CVE-2002-0787

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 allow remote attackers to execute script as the administrator via administrator URLs with modified (1) LOCID or (2) OC parameters.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0068.htmlPatch, Vendor Advisory
http://www.iss.net/security_center/static/9053.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/4717Exploit, Patch, Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0068.htmlPatch, Vendor Advisory
http://www.iss.net/security_center/static/9053.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/4717Exploit, Patch, Vendor Advisory

Timeline

Published: Aug 12, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-07885.5An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext CVE-2002-07897.5Buffer overflow in search.cgi in mnoGoSearch 3.1.19 and earlier allows remote attackers to execute arbitrary code via a long query (q) param CVE-2002-07902.1clchkspuser and clpasswdremote in AIX expose an encrypted password in the cspoc.log file, which could allow local users to gain privileges.CVE-2002-07915.0Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) via a connection to the CVE-2002-07925.0The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to cause a denial of service (sof CVE-2002-07935.5Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrite arbitrary files vi CVE-2002-07945.0The accept_filter mechanism in FreeBSD 4 through 4.5 does not properly remove entries from the incomplete listen queue when adding a syncach CVE-2002-07952.1The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attack on X Windows lock f CVE-2002-079610.0Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gain root privileges.CVE-2002-079710.0Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges.CVE-2002-07982.1Vulnerability in swinstall for HP-UX 11.00 and 11.11 allows local users to view obtain data views for files that cannot be directly read by CVE-2002-07997.5Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argument.