# CVEs published 2002-08-31

162 CVEs were published on August 31, 2002: 0 critical, 0 high. Days are UTC.

- [CVE-1999-1569](https://cve.now/CVE-1999-1569.md): Quake 1 and NetQuake servers allow remote attackers to cause a denial of service (resource exhaustion or forced disconnection) via a flood o (no CVSS)
- [CVE-1999-1570](https://cve.now/CVE-1999-1570.md): Buffer overflow in sar for OpenServer 5.0.5 allows local users to gain root privileges via a long -o parameter. (no CVSS)
- [CVE-2000-1204](https://cve.now/CVE-2000-1204.md): Vulnerability in the mod\_vhost\_alias virtual hosting module for Apache 1.3.9, 1.3.11 and 1.3.12 allows remote attackers to obtain the source (no CVSS)
- [CVE-2000-1205](https://cve.now/CVE-2000-1205.md): Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via (no CVSS)
- [CVE-2000-1206](https://cve.now/CVE-2000-1206.md): Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod\_rewrite, or mod\_vhost\_alias in Apache 1.3.9, (no CVSS)
- [CVE-2000-1213](https://cve.now/CVE-2000-1213.md): ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after (no CVSS)
- [CVE-2000-1214](https://cve.now/CVE-2000-1214.md): Buffer overflows in the (1) outpack or (2) buf variables of ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J (no CVSS)
- [CVE-2001-1387](https://cve.now/CVE-2001-1387.md): iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes ipta (no CVSS)
- [CVE-2001-1388](https://cve.now/CVE-2001-1388.md): iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users t (no CVSS)
- [CVE-2001-1389](https://cve.now/CVE-2001-1389.md): Multiple vulnerabilities in xinetd 2.3.0 and earlier, and additional variants until 2.3.3, may allow remote attackers to cause a denial of s (no CVSS)
- [CVE-2001-1390](https://cve.now/CVE-2001-1390.md): Unknown vulnerability in binfmt\_misc in the Linux kernel before 2.2.19, related to user pages. (no CVSS)
- [CVE-2001-1392](https://cve.now/CVE-2001-1392.md): The Linux kernel before 2.2.19 does not have unregister calls for (1) CPUID and (2) MSR drivers, which could cause a DoS (crash) by unloadin (no CVSS)
- [CVE-2001-1393](https://cve.now/CVE-2001-1393.md): Unknown vulnerability in classifier code for Linux kernel before 2.2.19 could result in denial of service (hang). (no CVSS)
- [CVE-2001-1394](https://cve.now/CVE-2001-1394.md): Signedness error in (1) getsockopt and (2) setsockopt for Linux kernel before 2.2.19 allows local users to cause a denial of service. (no CVSS)
- [CVE-2001-1395](https://cve.now/CVE-2001-1395.md): Unknown vulnerability in sockfilter for Linux kernel before 2.2.19 related to "boundary cases," with unknown impact. (no CVSS)
- [CVE-2001-1396](https://cve.now/CVE-2001-1396.md): Unknown vulnerabilities in strnlen\_user for Linux kernel before 2.2.19, with unknown impact. (no CVSS)
- [CVE-2001-1397](https://cve.now/CVE-2001-1397.md): The System V (SYS5) shared memory implementation for Linux kernel before 2.2.19 could allow attackers to modify recently freed memory. (no CVSS)
- [CVE-2001-1398](https://cve.now/CVE-2001-1398.md): Masquerading code for Linux kernel before 2.2.19 does not fully check packet lengths in certain cases, which may lead to a vulnerability. (no CVSS)
- [CVE-2001-1399](https://cve.now/CVE-2001-1399.md): Certain operations in Linux kernel before 2.2.19 on the x86 architecture copy the wrong number of bytes, which might allow attackers to modi (no CVSS)
- [CVE-2001-1400](https://cve.now/CVE-2001-1400.md): Unknown vulnerabilities in the UDP port allocation for Linux kernel before 2.2.19 could allow local users to cause a denial of service (dead (no CVSS)
- [CVE-2001-1401](https://cve.now/CVE-2001-1401.md): Bugzilla before 2.14 does not properly restrict access to confidential bugs, which could allow Bugzilla users to bypass viewing permissions (no CVSS)
- [CVE-2001-1402](https://cve.now/CVE-2001-1402.md): Bugzilla before 2.14 does not properly escape untrusted parameters, which could allow remote attackers to conduct unauthorized activities vi (no CVSS)
- [CVE-2001-1403](https://cve.now/CVE-2001-1403.md): Bugzilla before 2.14 includes the username and password in URLs, which could allow attackers to gain privileges by reading the information f (no CVSS)
- [CVE-2001-1404](https://cve.now/CVE-2001-1404.md): Bugzilla before 2.14 stores user passwords in plaintext and sends password requests in an email message, which could allow attackers to gain (no CVSS)
- [CVE-2001-1405](https://cve.now/CVE-2001-1405.md): Bugzilla before 2.14 does not restrict access to sanitycheck.cgi, which allows local users to cause a denial of service (CPU consumption) vi (no CVSS)
- [CVE-2001-1408](https://cve.now/CVE-2001-1408.md): Directory traversal vulnerability in readmsg.php in WebMail 2.0.1 in Cobalt Qube 3 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2002-0699](https://cve.now/CVE-2002-0699.md): Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, (no CVSS)
- [CVE-2002-0876](https://cve.now/CVE-2002-0876.md): Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request. (no CVSS)
- [CVE-2002-0877](https://cve.now/CVE-2002-0877.md): Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2002-0878](https://cve.now/CVE-2002-0878.md): SQL injection vulnerability in the login form for LogiSense software including (1) Hawk-i Billing, (2) Hawk-i ASP and (3) DNS Manager allows (no CVSS)
- [CVE-2002-0879](https://cve.now/CVE-2002-0879.md): showtemp.cfm for Gafware CFXImage 1.6.6 allows remote attackers to read arbitrary files via (1) a .. (no CVSS)
- [CVE-2002-0880](https://cve.now/CVE-2002-0880.md): Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allow remote attackers to cause a denial of service (crash) via malformed packets as demon (no CVSS)
- [CVE-2002-0881](https://cve.now/CVE-2002-0881.md): Cisco IP Phone (VoIP) models 7910, 7940, and 7960 use a default administrative password, which allows attackers with physical access to the (no CVSS)
- [CVE-2002-0882](https://cve.now/CVE-2002-0882.md): The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possib (no CVSS)
- [CVE-2002-0883](https://cve.now/CVE-2002-0883.md): Vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10, allows authenticated users with Telnet, SSH, or console a (no CVSS)
- [CVE-2002-0884](https://cve.now/CVE-2002-0884.md): Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating sys (no CVSS)
- [CVE-2002-0885](https://cve.now/CVE-2002-0885.md): Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera UnixWare and Open UNIX (no CVSS)
- [CVE-2002-0886](https://cve.now/CVE-2002-0886.md): Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service (hang or memory consumption) via ( (no CVSS)
- [CVE-2002-0888](https://cve.now/CVE-2002-0888.md): 3Com OfficeConnect Remote 812 ADSL Router, firmware 1.1.9 and 1.1.7, allows remote attackers to bypass port access restrictions by connectin (no CVSS)
- [CVE-2002-0893](https://cve.now/CVE-2002-0893.md): Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files via a URL-encoded requ (no CVSS)
- [CVE-2002-0894](https://cve.now/CVE-2002-0894.md): NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service (crash) via (1) a request for a long .jsp file, or (2) (no CVSS)
- [CVE-2002-0896](https://cve.now/CVE-2002-0896.md): The throttle capability in Swatch may fail to report certain events if (1) the same type of event occurs after the throttle period, or (2) w (no CVSS)
- [CVE-2002-0899](https://cve.now/CVE-2002-0899.md): Falcon web server 2.0.0.1021 and earlier allows remote attackers to bypass access restrictions for protected files via a URL whose directory (no CVSS)
- [CVE-2002-0901](https://cve.now/CVE-2002-0901.md): Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow (1) remote attackers to execute arbitr (no CVSS)
- [CVE-2002-0902](https://cve.now/CVE-2002-0902.md): Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a (no CVSS)
- [CVE-2002-0903](https://cve.now/CVE-2002-0903.md): register.php for WoltLab Burning Board (wbboard) 1.1.1 uses a small number of random values for the "code" parameter that is provided to act (no CVSS)
- [CVE-2002-0905](https://cve.now/CVE-2002-0905.md): Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR environment variable. (no CVSS)
- [CVE-2002-0907](https://cve.now/CVE-2002-0907.md): Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server (no CVSS)
- [CVE-2002-0908](https://cve.now/CVE-2002-0908.md): Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to read arbitrary file (no CVSS)
- [CVE-2002-0909](https://cve.now/CVE-2002-0909.md): Multiple buffer overflows in mnews 1.22 and earlier allow (1) a remote NNTP server to execute arbitrary code via long responses, or local us (no CVSS)
- [CVE-2002-0910](https://cve.now/CVE-2002-0910.md): Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, as observed in the uti (no CVSS)
- [CVE-2002-0912](https://cve.now/CVE-2002-0912.md): in.uucpd UUCP server in Debian GNU/Linux 2.2, and possibly other operating systems, does not properly terminate long strings, which allows r (no CVSS)
- [CVE-2002-0913](https://cve.now/CVE-2002-0913.md): Format string vulnerability in log\_doit function of Slurp NNTP client 1.1.0 allows a malicious news server to execute arbitrary code on the (no CVSS)
- [CVE-2002-0915](https://cve.now/CVE-2002-0915.md): autorun in Xandros based Linux distributions allows local users to read the first line of arbitrary files via the -c parameter, which causes (no CVSS)
- [CVE-2002-0917](https://cve.now/CVE-2002-0917.md): CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download th (no CVSS)
- [CVE-2002-0918](https://cve.now/CVE-2002-0918.md): CGIScript.net csPassword.cgi leaks sensitive information such as the pathname of the server in debug messages that are presented when the sc (no CVSS)
- [CVE-2002-0919](https://cve.now/CVE-2002-0919.md): CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newlines in the title fi (no CVSS)
- [CVE-2002-0920](https://cve.now/CVE-2002-0920.md): CGIScript.net csPassword.cgi stores usernames and unencrypted passwords in the password.cgi.tmp temporary file while modifying data, which c (no CVSS)
- [CVE-2002-0921](https://cve.now/CVE-2002-0921.md): CGIScript.net csNews.cgi allows remote attackers to obtain potentially sensitive information, such as the full server pathname and other con (no CVSS)
- [CVE-2002-0922](https://cve.now/CVE-2002-0922.md): CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) defaul (no CVSS)
- [CVE-2002-0923](https://cve.now/CVE-2002-0923.md): CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the (1) pheader or (2) (no CVSS)
- [CVE-2002-0924](https://cve.now/CVE-2002-0924.md): CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quotes and metacharacters in text (no CVSS)
- [CVE-2002-0925](https://cve.now/CVE-2002-0925.md): Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via (1) the USER command to mmpop3d for m (no CVSS)
- [CVE-2002-0926](https://cve.now/CVE-2002-0926.md): Directory traversal vulnerability in Wolfram Research webMathematica 1.0.0 and 1.0.0.1 allows remote attackers to read arbitrary files via a (no CVSS)
- [CVE-2002-0928](https://cve.now/CVE-2002-0928.md): Buffer overflow in the Pirch 98 IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary code via a lo (no CVSS)
- [CVE-2002-0929](https://cve.now/CVE-2002-0929.md): Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service (reboot) via long DHCP requests. (no CVSS)
- [CVE-2002-0930](https://cve.now/CVE-2002-0930.md): Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 (NWFTPD) allows remote attackers to cause a denial of service (ABEN (no CVSS)
- [CVE-2002-0931](https://cve.now/CVE-2002-0931.md): Cross-site scripting vulnerabilities in MyHelpDesk 20020509, and possibly other versions, allows remote attackers to execute script as other (no CVSS)
- [CVE-2002-0932](https://cve.now/CVE-2002-0932.md): SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthoriz (no CVSS)
- [CVE-2002-0933](https://cve.now/CVE-2002-0933.md): Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain (no CVSS)
- [CVE-2002-0934](https://cve.now/CVE-2002-0934.md): Directory traversal vulnerability in Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) allows remote attackers to read (no CVSS)
- [CVE-2002-0936](https://cve.now/CVE-2002-0936.md): The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the web server via a JSP (no CVSS)
- [CVE-2002-0937](https://cve.now/CVE-2002-0937.md): The Java Server Pages (JSP) engine in JRun allows web page owners to cause a denial of service (engine crash) on the web server via a JSP pa (no CVSS)
- [CVE-2002-0939](https://cve.now/CVE-2002-0939.md): The Install Wizard for nCipher MSCAPI CSP 5.50 does not use Operator Card Set protected keys when the user requests them but does not genera (no CVSS)
- [CVE-2002-0940](https://cve.now/CVE-2002-0940.md): domesticinstall.exe for nCipher MSCAPI CSP 5.50 and 5.54 does not use Operator Card Set protected keys when the user requests them but does (no CVSS)
- [CVE-2002-0942](https://cve.now/CVE-2002-0942.md): Buffer overflows in Lugiment Log Explorer before 3.02 allow attackers with database permissions to execute arbitrary code via long arguments (no CVSS)
- [CVE-2002-0943](https://cve.now/CVE-2002-0943.md): MetaCart2.sql stores the user database under the web document root without access controls, which allows remote attackers to obtain sensitiv (no CVSS)
- [CVE-2002-0944](https://cve.now/CVE-2002-0944.md): Cross-site scripting vulnerability in DeepMetrix LiveStats 5.03 through 6.2.1 allows remote attackers to execute arbitrary script as the Liv (no CVSS)
- [CVE-2002-0948](https://cve.now/CVE-2002-0948.md): Scripts For Educators MakeBook 2.2 CGI program allows remote attackers to execute script as other visitors, or execute server-side includes (no CVSS)
- [CVE-2002-0949](https://cve.now/CVE-2002-0949.md): Telindus 1100 series ADSL router allows remote attackers to gain privileges to the device via a certain packet to UDP port 9833, which gener (no CVSS)
- [CVE-2002-0950](https://cve.now/CVE-2002-0950.md): Cross-site scripting vulnerability in TransWARE Active! mail 1.422 and 2.0 allows remote attackers to execute arbitrary code via a certain e (no CVSS)
- [CVE-2002-0951](https://cve.now/CVE-2002-0951.md): SQL injection vulnerability in Ruslan \<Body\>Builder allows remote attackers to gain administrative privileges via a "'--" sequence in the us (no CVSS)
- [CVE-2002-0954](https://cve.now/CVE-2002-0954.md): The encryption algorithms for enable and passwd commands on Cisco PIX Firewall can be executed quickly due to a limited number of rounds, wh (no CVSS)
- [CVE-2002-0955](https://cve.now/CVE-2002-0955.md): Cross-site scripting vulnerability in YaBB.cgi for Yet Another Bulletin Board (YaBB) 1 Gold SP1 and earlier allows remote attackers to execu (no CVSS)
- [CVE-2002-0956](https://cve.now/CVE-2002-0956.md): BlackICE Agent 3.1.eal does not always reactivate after a system standby, which could allow remote attackers and local users to bypass inten (no CVSS)
- [CVE-2002-0957](https://cve.now/CVE-2002-0957.md): The default configuration of BlackICE Agent 3.1.eal and 3.1.ebh has a high tcp.maxconnections setting, which could allow remote attackers to (no CVSS)
- [CVE-2002-0959](https://cve.now/CVE-2002-0959.md): Cross-site scripting vulnerability in Splatt Forum 3.0 allows remote attackers to execute arbitrary script as other users via an \[img\] tag w (no CVSS)
- [CVE-2002-0960](https://cve.now/CVE-2002-0960.md): Multiple cross-site scripting vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allows remote attackers to execute arbitrary script as o (no CVSS)
- [CVE-2002-0961](https://cve.now/CVE-2002-0961.md): Vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allow remote attackers to conduct unauthorized operations as other users, e.g. (no CVSS)
- [CVE-2002-0962](https://cve.now/CVE-2002-0962.md): Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script via (1) the url variabl (no CVSS)
- [CVE-2002-0963](https://cve.now/CVE-2002-0963.md): SQL injection vulnerability in comment.php for GeekLog 1.3.5 and earlier allows remote attackers to obtain sensitive user information via th (no CVSS)
- [CVE-2002-0966](https://cve.now/CVE-2002-0966.md): Buffer overflow in 4D web server 6.7.3 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long HT (no CVSS)
- [CVE-2002-0991](https://cve.now/CVE-2002-0991.md): Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier, based on the Sharity package, allows local users to g (no CVSS)
- [CVE-2002-0992](https://cve.now/CVE-2002-0992.md): Unknown vulnerability in IPV6 functionality for DCE daemons (1) dced or (2) rpcd on HP-UX 11.11 allows attackers to cause a denial of servic (no CVSS)
- [CVE-2002-0993](https://cve.now/CVE-2002-0993.md): Unknown vulnerability in HP Instant Support Enterprise Edition (ISEE) product U2512A for HP-UX 11.00 and 11.11 may allow authenticated users (no CVSS)
- [CVE-2002-0994](https://cve.now/CVE-2002-0994.md): SunPCi II VNC uses a weak authentication scheme, which allows remote attackers to obtain the VNC password by sniffing the random byte challe (no CVSS)
- [CVE-2002-0996](https://cve.now/CVE-2002-0996.md): Multiple buffer overflows in Novell NetMail (NIMS) 3.0.3 before 3.0.3C allows remote attackers to cause a denial of service and possibly exe (no CVSS)
- [CVE-2002-0997](https://cve.now/CVE-2002-0997.md): Buffer overflows in IMAP Agent (imapd) for Novell NetMail (NIMS) 3.0.3 before 3.0.3A allows remote attackers to cause a denial of service. (no CVSS)
- [CVE-2002-0998](https://cve.now/CVE-2002-0998.md): Directory traversal vulnerability in cafenews.php for CARE 2002 before beta 1.0.02 allows remote attackers to read arbitrary files via .. (no CVSS)
- [CVE-2002-0999](https://cve.now/CVE-2002-0999.md): Multiple SQL injection vulnerabilities in CARE 2002 before beta 1.0.02 allow remote attackers to perform unauthorized database operations. (no CVSS)
- [CVE-2002-1001](https://cve.now/CVE-2002-1001.md): Buffer overflows in AnalogX Proxy before 4.12 allows remote attackers to cause a denial of service and possibly execute arbitrary code via ( (no CVSS)
- [CVE-2002-1003](https://cve.now/CVE-2002-1003.md): Buffer overflow in MyWebServer 1.02 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request. (no CVSS)
- [CVE-2002-1005](https://cve.now/CVE-2002-1005.md): ArGoSoft Mail Server 1.8.1.7 and earlier allows a webmail user to cause a denial of service (CPU consumption) by forwarding the email to the (no CVSS)
- [CVE-2002-1007](https://cve.now/CVE-2002-1007.md): Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via (1) the course\_id parameter (no CVSS)
- [CVE-2002-1008](https://cve.now/CVE-2002-1008.md): Cross-site scripting vulnerability in PowerBASIC urlcount.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbit (no CVSS)
- [CVE-2002-1009](https://cve.now/CVE-2002-1009.md): Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2002-1010](https://cve.now/CVE-2002-1010.md): Lotus Domino R4 allows remote attackers to bypass access restrictions for files in the web root via an HTTP request appended with a "?" char (no CVSS)
- [CVE-2002-1011](https://cve.now/CVE-2002-1011.md): Buffer overflow in web server for Tivoli Management Framework (TMF) Endpoint 3.6.x through 3.7.1, before Fixpack 2, allows remote attackers (no CVSS)
- [CVE-2002-1012](https://cve.now/CVE-2002-1012.md): Buffer overflow in web server for Tivoli Management Framework (TMF) ManagedNode 3.6.x through 3.7.1 allows remote attackers to cause a denia (no CVSS)
- [CVE-2002-1016](https://cve.now/CVE-2002-1016.md): Adobe eBook Reader allows a user to bypass restrictions for copy, print, lend, and give operations by backing up key data files, performing (no CVSS)
- [CVE-2002-1017](https://cve.now/CVE-2002-1017.md): Adobe eBook Reader 2.1 and 2.2 allows a user to copy eBooks to other systems by using the backup feature, capturing the encryption Challenge (no CVSS)
- [CVE-2002-1018](https://cve.now/CVE-2002-1018.md): The library feature for Adobe Content Server 3.0 does not verify if a customer has already checked out an eBook, which allows remote attacke (no CVSS)
- [CVE-2002-1019](https://cve.now/CVE-2002-1019.md): The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook for an arbitrary length of time via a modifi (no CVSS)
- [CVE-2002-1020](https://cve.now/CVE-2002-1020.md): The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook even when the maximum number of loans is exc (no CVSS)
- [CVE-2002-1021](https://cve.now/CVE-2002-1021.md): BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a hex-encoded null byte. (no CVSS)
- [CVE-2002-1022](https://cve.now/CVE-2002-1022.md): BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges. (no CVSS)
- [CVE-2002-1023](https://cve.now/CVE-2002-1023.md): BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET request without a URI. (no CVSS)
- [CVE-2002-1026](https://cve.now/CVE-2002-1026.md): Macromedia Sitespring 1.2.0 (277.1) using Sybase runtime engine 7.0.2.1480 allows remote attackers to cause a denial of service (crash) via (no CVSS)
- [CVE-2002-1027](https://cve.now/CVE-2002-1027.md): Cross-site scripting vulnerability in the default HTTP 500 error script (500error.jsp) for Macromedia Sitespring 1.2.0 (277.1) allows remote (no CVSS)
- [CVE-2002-1028](https://cve.now/CVE-2002-1028.md): Multiple buffer overflows in the CGI programs for Oddsock Song Requester WinAmp plugin 2.1 allow remote attackers to cause a denial of servi (no CVSS)
- [CVE-2002-1029](https://cve.now/CVE-2002-1029.md): Res Manager in Worldspan for Windows Gateway 4.1 allows remote attackers to cause a denial of service (crash) via a malformed request to TCP (no CVSS)
- [CVE-2002-1032](https://cve.now/CVE-2002-1032.md): Buffer overflow in KeyFocus (KF) web server 1.0.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbi (no CVSS)
- [CVE-2002-1033](https://cve.now/CVE-2002-1033.md): Directory traversal vulnerability in none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via a "..:" sequence (no CVSS)
- [CVE-2002-1034](https://cve.now/CVE-2002-1034.md): none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via an absolute pathname in the argument. (no CVSS)
- [CVE-2002-1036](https://cve.now/CVE-2002-1036.md): Cross-site scripting vulnerability in search.pl for Fluid Dynamics Search Engine (FDSE) before 2.0.0.0055 allows remote attackers to execute (no CVSS)
- [CVE-2002-1037](https://cve.now/CVE-2002-1037.md): Cross-site scripting vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to inject arbitrary HTML, including s (no CVSS)
- [CVE-2002-1038](https://cve.now/CVE-2002-1038.md): Double Choco Latte (DCL) before 20020706 does not properly verify if a file was uploaded, which allows remote attackers to conduct certain o (no CVSS)
- [CVE-2002-1040](https://cve.now/CVE-2002-1040.md): Unknown vulnerability in the WebSecure (DFSWeb) configuration utilities in AIX 4.x, possibly related to relative pathnames. (no CVSS)
- [CVE-2002-1041](https://cve.now/CVE-2002-1041.md): Unknown vulnerability in DCE (1) SMIT panels and (2) configuration commands, possibly related to relative pathnames. (no CVSS)
- [CVE-2002-1042](https://cve.now/CVE-2002-1042.md): Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when runn (no CVSS)
- [CVE-2002-1043](https://cve.now/CVE-2002-1043.md): Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) via a malformed Subject ("\\t\\t"). (no CVSS)
- [CVE-2002-1044](https://cve.now/CVE-2002-1044.md): Buffer overflow in Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code v (no CVSS)
- [CVE-2002-1045](https://cve.now/CVE-2002-1045.md): Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) via a malformed Date field that is converted into a year (no CVSS)
- [CVE-2002-1047](https://cve.now/CVE-2002-1047.md): The FTP service in Watchguard Soho Firewall 5.0.35a allows remote attackers to gain privileges with a correct password but an incorrect user (no CVSS)
- [CVE-2002-1048](https://cve.now/CVE-2002-1048.md): HP JetDirect printers allow remote attackers to obtain the administrative password for the (1) web and (2) telnet services via an SNMP reque (no CVSS)
- [CVE-2002-1052](https://cve.now/CVE-2002-1052.md): Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to (1) cause a denial of service using t (no CVSS)
- [CVE-2002-1055](https://cve.now/CVE-2002-1055.md): Buffer overflow in administrative web server for Brother NC-3100h printer allows remote attackers to cause a denial of service via a long pa (no CVSS)
- [CVE-2002-1058](https://cve.now/CVE-2002-1058.md): Directory traversal vulnerability in splashAdmin.php for Cobalt Qube 3.0 allows local users and remote attackers, to gain privileges as the (no CVSS)
- [CVE-2002-1061](https://cve.now/CVE-2002-1061.md): Multiple buffer overflows in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allow remote attackers to cause a denial of (no CVSS)
- [CVE-2002-1062](https://cve.now/CVE-2002-1062.md): Signedness error in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to execute arbitrary code via (no CVSS)
- [CVE-2002-1063](https://cve.now/CVE-2002-1063.md): Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to cause a denial of service (resource exhaustion (no CVSS)
- [CVE-2002-1064](https://cve.now/CVE-2002-1064.md): Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, generates different responses for valid and invalid usernames, which allo (no CVSS)
- [CVE-2002-1065](https://cve.now/CVE-2002-1065.md): Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, does not restrict the number of unsuccessful login attempts, which makes (no CVSS)
- [CVE-2002-1066](https://cve.now/CVE-2002-1066.md): Thomas Hauck Jana Server 1.4.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a la (no CVSS)
- [CVE-2002-1067](https://cve.now/CVE-2002-1067.md): Administrative web interface for IC9 Pocket Print Server Firmware 7.1.30 and 7.1.36f allows remote attackers to cause a denial of service (r (no CVSS)
- [CVE-2002-1068](https://cve.now/CVE-2002-1068.md): The web server for D-Link DP-300 print server allows remote attackers to cause a denial of service (hang) via a large HTTP POST request. (no CVSS)
- [CVE-2002-1069](https://cve.now/CVE-2002-1069.md): The remote administration capability for the D-Link DI-804 router 4.68 allows remote attackers to bypass authentication and release DHCP add (no CVSS)
- [CVE-2002-1070](https://cve.now/CVE-2002-1070.md): Cross-site scripting vulnerability in PHPWiki Postnuke wiki module allows remote attackers to execute script as other PHPWiki users via the (no CVSS)
- [CVE-2002-1071](https://cve.now/CVE-2002-1071.md): ZyXEL Prestige 642R allows remote attackers to cause a denial of service in the Telnet, FTP, and DHCP services (crash) via a TCP packet with (no CVSS)
- [CVE-2002-1072](https://cve.now/CVE-2002-1072.md): ZyXEL Prestige 642R 2.50(FA.1) and Prestige 310 V3.25(M.01), allows remote attackers to cause a denial of service via an oversized, fragment (no CVSS)
- [CVE-2002-1073](https://cve.now/CVE-2002-1073.md): Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via a long password. (no CVSS)
- [CVE-2002-1075](https://cve.now/CVE-2002-1075.md): Buffer overflow in Pegasus mail client 4.01 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute ar (no CVSS)
- [CVE-2002-1077](https://cve.now/CVE-2002-1077.md): IPSwitch IMail Web Calendaring service (iwebcal) allows remote attackers to cause a denial of service (crash) via an HTTP POST request witho (no CVSS)
- [CVE-2002-1078](https://cve.now/CVE-2002-1078.md): Abyss Web Server 1.0.3 allows remote attackers to list directory contents via an HTTP GET request that ends in a large number of / (slash) c (no CVSS)
- [CVE-2002-1080](https://cve.now/CVE-2002-1080.md): The Administration console for Abyss Web Server 1.0.3 before Patch 2 allows remote attackers to gain privileges and modify server configurat (no CVSS)
- [CVE-2002-1082](https://cve.now/CVE-2002-1082.md): The Image Upload capability for ezContents 1.40 and earlier allows remote attackers to cause ezContents to perform operations on local files (no CVSS)
- [CVE-2002-1083](https://cve.now/CVE-2002-1083.md): Directory traversal vulnerabilities in ezContents 1.41 and earlier allow remote attackers to cause ezContents to (1) create directories usin (no CVSS)
- [CVE-2002-1084](https://cve.now/CVE-2002-1084.md): The VerifyLogin function in ezContents 1.41 and earlier does not properly halt program execution if a user fails to log in properly, which a (no CVSS)
- [CVE-2002-1085](https://cve.now/CVE-2002-1085.md): Multiple cross-site scripting vulnerabilities in ezContents 1.41 and earlier allow remote attackers to execute script and steal cookies via (no CVSS)
- [CVE-2002-1086](https://cve.now/CVE-2002-1086.md): Multiple SQL injection vulnerabilities in ezContents 1.41 and earlier allow remote attackers to conduct unauthorized activities. (no CVSS)
- [CVE-2002-1087](https://cve.now/CVE-2002-1087.md): The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allo (no CVSS)
- [CVE-2002-1089](https://cve.now/CVE-2002-1089.md): rwcgi60 CGI program in Oracle Reports Server, by design, provides sensitive information such as the full pathname, which could enable remote (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2002-08-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.