Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2002-1562
Directory traversal vulnerability in thttpd, when using virtual hosting, allows remote attackers to read arbitrary files via .. (dot dot) sequences in the Host: header.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://news.php.net/article.php?group=php.cvs&article=15698'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://marc.info/?l=thttpd&m=103609565110472&w=2'}, {'name': 'DSA-396', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2003/dsa-396'}, {'name': 'CLA-2003:777', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000777'}]
CVE State: PUBLISHED
Explain CVE-2002-1563
stunnel 4.0.3 and earlier allows attackers to cause a denial of service (crash) via SIGCHLD signal handler race conditions that cause an inconsistency in the child counter.
Affected Products: n/a
References: [{'name': 'ESA-20030806-020', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/engarde_advisory-3535.html'}, {'name': 'CLA-2003:736', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000736'}, {'name': '20030112 SIGCHLD problem in Stunnel', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104247606910598'}, {'name': 'RHSA-2003:223', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-223.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://marc.info/?l=stunnel-users&m=103600188215117&w=2'}, {'name': '6592', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6592'}, {'name': '2003-0030', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://marc.info/?l=bugtraq&m=106029168514511&w=2'}, {'name': 'RHSA-2003:221', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-221.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1564
Internet Explorer 5.5 and 6.0 allows remote attackers to steal potentially sensitive information from cookies via a cookie that contains script which is executed when a page is loaded, aka the "Script within Cookies Reading Cookies" vulnerability.
Affected Products: n/a
References: [{'name': 'MS02-023', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023'}]
CVE State: PUBLISHED
Explain CVE-2002-1565
Buffer overflow in url_filename function for wget 1.8.1 allows attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long URL.
Affected Products: n/a
References: [{'name': '20040202-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc'}, {'name': 'CSSA-2003-003.0', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-003.0.txt'}, {'name': 'CLA-2003:716', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000716'}, {'name': 'DSA-209', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-209'}, {'name': '20030604 Immunix Secured OS 7+ wget update', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105474357016184&w=2'}, {'name': 'RHSA-2003:372', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-372.html'}, {'name': 'wget-url-filename-bo(10851)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10851'}]
CVE State: PUBLISHED
Explain CVE-2002-1566
netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of service (crash) via a long string to port 9284.
Affected Products: n/a
References: [{'name': '20020909 netris-0.5.', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=103158692532256&w=2'}, {'name': 'netris-remote-bo(10081)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10081'}, {'name': '5680', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5680'}]
CVE State: PUBLISHED
Explain CVE-2002-1567
Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://tomcat.apache.org/security-4.html'}, {'name': '20020821 Apache Tomcat 4.1 Cross-Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://archives.neohapsis.com/archives/vuln-dev/2002-q3/0482.html'}, {'name': '[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E'}, {'name': '[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E'}, {'name': '[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E'}]
CVE State: PUBLISHED
Explain CVE-2002-1568
OpenSSL 0.9.6e uses assertions when detecting buffer overflow attacks instead of less severe mechanisms, which allows remote attackers to cause a denial of service (crash) via certain messages that cause OpenSSL to abort from a failed assertion, as demonstrated using SSLv2 CLIENT_MASTER_KEY messages, which are not properly handled in s2_srvr.c.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.ebitech.sk/patrik/SA/SA-20031002.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.openssl.org/chngview?cn=7659'}, {'name': '20031002 New OpenSSL remote vulnerability (issue date 2003/10/02)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106511018214983'}]
CVE State: PUBLISHED
Explain CVE-2002-1569
gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the filename for (1) a PDF file or (2) a gzip file.
Affected Products: n/a
References: [{'name': '5840', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5840'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.epita.fr/~bevand_m/asa/asa-0000'}, {'name': '20021003 GLSA: gv', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0033.html'}, {'name': '20021001 ASA-0000: GV Execution of Arbitrary Shell Commands', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103348446009076&w=2'}, {'name': 'gv-system-execute-commands(10231)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10231'}]
CVE State: PUBLISHED
Explain CVE-2002-1570
Heap-based buffer overflow in snmpnetstat for ucd-snmp 4.2.3 and earlier, and net-snmp, allows remote attackers to execute arbitrary code via multiple getnextrequest PDU messages with conflicting ifindex variables, which cause snmpnetstat to write variable data past the end of an array.
Affected Products: n/a
References: [{'name': '20020103 Heap overflow in snmpnetstat', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/248141'}, {'name': 'CLA-2003:696', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000696'}, {'name': 'netsnmp-snmpnetstat-heap-overflow(7776)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7776'}, {'name': '3780', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3780'}]
CVE State: PUBLISHED
Explain CVE-2002-1571
The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on processors that do not clear all relevant SSE registers.
Affected Products: n/a
References: [{'name': '[linux-kernel] 20020418 Re: SSE related security hole', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://search.luky.org/linux-kernel.2002/msg24003.html'}, {'name': '[linux-kernel] 20020417 Re: SSE related security hole', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.cs.helsinki.fi/linux/linux-kernel/2002-15/0760.html'}, {'name': '[linux-kernel] 20020422 Re: SSE related security hole', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://search.luky.org/linux-kernel.2002/msg24992.html'}, {'name': '[linux-kernel] 20020417 SSE related security hole', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.cs.helsinki.fi/linux/linux-kernel/2002-15/0628.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://linux.bkbits.net:8080/linux-2.4/diffs/arch/i386/kernel/i387.c%401.6'}]
CVE State: PUBLISHED
Explain CVE-2002-1572
Signed integer overflow in the bttv_read function in the bttv driver (bttv-driver.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors.
Affected Products: n/a
References: [{'name': 'RHSA-2002:206', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-206.html'}, {'name': 'RHSA-2002:205', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-205.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://linux.bkbits.net:8080/linux-2.4/cset%403d6badc0mxsPaOTT_GuPVxCp1_ormw'}]
CVE State: PUBLISHED
Explain CVE-2002-1573
Unspecified vulnerability in the pcilynx ieee1394 firewire driver (pcilynx.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors, related to "wrap handling."
Affected Products: n/a
References: [{'name': 'RHSA-2002:206', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-206.html'}, {'name': 'RHSA-2002:205', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-205.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://linux.bkbits.net:8080/linux-2.4/cset%403d6aadcbBIDX67Zl6zZnVKRcsilCVQ'}]
CVE State: PUBLISHED
Explain CVE-2002-1574
Buffer overflow in the ixj telephony card driver in Linux before 2.4.20 has unknown impact and attack vectors.
Affected Products: n/a
References: [{'name': 'RHSA-2002:206', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-206.html'}, {'name': 'RHSA-2004:044', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-044.html'}, {'name': 'RHSA-2002:205', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-205.html'}, {'name': 'RHSA-2004:106', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-106.html'}, {'name': 'N-096', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-096.shtml'}, {'name': 'linux-ixj-root-privileges(10417)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10417'}, {'name': '5985', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5985'}]
CVE State: PUBLISHED
Explain CVE-2002-1575
cgiemail allows remote attackers to use cgiemail as a spam proxy via CRLF injection of encoded newline (%0a) characters in parameters such as "required-subject," which can be used to modify the CC, BCC, and other header fields in the generated email message.
Affected Products: n/a
References: [{'name': 'cgiemail-open-mail-relay(9361)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9361'}, {'name': '5013', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5013'}, {'name': '20031003 patch for vulnerability in cgiemail', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106520691705768&w=2'}, {'name': '20020614 Another cgiemail bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102406554627053&w=2'}, {'name': 'DSA-437', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-437'}]
CVE State: PUBLISHED
Explain CVE-2002-1576
lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called from a directory that has a symlink to the lserver program.
Affected Products: n/a
References: [{'name': 'sap-db-lserversrv-symlink(10762)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10762'}, {'name': '6316', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6316'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sapdb.org/sap_db_alert.htm'}, {'name': '20021204 SAP database local root via symlink', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103903565829796&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-1577
SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain privileges via the (1) SAP*, (2) SAPCPIC, (3) DDIC, (4) EARLYWATCH, or (5) TMSADM accounts.
Affected Products: n/a
References: [{'name': 'sap-r3-default-account(9964)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9964'}, {'name': '20020825 SAP R/3 default password vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103038238228119&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-1578
The default installation of SAP R/3, when using Oracle and SQL*net V2 3.x, 4.x, and 6.10, allows remote attackers to obtain arbitrary, sensitive SAP data by directly connecting to the Oracle database and executing queries against the database, which is not password-protected.
Affected Products: n/a
References: [{'name': 'sap-db-data-access(8972)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8972'}, {'name': '20020427 SAP R/3 on Oracle: vulnerable Default Installation', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0387.html'}, {'name': '4613', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4613'}]
CVE State: PUBLISHED
Explain CVE-2002-1579
SAP GUI (Sapgui) 4.6D allows remote attackers to cause a denial of service (crash) via a connection to a high-numbered port, which generates an "unknown connection data" error.
Affected Products: n/a
References: [{'name': '20020128 Sapgui 4.6D for Windows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-01/0334.html'}, {'name': '3972', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3972'}, {'name': 'sapgui-invalid-connect-dos(8007)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8007'}]
CVE State: PUBLISHED
Explain CVE-2002-1580
Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347.
Affected Products: n/a
References: [{'name': '000557', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000557'}, {'name': 'CLA-2002:557', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000557'}, {'name': 'DSA-215', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-215'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://asg.web.cmu.edu/cyrus/download/imapd/changes.html'}, {'name': 'VU#740169', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/740169'}, {'name': '6298', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6298'}, {'name': 'cyrus-imap-preauth-bo(10744)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10744'}, {'name': '20021202 pre-login buffer overflow in Cyrus IMAP server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/301864'}]
CVE State: PUBLISHED
Explain CVE-2002-1581
Directory traversal vulnerability in nph-mr.cgi in Mailreader.com 2.3.20 through 2.3.31 allows remote attackers to view arbitrary files via .. (dot dot) sequences and a null byte (%00) in the configLanguage parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://mailreader.com/download/ChangeLog'}, {'name': 'mailreader-dotdot-directory-traversal(10490)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10490.php'}, {'name': '6055', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6055'}, {'name': 'DSA-534', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-534'}, {'tags': ['x_refsource_MISC'], 'url': 'http://mailreader.com/download/ChangeLog'}, {'name': '20021028 SCAN Associates Advisory : Multiple vurnerabilities on mailreader.com', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/297428'}]
CVE State: PUBLISHED
Explain CVE-2002-1582
compose.cgi in Mailreader.com 2.3.30 and 2.3.31, when using Sendmail as the Mail Transfer Agent, allows remote attackers to execute arbitrary commands via shell metacharacters in the RealEmail configuration variable, which is used to call Sendmail in network.cgi.
Affected Products: n/a
References: [{'name': 'mailreader-compose-command-execution(10491)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10491.php'}, {'name': '6058', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6058'}, {'name': '20021028 SCAN Associates Advisory : Multiple vurnerabilities on mailreader.com', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/297428'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mailreader.com/download/ChangeLog'}]
CVE State: PUBLISHED
Explain CVE-2002-1583
Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a long username that is read from a file descriptor argument.
Affected Products: n/a
References: [{'name': '4817', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4817'}, {'name': 'MSS-OAR-E01-2002:318.1', 'tags': ['vendor-advisory', 'x_refsource_IBM'], 'url': 'http://www.securitytracker.com/alerts/2002/May/1004352.html'}, {'name': 'ibm-db2-db2ckpw-bo(9078)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9078.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1584
Unknown vulnerability in the AUTH_DES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other platforms, allows remote attackers to gain privileges.
Affected Products: n/a
References: [{'name': '46944', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-46944-1'}, {'name': '6484', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6484'}, {'name': 'solaris-authdes-gain-privileges(10935)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10935'}, {'name': '20030402-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20030402-01-P'}, {'name': 'VU#518057', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/518057'}, {'name': '7899', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7899/'}, {'name': '1005934', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1005934'}]
CVE State: PUBLISHED
Explain CVE-2002-1585
Unknown vulnerability in Solaris 8 for Intel and Solaris 8 and 9 for SPARC allows remote attackers to cause a denial of service via certain packets that cause some network interfaces to stop responding to TCP traffic.
Affected Products: n/a
References: [{'name': 'solaris-tcp-interface-dos(10600)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10600'}, {'name': '6147', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6147'}, {'name': '48601', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-48601-1'}]
CVE State: PUBLISHED
Explain CVE-2002-1586
Solaris 2.5.1 through 9 allows local users to cause a denial of service (kernel panic) by setting the sd_struiowrq variable in the struioget function to null, which triggers a null dereference.
Affected Products: n/a
References: [{'name': 'solaris-null-pointer-dos(10769)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10769'}, {'name': '1005742', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005742'}, {'name': '6309', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6309'}, {'name': '48267', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-48267-1'}]
CVE State: PUBLISHED
Explain CVE-2002-1587
The libthread library (libthread.so.1) for Solaris 2.5.1 through 8 allows local users to cause a denial of service (hang) of an application that uses libthread by causing the application to wait for a certain mutex.
Affected Products: n/a
References: [{'name': 'solaris-libthread-dos(11146)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11146'}, {'name': '46867', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-46867-1'}, {'name': '6318', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6318'}]
CVE State: PUBLISHED
Explain CVE-2002-1588
Mailtool for OpenWindows 3.6, 3.6.1, and 3.6.2 allows remote attackers to cause a denial of service (mailtool segmentation violation and crash) via a malformed mail attachment.
Affected Products: n/a
References: [{'name': '6279', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6279'}, {'name': '48216', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-48216-1'}, {'name': 'openwindows-mailtool-dos(10732)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10732'}]
CVE State: PUBLISHED
Explain CVE-2002-1589
Unknown vulnerability in Solaris 8, when the 0x02 bit (aka TEST, KMF_DEADBEEF, or deadbeef) is set in the kmem_flags kernel parameter, allows local users to cause a denial of service (system panic).
Affected Products: n/a
References: [{'name': '48067', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-48067-1'}, {'name': 'solaris-kmem-flags-dos(10496)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10496'}, {'name': '6080', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6080'}]
CVE State: PUBLISHED
Explain CVE-2002-1590
The Web-Based Enterprise Management (WBEM) packages (1) SUNWwbdoc, (2) SUNWwbcou, (3) SUNWwbdev and (4) SUNWmgapp packages, when installed using Solaris 8 Update 1/01 or later, install files with world or group write permissions, which allows local users to gain root privileges or cause a denial of service.
Affected Products: n/a
References: [{'name': 'N-010', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-010.shtml'}, {'name': '6061', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6061'}, {'name': 'solaris-wbem-files-insecure(10495)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10495'}, {'name': '48320', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-48320-1'}]
CVE State: PUBLISHED
Explain CVE-2002-1591
AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user approval, which could allow code from free.aol.com to bypass intended access restrictions.
Affected Products: n/a
References: [{'name': 'VU#744139', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/744139'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.informationweek.com/story/IWK20010927S0021'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.instantmessagingplanet.com/security/article.php/10818_1014151'}]
CVE State: PUBLISHED
Explain CVE-2002-1594
Buffer overflow in (1) grpck and (2) pwck, if installed setuid on a system as recommended in some AIX documentation, may allow local users to gain privileges via a long command line argument.
Affected Products: n/a
References: [{'name': 'VU#877811', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/877811'}, {'name': 'VU#121891', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/121891'}, {'name': 'grpck-command-line-bo(7857)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7857'}, {'name': '20020102 blackshell3: multiple pwck/grpck vulnerabilities', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://marc.info/?l=vulnwatch&m=100998205010794&w=2'}, {'name': 'pwck-command-line-bo(7859)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7859'}, {'tags': ['x_refsource_MISC'], 'url': 'http://publib.boulder.ibm.com/infocenter/pseries/topic/com.ibm.aix.doc/cmds/aixcmds2/grpck.htm'}, {'name': '20020102 Re: [VulnWatch] blackshell3: multiple pwck/grpck vulnerabilities', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=100999352406822&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-1595
Cisco SN 5420 Storage Router 1.1(5) and earlier allows attackers to read configuration files without authorization.
Affected Products: n/a
References: [{'name': 'cisco-sn-view-configuration(7828)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7828'}, {'name': '3832', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3832'}, {'name': '20020109 Multiple Vulnerabilities in Cisco SN 5420 Storage Routers', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/SN-multiple-pub.shtml'}, {'name': 'VU#833459', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/833459'}]
CVE State: PUBLISHED
Explain CVE-2002-1596
Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of service (router crash) via an HTTP request with large headers.
Affected Products: n/a
References: [{'name': 'cisco-sn-http-dos(7829)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7829'}, {'name': '3834', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3834'}, {'name': '20020109 Multiple Vulnerabilities in Cisco SN 5420 Storage Routers', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/SN-multiple-pub.shtml'}, {'name': 'VU#968187', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/968187'}]
CVE State: PUBLISHED
Explain CVE-2002-1597
Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of service (halt) via a fragmented packet to the Gigabit interface.
Affected Products: n/a
References: [{'name': 'cisco-sn-fragment-dos(7830)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7830'}, {'name': '20020109 Multiple Vulnerabilities in Cisco SN 5420 Storage Routers', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/SN-multiple-pub.shtml'}, {'name': 'VU#855195', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/855195'}, {'name': '3833', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3833'}]
CVE State: PUBLISHED
Explain CVE-2002-1598
Buffer overflows in Computer Associates MLink (CA-MLink) 6.5 and earlier may allow local users to execute arbitrary code via long command line arguments to (1) mlclear or (2) mllock.
Affected Products: n/a
References: [{'name': 'VU#544995', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/544995'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.ca.com/pub/unicenter/mlink/mlink.13/MLINK13.README'}, {'name': 'ca-mlink-bo(8776)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8776'}, {'name': '4440', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4440'}, {'name': '20020405 Re: CA security contact', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/266052'}, {'name': 'VU#772915', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/772915'}, {'name': '4441', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4441'}]
CVE State: PUBLISHED
Explain CVE-2002-1599
DansGuardian before 2.4.5-1 allows remote attackers to bypass content filtering rules via hex-encoded URLs.
Affected Products: n/a
References: [{'name': '5291', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5291'}, {'name': 'VU#940203', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/940203'}, {'name': 'dansguardian-url-bypass-filtering(9681)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9681'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dansguardian.org/?page=history'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dansguardian.org/?page=knownbugs'}]
CVE State: PUBLISHED
Explain CVE-2002-1600
Directory traversal vulnerability in Mike Spice's My Classifieds (classifieds.cgi) before 1.3 allows remote attackers to overwrite arbitrary files via the category parameter.
Affected Products: n/a
References: [{'name': 'myclassifieds-gain-privileges(7967)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7967.php'}, {'name': 'VU#181907', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/181907'}, {'name': '3855', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3855'}, {'name': '1003255', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1003255'}]
CVE State: PUBLISHED
Explain CVE-2002-1601
The Connectables feature in Adobe PhotoDeluxe 3.1 prepends the Adobe directory to the CLASSPATH environment variable, which allows applets to run with higher privileges and remote attackers to gain privileges via an HTML e-mail message or a web page.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kb.cert.org/vuls/id/AAMN-56LQ2J'}, {'name': 'VU#116875', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/116875'}, {'name': '4106', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4106'}, {'name': 'adobe-photodeluxe-execute-java(8210)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8210'}]
CVE State: PUBLISHED
Explain CVE-2002-1602
Buffer overflow in the Braille module for GNU screen 3.9.11, when HAVE_BRAILLE is defined, allows local users to execute arbitrary code.
Affected Products: n/a
References: [{'name': '4578', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4578'}, {'name': '20020420 ALERT! ALERT! ALERT! ALERT! ALERT! hehehehe ;Pppppp', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/268998'}, {'name': 'screen-braille-module-bo(8929)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8929'}, {'name': 'VU#524227', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/524227'}]
CVE State: PUBLISHED
Explain CVE-2002-1603
GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, \, %2f (encoded /), %20 (encoded space), or %00 (encoded null) character, which returns the ASP source code unparsed.
Affected Products: n/a
References: [{'name': 'goahead-script-source-disclosure(10885)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10885'}, {'name': 'VU#975041', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/975041'}, {'name': '7741', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7741'}, {'name': 'VU#124059', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/124059'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/PDFs/ProCheckUp_Vulns_2002.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://data.goahead.com/Software/Webserver/2.1.8/release.htm#bug-with-urls-like-asp'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kb.cert.org/vuls/id/RGII-7MWKZ3'}, {'name': '9239', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9239'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/goahead-adv3.txt'}, {'name': '1005820', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005820'}, {'name': '13295', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/13295'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/security_info/vuln_pr0213.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1604
Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliver.
Affected Products: n/a
References: [{'name': 'VU#584243', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/584243'}, {'name': 'VU#567963', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/567963'}, {'name': 'SSRT2275', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11'}, {'name': '20020919 iDEFENSE OSF1/Tru64 3.x vuln clarification', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html'}, {'name': 'VU#846307', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/846307'}, {'name': 'VU#437899', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/437899'}, {'name': 'VU#531355', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/531355'}, {'name': 'VU#158499', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/158499'}, {'name': 'VU#448987', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/448987'}, {'name': 'VU#416427', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/416427'}, {'name': '5647', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5647'}, {'name': 'tru64-multiple-binaries-bo(10016)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10016'}, {'name': '20020919 iDEFENSE OSF1/Tru64 3.x vuln clarification', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html'}, {'name': '20020902 Happy Labor Day from Snosoft', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/290115'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_nlspath.txt'}, {'name': 'VU#592515', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/592515'}]
CVE State: PUBLISHED
Explain CVE-2002-1605
Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable to (1) dxpause, (2) dxconsole, or (3) dtsession.
Affected Products: n/a
References: [{'name': 'VU#584243', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/584243'}, {'name': 'SSRT2275', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11'}, {'name': '20020919 iDEFENSE OSF1/Tru64 3.x vuln clarification', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html'}, {'name': 'VU#569987', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/569987'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_xkb.txt'}, {'name': 'tru64-multiple-binaries-bo(10016)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10016'}, {'name': '20020919 iDEFENSE OSF1/Tru64 3.x vuln clarification', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html'}, {'name': '20020902 Happy Labor Day from Snosoft', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/290115'}, {'name': 'VU#693803', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/693803'}]
CVE State: PUBLISHED
Explain CVE-2002-1606
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain privileges via (1) lpc, (2) lpd, (3) lpq, (4) lpr, or (5) lprm.
Affected Products: n/a
References: [{'name': 'VU#557481', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/557481'}, {'name': 'SSRT2275', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11'}, {'name': 'VU#651377', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/651377'}, {'name': 'VU#293305', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/293305'}, {'name': 'SSRT2260', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11'}, {'name': 'VU#965097', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/965097'}, {'name': 'VU#955065', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/955065'}, {'name': 'tru64-multiple-binaries-bo(10016)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10016'}]
CVE State: PUBLISHED
Explain CVE-2002-1607
Buffer overflow in ypmatch in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code.
Affected Products: n/a
References: [{'name': 'SSRT2275', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11'}, {'name': 'VU#706817', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/706817'}, {'name': 'SSRT2277', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11'}, {'name': 'tru64-multiple-binaries-bo(10016)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10016'}]
CVE State: PUBLISHED
Explain CVE-2002-1608
Buffer overflow in traceroute in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code.
Affected Products: n/a
References: [{'name': 'SSRT2275', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11'}, {'name': 'VU#629289', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/629289'}, {'name': 'SSRT2261', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11'}, {'name': 'tru64-multiple-binaries-bo(10016)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10016'}]
CVE State: PUBLISHED
Explain CVE-2002-1609
Buffer overflow in binmail in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'SSRT2275', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11'}, {'name': 'SSRT0796U', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11'}, {'name': 'VU#602009', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/602009'}, {'name': 'tru64-multiple-binaries-bo(10016)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10016'}]
CVE State: PUBLISHED
Explain CVE-2002-1610
Unknown vulnerability in ping in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to cause a denial of service.
Affected Products: n/a
References: [{'name': 'tru64-ping-dos(10014)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10014'}, {'name': '5599', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5599'}, {'name': 'VU#612833', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/612833'}, {'name': 'SSRT2229', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://cert.uni-stuttgart.de/archive/bugtraq/2002/08/msg00430.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1611
Buffer overflow in quot in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'SSRT2275', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11'}, {'name': 'SSRT2191', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://ftp.support.compaq.com.au/pub/patches/Digital_UNIX/v5.1a/patch_kit/Tru64_UNIX_V5.1A/doc/txt/OSFPAT00131500520.txt'}, {'name': 'VU#115731', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/115731'}, {'name': 'tru64-multiple-binaries-bo(10016)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10016'}]
CVE State: PUBLISHED
Explain CVE-2002-1612
Buffer overflow in mailcv in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'SSRT2275', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://ftp.support.compaq.com.au/pub/patches/Digital_UNIX/v5.1a/patch_kit/Tru64_UNIX_V5.1A/doc/txt/OSFPAT00131500520.txt'}, {'name': 'tru64-multiple-binaries-bo(10016)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10016'}, {'name': 'SSRT2193', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11'}, {'name': 'VU#408771', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/408771'}]
CVE State: PUBLISHED
Explain CVE-2002-1613
Buffer overflow in ps in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'SSRT2275', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11'}, {'name': 'VU#173977', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/173977'}, {'name': 'SSRT2256', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11'}, {'name': 'tru64-multiple-binaries-bo(10016)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10016'}]
CVE State: PUBLISHED