Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2002-1394
Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148.
Affected Products: n/a
References: [{'name': 'GLSA-200210-001', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://marc.info/?l=bugtraq&m=103470282514938&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://marc.info/?l=tomcat-dev&m=103417249325526&w=2'}, {'name': 'DSA-225', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-225'}, {'name': 'RHSA-2003:075', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-075.html'}, {'name': '6562', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6562'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://issues.apache.org/bugzilla/show_bug.cgi?id=13365'}, {'name': 'RHSA-2003:082', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-082.html'}, {'name': 'tomcat-invoker-source-code(10376)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10376'}, {'name': '[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E'}, {'name': '[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E'}, {'name': '[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E'}]
CVE State: PUBLISHED
Explain CVE-2002-1395
Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obtain unauthorized directory permissions via a temporary directory used by impwagent, and (2) overwrite and create arbitrary files via immknmz.
Affected Products: n/a
References: [{'name': 'DSA-202', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-202'}, {'name': 'im-impwagent-insecure-directory(10766)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10766.php'}, {'name': '6307', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6307'}, {'name': '8242', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8242'}, {'name': '8166', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8166'}, {'name': 'im-immknmz-symlink(10767)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10767.php'}, {'name': 'RHSA-2003:039', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-039.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1396
Heap-based buffer overflow in the wordwrap function in PHP after 4.1.2 and before 4.3.0 may allow attackers to cause a denial of service or execute arbitrary code.
Affected Products: n/a
References: [{'name': 'php-wordwrap-bo(10944)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10944'}, {'name': 'MDKSA-2003:019', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:019'}, {'name': '6488', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6488'}, {'name': 'RHSA-2003:017', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-017.html'}, {'name': 'ESA-20030219-003', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://archives.neohapsis.com/archives/linux/engarde/2003-q1/0003.html'}, {'name': '20021227 Buffer overflow in PHP "wordwrap" function', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104102689503192&w=2'}, {'name': '200301-8', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.securityfocus.com/advisories/4862'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.php.net/bug.php?id=20927'}, {'name': 'SuSE-SA:2003:0009', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_009_mod_php4.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1397
Vulnerability in the cash_words() function for PostgreSQL 7.2 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a large negative argument, possibly triggering an integer signedness error or buffer overflow.
Affected Products: n/a
References: [{'name': 'CLA-2002:524', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000524'}, {'name': '20020819 @(#) Mordred Labs advisory 0x0001: Buffer overflow in PostgreSQL', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102977465204357&w=2'}, {'name': '8034', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8034'}, {'name': '5497', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5497'}, {'name': 'RHSA-2003:001', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-001.html'}, {'name': 'postgresql-cashwords-bo(9891)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9891'}, {'tags': ['x_refsource_MISC'], 'url': 'http://developer.postgresql.org/cvsweb.cgi/pgsql-server/src/backend/utils/adt/cash.c.diff?r1=1.51&r2=1.52'}]
CVE State: PUBLISHED
Explain CVE-2002-1398
Buffer overflow in the date parser for PostgreSQL before 7.2.2 allows attackers to cause a denial of service and possibly execute arbitrary code via a long date string, aka a vulnerability "in handling long datetime input."
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://marc.info/?l=postgresql-announce&m=103062536330644'}, {'name': '8034', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8034'}, {'name': 'RHSA-2003:001', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-001.html'}, {'name': 'DSA-165', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-165'}, {'name': '20020821 Re: @(#)Mordred Labs advisory 0x0003: Buffer overflow in PostgreSQL', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102996089613404&w=2'}, {'name': '20020819 Re: @(#) Mordred Labs advisory 0x0001: Buffer overflow in PostgreSQL', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102978152712430&w=2'}, {'name': 'SuSE-SA:2002:038', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_038_postgresql.html'}, {'name': '20020826 GLSA: PostgreSQL', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103036987114437&w=2'}, {'name': '20020824 Fwd: [GENERAL] PostgreSQL 7.2.2: Security Release', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103021186622725&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1399
Unknown vulnerability in cash_out and possibly other functions in PostgreSQL 7.2.1 and earlier, and possibly later versions before 7.2.3, with unknown impact, based on an invalid integer input which is processed as a different data type, as demonstrated using cash_out(2).
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://archives.postgresql.org/pgsql-hackers/2002-08/msg00713.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://archives.postgresql.org/pgsql-hackers/2002-08/msg00708.php'}, {'name': '20020819 Re: @(#) Mordred Labs advisory 0x0001: Buffer overflow in PostgreSQL', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102978152712430&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-1400
Heap-based buffer overflow in the repeat() function for PostgreSQL before 7.2.2 allows attackers to execute arbitrary code by causing repeat() to generate a large string.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://marc.info/?l=postgresql-announce&m=103062536330644'}, {'name': 'CLA-2002:524', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000524'}, {'name': '20020820 @(#)Mordred Labs advisory 0x0003: Buffer overflow in PostgreSQL', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102987306029821&w=2'}, {'name': '8034', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8034'}, {'name': 'RHSA-2003:001', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-001.html'}, {'name': 'MDKSA-2002:062', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2002:062'}, {'name': 'SuSE-SA:2002:038', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_038_postgresql.html'}, {'name': '20020826 GLSA: PostgreSQL', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103036987114437&w=2'}, {'name': '20020824 Fwd: [GENERAL] PostgreSQL 7.2.2: Security Release', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103021186622725&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1401
Buffer overflows in (1) circle_poly, (2) path_encode and (3) path_add (also incorrectly identified as path_addr) for PostgreSQL 7.2.3 and earlier allow attackers to cause a denial of service and possibly execute arbitrary code, possibly as a result of an integer overflow.
Affected Products: n/a
References: [{'name': 'CLA-2002:524', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000524'}, {'tags': ['x_refsource_MISC'], 'url': 'http://archives.postgresql.org/pgsql-hackers/2002-08/msg02047.php'}, {'name': '8034', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8034'}, {'tags': ['x_refsource_MISC'], 'url': 'http://archives.postgresql.org/pgsql-hackers/2002-08/msg02081.php'}, {'name': 'RHSA-2003:001', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-001.html'}, {'name': 'DSA-165', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-165'}]
CVE State: PUBLISHED
Explain CVE-2002-1402
Buffer overflows in the (1) TZ and (2) SET TIME ZONE enivronment variables for PostgreSQL 7.2.1 and earlier allow local users to cause a denial of service and possibly execute arbitrary code.
Affected Products: n/a
References: [{'name': 'CLA-2002:524', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000524'}, {'name': '8034', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8034'}, {'name': 'RHSA-2003:001', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-001.html'}, {'name': 'DSA-165', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-165'}, {'name': '[pgsql-announce] 20020824 PostgreSQL 7.2.2: Security Release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php'}, {'name': 'MDKSA-2002:062', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2002:062'}, {'name': '20020826 GLSA: PostgreSQL', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103036987114437&w=2'}, {'name': '20020824 Fwd: [GENERAL] PostgreSQL 7.2.2: Security Release', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103021186622725&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-1403
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script.
Affected Products: n/a
References: [{'name': 'MDKSA-2003:003', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:003'}, {'name': 'DSA-219', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-219'}, {'name': '6200', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6200'}, {'name': 'GLSA-200301-3', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://marc.info/?l=bugtraq&m=104189546709447&w=2'}, {'name': 'CLA-2002:549', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000549'}, {'name': 'dhcpcd-info-execute-commands(10663)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10663'}]
CVE State: PUBLISHED
Explain CVE-2002-1405
CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTTP request that is provided on the command line, via a URL containing encoded carriage return, line feed, and other whitespace characters.
Affected Products: n/a
References: [{'name': 'MDKSA-2003:023', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:023'}, {'name': 'RHSA-2003:030', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-030.html'}, {'name': '2002-0085', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.net/errata/misc/2002/TSL-2002-0085-lynx-ssl.asc.txt'}, {'name': 'lynx-crlf-injection(9887)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9887.php'}, {'name': 'RHSA-2003:029', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-029.html'}, {'name': '20020822 Lynx CRLF Injection, part two', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103003793418021&w=2'}, {'name': '20020819 Lynx CRLF Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102978118411977&w=2'}, {'name': '5499', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5499'}, {'name': 'CSSA-2002-049.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-049.0.txt'}, {'name': 'DSA-210', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-210'}]
CVE State: PUBLISHED
Explain CVE-2002-1406
Unknown vulnerability in passwd for VVOS HP-UX 11.04, with unknown impact, related to "Unexpected behavior."
Affected Products: n/a
References: [{'name': '5454', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5454'}, {'name': 'hp-vvos-passwd(9847)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9847.php'}, {'name': 'HPSBUX0208-210', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/hp/2002-q3/0049.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1407
TinySSL 1.02 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack.
Affected Products: n/a
References: [{'name': '20020805 IE SSL Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102866120821995&w=2'}, {'name': 'ssl-ca-certificate-spoofing(9776)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9776'}, {'name': '5410', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5410'}, {'name': '20020810 TinySSL Vendor Statement: Basic Constraints Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-08/0096.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1408
Unknown vulnerability or vulnerabilities in HP OpenView EMANATE 14.2 snmpModules allow the SNMP read-write community name to be exposed, related to (1) "'read-only' community access," and/or (2) an easily guessable community name.
Affected Products: n/a
References: [{'name': 'HPSBUX0208-208', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/4360'}, {'name': '5428', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5428'}, {'name': 'hp-emanate-default-snmp(9814)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9814.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1409
ptrace on HP-UX 11.00 through 11.11 allows local users to cause a denial of service (data page fault panic) via "an incorrect reference to thread register state."
Affected Products: n/a
References: [{'name': 'hp-ptrace-dos(9818)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9818.php'}, {'name': 'oval:org.mitre.oval:def:5584', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5584'}, {'name': '5425', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5425'}, {'name': 'HPSBUX0208-206', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/hp/2002-q3/0041.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1410
Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to (1) delete entries via direct access of admin.cgi, or (2) reconfigure Guestbook via direct access of config.cgi.
Affected Products: n/a
References: [{'name': '20020727 Easy Guestbook Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-07/0356.html'}, {'name': 'easy-guestbook-gain-access(9697)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9697.php'}, {'name': '5341', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5341'}]
CVE State: PUBLISHED
Explain CVE-2002-1411
Directory traversal vulnerability in update.dpgs in Duma Photo Gallery System (DPGS) 0.99.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the id parameter.
Affected Products: n/a
References: [{'name': '5081', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5081'}, {'name': 'dpgs-dotdot-directory-traversal(9414)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9414.php'}, {'name': '20020622 DPGS allows any file to be overwritten', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-06/0265.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1412
Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a modified GALLERY_BASEDIR variable that points to a directory or URL that contains a Trojan horse init.php script.
Affected Products: n/a
References: [{'name': 'DSA-138', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-138'}, {'name': '20020801 code injection in gallery', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-07/0471.html'}, {'name': '5375', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5375'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=50&mode=thread&order=0&thold=0'}, {'name': 'gallery-basedir-execute-commands(9737)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9737'}]
CVE State: PUBLISHED
Explain CVE-2002-1413
RCONAG6 for Novell Netware SP2, while running RconJ in secure mode, allows remote attackers to bypass authentication using the RconJ "Secure IP" (SSL) option during a connection.
Affected Products: n/a
References: [{'name': '20020821 NOVL-2002-2963349 - Rconag6 Secure IP Login Vulnerability - NW6SP2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-08/0216.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/servlet/tidfinder/2963349'}, {'name': 'VU#746251', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/746251'}, {'name': '5541', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5541'}, {'name': 'netware-rconj-no-password(9928)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9928.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1414
Buffer overflow in qmailadmin allows local users to gain privileges via a long QMAILADMIN_TEMPLATEDIR environment variable.
Affected Products: n/a
References: [{'name': 'qmailadmin-templatedir-bo(9786)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9786.php'}, {'name': '20020724 Re: qmailadmin SUID buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-08/0016.html'}, {'name': '20020806 qmailadmin SUID buffer overflow', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=102859603029424&w=2'}, {'name': '5404', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5404'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.inter7.com/qmailadmin/ChangeLog'}]
CVE State: PUBLISHED
Explain CVE-2002-1415
Format string vulnerability in SMTP service for WebEasyMail 3.4.2.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in SMTP requests.
Affected Products: n/a
References: [{'name': '5518', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5518'}, {'name': '20020820 Advisory: DoS in WebEasyMail +more possible?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/288222'}, {'name': 'webeasymail-smtp-service-dos(9924)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9924.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1416
The POP3 service for WebEasyMail 3.4.2.2 and earlier generates diffferent error messages for valid and invalid usernames during authentication, which makes it easier for remote attackers to conduct brute force attacks.
Affected Products: n/a
References: [{'name': '20020820 Advisory: DoS in WebEasyMail +more possible?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/288222'}, {'name': 'webeasymail-pop3-bruteforce(9925)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9925.php'}, {'name': '5519', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5519'}]
CVE State: PUBLISHED
Explain CVE-2002-1417
Directory traversal vulnerability in Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote attackers to read arbitrary files via a URL containing a "..%5c" sequence (modified dot-dot), which is mapped to the directory separator.
Affected Products: n/a
References: [{'name': '20020820 NOVL-2002-2963297 - NetBasic Buffer Overflow + Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-08/0199.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/servlet/tidfinder/2963297'}, {'name': 'novell-netbasic-directory-traversal(9910)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9910.php'}, {'name': '5523', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5523'}]
CVE State: PUBLISHED
Explain CVE-2002-1418
Buffer overflow in the interpreter for Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote attackers to cause a denial of service (ABEND) via a long module name.
Affected Products: n/a
References: [{'name': '20020820 NOVL-2002-2963297 - NetBasic Buffer Overflow + Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-08/0199.html'}, {'name': 'novell-netbasic-interpreter-bo(9911)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9911.php'}, {'name': '5524', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5524'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/servlet/tidfinder/2963297'}]
CVE State: PUBLISHED
Explain CVE-2002-1419
The upgrade of IRIX on Origin 3000 to 6.5.13 through 6.5.16 changes the MAC address of the system, which could modify intended access restrictions that are based on a MAC address.
Affected Products: n/a
References: [{'name': 'irix-origin-bypass-filtering(9868)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9868.php'}, {'name': '20020805-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020805-01-I'}, {'name': '5467', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5467'}]
CVE State: PUBLISHED
Explain CVE-2002-1420
Integer signedness error in select() on OpenBSD 3.1 and earlier allows local users to overwrite arbitrary kernel memory via a negative value for the size parameter, which satisfies the boundary check as a signed integer, but is later used as an unsigned integer during a data copying operation.
Affected Products: n/a
References: [{'name': '5442', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5442'}, {'name': 'openbsd-select-bo(9809)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9809.php'}, {'name': 'VU#259787', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/259787'}, {'name': '7554', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7554'}, {'name': '20020812 OpenBSD Security Advisory: Select Boundary Condition (fwd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102918817012863&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-1421
SQL injection vulnerabilities in FUDforum before 2.2.0 allow remote attackers to perform unauthorized database operations via (1) report.php, (2) selmsg.php, and (3) showposts.php.
Affected Products: n/a
References: [{'name': '20020818 FUDforum file access and SQL Injection', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0082.html'}, {'name': 'fudforum-sql-injection(9912)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9912.php'}, {'name': '20020818 FUDforum file access and SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/288042'}, {'name': '5500', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5500'}]
CVE State: PUBLISHED
Explain CVE-2002-1422
admbrowse.php in FUDforum before 2.2.0 allows remote attackers to create or delete files via URL-encoded pathnames in the cur and dest parameters.
Affected Products: n/a
References: [{'name': '20020818 FUDforum file access and SQL Injection', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0082.html'}, {'name': '5502', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5502'}, {'name': '20020818 FUDforum file access and SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/288042'}, {'name': 'fudforum-admnbrowse-modify-files(9901)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9901.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1423
tmp_view.php in FUDforum before 2.2.0 allows remote attackers to read arbitrary files via an absolute pathname in the file parameter.
Affected Products: n/a
References: [{'name': '20020818 FUDforum file access and SQL Injection', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0082.html'}, {'name': '20020818 FUDforum file access and SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/288042'}, {'name': '5501', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5501'}, {'name': 'fudforum-tmpview-download-files(9896)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9896.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1424
Buffer overflow in munpack in mpack 1.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Affected Products: n/a
References: [{'name': 'munpack-mime-bo(9747)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9747.php'}, {'name': '5385', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5385'}, {'name': 'DSA-141', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-141'}]
CVE State: PUBLISHED
Explain CVE-2002-1425
Directory traversal vulnerability in munpack in mpack 1.5 and earlier allows remote attackers to create new files in the parent directory via a ../ (dot-dot) sequence in the filename to be extracted.
Affected Products: n/a
References: [{'name': 'DSA-141', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-141'}, {'name': '5386', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5386'}, {'name': 'munpack-dotdot-directory-traversal(9748)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9748.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1426
HP ProCurve Switch 4000M C.07.23 allows remote attackers to cause a denial of service (crash) via an SNMP write request containing 85 characters, possibly triggering a buffer overflow.
Affected Products: n/a
References: [{'name': '20020727 Phenoelit Advisory 0815 ++ /+ HP ProCurve', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-07/0338.html'}, {'name': 'hp-procurve-snmp-write-dos(9708)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9708.php'}, {'name': '5336', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5336'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.phenoelit.de/stuff/HP_ProCurve.txt'}]
CVE State: PUBLISHED
Explain CVE-2002-1427
The print_html_to_file function in edit.cgi for Easy Homepage Creator 1.0 does not check user credentials, which allows remote attackers to modify home pages of other users.
Affected Products: n/a
References: [{'name': 'easy-homepage-gain-access(9696)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9696.php'}, {'name': '5340', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5340'}, {'name': '20020727 Easy Homepage Creator Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-07/0350.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1428
index.php in dotProject 0.2.1.5 allows remote attackers to bypass authentication via a cookie or URL with the user_cookie parameter set to 1.
Affected Products: n/a
References: [{'name': '20020728 php dotProject by pass authentication', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-07/0366.html'}, {'name': 'dotproject-admin-access(9720)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9720.php'}, {'name': '5347', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5347'}]
CVE State: PUBLISHED
Explain CVE-2002-1429
Cross-site scripting vulnerability in board.php of endity.com ShoutBOX allows remote attackers to inject arbitrary HTML into the shoutbox page via the site parameter.
Affected Products: n/a
References: [{'name': 'shoutbox-site-html-injection(9739)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9739.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://endity.com/board/index.php?act=ST&f=3&t=68&s=363128162825b2d7fcf60c9cd2a292fe'}, {'name': '5354', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5354'}, {'name': '20020729 Code injection Vulnerability in endity.com', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-07/0389.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1430
Unknown vulnerability in Sympoll 1.2 allows remote attackers to read arbitrary files when register_globals is enabled, possibly by modifying certain PHP variables through URL parameters.
Affected Products: n/a
References: [{'name': 'sympoll-php-view-files(9723)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9723.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ralusp.net/downloads/sympoll/changelog.txt'}, {'name': '20020730 [ADVISORY]:  Arbitrary file disclosure vulnerability in Sympoll 1.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-07/0401.html'}, {'name': '5360', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5360'}]
CVE State: PUBLISHED
Explain CVE-2002-1431
Belkin F5D5230-4 4-Port Cable/DSL Gateway Router 1.20.000 modifies the source IP address of internal packets to that of the router's external interface when forwarding a request from an internal host to an internal web server, which allows remote attackers to hide which host is being used to access the web server.
Affected Products: n/a
References: [{'name': 'belkin-incorrect-ip(9324)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9324.php'}, {'name': '20020609 Problem with IP reporting - Belkin Cable/DSL router', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/276256'}, {'name': '4982', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4982'}]
CVE State: PUBLISHED
Explain CVE-2002-1432
MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database.
Affected Products: n/a
References: [{'name': '5438', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5438'}, {'name': 'shopping-cart-database-access(9816)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9816.php'}, {'name': '20020807 MidiCart Shopping Cart Software database vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-08/0074.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1433
Kerio MailServer 5.0 allows remote attackers to cause a denial of service (hang) via SYN packets to the supported network services.
Affected Products: n/a
References: [{'name': 'kerio-mailserver-syn-dos(9904)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9904.php'}, {'name': '5505', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5505'}, {'name': '20020819 Kerio Mail Server Multiple Security Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-08/0183.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1434
Multiple cross-site scripting (XSS) vulnerabilities in the Web mail module of Kerio MailServer 5.0 allow remote attackers to execute HTML script as other users via certain URLs.
Affected Products: n/a
References: [{'name': 'kerio-webserver-webmail-xss(9905)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9905.php'}, {'name': '20020819 Kerio Mail Server Multiple Security Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-08/0183.html'}, {'name': '5507', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5507'}]
CVE State: PUBLISHED
Explain CVE-2002-1435
class.atkdateattribute.js.php in Achievo 0.7.0 through 0.9.1, except 0.8.2, allows remote attackers to execute arbitrary PHP code when the 'allow_url_fopen' setting is enabled via a URL in the config_atkroot parameter that points to the code.
Affected Products: n/a
References: [{'name': '20020822 Arbitrary code execution problem in Achievo', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-08/0235.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.achievo.org/lists/2002/Aug/msg00092.html'}, {'name': 'achievo-php-execute-code(9947)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9947.php'}, {'name': '5552', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5552'}]
CVE State: PUBLISHED
Explain CVE-2002-1436
The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary Perl code via an HTTP POST request.
Affected Products: n/a
References: [{'name': 'netware-perl-code-execution(9916)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9916.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/servlet/tidfinder/2963307'}, {'name': '5520', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5520'}, {'name': '20020820 NOVL-2002-2963307 - PERL Handler Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-08/0202.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1437
Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to read arbitrary files via an HTTP request containing "..%5c" (URL-encoded dot-dot backslash) sequences.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/servlet/tidfinder/2963307'}, {'name': '20020820 NOVL-2002-2963307 - PERL Handler Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-08/0202.html'}, {'name': '5522', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5522'}, {'name': 'netware-perl-directory-traversal(9915)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9915.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1438
The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to obtain Perl version information via the -v option.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/servlet/tidfinder/2963307'}, {'name': '20020820 NOVL-2002-2963307 - PERL Handler Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-08/0202.html'}, {'name': '5521', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5521'}, {'name': 'netware-perl-information-disclosure(9917)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9917.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1439
Unknown vulnerability related to stack corruption in the TGA daemon for HP-UX 11.04 (VVOS) Virtualvault 4.0, 4.5, and 4.6 may allow attackers to obtain access to system files.
Affected Products: n/a
References: [{'name': 'HPSBUX0208-211', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/hp/2002-q3/0050.html'}, {'name': 'hp-vvos-tga-corruption(9846)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9846.php'}, {'name': '5459', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5459'}]
CVE State: PUBLISHED
Explain CVE-2002-1440
The Gateway GS-400 server has a default root password of "0001n" that can not be changed via the administrative interface, which can allow attackers to gain root privileges.
Affected Products: n/a
References: [{'name': '5472', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5472'}, {'name': '20020814 Trivial root compromise in Gateway GS-400 NAS Servers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-08/0126.html'}, {'name': 'gateway-gs400-default-password(9864)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9864.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1441
Multiple buffer overflows in Tomahawk SteelArrow before 4.5 allow remote attackers to execute arbitrary code via (1) the Steelarrow Service (Steelarrow.exe) using a long UserIdent Cookie header, (2) DLLHOST.EXE (Steelarrow.dll) via a request for a long .aro file, or (3) DLLHOST.EXE via a Chunked Transfer-Encoding request.
Affected Products: n/a
References: [{'name': '5495', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5495'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.steelarrow.com/'}, {'name': '5496', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5496'}, {'name': 'steelarrow-chunked-aro-bo(9890)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9890.php'}, {'name': '20020819 Multiple Buffer Overflow vulnerabilities in SteelArrow (#NISR19082002B)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0085.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/advisories/steel-arrow-bo.txt'}, {'name': '4860', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4860'}, {'name': 'steelarrow-userident-bo(9888)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9888.php'}, {'name': '5494', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5494'}, {'name': 'steelarrow-long-aro-bo(9889)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9889.php'}, {'name': '20020819 Multiple Buffer Overflow vulnerabilities in SteelArrow (#NISR19082002B)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/288013'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/vna/tom-saro.txt'}]
CVE State: PUBLISHED
Explain CVE-2002-1442
The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar operations including script execution and file reading in other zones such as "My Computer" by opening a window to tools.google.com or the res: protocol, then using script to modify the window's location to the toolbar's configuration URL, which bypasses the origin verification check.
Affected Products: n/a
References: [{'name': '20020808 Exploiting the Google toolbar (GM#001-MC)', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0066.html'}, {'name': '20020808 Exploiting the Google toolbar (GM#001-MC)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/286527'}, {'name': '5424', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5424'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sec.greymagic.com/adv/gm001-mc/'}]
CVE State: PUBLISHED
Explain CVE-2002-1443
The Google toolbar 1.1.58 and earlier allows remote web sites to monitor a user's input into the toolbar via an "onkeydown" event handler.
Affected Products: n/a
References: [{'name': '20020808 Exploiting the Google toolbar (GM#001-MC)', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0066.html'}, {'name': '20020808 Exploiting the Google toolbar (GM#001-MC)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/286527'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sec.greymagic.com/adv/gm001-mc/'}, {'name': 'google-toolbar-keypress-monitoring(10054)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10054'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://toolbar.google.com/whatsnew.php3'}, {'name': '5426', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5426'}]
CVE State: PUBLISHED
Explain CVE-2002-1444
The Google toolbar 1.1.60, when running on Internet Explorer 5.5 and 6.0, allows remote attackers to cause a denial of service (crash with an exception in oleaut32.dll) via malicious HTML, possibly related to small width and height parameters or an incorrect call to the Google.Search() function.
Affected Products: n/a
References: [{'name': 'ie-google-toolbar-dos(9883)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9883.php'}, {'name': '5477', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5477'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.sztolnia.pl/hack/googIE/googIE.html'}, {'name': '20020815 IE [with Google Toolbar installed] crash', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/287498'}]
CVE State: PUBLISHED