Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2002-1614
Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at.
Affected Products: n/a
References: [{'name': 'VU#435611', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/435611'}, {'name': 'SSRT2275', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11'}, {'name': '20020919 iDEFENSE OSF1/Tru64 3.x vuln clarification', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html'}, {'name': 'SSRT2189', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11'}, {'name': 'tru64-multiple-binaries-bo(10016)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10016'}, {'name': '20020919 iDEFENSE OSF1/Tru64 3.x vuln clarification', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html'}, {'name': '20020902 Happy Labor Day from Snosoft', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/290115'}]
CVE State: PUBLISHED
Explain CVE-2002-1615
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to execute arbitrary code via (1) msgchk or (2) .upd..loader.
Affected Products: n/a
References: [{'name': 'SSRT2275', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11'}, {'name': 'VU#506441', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/506441'}, {'name': 'tru64-multiple-binaries-bo(10016)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10016'}]
CVE State: PUBLISHED
Explain CVE-2002-1616
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc.
Affected Products: n/a
References: [{'name': 'VU#177067', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/177067'}, {'name': '20020919 iDEFENSE OSF1/Tru64 3.x vuln clarification', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_su.txt'}, {'name': 'tru64-chfn-bo(10614)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10614'}, {'name': 'VU#193347', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/193347'}, {'name': '5382', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5382'}, {'name': '5381', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5381'}, {'name': 'VU#671627', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/671627'}, {'name': 'tru64-dxchpwd-bo(11620)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11620'}, {'name': '5379', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5379'}, {'name': 'SSRT2257', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html'}, {'name': 'VU#137555', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/137555'}, {'name': '5380', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5380'}, {'name': 'SSRT2259', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html'}, {'name': '20020919 iDEFENSE OSF1/Tru64 3.x vuln clarification', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html'}, {'name': '20020902 Happy Labor Day from Snosoft', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/290115'}, {'name': 'SSRT2192', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html'}, {'name': 'SSRT2190', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html'}, {'name': 'VU#864083', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/864083'}]
CVE State: PUBLISHED
Explain CVE-2002-1617
Multiple buffer overflows in HP Tru64 UNIX 5.x allow local users to execute arbitrary code via (1) a long -contextDir argument to dtaction, (2) a long -p argument to dtprintinfo, (3) a long -customization argument to dxterm, or (4) a long DISPLAY environment variable to dtterm.
Affected Products: n/a
References: [{'name': '20020919 iDEFENSE OSF1/Tru64 3.x vuln clarification', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html'}, {'name': 'VU#931579', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/931579'}, {'name': 'VU#836275', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/836275'}, {'name': '20020919 iDEFENSE OSF1/Tru64 3.x vuln clarification', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html'}, {'name': 'VU#202939', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/202939'}, {'name': '20020902 Happy Labor Day from Snosoft', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/290115'}, {'name': 'VU#600699', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/600699'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtterm.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtprintinfo.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dxterm.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtaction.txt'}]
CVE State: PUBLISHED
Explain CVE-2002-1618
JFS (JFS3.1 and OnlineJFS) in HP-UX 10.20, 11.00, and 11.04 does not properly implement the sticky bit functionality, which could allow attackers to bypass intended restrictions on filesystems.
Affected Products: n/a
References: [{'name': '5979', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5979'}, {'name': 'oval:org.mitre.oval:def:5700', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5700'}, {'name': 'hp-onlinejfs-improper-security(10399)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10399'}, {'name': 'HPSBUX0210-223', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/4569'}, {'name': 'VU#248337', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/248337'}]
CVE State: PUBLISHED
Explain CVE-2002-1619
Buffer overflow in the FC client for IBM AIX 4.3.x allows remote attackers to cause a denial of service (crash and core dump).
Affected Products: n/a
References: [{'name': 'aix-fc-client-bo(10127)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10127'}, {'name': 'VU#152955', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/152955'}, {'name': 'IY27310', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY27310&apar=only'}]
CVE State: PUBLISHED
Explain CVE-2002-1620
Unknown vulnerability in IBM AIX Parallel Systems Support Programs (PSSP) 3.1.1, 3.2, and 3.4 allows remote attackers to read arbitrary files from a file collection.
Affected Products: n/a
References: [{'name': 'IY28063', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY28063&apar=only'}, {'name': 'VU#640827', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/640827'}, {'name': 'IY28065', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY28065&apar=only'}, {'name': 'IY20699', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY20699&apar=only'}, {'name': 'aix-pssp-information-disclosure(10671)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10671'}]
CVE State: PUBLISHED
Explain CVE-2002-1621
Buffer overflow in the file_comp function in rcp for IBM AIX 4.3.x and 5.1 allows remote attackers to execute arbitrary code.
Affected Products: n/a
References: [{'name': 'IY26503', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY26503&apar=only'}, {'name': 'VU#209363', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/209363'}, {'name': 'IY28698', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY28698&apar=only'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kb.cert.org/vuls/id/SVIM-59FJVF'}]
CVE State: PUBLISHED
Explain CVE-2002-1622
Buffer overflow in certain RPC routines in IBM AIX 4.3 may allow attackers to execute arbitrary code, related to a "variable data type."
Affected Products: n/a
References: [{'name': 'VU#273779', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/273779'}, {'name': 'IY28706', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY28706&apar=only'}, {'name': 'aix-rpc-datatype-bo(10112)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10112'}]
CVE State: PUBLISHED
Explain CVE-2002-1623
The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared secret authentication, does not encrypt initiator or responder identities during negotiation, which may allow remote attackers to determine valid usernames by (1) monitoring responses before the password is supplied or (2) sniffing, as originally reported for FireWall-1 SecuRemote.
Affected Products: n/a
References: [{'name': '20020903 Check Point statement on use of IKE Aggressive Mode', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2002-September/001223.html'}, {'name': '20020911 RE: SecuRemote usernames can be guessed or sniffed using IKE', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103176164729351&w=2'}, {'name': '5607', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5607'}, {'name': 'VU#886601', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/886601'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nta-monitor.com/news/checkpoint.htm'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.checkpoint.com/techsupport/alerts/ike.html'}, {'name': '20020903 SecuRemote usernames can be guessed or sniffed using IKE exchange', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/290202'}, {'name': '20020905 RE: SecuRemote usernames can be guessed or sniffed using IKE  exchange', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103124812629621&w=2'}, {'name': 'fw1-ike-username-enumeration(10034)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10034'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/securitynews/5TP040U8AW.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1624
Buffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP Authenticate header containing certain non-ASCII characters.
Affected Products: n/a
References: [{'name': '6646', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6646'}, {'name': 'lotus-domino-authentication-bo(11058)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11058'}, {'name': 'VU#772563', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/772563'}, {'name': '1004052', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1004052'}]
CVE State: PUBLISHED
Explain CVE-2002-1625
Macromedia Flash Player 6 does not terminate connections when the user leaves the web page, which allows remote attackers to cause a denial of service (bandwidth, resource, and CPU consumption) via the (1) loadMovie or (2) loadSound commands, which continue to execute until the browser is closed.
Affected Products: n/a
References: [{'name': '4567', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4567'}, {'name': 'flash-activex-plugin-dos(8925)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8925'}, {'name': 'VU#128491', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/128491'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.macromedia.com/v1/handlers/index.cfm?ID=22796&Method=Full&Title=Macromedia%20Flash%20Player%206%20Streaming%20Issue&Cache=False'}]
CVE State: PUBLISHED
Explain CVE-2002-1626
Directory traversal vulnerability in Mike Spice My Calendar before 1.5 allows remote attackers to write arbitrary files via .. (dot dot) sequences in a URL.
Affected Products: n/a
References: [{'name': '1003256', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1003256'}, {'name': 'VU#806091', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/806091'}, {'name': '3856', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3856'}, {'name': 'mycalendar-gain-privileges(7966)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7966'}]
CVE State: PUBLISHED
Explain CVE-2002-1627
Directory traversal vulnerability in quiz.cgi for Mike Spice Quiz Me! before 0.6 allows remote attackers to write arbitrary files via .. (dot dot) sequences in the quiz parameter.
Affected Products: n/a
References: [{'name': '1003254', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1003254'}, {'name': 'VU#318835', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/318835'}, {'name': '3857', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3857'}, {'name': 'quizme-gain-privileges(7970)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7970'}]
CVE State: PUBLISHED
Explain CVE-2002-1628
Directory traversal vulnerability in vote.cgi for Mike Spice Mike's Vote CGI before 1.3 allows remote attackers to write arbitrary files via .. (dot dot) sequences in the type parameter.
Affected Products: n/a
References: [{'name': 'vote-cgi-gain-privileges(7971)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7971'}, {'name': '3854', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3854'}, {'name': 'VU#250107', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/250107'}]
CVE State: PUBLISHED
Explain CVE-2002-1629
Multi-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200 ship with a null password, which allows remote attackers to gain administrative privileges via Telnet or HTTP.
Affected Products: n/a
References: [{'name': 'VU#495705', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/495705'}, {'name': 'proxyserver-mtpsr1120-telnet-access(10845)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10845'}, {'name': '7203', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7203'}, {'name': '20021210 MTPSR1-120 Firewall Proxy configuration software', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-12/0105.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1630
The sendmail.jsp sample page in Oracle 9i Application Server (9iAS) allows remote attackers to send arbitrary emails.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technology/deploy/security/pdf/ias_modplsql_alert.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kb.cert.org/vuls/id/SVIM-576QLZ'}, {'name': '6556', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6556'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/papers/hpoas.pdf'}, {'name': 'oracle-appserver-sendmail-sample(8664)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8664'}, {'name': 'VU#717827', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/717827'}]
CVE State: PUBLISHED
Explain CVE-2002-1631
SQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS) allows remote attackers to execute arbitrary code via the sql parameter.
Affected Products: n/a
References: [{'name': '6556', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6556'}, {'name': 'VU#717827', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/717827'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technology/deploy/security/pdf/ias_modplsql_alert.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kb.cert.org/vuls/id/SVIM-576QLZ'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/papers/hpoas.pdf'}]
CVE State: PUBLISHED
Explain CVE-2002-1632
Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to obtain environment variables and other sensitive information via (1) info.jsp, (2) printenv, (3) echo, or (4) echo2.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technology/deploy/security/pdf/ias_modplsql_alert.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kb.cert.org/vuls/id/SVIM-576QLZ'}, {'name': '6556', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6556'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/papers/hpoas.pdf'}, {'name': 'VU#717827', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/717827'}, {'name': 'oracle-appserver-info-sample(8665)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8665'}]
CVE State: PUBLISHED
Explain CVE-2002-1633
Multiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long command line arguments to (1) sample, (2) ex, (3) du, (4) find, (5) lex, (6) mkdir, (7) rm, (8) serserv, (9) tcpserv, (10) termdef, (11) time, (12) unzip, (13) use, (14) wcc, (15) wcc386, (16) wd, (17) wdisasm, (18) which, (19) wlib, (20) wlink, (21) wpp, (22) wpp386, (23) wprof, (24) write, or (25) wstrip.
Affected Products: n/a
References: [{'name': 'VU#879386', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/879386'}, {'name': 'qnx-rtos-bin-bo(9341)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9341'}, {'name': '20020612 madcr: QnX 4.25 - multiples bof in suid/no suid files', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/276553'}, {'name': '5000', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5000'}]
CVE State: PUBLISHED
Explain CVE-2002-1634
Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) ndsobj.nlm, (2) allfield.jse, (3) websinfo.bas, (4) ndslogin.pl, (5) volscgi.pl, (6) lancgi.pl, (7) test.jse, or (8) env.pl.
Affected Products: n/a
References: [{'name': 'netware-sample-information-disclosure(9212)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9212'}, {'name': 'VU#159203', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/159203'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/security_info/vuln_pr0203.html'}, {'name': '17464', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17464'}, {'name': '17465', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17465'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/advisories/4158'}, {'name': '17468', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17468'}, {'name': '17463', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17463'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/advisories/4157'}, {'name': '17466', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17466'}, {'name': '4874', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4874'}, {'name': '17467', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17467'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/security_info/vuln_pr0201.html'}, {'name': '17461', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17461'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/searchtid.cgi?/10064452.htm'}, {'name': '17462', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17462'}]
CVE State: PUBLISHED
Explain CVE-2002-1635
The Apache configuration file (httpd.conf) in Oracle 9i Application Server (9iAS) uses a Location alias for /perl directory instead of a ScriptAlias, which allows remote attackers to read the source code of arbitrary CGI files via a URL containing the /perl directory instead of /cgi-bin.
Affected Products: n/a
References: [{'name': 'VU#936507', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/936507'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/papers/hpoas.pdf'}, {'name': 'oracle-perl-cgi-source(10716)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10716'}]
CVE State: PUBLISHED
Explain CVE-2002-1636
Cross-site scripting (XSS) vulnerability in the htp PL/SQL package for Oracle 9i Application Server (9iAS) allows remote attackers to inject arbitrary web script or HTML via the cbuf parameter to htp.print.
Affected Products: n/a
References: [{'name': 'oracle-htpprint-xss(10687)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10687'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/papers/hpoas.pdf'}]
CVE State: PUBLISHED
Explain CVE-2002-1637
Multiple components in Oracle 9i Application Server (9iAS) are installed with over 160 default usernames and passwords, including (1) SYS, (2) SYSTEM, (3) AQJAVA, (4) OWA, (5) IMAGEUSER, (6) USER1, (7) USER2, (8) PLSQL, (9) DEMO, (10) FINANCE, and many others, which allows attackers to gain privileges.
Affected Products: n/a
References: [{'name': 'default-oracle-applsys(972)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/972'}, {'name': 'VU#712723', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/712723'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/papers/hpoas.pdf'}, {'name': 'default-oracle-system(968)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/968'}, {'name': 'default-oracle-apps(971)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/971'}, {'name': 'default-oracle-sys(969)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/969'}, {'name': 'default-oracle-scott(970)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/970'}]
CVE State: PUBLISHED
Explain CVE-2002-1639
Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain sensitive information via a request to the oracle.apps.cz.servlet.UiServlet servlet with the test parameter set to "version" or "host".
Affected Products: n/a
References: [{'name': '4433', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4433'}, {'name': 'VU#158323', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/158323'}, {'name': '1003967', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1003967'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technology//deploy/security/htdocs/oconfigvul.html'}, {'name': 'oracle-configurator-uiservlet-information(8782)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8782'}]
CVE State: PUBLISHED
Explain CVE-2002-1640
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to inject arbitrary web script or HTML via (1) Text Features in the DHTML UI or (2) the test parameter to the oracle.apps.cz.servlet.UiServlet servlet.
Affected Products: n/a
References: [{'name': 'oracle-configurator-uiservlet-css(8781)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8781'}, {'name': '1003967', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1003967'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technology//deploy/security/htdocs/oconfigvul.html'}, {'name': '4430', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4430'}, {'name': '4436', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4436'}, {'name': 'oracle-configurator-dhtml-css(8780)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8780'}]
CVE State: PUBLISHED
Explain CVE-2002-1641
Multiple buffer overflows in Oracle Web Cache for Oracle 9i Application Server (9iAS) allow remote attackers to execute arbitrary code via unknown vectors.
Affected Products: n/a
References: [{'name': 'VU#291555', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/291555'}, {'name': '4856', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4856'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/vna/ora-webcache.txt'}]
CVE State: PUBLISHED
Explain CVE-2002-1642
PostgreSQL 7.2.1 and 7.2.2 allows local users to delete transaction log (pg_clog) data and cause a denial of service (data loss) via the VACUUM command.
Affected Products: n/a
References: [{'name': 'postgresql-vacuum-delete-pcclog(11102)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11102'}, {'name': '7657', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7657'}, {'name': '[pgsql-announce] 20021003 v7.2.3 Released to fix Potentially Critical Bug', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://archives.postgresql.org/pgsql-announce/2002-10/msg00000.php'}, {'name': 'RHSA-2003:001', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-001.html'}, {'name': 'VU#891177', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/891177'}]
CVE State: PUBLISHED
Explain CVE-2002-1643
Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a long Transport field in a SETUP RTSP request, (2) a DESCRIBE RTSP request with a long URL argument, or (3) two simultaneous HTTP GET requests with long arguments.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.service.real.com/help/faq/security/bufferoverrun12192002.html'}, {'name': 'helix-rtsp-describe-bo(10916)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10916'}, {'name': 'VU#974689', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/974689'}, {'name': '20021220 RealNetworks HELIX Server Buffer Overflow Vulnerabilities (#NISR20122002)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/304203'}, {'name': 'helix-rtsp-setup-bo(10915)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10915'}, {'name': '6454', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6454'}, {'name': '6456', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6456'}, {'name': '6458', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6458'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/advisories/realhelix.txt'}, {'name': 'helix-http-get-bo(10917)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10917'}]
CVE State: PUBLISHED
Explain CVE-2002-1644
SSH Secure Shell for Servers and SSH Secure Shell for Workstations 2.0.13 through 3.2.1, when running without a PTY, does not call setsid to remove the child process from the process group of the parent process, which allows attackers to gain certain privileges.
Affected Products: n/a
References: [{'name': 'ssh-setsid-privilege-elevation(10710)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10710'}, {'name': '6247', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6247'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ssh.com/company/newsroom/article/286/'}, {'name': 'VU#740619', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/740619'}]
CVE State: PUBLISHED
Explain CVE-2002-1645
Buffer overflow in the URL catcher feature for SSH Secure Shell for Workstations client 3.1 to 3.2.0 allows remote attackers to execute arbitrary code via a long URL.
Affected Products: n/a
References: [{'name': '6263', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6263'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ssh.com/company/newsroom/article/287/'}, {'name': 'ssh-client-url-bo(10723)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10723'}, {'name': 'VU#140977', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/140977'}]
CVE State: PUBLISHED
Explain CVE-2002-1646
SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote attackers to override the AllowedAuthentications configuration and use less secure authentication schemes (e.g. password) than configured for the server.
Affected Products: n/a
References: [{'name': 'VU#341187', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/341187'}, {'name': '20020523 [Fwd: Updated version of SSH Secure Shell available]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-05/0204.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ssh.com/company/newsroom/article/201/'}, {'name': '4810', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4810'}, {'name': 'ssh-allowedauthentications-bypass-auth(9163)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9163'}, {'name': 'M-081', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/m-081.shtml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ssh.com/products/ssh/advisories/authentication.cfm'}]
CVE State: PUBLISHED
Explain CVE-2002-1647
The quick login feature in Slash Slashcode does not redirect the user to an alternate URL when the wrong password is provided, which makes it easier for remote web sites to guess the proper passwords by reading the username and password from the Referrer URL.
Affected Products: n/a
References: [{'name': '20020911 slashdot / slashcode disclosing passwords', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103176636403241&w=2'}, {'name': '20020917 Re: slashdot / slashcode disclosing passwords', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103238514720237&w=2'}, {'name': '20020911 Re: slashdot / slashcode disclosing passwords', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103177860017930&w=2'}, {'name': 'VU#603945', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/603945'}]
CVE State: PUBLISHED
Explain CVE-2002-1648
Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail before 1.2.3 allows remote attackers to send email as other users via an IMG URL with modified send_to and subject parameters.
Affected Products: n/a
References: [{'name': 'squirrelmail-html-execute-script(7989)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7989'}, {'name': 'VU#153043', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/153043'}, {'name': '3956', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3956'}, {'name': '20020124 Vulnerabilities in squirrelmail', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-01/0310.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1649
Cross-site scripting (XSS) vulnerability in read_body.php in SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary Javascript via a javascript: URL in an IMG tag.
Affected Products: n/a
References: [{'name': 'squirrelmail-html-execute-script(7989)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7989'}, {'name': 'VU#153043', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/153043'}, {'name': '3956', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3956'}, {'name': '20020124 Vulnerabilities in squirrelmail', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-01/0310.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1650
The spell checker plugin (check_me.mod.php) for SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary commands via a modified sqspell_command parameter.
Affected Products: n/a
References: [{'name': '20020124 squirrelmail bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-01/0296.html'}, {'name': 'squirrelmail-spellchecker-command-execution(7990)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7990'}, {'name': '20020124 Re: squirrelmail bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-01/0306.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1651
Cross-site scripting (XSS) vulnerability in Verity Search97 allows remote attackers to insert arbitrary web content and steal sensitive information from other clients, possibly due to certain error messages from template pages that use the (1) vformat or (2) vfilter functions.
Affected Products: n/a
References: [{'name': '5102', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5102'}, {'name': 'VU#636431', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/636431'}, {'name': 'verity-search97-xss(9441)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9441'}]
CVE State: PUBLISHED
Explain CVE-2002-1652
Buffer overflow in cgicso.c for cgiemail 1.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long query parameter.
Affected Products: n/a
References: [{'name': '6141', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6141'}, {'name': 'VU#185251', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/185251'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/exploits/5TP0W005FE.html'}, {'name': '1002395', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1002395'}, {'name': 'cgiemail-cgicso-get-bo(10595)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10595'}]
CVE State: PUBLISHED
Explain CVE-2002-1653
Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to communicate without encryption despite intended configuration, and may allow remote attackers to sniff sensitive information.
Affected Products: n/a
References: [{'name': 'VU#165099', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/165099'}, {'name': '8431', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8431'}, {'name': 'cryptcat-e-no-encryption(10618)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10618'}]
CVE State: PUBLISHED
Explain CVE-2002-1654
iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provides a distinct attack vector and may make it easier to conduct brute force password guessing without detection.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kb.cert.org/vuls/id/AAMN-567NFX'}, {'name': '3831', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3831'}, {'name': 'netscape-enterprise-http-brute-force(7845)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7845'}, {'name': 'VU#985347', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/985347'}, {'name': '20020109 Netscape publishing wp-force-auth command', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://lists.virus.org/vulnwatch-0201/msg00008.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/vulnerabilities/pr0105.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/securitynews/5IP0G0060Q.html'}, {'name': '1003157', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1003157'}]
CVE State: PUBLISHED
Explain CVE-2002-1655
The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause a denial of service (crash) via a wp-html-rend request.
Affected Products: n/a
References: [{'name': '20020109 Netscape ?wp-html-rend denial of service attack', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://cert.uni-stuttgart.de/archive/vulnwatch/2002/01/msg00007.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/security_info/vuln_pr0104.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kb.cert.org/vuls/id/AAMN-567N48'}, {'name': 'netscape-enterprise-invalid-command-dos(7842)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7842'}, {'name': 'VU#191763', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/191763'}, {'name': '3826', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3826'}]
CVE State: PUBLISHED
Explain CVE-2002-1656
X-News (x_news) 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the password, e.g. via sniffing or the users.txt data file, and providing it in a cookie.
Affected Products: n/a
References: [{'name': 'VU#162723', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/162723'}, {'name': '1003828', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1003828'}, {'name': 'xnews-users-world-readable(8465)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8465'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ifrance.com/kitetoua/tuto/x_holes.txt'}, {'name': '4283', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4283'}]
CVE State: PUBLISHED
Explain CVE-2002-1657
PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess passwords via a brute force attack.
Affected Products: n/a
References: [{'name': 'postgresql-md5-salt-weak-security(20215)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20215'}, {'name': '20050420 Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111402558115859&w=2'}, {'name': '20050420 Re: Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111403050902165&w=2'}, {'name': '[pgsql-admin] 20020821 Re: OT: password encryption (salt theory)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://archives.postgresql.org/pgsql-admin/2002-08/msg00253.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1658
Buffer overflow in htdigest in Apache 1.3.26 and 1.3.27 may allow attackers to execute arbitrary code via a long user argument.  NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is executed from a CGI program. Therefore this may not be a vulnerability.
Affected Products: n/a
References: [{'name': '5993', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5993'}, {'name': 'apache-htdigest-bo(10414)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10414'}, {'name': '20021016 Apache 1.3.26', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103480856102007&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'https://sardonix.org/audit/apache-45.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1659
user_profile.asp in PortalApp 2.2 allows local users to gain privileges by modifying the user_id variable.
Affected Products: n/a
References: [{'name': 'portalapp-user-privilege-elevation(10558)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10558'}, {'name': '1005541', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005541'}, {'name': '10465', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10465'}]
CVE State: PUBLISHED
Explain CVE-2002-1660
calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/exploits/5QP0P158AC.html'}, {'name': '1005284', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005284'}, {'name': '5820', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5820'}, {'name': 'vbulletin-calendar-command-execution(10176)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10176'}]
CVE State: PUBLISHED
Explain CVE-2002-1661
The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service (infinite loop) when leafnode requests a cross-posted article to one group whose name is a prefix of another group.
Affected Products: n/a
References: [{'name': '1005865', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1005865'}, {'name': '7801', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7801'}, {'name': '7870', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7870'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://leafnode.sourceforge.net/leafnode-SA-2002-01.txt'}, {'name': '20021229 Leafnode security announcement SA:2002:01', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104127108823436&w=2'}, {'name': '20030102 GLSA:  leafnode', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104152295210075&w=2'}, {'name': 'leafnode-nntp-dos(10942)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10942'}, {'name': '7799', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7799'}, {'name': '6490', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6490'}, {'name': 'MDKSA-2003:005', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:005'}]
CVE State: PUBLISHED
Explain CVE-2002-1662
Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.11 allow remote attackers to execute arbitrary script on other clients via (1) search.php and (2) the "Your name" field during account registration.
Affected Products: n/a
References: [{'name': 'mambo-name-field-xss(10859)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10859'}, {'name': '6386', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6386'}, {'name': '20021212 Multiple Mambo Site Server sec-weaknesses', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html'}, {'name': 'mambo-search-xss(10854)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10854'}]
CVE State: PUBLISHED