CVE-2002-0098

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in index.cgi administration interface for Boozt! Standard 0.9.8 allows local users to execute arbitrary code via a long name field when creating a new banner.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=101027773404836&w=2
http://online.securityfocus.com/archive/1/249219Exploit
http://online.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3787Exploit, Patch, Vendor Advisory
http://www.boozt.com/news_detail.php?id=3
http://www.iss.net/security_center/static/7790.phpVendor Advisory
http://marc.info/?l=bugtraq&m=101027773404836&w=2
http://online.securityfocus.com/archive/1/249219Exploit
http://online.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3787Exploit, Patch, Vendor Advisory
http://www.boozt.com/news_detail.php?id=3
http://www.iss.net/security_center/static/7790.phpVendor Advisory

Timeline

Published: Mar 25, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-00995.0Buffer overflow in Michael Lamont Savant Web Server 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP request CVE-2002-01007.5AOL AOLserver 3.4.2 Win32 allows remote attackers to bypass authentication and read password-protected files via a URL that directly referen CVE-2002-01015.0Microsoft Internet Explorer 6.0 and earlier allows local users to cause a denial of service via an infinite loop for modeless dialogs showMo CVE-2002-01025.0Oracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via (1) a request to TCP ports 1100, 4000, 4001, and 4002 CVE-2002-01034.6An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows loc CVE-2002-01045.0AFTPD 5.4.4 allows remote attackers to gain sensitive information via a CD (CWD) ~ (tilde) command, which causes a core dump.CVE-2002-01057.2CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /CVE-2002-01065.0BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an CVE-2002-01075.0Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of CVE-2002-01087.5Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the h CVE-2002-01096.4Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information CVE-2002-01102.1Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plaintext in a .ini file,