# CVEs published 2002-07-31 10 CVEs were published on July 31, 2002: 0 critical, 0 high. Days are UTC. - [CVE-2000-1207](https://cve.now/CVE-2000-1207.md): userhelper in the usermode package on Red Hat Linux executes non-setuid programs as root, which does not activate the security measures in g (no CVSS) - [CVE-2001-1384](https://cve.now/CVE-2001-1384.md): ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or s (no CVSS) - [CVE-2002-0655](https://cve.now/CVE-2002-0655.md): OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, whi (no CVSS) - [CVE-2002-0656](https://cve.now/CVE-2002-0656.md): Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a larg (no CVSS) - [CVE-2002-0657](https://cve.now/CVE-2002-0657.md): Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master key (no CVSS) - [CVE-2002-0659](https://cve.now/CVE-2002-0659.md): The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invali (no CVSS) - [CVE-2002-0684](https://cve.now/CVE-2002-0684.md): Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2. (no CVSS) - [CVE-2002-0803](https://cve.now/CVE-2002-0803.md): Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows remote attackers to display restricted products and components via a direct HTT (no CVSS) - [CVE-2002-0807](https://cve.now/CVE-2002-0807.md): Cross-site scripting vulnerabilities in Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, could allow remote attackers to execute script (no CVSS) - [CVE-2002-0811](https://cve.now/CVE-2002-0811.md): Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, may allow remote attackers to cause a denial of service or execute certain queries via (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2002-07-31 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.