Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2002-0296
The installation of Tarantella Enterprise 3 allows local users to overwrite arbitrary files via a symlink attack on the "spinning" temporary file.
Affected Products: n/a
References: [{'name': '20020224 Exploit for Tarantella Enterprise installation (bid  4115)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101467193803592&w=2'}, {'name': '20020219 Another local root vulnerability during installation of Tarantella Enterprise 3.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-02/0187.html'}, {'name': 'tarantella-tmp-spinning-symlink(8223)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8223'}, {'name': '4115', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4115'}]
CVE State: PUBLISHED
Explain CVE-2002-0297
Buffer overflow in ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL in an HTTP request.
Affected Products: n/a
References: [{'name': '20020219 ScriptEase MiniWeb Server DoS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101415883727615&w=2'}, {'name': '4128', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4128'}]
CVE State: PUBLISHED
Explain CVE-2002-0298
ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) via certain HTTP GET requests containing (1) a %2e%2e (encoded dot-dot), (2) several /../ (dot dot) sequences, (3) a missing URI, or (4) several ../ in a URI that does not begin with a / (slash) character.
Affected Products: n/a
References: [{'name': '20020219 Four More ScriptEase MiniWeb Server v0.95 DoS Attacks', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101424439220931&w=2'}, {'name': '4145', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4145'}]
CVE State: PUBLISHED
Explain CVE-2002-0299
CNet CatchUp before 1.3.1 allows attackers to execute arbitrary code via a .RVP file that creates a file with an arbitrary extension (such as .BAT), which is executed during a scan.
Affected Products: n/a
References: [{'name': '3975', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3975'}, {'name': 'cnet-catchup-gain-privileges(8035)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8035.php'}, {'name': '20020220 CNet CatchUp arbitrary code execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101438631921749&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0300
gnujsp 1.0.0 and 1.0.1 allows remote attackers to list directories, read source code of certain scripts, and bypass access restrictions by directly requesting the target file from the gnujsp servlet, which does not work around a limitation of JServ and does not process the requested file.
Affected Products: n/a
References: [{'name': '4125', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4125'}, {'name': 'gnujsp-jserv-information-disclosure(8240)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8240.php'}, {'name': '20020220 Re: gnujsp: dir- and script-disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101422432123898&w=2'}, {'name': 'DSA-114', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-114'}, {'name': '20020219 gnujsp: dir- and script-disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101415804625292&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0301
Citrix NFuse 1.6 allows remote attackers to bypass authentication and obtain sensitive information by directly calling launch.asp with invalid NFUSE_USER and NFUSE_PASSWORD parameters.
Affected Products: n/a
References: [{'name': '4142', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4142'}, {'name': '20020220 Re: Citrix NFuse 1.6 - additional network exposure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101424947801895&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0302
The Notify daemon for Symantec Enterprise Firewall (SEF) 6.5.x drops large alerts when SNMP is used as the transport, which could prevent some alerts from being sent in the event of an attack.
Affected Products: n/a
References: [{'name': '4139', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4139'}, {'name': 'sef-snmp-notify-loss(8253)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8253'}, {'name': '20020220 Symantec Enterprise Firewall (SEF) Notify Daemon data loss via SN MP', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101424225814604&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://securityresponse.symantec.com/avcenter/security/Content/2002.02.20a.html'}]
CVE State: PUBLISHED
Explain CVE-2002-0303
GroupWise 6, when using LDAP authentication and when Post Office has a blank username and password, allows attackers to gain privileges of other users by logging in without a password.
Affected Products: n/a
References: [{'name': '4154', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4154'}, {'name': '20020220 Security issue with GroupWise 6 and LDAP authentication in PostOffice', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101425369510983&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0304
Lil HTTP Server 2.1 allows remote attackers to read password-protected files via a /./ in the HTTP request.
Affected Products: n/a
References: [{'name': '20020220 SecurityOffice Security Advisory:// LilHTTP Web Server Protected File Access Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101432338000591&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.summitcn.com/lilhttp/lildocs.html#WhatsNew'}, {'name': '20020320 LilHTTP Web Server Protected File Access Vulnerability (Solution)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101665069500433&w=2'}, {'name': '4153', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4153'}]
CVE State: PUBLISHED
Explain CVE-2002-0305
Zero One Tech (ZOT) P100s print server does not properly disable the SNMP service or change the default password, which could leave the server open to attack without the administrator's knowledge.
Affected Products: n/a
References: [{'name': '4155', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4155'}, {'name': '20020221 Zero One Tech (ZOT) P100s PrintServer and SNMP', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101432416503293&w=2'}, {'name': 'zot-default-snmp-string(8270)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8270'}]
CVE State: PUBLISHED
Explain CVE-2002-0306
ans.pl in Avenger's News System (ANS) 2.11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the p (plugin) parameter.
Affected Products: n/a
References: [{'name': '4149', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4149'}, {'name': '20020221 "Cthulhu xhAze" - Command execution in Ans.pl', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101430868616112&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0307
Directory traversal vulnerability in ans.pl in Avenger's News System (ANS) 2.11 and earlier allows remote attackers to determine the existence of arbitrary files or execute any Perl program on the system via a .. (dot dot) in the p parameter, which reads the target file and attempts to execute the line using Perl's eval function.
Affected Products: n/a
References: [{'name': '4147', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4147'}, {'name': '20020221 "Cthulhu xhAze" - Command execution in Ans.pl', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101430868616112&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0308
admin.asp in AdMentor 2.11 allows remote attackers to bypass authentication and gain privileges via a SQL injection attack on the Login and Password arguments.
Affected Products: n/a
References: [{'name': '20020221 AdMentor Login Flaw', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101430885516675&w=2'}, {'name': 'admentor-asp-gain-access(8245)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8245'}, {'name': '4152', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4152'}]
CVE State: PUBLISHED
Explain CVE-2002-0309
SMTP proxy in Symantec Enterprise Firewall (SEF) 6.5.x includes the firewall's physical interface name and address in an SMTP protocol exchange when NAT translation is made to an address other than the firewall, which could allow remote attackers to determine certain firewall configuration information.
Affected Products: n/a
References: [{'name': '20020220 Symantec Enterprise Firewall (SEF) SMTP proxy inconsistencies', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101424307617060&w=2'}, {'name': 'sef-smtp-proxy-information(8251)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8251.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://securityresponse.symantec.com/avcenter/security/Content/2002.02.20.html'}, {'name': '20020221 Symantec Enterprise Firewall (SEF) SMTP proxy inconsistencies', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101430810813853&w=2'}, {'name': '4141', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4141'}]
CVE State: PUBLISHED
Explain CVE-2002-0310
Netwin WebNews 1.1k CGI program includes several default usernames and cleartext passwords that cannot be deleted by the administrator, which allows remote attackers to gain privileges via the username/password combinations (1) testweb/newstest, (2) alwn3845/imaptest, (3) alwi3845/wtest3452, or (4) testweb2/wtest4879.
Affected Products: n/a
References: [{'name': '20020221 Netwin Webnews 1.1k', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101432236729631&w=2'}, {'name': '4156', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4156'}, {'name': 'webnews-cgi-default-accounts(8255)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8255'}]
CVE State: PUBLISHED
Explain CVE-2002-0311
Vulnerability in webtop in UnixWare 7.1.1 and Open UNIX 8.0.0 allows local and possibly remote attackers to gain root privileges via shell metacharacters in the -c argument for (1) in scoadminreg.cgi or (2) service_action.cgi.
Affected Products: n/a
References: [{'name': 'unixware-webtop-execute-commands(7977)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7977.php'}, {'name': '20020120 Unixware 7.1.1 scoadminreg.cgi local exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/251747'}, {'name': 'CSSA-2002-SCO.6', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.6/CSSA-2002-SCO.6.txt'}, {'name': '3936', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3936'}]
CVE State: PUBLISHED
Explain CVE-2002-0312
Directory traversal vulnerability in Essentia Web Server 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL.
Affected Products: n/a
References: [{'name': '4160', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4160'}, {'name': '20020221 SecurityOffice Security Advisory:// Essentia Web Server Directory Traversal Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101439734827908&w=2'}, {'name': '20020226 SecurityOffice Security Advisory:// Essentia Web Server Vulnerabilities (Vendor Patch)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/258365'}, {'name': 'essentia-server-directory-traversal(8248)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8248.php'}, {'name': '20020222 SecurityOffice Security Advisory:// Essentia Web Server Vulnerabilities (Vendor Patch)', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0202&L=ntbugtraq&F=P&S=&P=10201'}]
CVE State: PUBLISHED
Explain CVE-2002-0313
Buffer overflow in Essentia Web Server 2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long URL.
Affected Products: n/a
References: [{'name': '20020226 SecurityOffice Security Advisory:// Essentia Web Server Vulnerabilities (Vendor Patch)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/258365'}, {'name': '20030704 Essentia Web Server 2.12 (Linux)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006231.html'}, {'name': 'essentia-server-long-request-dos(8249)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8249.php'}, {'name': '20020221 SecurityOffice Security Advisory:// Essentia Web Server DoS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101440530023617&w=2'}, {'name': '4159', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4159'}]
CVE State: PUBLISHED
Explain CVE-2002-0314
fasttrack p2p, as used in (1) KaZaA before 1.5, (2) grokster, and (3) morpheus allows remote attackers to cause a denial of service (memory exhaustion) via a series of client-to-client messages, which pops up new windows per message.
Affected Products: n/a
References: [{'name': '20020222 Morpheus, Kazaa and Grokster Remote DoS. Also Identity faking vulnerability.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101441689224760&w=2'}, {'name': 'fasttrack-message-service-dos(8273)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8273.php'}, {'name': '4122', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4122'}]
CVE State: PUBLISHED
Explain CVE-2002-0315
fasttrack p2p, as used in (1) KaZaA, (2) grokster, and (3) morpheus allows remote attackers to spoof other users by modifying the username and network information in the message header.
Affected Products: n/a
References: [{'name': '20020222 Morpheus, Kazaa and Grokster Remote DoS. Also Identity faking vulnerability.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101441689224760&w=2'}, {'name': 'fasttrack-message-service-spoof(8272)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8272.php'}, {'name': '4121', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4121'}]
CVE State: PUBLISHED
Explain CVE-2002-0316
Cross-site scripting vulnerability in eXtreme message board (XMB) 1.6x and earlier allows remote attackers to execute script as other XMB users by inserting the script into an IMG tag.
Affected Products: n/a
References: [{'name': '20020222 XMB cross-scripting vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101447886404876&w=2'}, {'name': 'xmb-php-css(8262)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8262.php'}, {'name': '4167', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4167'}, {'tags': ['x_refsource_MISC'], 'url': 'https://docs.xmbforum2.com/index.php?title=Security_Issue_History'}]
CVE State: PUBLISHED
Explain CVE-2002-0317
Gator ActiveX component (IEGator.dll) 3.0.6.1 allows remote web sites to install arbitrary software by specifying a Trojan Gator installation file (setup.ex_) in the src parameter.
Affected Products: n/a
References: [{'name': '20020220 Gator installer Plugin allows any software to be installed', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101438671922874&w=2'}, {'name': 'gator-activex-install(8266)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8266.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gator.com/update/'}, {'name': '4161', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4161'}]
CVE State: PUBLISHED
Explain CVE-2002-0318
FreeRADIUS RADIUS server allows remote attackers to cause a denial of service (CPU consumption) via a flood of Access-Request packets.
Affected Products: n/a
References: [{'name': '20020221 DoS Attack against many RADIUS servers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101440113410083&w=2'}, {'name': 'freeradius-access-request-dos(9968)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9968.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0319
Cross-site scripting vulnerability in edituser.php for pforum 1.14 and earlier allows remote attackers to execute script and steal cookies from other users via Javascript in a username.
Affected Products: n/a
References: [{'name': '4165', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4165'}, {'name': 'pforum-username-css(8263)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8263.php'}, {'name': '20020222 pforum: cross-site-scripting bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101446366708757&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0320
Buffer overflow in Yahoo! Messenger 5.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) message or (2) IMvironment field.
Affected Products: n/a
References: [{'name': '4162', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4162'}, {'name': 'VU#887319', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/887319'}, {'name': 'CA-2002-16', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-16.html'}, {'name': '20020221 Remote crashes in Yahoo messenger', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101439616623230&w=2'}, {'name': 'VU#419419', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/419419'}, {'name': 'yahoo-messenger-imvironment-bo(8265)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8265.php'}, {'name': 'yahoo-messenger-message-bo(8264)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8264.php'}, {'name': '4163', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4163'}]
CVE State: PUBLISHED
Explain CVE-2002-0321
Yahoo! Messenger 5.0 allows remote attackers to spoof other users by modifying the username and using the spoofed username for social engineering or denial of service (flooding) attacks.
Affected Products: n/a
References: [{'name': 'yahoo-messenger-username-spoof(8267)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8267.php'}, {'name': 'CA-2002-16', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-16.html'}, {'name': '20020221 Remote crashes in Yahoo messenger', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101439616623230&w=2'}, {'name': 'VU#952875', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/952875'}, {'name': '4164', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4164'}]
CVE State: PUBLISHED
Explain CVE-2002-0322
Yahoo! Messenger 4.0 sends user passwords in cleartext, which could allow remote attackers to gain privileges of other users via sniffing.
Affected Products: n/a
References: [{'name': '20020223 Re: Remote crashes in Yahoo messenger', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101466489113920&w=2'}, {'name': '4173', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4173'}, {'name': '20020223 Re: Re: Remote crashes in Yahoo messenger', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101467298107635&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0323
comment2.jse in ScriptEase:WebServer allows remote attackers to read arbitrary files by specifying the target file as an argument in the URL.
Affected Products: n/a
References: [{'name': '20020224 ScriptEase:WebServer Edition vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101465709621105&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0324
Greymatter 1.21c and earlier with the Bookmarklet feature enabled allows remote attackers to read a cleartext password and gain administrative privileges by guessing the name of a gmrightclick-*.reg file which contains the administrator name and password in cleartext, then retrieving the file from the web server before the Greymatter administrator performs a "Clear And Exit" action.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.dangerousmonkey.com/dangblog/dangarch/00000051.htm'}, {'name': '20020224 Greymatter 1.21c and earlier - remote login/pass exposure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101465343308249&w=2'}, {'name': '4169', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4169'}, {'name': 'greymatter-gmrightclick-account-information(8277)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8277.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0325
Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the URL.
Affected Products: n/a
References: [{'name': '20020226 BadBlue Yet Another Directory Traversal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101474689126219&w=2'}, {'name': 'badblue-dotdotdot-directory-traversal(8295)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8295.php'}, {'name': '4179', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4179'}]
CVE State: PUBLISHED
Explain CVE-2002-0326
Cross-site scripting vulnerability in BadBlue before 1.6.1 beta allows remote attackers to execute arbitrary script and possibly additional commands via a URL that contains Javascript.
Affected Products: n/a
References: [{'name': '20020226 BadBlue XSS vulnerabilities / Filesharing Server Worm', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101474387016066&w=2'}, {'name': 'badblue-url-css(8294)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8294.php'}, {'name': '4180', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4180'}]
CVE State: PUBLISHED
Explain CVE-2002-0327
Buffer overflow in Century Software TERM allows local users to gain root privileges via a long tty argument to the callin program.
Affected Products: n/a
References: [{'name': '4174', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4174'}, {'name': '20020227 Century Software Term Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101477608215471&w=2'}, {'name': '20020222 Censoft TERM Emu bOf', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://online.securityfocus.com/archive/82/257731'}, {'name': 'term-tty-bo(8291)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8291.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0328
Cross-site scripting vulnerability in Ikonboard 3.0.1 allows remote attackers to execute arbitrary script as other Ikonboard users and steal cookies via Javascript in an IMG tag.
Affected Products: n/a
References: [{'name': '20020226 Re: Open Bulletin Board javascript bug.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101475420818274&w=2'}, {'name': '4182', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4182'}]
CVE State: PUBLISHED
Explain CVE-2002-0329
Cross-site scripting vulnerability in Snitz Forums 2000 3.3.03 and earlier allows remote attackers to execute arbitrary script as other Forums 2000 users via Javascript in an IMG tag.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://forum.snitz.com/forum/link.asp?TOPIC_ID=23660'}, {'name': '20020227 RE: Open Bulletin Board javascript bug.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101485184605149&w=2'}, {'name': 'VU#132011', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/132011'}, {'name': '4192', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4192'}, {'name': '20020227 Snitz 2000 Code Patch (was RE: Open Bulletin Board javascript bug.)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/258981'}, {'name': 'snitz-img-css(8309)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8309.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0330
Cross-site scripting vulnerability in codeparse.php of Open Bulletin Board (OpenBB) 1.0.0 allows remote attackers to execute arbitrary script and steal cookies via Javascript in the IMG tag.
Affected Products: n/a
References: [{'name': '20020225 Open Bulletin Board  javascript bug.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101466092601554&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://community.iansoft.net/read.php?TID=5159'}, {'name': '4171', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4171'}, {'name': 'openbb-img-css(8278)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8278.php'}, {'name': '5658', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5658'}]
CVE State: PUBLISHED
Explain CVE-2002-0331
Directory traversal vulnerability in the HTTP server for BPM Studio Pro 4.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request.
Affected Products: n/a
References: [{'name': '4198', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4198'}, {'name': 'bpm-http-directory-traversal(8300)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8300.php'}, {'name': '20020227 BPM STUDIO PRO 4.2 DIRECTORY ESCAPE VULNERABILITY', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101486044323352&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0332
Buffer overflows in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to execute arbitrary code via (1) a long DNS hostname that is determined using reverse DNS lookups, (2) a long AUTH string, or (3) certain data in the xtell request.
Affected Products: n/a
References: [{'name': '20020227 Remote exploit against xtelld and other fun', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101494896516467&w=2'}, {'name': '4193', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4193'}, {'name': 'DSA-121', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-121'}, {'name': 'xtell-bo(8312)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8312.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0333
Directory traversal vulnerability in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to read files with short names, and local users to read more files using a symlink with a short name, via a .. in the TTY argument.
Affected Products: n/a
References: [{'name': '20020227 Remote exploit against xtelld and other fun', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101494896516467&w=2'}, {'name': 'DSA-121', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-121'}, {'name': '4194', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4194'}, {'name': 'xtell-tty-directory-traversal(8313)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8313.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0334
xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows local users to modify files via a symlink attack on the .xtell-log file.
Affected Products: n/a
References: [{'name': '4197', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4197'}, {'name': '20020227 Remote exploit against xtelld and other fun', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101494896516467&w=2'}, {'name': 'xtell-log-symlink(8314)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8314.php'}, {'name': 'DSA-121', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-121'}]
CVE State: PUBLISHED
Explain CVE-2002-0335
Buffer overflow in Galacticomm Worldgroup web server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long HTTP GET request.
Affected Products: n/a
References: [{'name': '4186', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4186'}, {'name': 'worldgroup-http-get-bo(8298)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8298.php'}, {'name': '20020227 LBYTE&SECURITY.NNOV: Buffer overflows in Worldgroup', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101484128203523&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0336
Buffer overflow in Galacticomm Worldgroup FTP server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a LIST command containing a large number of / (slash), * (wildcard), and .. characters.
Affected Products: n/a
References: [{'name': 'worldgroup-ftp-list-bo(8297)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8297.php'}, {'name': '4185', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4185'}, {'name': '20020227 LBYTE&SECURITY.NNOV: Buffer overflows in Worldgroup', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101484128203523&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0337
RealPlayer 8 allows remote attackers to cause a denial of service (CPU utilization) via malformed .mp3 files.
Affected Products: n/a
References: [{'name': '4200', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4200'}, {'name': 'realplayer-mp3-invalid-dos(8320)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8320.php'}, {'name': '20020227 2K, with RealPlayer Installed 100 % CPU utilization', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101495354424868&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0338
The Bat! 1.53d and 1.54beta, and possibly other versions, allows remote attackers to cause a denial of service (crash) via an attachment whose name includes an MS-DOS device name.
Affected Products: n/a
References: [{'name': 'thebat-msdos-device-dos(8303)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8303.php'}, {'name': '4187', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4187'}, {'name': '20020227 SECURITY.NNOV: Special device access in The Bat!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101483832026841&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0339
Cisco IOS 11.1CC through 12.2 with Cisco Express Forwarding (CEF) enabled includes portions of previous packets in the padding of a MAC level packet when the MAC packet's length is less than the IP level packet length.
Affected Products: n/a
References: [{'name': '20020227 Cisco Security Advisory: Data Leak with Cisco Express Forwarding', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/IOS-CEF-pub.shtml'}, {'name': '4191', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4191'}, {'name': 'ios-cef-information-leak(8296)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8296.php'}, {'name': '806', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/806'}, {'name': 'VU#310387', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/310387'}]
CVE State: PUBLISHED
Explain CVE-2002-0340
Windows Media Player (WMP) 8.00.00.4477, and possibly other versions, automatically detects and executes .wmf and other content, even when the file's extension or content type does not specify .wmf, which could make it easier for attackers to conduct unauthorized activities via Trojan horse files containing .wmf content.
Affected Products: n/a
References: [{'name': '20020222 Windows Media Player executes WMF content in .MP3 files.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101447771102582&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0341
GWWEB.EXE in GroupWise Web Access 5.5, and possibly other versions, allows remote attackers to determine the full pathname of the web server via an HTTP request with an invalid HTMLVER parameter.
Affected Products: n/a
References: [{'name': '20020227 SecurityOffice Security Advisory:// Novell GroupWise Web Access Path Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101494830315071&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0342
Kmail 1.2 on KDE 2.1.1 allows remote attackers to cause a denial of service (crash) via an email message whose body is approximately 55 K long.
Affected Products: n/a
References: [{'name': '20020226 BUG: Kmail client DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101475683425671&w=2'}, {'name': 'kmail-message-body-dos(8283)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8283.php'}, {'name': '4177', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4177'}]
CVE State: PUBLISHED
Explain CVE-2002-0343
Hotline Client 1.8.5 stores sensitive user information, including passwords, in plaintext in the bookmarks file, which could allow local users with access to the bookmarks file to gain privileges by extracting the passwords.
Affected Products: n/a
References: [{'name': '4210', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4210'}, {'name': 'hotline-connect-plaintext-password(8327)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8327.php'}, {'name': '20020228 Hotline Client Plain password vuln.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101495128121299&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0344
Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers to impersonate the LiveUpdate server.
Affected Products: n/a
References: [{'name': '4170', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4170'}, {'name': 'nav-liveupdate-plaintext-account(8282)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8282.php'}, {'name': '20020225 Symantec LiveUpdate', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101466781122312&w=2'}, {'name': '20020228 Re:  "Javier Sanchez" jsanchez157@hotmail.com 02/25/2002 11:14 AM, Symantec', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101496301307285&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0345
Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, which could allow an attacker to gain privileges.
Affected Products: n/a
References: [{'name': '20020226 RE: Symantec LiveUpdate', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/258293'}, {'name': '20020301 Re:  "Peter Miller" pcmiller61@yahoo.com, 02/26/2002 03:48 AM RE:  Symantec', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101529792821615&w=2'}, {'name': 'ghost-plaintext-account(8305)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8305.php'}, {'name': '4181', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4181'}]
CVE State: PUBLISHED
Explain CVE-2002-0346
Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to (1) service.cgi or (2) alert.cgi.
Affected Products: n/a
References: [{'name': 'cobalt-raq-css(8321)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8321.php'}, {'name': '20020228 Colbalt-RAQ-v4-Bugs&Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101495944202452&w=2'}, {'name': '4211', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4211'}]
CVE State: PUBLISHED
Explain CVE-2002-0347
Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. (dot dot) in an HTTP request.
Affected Products: n/a
References: [{'name': '20020228 Colbalt-RAQ-v4-Bugs&Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101495944202452&w=2'}, {'name': '4208', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4208'}, {'name': 'cobalt-raq-directory-traversal(8322)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8322.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0348
service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service argument.
Affected Products: n/a
References: [{'name': '4209', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4209'}, {'name': '20020228 Colbalt-RAQ-v4-Bugs&Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101495944202452&w=2'}, {'name': 'cobalt-raq-service-dos(8323)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8323.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0349
Tiny Personal Firewall (TPF) 2.0.15, under certain configurations, will pop up an alert to the system even when the screen is locked, which could allow an attacker with physical access to the machine to hide activities or bypass access restrictions.
Affected Products: n/a
References: [{'name': 'tinyfw-popup-gain-access(8324)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8324.php'}, {'name': '20020228 ... Tiny Personal Firewall ...', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101494587110288&w=2'}, {'name': '4207', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4207'}]
CVE State: PUBLISHED
Explain CVE-2002-0350
HP Procurve Switch 4000M running firmware C.08.22 and C.09.09 allows remote attackers to cause a denial of service via a port scan of the management IP address, which disables the telnet service.
Affected Products: n/a
References: [{'name': '20020301 DoS on HP ProCurve 4000M switch (possibly others)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101500123900612&w=2'}, {'name': '4212', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4212'}, {'name': 'hp-procurve-portscan-dos(8329)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8329.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0351
Buffer overflows in CFS daemon (cfsd) before 1.3.3-8.1, and 1.4x before 1.4.1-5, allow remote attackers to cause a denial of service and possibly execute arbitrary code.
Affected Products: n/a
References: [{'name': 'DSA-116', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-116'}, {'name': '4219', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4219'}, {'name': 'cfs-bo(8330)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8330.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0352
Phorum 3.3.2 allows remote attackers to determine the email addresses of the 10 most active users via a direct HTTP request to the stats.php program, which does not require authentication.
Affected Products: n/a
References: [{'name': 'phorum-admin-users-information(8344)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8344.php'}, {'name': '4226', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4226'}, {'name': '20020302 Phorum Discussion Board Security Bug (Email Disclosure)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101508207206900&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0353
The ASN.1 parser in Ethereal 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a certain malformed packet, which causes Ethereal to allocate memory incorrectly, possibly due to zero-length fields.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00003.html'}, {'name': '4604', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4604'}, {'name': 'CLA-2002:474', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000474'}, {'name': 'RHSA-2002:088', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-088.html'}, {'name': 'ethereal-asn1-dos(8952)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8952.php'}, {'name': 'DSA-130', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-130'}]
CVE State: PUBLISHED
Explain CVE-2002-0354
The XMLHttpRequest object (XMLHTTP) in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files and list directories on a client system by opening a URL that redirects the browser to the file on the client, then reading the result using the responseText property.
Affected Products: n/a
References: [{'name': '20020430 Reading local files in Netscape 6 and Mozilla (GM#001-NS)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102017952204097&w=2'}, {'name': '20020430 Reading local files in Netscape 6 and Mozilla (GM#001-NS)', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=102020343728766&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0355
netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the system, even if the users do not have the appropriate permissions.
Affected Products: n/a
References: [{'name': '4682', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4682'}, {'name': '20020503-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020503-01-I'}, {'name': 'irix-netstat-file-existence(9023)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9023.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0356
Vulnerability in XFS filesystem reorganizer (fsr_xfs) in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files.
Affected Products: n/a
References: [{'name': '20020504-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020504-01-I'}, {'name': '4706', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4706'}, {'name': 'irix-fsrxfs-gain-privileges(9042)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9042.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0357
Unknown vulnerability in rpc.passwd in the nfs.sw.nis subsystem of SGI IRIX 6.5.15 and earlier allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': '20020601-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020601-01-P'}, {'name': 'M-087', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/m-087.shtml'}, {'name': 'irix-rpcpasswd-gain-privileges(9261)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9261.php'}, {'name': '4939', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4939'}, {'name': 'VU#430419', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/430419'}, {'name': '834', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/834'}]
CVE State: PUBLISHED
Explain CVE-2002-0358
MediaMail and MediaMail Pro in SGI IRIX 6.5.16 and earlier allows local users to force the program to dump core via certain arguments, which could allow the users to read sensitive data or gain privileges.
Affected Products: n/a
References: [{'name': '4959', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4959'}, {'name': '20020602-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020602-01-I'}, {'name': 'irix-mediamail-core-dump(9292)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9292.php'}]
CVE State: PUBLISHED