CVE-2002-0387

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in gxnsapi6.dll NSAPI plugin of the Connector Module for Sun ONE Application Server before 6.5 allows remote attackers to execute arbitrary code via a long HTTP request URL.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Mar 18, 2003
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2002

CVE-2002-03887.5Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via (1) the admin login page, or (2) CVE-2002-03892.1Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allows local users to reCVE-2002-03919.8Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including diCVE-2002-03927.5Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrarCVE-2002-039310.0Buffer overflow in Red-M 1050 (Bluetooth Access Point) management web interface allows remote attackers to cause a denial of service and posCVE-2002-039410.0Red-M 1050 (Bluetooth Access Point) uses case insensitive passwords, which makes it easier for attackers to conduct a brute force guessing aCVE-2002-039510.0The TFTP server for Red-M 1050 (Bluetooth Access Point) can not be disabled and makes it easier for remote attackers to crack the administraCVE-2002-03967.5The web management server for Red-M 1050 (Bluetooth Access Point) does not use session-based credentials to authenticate users, which allowsCVE-2002-03975.0Red-M 1050 (Bluetooth Access Point) publicizes its name, IP address, and other information in UDP packets to a broadcast address, which alloCVE-2002-039810.0Red-M 1050 (Bluetooth Access Point) PPP server allows bonded users to cause a denial of service and possibly execute arbitrary code via a loCVE-2002-03995.0Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to overwrite arbitrary fCVE-2002-04005.0ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error co
CVE-2002-0387: High severity, CVSS 7.5 | Vulnix