# CVEs published 2002-07-26

50 CVEs were published on July 26, 2002: 0 critical, 0 high. Days are UTC.

- [CVE-2001-1379](https://cve.now/CVE-2001-1379.md): The PostgreSQL authentication modules (1) mod\_auth\_pgsql 0.9.5, and (2) mod\_auth\_pgsql\_sys 0.9.4, allow remote attackers to bypass authentic (no CVSS)
- [CVE-2002-0644](https://cve.now/CVE-2002-0644.md): Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allo (no CVSS)
- [CVE-2002-0645](https://cve.now/CVE-2002-0645.md): SQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 may allow authentica (no CVSS)
- [CVE-2002-0649](https://cve.now/CVE-2002-0649.md): Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote atta (no CVSS)
- [CVE-2002-0728](https://cve.now/CVE-2002-0728.md): Buffer overflow in the progressive reader for libpng 1.2.x before 1.2.4, and 1.0.x before 1.0.14, allows attackers to cause a denial of serv (no CVSS)
- [CVE-2002-0730](https://cve.now/CVE-2002-0730.md): Cross-site scripting vulnerability in guestbook.pl for Philip Chinery's Guestbook 1.1 allows remote attackers to execute Javascript or HTML (no CVSS)
- [CVE-2002-0731](https://cve.now/CVE-2002-0731.md): Cross-site scripting vulnerability in demonstration scripts for vqServer allows remote attackers to execute arbitrary script via a link that (no CVSS)
- [CVE-2002-0732](https://cve.now/CVE-2002-0732.md): Cross-site scripting vulnerability in MyGuestbook 1.0 allows remote attackers to execute arbitrary script or inject HTML via fields such as (no CVSS)
- [CVE-2002-0735](https://cve.now/CVE-2002-0735.md): Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid\_auth\_LDAP) 2.0.2 and earlier allows (no CVSS)
- [CVE-2002-0739](https://cve.now/CVE-2002-0739.md): Cross-site scripting in PostCalendar 3.02 allows remote attackers to insert arbitrary HTML and script, and steal cookies, by modifying a cal (no CVSS)
- [CVE-2002-0740](https://cve.now/CVE-2002-0740.md): Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOO (no CVSS)
- [CVE-2002-0742](https://cve.now/CVE-2002-0742.md): Buffer overflow in pioout on AIX 4.3.3. (no CVSS)
- [CVE-2002-0743](https://cve.now/CVE-2002-0743.md): mail and mailx in AIX 4.3.3 core dump when called with a very long argument, an indication of a buffer overflow. (no CVSS)
- [CVE-2002-0744](https://cve.now/CVE-2002-0744.md): namerslv in AIX 4.3.3 core dumps when called with a very long argument, possibly as a result of a buffer overflow. (no CVSS)
- [CVE-2002-0745](https://cve.now/CVE-2002-0745.md): Buffer overflow in uucp in AIX 4.3.3. (no CVSS)
- [CVE-2002-0746](https://cve.now/CVE-2002-0746.md): Vulnerability in template.dhcpo in AIX 4.3.3 related to an insecure linker argument. (no CVSS)
- [CVE-2002-0747](https://cve.now/CVE-2002-0747.md): Buffer overflow in lsmcode in AIX 4.3.3. (no CVSS)
- [CVE-2002-0749](https://cve.now/CVE-2002-0749.md): CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the form-attachment field. (no CVSS)
- [CVE-2002-0750](https://cve.now/CVE-2002-0750.md): CGIscript.net csMailto.cgi program allows remote attackers to read arbitrary files by specifying the target filename in the form-attachment (no CVSS)
- [CVE-2002-0751](https://cve.now/CVE-2002-0751.md): CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a "spam proxy" and send mail to arbitrary users via modified ( (no CVSS)
- [CVE-2002-0752](https://cve.now/CVE-2002-0752.md): CGIscript.net csMailto.cgi program exports feedback to a file that is accessible from the web document root, which could allow remote attack (no CVSS)
- [CVE-2002-0753](https://cve.now/CVE-2002-0753.md): Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie. (no CVSS)
- [CVE-2002-0756](https://cve.now/CVE-2002-0756.md): Cross-site scripting vulnerability in the authentication page for (1) Webmin 0.96 and (2) Usermin 0.90 allows remote attackers to insert scr (no CVSS)
- [CVE-2002-0757](https://cve.now/CVE-2002-0757.md): (1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass authentication and g (no CVSS)
- [CVE-2002-0763](https://cve.now/CVE-2002-0763.md): Vulnerability in administration server for HP VirtualVault 4.5 on HP-UX 11.04 allows remote web servers or privileged external processes to (no CVSS)
- [CVE-2002-0764](https://cve.now/CVE-2002-0764.md): Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php tha (no CVSS)
- [CVE-2002-0767](https://cve.now/CVE-2002-0767.md): simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a child process, which allows the child process (no CVSS)
- [CVE-2002-0769](https://cve.now/CVE-2002-0769.md): The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass authentication via an (no CVSS)
- [CVE-2002-0770](https://cve.now/CVE-2002-0770.md): Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute (no CVSS)
- [CVE-2002-0771](https://cve.now/CVE-2002-0771.md): Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the (1) c (no CVSS)
- [CVE-2002-0772](https://cve.now/CVE-2002-0772.md): Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories v (no CVSS)
- [CVE-2002-0773](https://cve.now/CVE-2002-0773.md): imp\_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to imp (no CVSS)
- [CVE-2002-0774](https://cve.now/CVE-2002-0774.md): Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the (no CVSS)
- [CVE-2002-0775](https://cve.now/CVE-2002-0775.md): browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath par (no CVSS)
- [CVE-2002-0779](https://cve.now/CVE-2002-0779.md): FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service (network connectivity loss) via a c (no CVSS)
- [CVE-2002-0780](https://cve.now/CVE-2002-0780.md): IP/IPX gateway for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a connection to port 8225 with a (no CVSS)
- [CVE-2002-0781](https://cve.now/CVE-2002-0781.md): RTSP proxy for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a GET request to port 9090 followed b (no CVSS)
- [CVE-2002-0782](https://cve.now/CVE-2002-0782.md): Novell BorderManager 3.5 with PAT (Port-Address Translate) enabled allows remote attackers to cause a denial of service by filling the conne (no CVSS)
- [CVE-2002-0783](https://cve.now/CVE-2002-0783.md): Opera 6.01, 6.0, and 5.12 allows remote attackers to execute arbitrary JavaScript in the security context of other sites by setting the loca (no CVSS)
- [CVE-2002-0784](https://cve.now/CVE-2002-0784.md): Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HTTP request with a ... (no CVSS)
- [CVE-2002-0786](https://cve.now/CVE-2002-0786.md): iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators to read arbitrary fi (no CVSS)
- [CVE-2002-0787](https://cve.now/CVE-2002-0787.md): Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 allow remote attackers (no CVSS)
- [CVE-2002-0791](https://cve.now/CVE-2002-0791.md): Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) via a connection to the (no CVSS)
- [CVE-2002-0792](https://cve.now/CVE-2002-0792.md): The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to cause a denial of service (sof (no CVSS)
- [CVE-2002-0793](https://cve.now/CVE-2002-0793.md): Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrite arbitrary files vi (no CVSS)
- [CVE-2002-0796](https://cve.now/CVE-2002-0796.md): Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gain root privileges. (no CVSS)
- [CVE-2002-0797](https://cve.now/CVE-2002-0797.md): Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges. (no CVSS)
- [CVE-2002-0798](https://cve.now/CVE-2002-0798.md): Vulnerability in swinstall for HP-UX 11.00 and 11.11 allows local users to view obtain data views for files that cannot be directly read by (no CVSS)
- [CVE-2002-0799](https://cve.now/CVE-2002-0799.md): Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argument. (no CVSS)
- [CVE-2002-0800](https://cve.now/CVE-2002-0800.md): BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at the end. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2002-07-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.