# CVEs published 2002-12-17

11 CVEs were published on December 17, 2002: 0 critical, 0 high. Days are UTC.

- [CVE-2002-1258](https://cve.now/CVE-2002-1258.md): Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer and other application (no CVSS)
- [CVE-2002-1345](https://cve.now/CVE-2002-1345.md): Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files (no CVSS)
- [CVE-2002-1355](https://cve.now/CVE-2002-1355.md): Multiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a denial of service (i (no CVSS)
- [CVE-2002-1356](https://cve.now/CVE-2002-1356.md): Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed pa (no CVSS)
- [CVE-2002-1357](https://cve.now/CVE-2002-1357.md): Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote a (no CVSS)
- [CVE-2002-1358](https://cve.now/CVE-2002-1358.md): Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a d (no CVSS)
- [CVE-2002-1359](https://cve.now/CVE-2002-1359.md): Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial o (no CVSS)
- [CVE-2002-1360](https://cve.now/CVE-2002-1360.md): Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a lengt (no CVSS)
- [CVE-2002-1376](https://cve.now/CVE-2002-1376.md): libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (no CVSS)
- [CVE-2002-1378](https://cve.now/CVE-2002-1378.md): Multiple buffer overflows in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allow remote attackers to execute arbitrary code via (1) long -t or -r (no CVSS)
- [CVE-2002-1379](https://cve.now/CVE-2002-1379.md): OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads the .ldaprc file with (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2002-12-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.