Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2002-0126
Buffer overflow in BlackMoon FTP Server 1.0 through 1.5 allows remote attackers to execute arbitrary code via a long argument to (1) USER, (2) PASS, or (3) CWD.
Affected Products: n/a
References: [{'name': '20020115 BlackMoon FTPd Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/250543'}, {'name': '3884', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3884'}, {'name': 'blackmoon-ftpd-static-bo(7895)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7895.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://members.rogers.com/blackmoon2k/pages/news_page.html'}]
CVE State: PUBLISHED
Explain CVE-2002-0127
Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26, when configured to block traffic below port 1024, allows remote attackers to cause a denial of service (hang) via a port scan of the WAN port.
Affected Products: n/a
References: [{'name': '3876', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3876'}, {'name': '20020115 Vulnerability Netgear RP-114 Router - nmap causes DOS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/250405'}]
CVE State: PUBLISHED
Explain CVE-2002-0128
cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long argument.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sambar.com/security.htm'}, {'name': '20020116 Sambar Webserver v5.1 DoS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/250545'}, {'name': '20020206 Sambar Webserver Sample Script v5.1 DoS Vulnerability Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.der-keiler.de/Mailing-Lists/securityfocus/bugtraq/2002-02/0083.html'}, {'name': '3885', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3885'}, {'name': 'sambar-cgitest-dos(7894)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7894.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0129
efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which prints the contents of the file in a warning message.
Affected Products: n/a
References: [{'name': '20020116 Re: efax', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/bugtraq/2002/Jan/0212.html'}, {'name': 'efax-d-read-files(7921)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7921.php'}, {'name': '3895', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3895'}, {'name': '20020116 efax', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=101114350330912&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0130
Buffer overflow in efax 0.9 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -x argument.
Affected Products: n/a
References: [{'name': '20020117 Re: efax - Exploitation info', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=101133782204289&w=2'}, {'name': '20020116 Re: efax', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/bugtraq/2002/Jan/0212.html'}, {'name': 'efax-x-bo(7920)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7920.php'}, {'name': '3894', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3894'}]
CVE State: PUBLISHED
Explain CVE-2002-0131
ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prevent a script from reading files from the client's filesystem, which allows remote attackers to read arbitrary files via a malicious web page containing Python script.
Affected Products: n/a
References: [{'name': '20020116 Re: Serious privacy leak in Python for Windows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/250814'}, {'name': '20020115 Serious privacy leak in Python for Windows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?t=101113015900001&r=1&w=2'}, {'name': '3893', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3893'}, {'name': 'activepython-activex-read-files(7910)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7910.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0132
Buffer overflow in Chinput 3.0 allows local users to execute arbitrary code via a long HOME environment variable.
Affected Products: n/a
References: [{'name': '20020116 Chinput Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/250815'}, {'name': 'chinput-long-env-bo(7911)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7911.php'}, {'name': '3896', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3896'}]
CVE State: PUBLISHED
Explain CVE-2002-0133
Buffer overflows in Avirt Gateway Suite 4.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long header fields to the HTTP proxy, or (2) a long string to the telnet proxy.
Affected Products: n/a
References: [{'name': 'avirt-telnet-proxy-bo(7918)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7918.php'}, {'name': '20020212 Avirt Gateway 4.2  remote buffer overflow: proof of concept', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101366658112809&w=2'}, {'name': '20020121 [resend] Avirt Gateway Telnet Vulnerability (and more?)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101164598828092&w=2'}, {'name': '20020117 Avirt Proxy Buffer Overflow Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/251055'}, {'name': 'avirt-http-proxy-bo(7916)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7916.php'}, {'name': '3905', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3905'}, {'name': '3904', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3904'}, {'name': '20020220 Avirt 4.2 question', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101424723728817&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0134
Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system itself, which allows remote attackers to list file contents of the proxy and execute arbitrary commands via a "dos" command.
Affected Products: n/a
References: [{'name': '3901', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3901'}, {'name': '20020117 Avirt Gateway Suite Remote SYSTEM Level Compromise', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101131669102843&w=2'}, {'name': 'avirt-gateway-telnet-access(7915)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7915.php'}, {'name': '20020220 Avirt 4.2 question', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101424723728817&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0135
Netopia Timbuktu Pro 6.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a series of connections to one of the ports (1417 - 1420).
Affected Products: n/a
References: [{'name': '20020118 Timbuktu 6.0.1 and Older DoS Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/251582'}, {'name': 'timbuktu-multiple-conn-dos(7935)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7935.php'}, {'name': '3918', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3918'}]
CVE State: PUBLISHED
Explain CVE-2002-0136
Microsoft Internet Explorer 5.5 on Windows 98 allows remote web pages to cause a denial of service (hang) via extremely long values for form fields such as INPUT and TEXTAREA, which can be automatically filled via Javascript.
Affected Products: n/a
References: [{'name': '3892', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3892'}, {'name': '20020115 IE FORM DOS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/250592'}, {'name': 'ie-html-form-dos(7938)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7938'}]
CVE State: PUBLISHED
Explain CVE-2002-0137
CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file.
Affected Products: n/a
References: [{'name': '20020112 cdrdao insecure filehandling', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101102759631000&w=2'}, {'name': '3865', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3865'}]
CVE State: PUBLISHED
Explain CVE-2002-0138
CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command.
Affected Products: n/a
References: [{'name': '20020112 cdrdao insecure filehandling', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101102759631000&w=2'}, {'name': '20020115 Re: cdrdao insecure filehandling', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101111688819855&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0139
Pi-Soft SpoonFTP 1.1 and earlier allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.pi-soft.com/spoonftp/index.shtml'}, {'name': '3910', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3910'}, {'name': 'spoonftp-ftp-bounce(7943)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7943.php'}, {'name': '20020120 Bounce vulnerability in SpoonFTP 1.1.0.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/251422'}]
CVE State: PUBLISHED
Explain CVE-2002-0140
Domain Name Relay Daemon (dnrd) 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parse_query, get_objectname, and possibly other functions.
Affected Products: n/a
References: [{'name': 'dnrd-dns-dos(7957)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7957.php'}, {'name': '3928', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3928'}, {'name': '20020120 dnrd 2.10 dos', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/251619'}]
CVE State: PUBLISHED
Explain CVE-2002-0141
Maelstrom GPL 3.0.1 allows local users to overwrite arbitrary files of other Maelstrom users via a symlink attack on the /tmp/f file.
Affected Products: n/a
References: [{'name': '3911', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3911'}, {'name': '20020120 Maelstrom 1.4.3 abartity file overwrite', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/251419'}, {'name': 'maelstrom-tmp-symlink(7939)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7939.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0142
CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of service (crash) via a series of requests whose physical path is exactly 260 characters long and ends in a series of . (dot) characters.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/tracker/index.php?func=detail&aid=505583&group_id=17753&atid=317753'}, {'name': '20020114 Pi3Web Webserver v2.0 Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/250126'}, {'name': 'pi3web-long-parameter-bo(7880)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7880.php'}, {'name': '20020121 Re: Pi3Web Webserver v2.0 Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101164598828093&w=2'}, {'name': '20020113 Pi3Web Webserver v2.0 Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=101102275316307&w=2'}, {'name': '3866', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3866'}]
CVE State: PUBLISHED
Explain CVE-2002-0143
Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary code via a long HOME environment variable.
Affected Products: n/a
References: [{'name': '3868', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3868'}, {'name': '20020121 Re: Eterm SGID utmp Buffer Overflow (Local)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/251597'}, {'name': '20020113 Eterm SGID utmp Buffer Overflow (Local)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/250145'}, {'name': 'eterm-home-bo(7896)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7896.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0144
Directory traversal vulnerability in chuid 1.2 and earlier allows remote attackers to change the ownership of files outside of the upload directory via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': 'chuid-unauthorized-ownership-change(7976)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7976.php'}, {'name': '20020121 security vulnerability in chuid', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/251763'}, {'name': '3937', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3937'}]
CVE State: PUBLISHED
Explain CVE-2002-0145
chuid 1.2 and earlier does not properly verify the ownership of files that will be changed, which allows remote attackers to change files owned by other users, such as root.
Affected Products: n/a
References: [{'name': '20020121 security vulnerability in chuid', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/251763'}, {'name': '3938', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3938'}, {'name': 'chuid-unauthorized-ownership-change(7976)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7976'}]
CVE State: PUBLISHED
Explain CVE-2002-0146
fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array.
Affected Products: n/a
References: [{'name': 'HPSBTL0205-042', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/4145'}, {'name': 'fetchmail-imap-msgnum-bo(9133)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9133.php'}, {'name': '4788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4788'}, {'name': 'CSSA-2002-027.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-027.0.txt'}, {'name': 'RHSA-2002:047', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-047.html'}, {'name': 'MDKSA-2002:036', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-036.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0147
Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service or execute code, aka "Microsoft-discovered variant of Chunked Encoding buffer overrun."
Affected Products: n/a
References: [{'name': 'iis-asp-data-transfer-bo(8796)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8796.php'}, {'name': '4490', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4490'}, {'name': 'oval:org.mitre.oval:def:72', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A72'}, {'name': 'MS02-018', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018'}, {'name': '3301', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3301'}, {'name': 'VU#669779', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/669779'}, {'name': 'oval:org.mitre.oval:def:22', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A22'}, {'name': 'CA-2002-09', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-09.html'}, {'name': '20020415 Microsoft IIS Vulnerabilities in Cisco Products - MS02-018', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml'}]
CVE State: PUBLISHED
Explain CVE-2002-0148
Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page.
Affected Products: n/a
References: [{'name': 'iis-http-error-page-css(8803)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8803.php'}, {'name': '3339', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3339'}, {'name': 'oval:org.mitre.oval:def:81', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A81'}, {'name': 'MS02-018', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018'}, {'name': 'oval:org.mitre.oval:def:92', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A92'}, {'name': 'CA-2002-09', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-09.html'}, {'name': 'VU#886699', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/886699'}, {'name': '20020415 Microsoft IIS Vulnerabilities in Cisco Products - MS02-018', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml'}, {'name': '4486', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4486'}]
CVE State: PUBLISHED
Explain CVE-2002-0149
Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via long file names.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:132', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A132'}, {'name': '3320', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3320'}, {'name': 'oval:org.mitre.oval:def:95', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A95'}, {'name': 'MS02-018', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018'}, {'name': 'VU#721963', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/721963'}, {'name': 'iis-ssi-safety-check-bo(8798)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8798.php'}, {'name': '4478', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4478'}, {'name': 'CA-2002-09', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-09.html'}, {'name': '20020415 Microsoft IIS Vulnerabilities in Cisco Products - MS02-018', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml'}]
CVE State: PUBLISHED
Explain CVE-2002-0150
Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values.
Affected Products: n/a
References: [{'name': '3316', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3316'}, {'name': 'iis-asp-http-header-bo(8797)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8797.php'}, {'name': 'oval:org.mitre.oval:def:137', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A137'}, {'name': 'MS02-018', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018'}, {'name': 'VU#454091', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/454091'}, {'name': '4476', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4476'}, {'name': 'CA-2002-09', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-09.html'}, {'name': 'oval:org.mitre.oval:def:39', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A39'}, {'name': '20020415 Microsoft IIS Vulnerabilities in Cisco Products - MS02-018', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml'}]
CVE State: PUBLISHED
Explain CVE-2002-0151
Buffer overflow in Multiple UNC Provider (MUP) in Microsoft Windows operating systems allows local users to cause a denial of service or possibly gain SYSTEM privileges via a long UNC request.
Affected Products: n/a
References: [{'name': '4426', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4426'}, {'name': 'MS02-017', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-017'}, {'name': '20020404 NSFOCUS SA2002-02 : Microsoft Windows MUP overlong request kernel overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101793727306282&w=2'}, {'name': 'oval:org.mitre.oval:def:145', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A145'}, {'name': 'win-mup-bo(8752)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8752.php'}, {'name': 'oval:org.mitre.oval:def:89', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A89'}]
CVE State: PUBLISHED
Explain CVE-2002-0152
Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large number of / characters, which affects Internet Explorer 5.1, Outlook Express 5.0 through 5.0.2, Entourage v. X and 2001, PowerPoint v. X, 2001, and 98, and Excel v. X and 2001 for Macintosh.
Affected Products: n/a
References: [{'name': '20020416 w00w00 on Microsoft IE/Office for Mac OS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101897994314015&w=2'}, {'name': 'MS02-019', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-019'}, {'name': '5357', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5357'}, {'name': '4517', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4517'}, {'name': 'ms-mac-html-file-bo(8850)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8850.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0153
Internet Explorer 5.1 for Macintosh allows remote attackers to bypass security checks and invoke local AppleScripts within a specific HTML element, aka the "Local Applescript Invocation" vulnerability.
Affected Products: n/a
References: [{'name': '3935', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3935'}, {'name': 'MS02-019', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-019'}, {'name': '20020122 Macinosh IE file execuion', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/251805'}, {'name': 'ie-macos-file-execution(7969)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7969'}, {'name': 'ie-mac-applescript-execution(8851)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8851.php'}, {'name': '5356', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5356'}]
CVE State: PUBLISHED
Explain CVE-2002-0154
Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote attackers to cause a denial of service or execute arbitrary code via a database query with certain long arguments.
Affected Products: n/a
References: [{'name': 'VU#627275', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/627275'}, {'name': 'CA-2002-22', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-22.html'}, {'name': 'oval:org.mitre.oval:def:121', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A121'}, {'name': '20020305 Another Sql Server 7 Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101535353331625&w=2'}, {'name': '20020312 Many, many, many Sql Server 7 & 2000 Buffer Overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/261775'}, {'name': 'MS02-020', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-020'}]
CVE State: PUBLISHED
Explain CVE-2002-0155
Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute arbitrary code via a long ResDLL parameter in the MSNChat OCX.
Affected Products: n/a
References: [{'name': '4707', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4707'}, {'name': 'CA-2002-13', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-13.html'}, {'name': 'MS02-022', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-022'}, {'name': 'msn-chatcontrol-resdll-bo(9041)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9041.php'}, {'name': '20020508 ADVISORY: MSN Messenger OCX Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102089960531919&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0157
Nautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the .nautilus-metafile.xml metadata file.
Affected Products: n/a
References: [{'name': 'RHSA-2002:064', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-064.html'}, {'name': '20020502 R7-0003: Nautilus Symlink Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/270691/2002-04-29/2002-05-05/0'}, {'name': '4373', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4373'}, {'name': 'nautilus-metafile-xml-symlink(8995)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8995.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0158
Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color database) command line argument.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:14', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14'}, {'name': 'solaris-xsun-co-bo(8703)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8703'}, {'name': '20020402 NSFOCUS SA2002-01: Sun Solaris Xsun "-co" heap overflow', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0000.html'}, {'name': 'oval:org.mitre.oval:def:33', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A33'}, {'name': '20020402 NSFOCUS SA2002-01: Sun Solaris Xsun "-co" heap overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101776858410652&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fpatches%2F108652'}, {'name': '4408', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4408'}]
CVE State: PUBLISHED
Explain CVE-2002-0159
Format string vulnerability in the administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to crash the CSADMIN  module only (denial of service of administration function) or execute arbitrary code via format strings in the URL to port 2002.
Affected Products: n/a
References: [{'name': '2062', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2062'}, {'name': 'ciscosecure-acs-format-string(8742)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8742.php'}, {'name': '20020403 iXsecurity.20020314.csadmin_fmt.a', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101787248913611&w=2'}, {'name': '20020403 Web Interface Vulnerabilities in Cisco Secure ACS for Windows', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/ACS-Win-Web.shtml'}, {'name': '4416', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4416'}]
CVE State: PUBLISHED
Explain CVE-2002-0160
The administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to read HTML, Java class, and image files outside the web root via a ..\.. (modified ..) in the URL to port 2002.
Affected Products: n/a
References: [{'name': '20020403 iXsecurity.20020316.csadmin_dir.a', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101786689128667&w=2'}, {'name': '20020403 Web Interface Vulnerabilities in Cisco Secure ACS for Windows', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/ACS-Win-Web.shtml'}, {'name': '5352', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5352'}]
CVE State: PUBLISHED
Explain CVE-2002-0162
LogWatch before 2.5 allows local users to execute arbitrary code via a symlink attack on the logwatch temporary directory.
Affected Products: n/a
References: [{'name': '20020327 Root compromise through LogWatch 2.1.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101724766216872'}, {'name': '4374', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4374'}, {'name': '20020327 Root compromise through LogWatch 2.1.1', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://online.securityfocus.com/archive/82/264233'}, {'name': 'logwatch-tmp-race-condition(8652)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8652.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://list.kaybee.org/archives/logwatch-announce/2002-March/000002.html'}]
CVE State: PUBLISHED
Explain CVE-2002-0163
Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via compressed DNS responses.
Affected Products: n/a
References: [{'name': 'RHSA-2002:051', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2002-051.html'}, {'name': 'MDKSA-2002:027', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-027.php'}, {'name': 'CSSA-2002-017.1', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-017.1.txt'}, {'name': '20020326 updated squid advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101716495023226&w=2'}, {'name': 'squid-dns-reply-dos(8628)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8628.php'}, {'name': '4363', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4363'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/Advisories/SQUID-2002_2.txt'}, {'name': 'FreeBSD-SA-02:19', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:19.squid.asc'}]
CVE State: PUBLISHED
Explain CVE-2002-0164
Vulnerability in the MIT-SHM extension of the X server on Linux (XFree86) 4.2.1 and earlier allows local users to read and write arbitrary shared memory, possibly to cause a denial of service or gain privileges.
Affected Products: n/a
References: [{'name': 'CLSA-2002:529', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000529'}, {'name': '228529', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-228529-1'}, {'name': '20021001-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20021001-01-P'}, {'name': '20021024 GLSA: xfree', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103547625009363&w=2'}, {'name': 'xfree86-mitshm-memory-access(8706)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8706'}, {'name': '4396', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4396'}, {'name': 'DSA-380', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-380'}, {'name': 'CSSA-2002-SCO.14', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.14/CSSA-2002-SCO.14.txt'}, {'name': 'RHSA-2003:067', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-067.html'}, {'name': 'CSSA-2002-009.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.linuxsecurity.com/advisories/caldera_advisory-2006.html'}, {'name': '1017429', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-77-1017429.1-1'}]
CVE State: PUBLISHED
Explain CVE-2002-0165
LogWatch 2.5 allows local users to gain root privileges via a symlink attack, a different vulnerability than CVE-2002-0162.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://list.kaybee.org/archives/logwatch-announce/2002-March/000003.html'}, {'name': 'logwatch-tmp-race-condition(8652)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8652.php'}, {'name': '20020403 LogWatch 2.5 still vulnerable', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101787227513000&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0166
Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute Javascript via an HTTP request containing the script, which is entered into a web logfile and not properly filtered by analog during display.
Affected Products: n/a
References: [{'name': 'FreeBSD-SN-02:02', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:02.asc'}, {'name': 'RHSA-2002:059', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-059.html'}, {'name': 'analog-logfile-css(8656)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8656.php'}, {'name': '2059', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2059'}, {'name': 'DSA-125', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-125'}, {'name': '4389', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4389'}]
CVE State: PUBLISHED
Explain CVE-2002-0167
Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain weaknesses of NetPBM.
Affected Products: n/a
References: [{'name': 'SuSE-SA:2002:015', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_015_imlib_txt.html'}, {'name': 'RHSA-2002:048', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-048.html'}, {'name': '4339', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4339'}, {'name': 'MDKSA-2002:029', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-029.php'}, {'name': 'CSSA-2002-019.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-019.0.txt'}, {'name': 'CLA-2002:470', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000470'}]
CVE State: PUBLISHED
Explain CVE-2002-0168
Vulnerability in Imlib before 1.9.13 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by manipulating arguments that are passed to malloc, which results in a heap corruption.
Affected Products: n/a
References: [{'name': '4336', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4336'}, {'name': 'SuSE-SA:2002:015', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_015_imlib_txt.html'}, {'name': 'RHSA-2002:048', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-048.html'}, {'name': 'MDKSA-2002:029', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-029.php'}, {'name': 'CSSA-2002-019.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-019.0.txt'}, {'name': 'CLA-2002:470', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000470'}]
CVE State: PUBLISHED
Explain CVE-2002-0169
The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which could allow users to overwrite files outside of the current directory from an untrusted document by using a full pathname as an element identifier.
Affected Products: n/a
References: [{'name': '4654', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4654'}, {'name': 'linux-docbook-stylesheet-insecure(8983)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8983.php'}, {'name': 'RHSA-2002:062', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-062.html'}, {'name': '5349', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5349'}, {'name': 'HPSBTL0205-038', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/4095'}]
CVE State: PUBLISHED
Explain CVE-2002-0170
Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.
Affected Products: n/a
References: [{'name': '20020301 [matt@zope.com: [Zope-Annce] Zope Hotfix 2002-03-01 (Ownership Roles Enforcement)]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101503023511996&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zope.org/Products/Zope/hotfixes/'}, {'name': '4229', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4229'}, {'name': 'RHSA-2002:060', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-060.html'}, {'name': 'zope-proxy-role-privileges(8334)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8334.php'}, {'name': '5350', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5350'}]
CVE State: PUBLISHED
Explain CVE-2002-0171
IRISconsole 2.0 may allow users to log into the icadmin account with an incorrect password in some circumstances, which could allow users to gain privileges.
Affected Products: n/a
References: [{'name': 'irix-irisconsole-icadmin-access(8933)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8933.php'}, {'name': '20020406-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020406-01-P'}, {'name': 'VU#498707', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/498707'}, {'name': '4588', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4588'}, {'name': '5351', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5351'}]
CVE State: PUBLISHED
Explain CVE-2002-0172
/dev/ipfilter on SGI IRIX 6.5 is installed by /dev/MAKEDEV with insecure default permissions (644), which could allow a local user to cause a denial of service (traffic disruption).
Affected Products: n/a
References: [{'name': 'irix-ipfilter-dos(8960)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8960.php'}, {'name': '4648', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4648'}, {'name': 'VU#770891', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/770891'}, {'name': '4695', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4695'}, {'name': '20020408-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020408-01-I'}]
CVE State: PUBLISHED
Explain CVE-2002-0173
Buffer overflow in cpr for the eoe.sw.cpr SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may allow local users to gain root privileges.
Affected Products: n/a
References: [{'name': '5359', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5359'}, {'name': 'irix-cpr-bo(8959)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8959.php'}, {'name': '4644', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4644'}, {'name': '20020409-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020409-01-I'}]
CVE State: PUBLISHED
Explain CVE-2002-0174
nsd on SGI IRIX before 6.5.11 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the nsd.dump file.
Affected Products: n/a
References: [{'name': '4655', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4655'}, {'name': 'irix-nsd-symlink(8981)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8981.php'}, {'name': '20020501-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020501-01-I'}]
CVE State: PUBLISHED
Explain CVE-2002-0175
libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe.
Affected Products: n/a
References: [{'name': 'libsafe-flagchar-protection-bypass(8593)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8593.php'}, {'name': '20020320 [VulnWatch] Bypassing libsafe format string protection', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0070.html'}, {'name': '20020320 Bypassing libsafe format string protection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/263121'}, {'name': '4326', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4326'}, {'name': 'MDKSA-2002:026', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-026.php'}]
CVE State: PUBLISHED