CVE-2002-0789

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in search.cgi in mnoGoSearch 3.1.19 and earlier allows remote attackers to execute arbitrary code via a long query (q) parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2002-05/0092.html
http://www.iss.net/security_center/static/9060.phpPatch, Vendor Advisory
http://www.mnogosearch.org/Download/mnogosearch-3.1.20.tar.gz
http://www.mnogosearch.org/history.html#log31
http://www.securityfocus.com/bid/4724Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-05/0092.html
http://www.iss.net/security_center/static/9060.phpPatch, Vendor Advisory
http://www.mnogosearch.org/Download/mnogosearch-3.1.20.tar.gz
http://www.mnogosearch.org/history.html#log31
http://www.securityfocus.com/bid/4724Patch, Vendor Advisory

Timeline

Published: Aug 12, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-07902.1clchkspuser and clpasswdremote in AIX expose an encrypted password in the cspoc.log file, which could allow local users to gain privileges.CVE-2002-07915.0Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) via a connection to the CVE-2002-07925.0The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to cause a denial of service (sof CVE-2002-07935.5Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrite arbitrary files vi CVE-2002-07945.0The accept_filter mechanism in FreeBSD 4 through 4.5 does not properly remove entries from the incomplete listen queue when adding a syncach CVE-2002-07952.1The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attack on X Windows lock f CVE-2002-079610.0Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gain root privileges.CVE-2002-079710.0Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges.CVE-2002-07982.1Vulnerability in swinstall for HP-UX 11.00 and 11.11 allows local users to view obtain data views for files that cannot be directly read by CVE-2002-07997.5Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argument.CVE-2002-08005.0BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at the end.CVE-2002-080110.0Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to th