2002 CVE Vulnerabilities

2,393 CVEs published in 2002.

CVE IDSeverityCVSSDescription
CVE-2002-0202——PaintBBS 1.2 installs certain files and directories with insecure permissions, which allows local users to (1) obtain th...
CVE-2002-0201——Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service (crash) and possibly execute a...
CVE-2002-0231——Buffer overflow in mIRC 5.91 and earlier allows a remote server to execute arbitrary code on the client via a long nickn...
CVE-2002-0207——Buffer overflow in Real Networks RealPlayer 8.0 and earlier allows remote attackers to execute arbitrary code via a head...
CVE-2002-0211——Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable tempor...
CVE-2002-0206——index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers...
CVE-2002-0226——retrieve_password.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remo...
CVE-2002-0214——Compaq Intel PRO/Wireless 2011B LAN USB Device Driver 1.5.16.0 through 1.5.18.0 stores the 128-bit WEP (Wired Equivalent...
CVE-2002-0197——psyBNC 2.3 beta and earlier allows remote attackers to spoof encrypted, trusted messages by sending lines that begin wit...
CVE-2002-0215——Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi f...
CVE-2002-0218——Format string vulnerability in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 a...
CVE-2002-0157——Nautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the .nautilus-metafil...
CVE-2002-0219——Buffer overflow in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allow...
CVE-2002-0220——phpsmssend.php in PhpSmsSend 1.0 allows remote attackers to execute arbitrary commands via an SMS message containing she...
CVE-2002-0221——Etype Eserv 2.97 allows remote attackers to cause a denial of service (resource exhaustion) via a large number of PASV c...
CVE-2002-0223——Infopop UBB.Threads 5.4 and Wired Community Software WWWThreads 5.0 through 5.0.9 allows remote attackers to upload arbi...
CVE-2002-0222——Etype Eserv 2.97 allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command.
CVE-2002-1056——Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that ...
CVE-2002-0172——/dev/ipfilter on SGI IRIX 6.5 is installed by /dev/MAKEDEV with insecure default permissions (644), which could allow a ...
CVE-2002-0171——IRISconsole 2.0 may allow users to log into the icadmin account with an incorrect password in some circumstances, which ...
CVE-2002-0154——Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote attackers to cause a d...
CVE-2002-0224——The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL ...
CVE-2002-1592——The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages...
CVE-2002-1602——Buffer overflow in the Braille module for GNU screen 3.9.11, when HAVE_BRAILLE is defined, allows local users to execute...
CVE-2002-0148——Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to exec...

Check if your code is affected by 2002 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now