)
- [CVE-2001-1164](https://cve.now/CVE-2001-1164.md): Buffer overflow in uucp utilities in UnixWare 7 allows local users to execute arbitrary code via long command line arguments to (1) uucp, (2 (no CVSS)
- [CVE-2001-1165](https://cve.now/CVE-2001-1165.md): Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting (no CVSS)
- [CVE-2001-1168](https://cve.now/CVE-2001-1168.md): Directory traversal vulnerability in index.php in PhpMyExplorer before 1.2.1 allows remote attackers to read arbitrary files via a ..%2F (mo (no CVSS)
- [CVE-2001-1169](https://cve.now/CVE-2001-1169.md): keyinit in S/Key does not require authentication to initialize a one-time password sequence, which allows an attacker who has gained privile (no CVSS)
- [CVE-2001-1170](https://cve.now/CVE-2001-1170.md): AmTote International homebet program stores the homebet.log file in the homebet/ virtual directory, which allows remote attackers to steal a (no CVSS)
- [CVE-2001-1171](https://cve.now/CVE-2001-1171.md): Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, w (no CVSS)
- [CVE-2001-1173](https://cve.now/CVE-2001-1173.md): Vulnerability in MasqMail before 0.1.15 allows local users to gain privileges via piped aliases. (no CVSS)
- [CVE-2001-1178](https://cve.now/CVE-2001-1178.md): Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable. (no CVSS)
- [CVE-2001-1179](https://cve.now/CVE-2001-1179.md): xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters. (no CVSS)
- [CVE-2001-1181](https://cve.now/CVE-2001-1181.md): Dynamically Loadable Kernel Module (dlkm) static kernel symbol table in HP-UX 11.11 is not properly configured, which allows local users to (no CVSS)
- [CVE-2001-1182](https://cve.now/CVE-2001-1182.md): Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges. (no CVSS)
- [CVE-2001-1184](https://cve.now/CVE-2001-1184.md): wrshdsp.exe in Denicomp Winsock RSHD/NT 2.21.00 and earlier allows remote attackers to cause a denial of service (CPU consumption) via (1) i (no CVSS)
- [CVE-2001-1187](https://cve.now/CVE-2001-1187.md): csvform.pl 0.1 allows remote attackers to execute arbitrary commands via metacharacters in the file parameter. (no CVSS)
- [CVE-2001-1188](https://cve.now/CVE-2001-1188.md): mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote servers by modifying the s (no CVSS)
- [CVE-2001-1189](https://cve.now/CVE-2001-1189.md): IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to (no CVSS)
- [CVE-2001-1190](https://cve.now/CVE-2001-1190.md): The default PAM files included with passwd in Mandrake Linux 8.1 do not support MD5 passwords, which could result in a lower level of passwo (no CVSS)
- [CVE-2001-1191](https://cve.now/CVE-2001-1191.md): WebSeal in IBM Tivoli SecureWay Policy Director 3.8 allows remote attackers to cause a denial of service (crash) via a URL that ends in %2e. (no CVSS)
- [CVE-2001-1192](https://cve.now/CVE-2001-1192.md): Citrix Independent Computing Architecture (ICA) Client for Windows 6.1 allows remote malicious web sites to execute arbitrary code via a .IC (no CVSS)
- [CVE-2001-1194](https://cve.now/CVE-2001-1194.md): Zyxel Prestige 681 and 1600 SDSL Routers allow remote attackers to cause a denial of service via malformed packets with (1) an IP length les (no CVSS)
- [CVE-2001-1195](https://cve.now/CVE-2001-1195.md): Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, which allows remote (no CVSS)
- [CVE-2001-1196](https://cve.now/CVE-2001-1196.md): Directory traversal vulnerability in edit\_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' (dot dot) in th (no CVSS)
- [CVE-2001-1197](https://cve.now/CVE-2001-1197.md): klprfax\_filter in KDE2 KDEUtils allows local users to overwrite arbitrary files via a symlink attack on the klprfax.filter temporary file. (no CVSS)
- [CVE-2001-1198](https://cve.now/CVE-2001-1198.md): RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by specifying the target file in the - (no CVSS)
- [CVE-2001-1202](https://cve.now/CVE-2001-1202.md): Cross-site scripting vulnerability in DeleGate 7.7.0 and 7.7.1 does not quote scripting commands within a "403 Forbidden" error page, which (no CVSS)
- [CVE-2001-1204](https://cve.now/CVE-2001-1204.md): Directory traversal vulnerability in phprocketaddin in Total PC Solutions PHP Rocket Add-in for FrontPage 1.0 allows remote attackers to rea (no CVSS)
- [CVE-2001-1205](https://cve.now/CVE-2001-1205.md): Directory traversal vulnerability in lastlines.cgi for Last Lines 2.0 allows remote attackers to read arbitrary files via '..' sequences in (no CVSS)
- [CVE-2001-1206](https://cve.now/CVE-2001-1206.md): Matrix CGI vault Last Lines 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the $error\_log variable. (no CVSS)
- [CVE-2001-1207](https://cve.now/CVE-2001-1207.md): Buffer overflows in DayDream BBS 2.9 through 2.13 allow remote attackers to possibly execute arbitrary code via the control codes (1) ~#MC, (no CVSS)
- [CVE-2001-1208](https://cve.now/CVE-2001-1208.md): Format string vulnerability in DayDream BBS allows remote attackers to execute arbitrary code via format string specifiers in a file contain (no CVSS)
- [CVE-2001-1209](https://cve.now/CVE-2001-1209.md): Directory traversal vulnerability in zml.cgi allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-1210](https://cve.now/CVE-2001-1210.md): Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must ship without SNMP ac (no CVSS)
- [CVE-2001-1211](https://cve.now/CVE-2001-1211.md): Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information f (no CVSS)
- [CVE-2001-1212](https://cve.now/CVE-2001-1212.md): Cross-site scripting vulnerability in catgy.cgi for Aktivate 1.03 allows remote attackers to execute arbitrary Javascript via the desc param (no CVSS)
- [CVE-2001-1213](https://cve.now/CVE-2001-1213.md): The default configuration of DataWizard FtpXQ 2.0 and 2.1 includes a default username and password, which allows remote attackers to read an (no CVSS)
- [CVE-2001-1214](https://cve.now/CVE-2001-1214.md): manual.php in Marcus S. (no CVSS)
- [CVE-2001-1216](https://cve.now/CVE-2001-1216.md): Buffer overflow in PL/SQL Apache module in Oracle 9i Application Server allows remote attackers to execute arbitrary code via a long request (no CVSS)
- [CVE-2001-1217](https://cve.now/CVE-2001-1217.md): Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive (no CVSS)
- [CVE-2001-1218](https://cve.now/CVE-2001-1218.md): Microsoft Internet Explorer for Unix 5.0SP1 allows local users to possibly cause a denial of service (crash) in CDE or the X server on Solar (no CVSS)
- [CVE-2001-1219](https://cve.now/CVE-2001-1219.md): Microsoft Internet Explorer 6.0 and earlier allows malicious website operators to cause a denial of service (client crash) via JavaScript th (no CVSS)
- [CVE-2001-1220](https://cve.now/CVE-2001-1220.md): D-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point stores the administrative password in plaintext in the default Management I (no CVSS)
- [CVE-2001-1221](https://cve.now/CVE-2001-1221.md): D-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point uses a default SNMP community string of 'public' which allows remote attack (no CVSS)
- [CVE-2001-1222](https://cve.now/CVE-2001-1222.md): Plesk Server Administrator (PSA) 1.0 allows remote attackers to obtain PHP source code via an HTTP request containing the target's IP addres (no CVSS)
- [CVE-2001-1223](https://cve.now/CVE-2001-1223.md): The web administration server for ELSA Lancom 1100 Office does not require authentication, which allows arbitrary remote attackers to gain a (no CVSS)
- [CVE-2001-1224](https://cve.now/CVE-2001-1224.md): get\_input in adrotate.pm for Les VanBrunt AdRotate Pro 2.0 allows remote attackers to modify the database and possibly execute arbitrary com (no CVSS)
- [CVE-2001-1225](https://cve.now/CVE-2001-1225.md): Hughes Technology Mini SQL 2.0.10 through 2.0.12 allows local users to cause a denial of service by creating a very large array in a table, (no CVSS)
- [CVE-2001-1226](https://cve.now/CVE-2001-1226.md): AdCycle 1.17 and earlier allow remote attackers to modify SQL queries, which are not properly sanitized before being passed to the MySQL dat (no CVSS)
- [CVE-2002-0099](https://cve.now/CVE-2002-0099.md): Buffer overflow in Michael Lamont Savant Web Server 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP request (no CVSS)
- [CVE-2002-0100](https://cve.now/CVE-2002-0100.md): AOL AOLserver 3.4.2 Win32 allows remote attackers to bypass authentication and read password-protected files via a URL that directly referen (no CVSS)
- [CVE-2002-0101](https://cve.now/CVE-2002-0101.md): Microsoft Internet Explorer 6.0 and earlier allows local users to cause a denial of service via an infinite loop for modeless dialogs showMo (no CVSS)
- [CVE-2002-0102](https://cve.now/CVE-2002-0102.md): Oracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via (1) a request to TCP ports 1100, 4000, 4001, and 4002 (no CVSS)
- [CVE-2002-0103](https://cve.now/CVE-2002-0103.md): An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows loc (no CVSS)
- [CVE-2002-0104](https://cve.now/CVE-2002-0104.md): AFTPD 5.4.4 allows remote attackers to gain sensitive information via a CD (CWD) ~ (tilde) command, which causes a core dump. (no CVSS)
- [CVE-2002-0105](https://cve.now/CVE-2002-0105.md): CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on / (no CVSS)
- [CVE-2002-0106](https://cve.now/CVE-2002-0106.md): BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an (no CVSS)
- [CVE-2002-0108](https://cve.now/CVE-2002-0108.md): Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the h (no CVSS)
- [CVE-2002-0109](https://cve.now/CVE-2002-0109.md): Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information (no CVSS)
- [CVE-2002-0110](https://cve.now/CVE-2002-0110.md): Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plaintext in a .ini file, (no CVSS)
- [CVE-2002-0112](https://cve.now/CVE-2002-0112.md): Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL. (no CVSS)
- [CVE-2002-0113](https://cve.now/CVE-2002-0113.md): EMC NetWorker (formerly Legato NetWorker) before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which all (no CVSS)
- [CVE-2002-0114](https://cve.now/CVE-2002-0114.md): EMC NetWorker (formerly Legato NetWorker) before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain (no CVSS)
- [CVE-2002-0116](https://cve.now/CVE-2002-0116.md): Palm OS 3.5h and possibly other versions, as used in Handspring Visor and Xircom products, allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2002-0118](https://cve.now/CVE-2002-0118.md): Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitr (no CVSS)
- [CVE-2002-0119](https://cve.now/CVE-2002-0119.md): Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service (reboot) via a network scan with unusual packets, s (no CVSS)
- [CVE-2002-0122](https://cve.now/CVE-2002-0122.md): Siemens 3568i WAP mobile phones allows remote attackers to cause a denial of service (crash) via an SMS message containing unusual character (no CVSS)
- [CVE-2002-0124](https://cve.now/CVE-2002-0124.md): MDG Computer Services Web Server 4D/eCommerce 3.5.3 allows remote attackers to exploit directory traversal vulnerability via a ../ (dot dot) (no CVSS)
- [CVE-2002-0125](https://cve.now/CVE-2002-0125.md): Buffer overflow in ClanLib library 0.5 may allow local users to execute arbitrary code in games that use the library, such as (1) Super Meth (no CVSS)
- [CVE-2002-0126](https://cve.now/CVE-2002-0126.md): Buffer overflow in BlackMoon FTP Server 1.0 through 1.5 allows remote attackers to execute arbitrary code via a long argument to (1) USER, ( (no CVSS)
- [CVE-2002-0127](https://cve.now/CVE-2002-0127.md): Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26, when configured to block traffic below port 1024, allows remote attackers to cause a (no CVSS)
- [CVE-2002-0129](https://cve.now/CVE-2002-0129.md): efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which prints the contents of (no CVSS)
- [CVE-2002-0130](https://cve.now/CVE-2002-0130.md): Buffer overflow in efax 0.9 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -x argument. (no CVSS)
- [CVE-2002-0131](https://cve.now/CVE-2002-0131.md): ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prevent a script from reading file (no CVSS)
- [CVE-2002-0132](https://cve.now/CVE-2002-0132.md): Buffer overflow in Chinput 3.0 allows local users to execute arbitrary code via a long HOME environment variable. (no CVSS)
- [CVE-2002-0133](https://cve.now/CVE-2002-0133.md): Buffer overflows in Avirt Gateway Suite 4.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) (no CVSS)
- [CVE-2002-0134](https://cve.now/CVE-2002-0134.md): Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system itself, which allows remote attac (no CVSS)
- [CVE-2002-0135](https://cve.now/CVE-2002-0135.md): Netopia Timbuktu Pro 6.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a series of connections to one of th (no CVSS)
- [CVE-2002-0136](https://cve.now/CVE-2002-0136.md): Microsoft Internet Explorer 5.5 on Windows 98 allows remote web pages to cause a denial of service (hang) via extremely long values for form (no CVSS)
- [CVE-2002-0137](https://cve.now/CVE-2002-0137.md): CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file. (no CVSS)
- [CVE-2002-0138](https://cve.now/CVE-2002-0138.md): CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command. (no CVSS)
- [CVE-2002-0140](https://cve.now/CVE-2002-0140.md): Domain Name Relay Daemon (dnrd) 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitra (no CVSS)
- [CVE-2002-0141](https://cve.now/CVE-2002-0141.md): Maelstrom GPL 3.0.1 allows local users to overwrite arbitrary files of other Maelstrom users via a symlink attack on the /tmp/f file. (no CVSS)
- [CVE-2002-0142](https://cve.now/CVE-2002-0142.md): CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of service (crash) via a series of req (no CVSS)
- [CVE-2002-0144](https://cve.now/CVE-2002-0144.md): Directory traversal vulnerability in chuid 1.2 and earlier allows remote attackers to change the ownership of files outside of the upload di (no CVSS)
- [CVE-2002-0145](https://cve.now/CVE-2002-0145.md): chuid 1.2 and earlier does not properly verify the ownership of files that will be changed, which allows remote attackers to change files ow (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2002-03-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.