# CVEs published 2002-09-24

6 CVEs were published on September 24, 2002: 0 critical, 0 high. Days are UTC.

- [CVE-2002-1127](https://cve.now/CVE-2002-1127.md): Buffer overflow in uucp in Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long source (-s) command line parameter. (no CVSS)
- [CVE-2002-1128](https://cve.now/CVE-2002-1128.md): Buffer overflow in inc mail utility for Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long MH environment variabl (no CVSS)
- [CVE-2002-1129](https://cve.now/CVE-2002-1129.md): Buffer overflow in dxterm allows local users to execute arbitrary code via a long -xrm argument. (no CVSS)
- [CVE-2002-1131](https://cve.now/CVE-2002-1131.md): Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) (no CVSS)
- [CVE-2002-1133](https://cve.now/CVE-2002-1133.md): Encoded directory traversal vulnerability in Dino's web server 2.1 allows remote attackers to read arbitrary files via ".." (dot dot) sequen (no CVSS)
- [CVE-2002-1134](https://cve.now/CVE-2002-1134.md): Unknown vulnerability in Compaq WEBES Service Tools 2.0 through WEBES 4.0 (Service Pack 5) allows local users to read privileged files. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2002-09-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.