# CVEs published 2002-10-01

8 CVEs were published on October 1, 2002: 0 critical, 0 high. Days are UTC.

- [CVE-2002-0399](https://cve.now/CVE-2002-0399.md): Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to overwrite arbitrary f (no CVSS)
- [CVE-2002-0838](https://cve.now/CVE-2002-0838.md): Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kde (no CVSS)
- [CVE-2002-0863](https://cve.now/CVE-2002-0863.md): Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext sessi (no CVSS)
- [CVE-2002-1149](https://cve.now/CVE-2002-1149.md): The installation procedure for Invision Board suggests that users install the phpinfo.php program under the web root, which leaks sensitive (no CVSS)
- [CVE-2002-1150](https://cve.now/CVE-2002-1150.md): The Remote Desktop Sharing (RDS) Screen Saver Protection capability for Microsoft NetMeeting 3.01 through SP2 (4.4.3396) allows attackers wi (no CVSS)
- [CVE-2002-1166](https://cve.now/CVE-2002-1166.md): Buffer overflow in John Franks WN Server 1.18.2 through 2.0.0 allows remote attackers to execute arbitrary code via a long GET request. (no CVSS)
- [CVE-2002-1174](https://cve.now/CVE-2002-1174.md): Buffer overflows in Fetchmail 6.0.0 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1 (no CVSS)
- [CVE-2002-1175](https://cve.now/CVE-2002-1175.md): The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a mal (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2002-10-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.