Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2002-0077
Microsoft Internet Explorer 5.01, 5.5 and 6.0 treats objects invoked on an HTML page with the codebase property as part of Local Computer zone, which allows remote attackers to invoke executables present on the local system through objects such as the popup object, aka the "Local Executable Invocation via Object tag" vulnerability.
Affected Products: n/a
References: [{'name': 'MS02-015', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-015'}, {'name': '20020113 Internet Explorer Pop-Up OBJECT Tag Bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101103188711920&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0078
The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone by embedding the script in a cookie, aka the "Cookie-based Script Execution" vulnerability.
Affected Products: n/a
References: [{'name': 'MS02-015', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-015'}, {'name': 'ie-cookie-local-zone(8701)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8701.php'}, {'name': '3029', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3029'}, {'name': 'oval:org.mitre.oval:def:96', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A96'}, {'name': '4392', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4392'}, {'name': '20020330 IE: Remote webpage can script in local zone', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101781180528301&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0079
Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:25', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A25'}, {'name': 'VU#610291', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/610291'}, {'name': 'oval:org.mitre.oval:def:16', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16'}, {'name': '4485', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4485'}, {'name': 'MS02-018', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018'}, {'name': '20020410 Windows 2000 and NT4 IIS .ASP Remote Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101846993304518&w=2'}, {'name': 'iis-asp-chunked-encoding-bo(8795)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8795.php'}, {'name': 'CA-2002-09', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-09.html'}, {'name': '20020415 Microsoft IIS Vulnerabilities in Cisco Products - MS02-018', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml'}]
CVE State: PUBLISHED
Explain CVE-2002-0080
rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.
Affected Products: n/a
References: [{'name': 'linux-rsync-inherit-privileges(8463)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8463.php'}, {'name': 'MDKSA-2002:024', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-024.php3'}, {'name': 'CSSA-2002-014.1', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.caldera.com/support/security/advisories/CSSA-2002-014.1.txt'}, {'name': '4285', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4285'}, {'name': 'RHSA-2002:026', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-026.html'}]
CVE State: PUBLISHED
Explain CVE-2002-0081
Buffer overflows in (1) php_mime_split in PHP 4.1.0, 4.1.1, and 4.0.6 and earlier, and (2) php3_mime_split in PHP 3.0.x allows remote attackers to execute arbitrary code via a multipart/form-data HTTP POST request when file_uploads is enabled.
Affected Products: n/a
References: [{'name': 'VU#297363', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/297363'}, {'name': 'MDKSA-2002:017', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-017.php'}, {'name': '20020225 Re: Rumours about Apache 1.3.22 exploits', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=101468694824998&w=2'}, {'name': 'php-file-upload-overflow(8281)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8281.php'}, {'name': 'HPSBTL0203-028', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/3911'}, {'name': '20020227 Advisory 012002: PHP remote vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101484705523351&w=2'}, {'name': 'DSA-115', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-115'}, {'name': '20020228 TSLSA-2002-0033 - mod_php', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101497256024338&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/downloads.php'}, {'name': 'CA-2002-05', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-05.html'}, {'name': 'CLA-2002:468', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000468'}, {'name': '4183', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4183'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.e-matters.de/advisories/012002.html'}, {'name': 'ESA-20020301-006', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/other_advisory-1924.html'}, {'name': 'SuSE-SA:2002:007', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_007_mod_php4_txt.html'}, {'name': '20020227 PHP remote vulnerabilities', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=101484975231922&w=2'}, {'name': 'RHSA-2002:035', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-035.html'}, {'name': 'RHSA-2002:040', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-040.html'}, {'name': '20020304 Apache+php Proof of Concept Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101537076619812&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0082
The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the i2d_SSL_SESSION function, which allows remote attackers to use a buffer overflow to execute arbitrary code via a large client certificate that is signed by a trusted Certificate Authority (CA), which produces a large serialized session.
Affected Products: n/a
References: [{'name': 'CSSA-2002-011.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.calderasystems.com/support/security/advisories/CSSA-2002-011.0.txt'}, {'name': '4189', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4189'}, {'name': 'RHSA-2002:045', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-045.html'}, {'name': 'HPSBUX0204-190', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/4008'}, {'name': '20020301 Apache-SSL buffer overflow (fix available)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101518491916936&w=2'}, {'name': '20020227 mod_ssl Buffer Overflow Condition (Update Available)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/258646'}, {'name': 'MDKSA-2002:020', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-020.php'}, {'name': 'ESA-20020301-005', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/other_advisory-1923.html'}, {'name': '20020304 Apache-SSL 1.3.22+1.47 - update to security fix', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101528358424306&w=2'}, {'name': 'RHSA-2002:042', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-042.html'}, {'name': 'apache-modssl-bo(8308)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8308.php'}, {'name': 'RHSA-2002:041', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-041.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.apacheweek.com/issues/02-03-01#security'}, {'name': 'SSRT0817', 'tags': ['vendor-advisory', 'x_refsource_COMPAQ'], 'url': 'http://ftp.support.compaq.com/patches/.new/html/SSRT0817.shtml'}, {'name': 'CLA-2002:465', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000465'}, {'name': 'HPSBTL0203-031', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/3965'}, {'name': 'DSA-120', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-120'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/153567/Apache-mod_ssl-OpenSSL-Remote-Buffer-Overflow.html'}]
CVE State: PUBLISHED
Explain CVE-2002-0084
Buffer overflow in the fscache_setup function of cachefsd in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long mount argument.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309'}, {'name': 'VU#161931', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/161931'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.esecurityonline.com/advisories/eSO4198.asp'}, {'name': '20020429 eSecurityOnline Security Advisory 4198 - Sun Solaris cachefsd mount file buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00416.html'}, {'name': 'oval:org.mitre.oval:def:43', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A43'}, {'name': 'oval:org.mitre.oval:def:97', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A97'}]
CVE State: PUBLISHED
Explain CVE-2002-0085
cachefsd in Solaris 2.6, 7, and 8 allows remote attackers to cause a denial of service (crash) via an invalid procedure call in an RPC request.
Affected Products: n/a
References: [{'name': 'solaris-cachefsd-rpc-dos(8956)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8956'}, {'name': 'oval:org.mitre.oval:def:4329', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4329'}, {'name': '20020429 eSecurityOnline Security Advisory 4197 - Sun Solaris cachefsd denial of service vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0047.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.esecurityonline.com/advisories/eSO4197.asp'}, {'name': '4634', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4634'}, {'name': '20020429 eSecurityOnline Security Advisory 2397 - Sun Solaris admintool -d and PRODVERS buffer overflow vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/270122'}]
CVE State: PUBLISHED
Explain CVE-2002-0086
Buffer overflow in bindsock in Lotus Domino 5.0.4 and 5.0.7 on Linux allows local users to gain root privileges via a long (1) Notes_ExecDirectory or (2) PATH environment variable.
Affected Products: n/a
References: [{'name': 'lotus-domino-path-bo(8585)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8585'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.esecurityonline.com/advisories/eSO4124.asp'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg21100441'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg21095569'}, {'name': '4319', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4319'}, {'name': 'lotus-domino-notes-execdirectory-bo(8583)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8583'}, {'name': '4317', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4317'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.esecurityonline.com/advisories/eSO4126.asp'}]
CVE State: PUBLISHED
Explain CVE-2002-0087
bindsock in Lotus Domino 5.07 on Solaris allows local users to create arbitrary files via a symlink attack on temporary files.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.esecurityonline.com/advisories/eSO4125.asp'}, {'name': '4318', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4318'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg21095671'}, {'name': 'lotus-domino-tmpfile-symlink(8586)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8586'}]
CVE State: PUBLISHED
Explain CVE-2002-0088
Buffer overflow in admintool in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long media installation path.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:48', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A48'}, {'name': 'oval:org.mitre.oval:def:60', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A60'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.esecurityonline.com/advisories/eSO4123.asp'}]
CVE State: PUBLISHED
Explain CVE-2002-0089
Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to (1) the -d command line option, or (2) the PRODVERS argument in the .cdtoc file.
Affected Products: n/a
References: [{'name': 'solaris-admintool-prodvers-bo(8955)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8955.php'}, {'name': 'solaris-admintool-d-bo(8954)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8954.php'}, {'name': 'oval:org.mitre.oval:def:67', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A67'}, {'name': '4624', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4624'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.esecurityonline.com/advisories/eSO2397.asp'}, {'name': '20020429 eSecurityOnline Security Advisory 2397 - Sun Solaris admintool -d and PRODVERS buffer overflow vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/270122'}, {'name': 'oval:org.mitre.oval:def:68', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A68'}]
CVE State: PUBLISHED
Explain CVE-2002-0090
Buffer overflow in Low BandWidth X proxy (lbxproxy) in Solaris 8 allows local users to execute arbitrary code via a long display command line option.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:179', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A179'}, {'name': '44842', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/44842'}, {'name': 'solaris-lbxproxy-display-bo(8958)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8958.php'}, {'name': '20020429 eSecurityOnline Security Advisory 3761 - Sun Solaris lbxproxy display name buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/270149'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.esecurityonline.com/advisories/eSO3761.asp'}, {'name': 'VU#188507', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/188507'}, {'name': '4633', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4633'}, {'name': 'oval:org.mitre.oval:def:86', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A86'}, {'name': '20020429 [VulnWatch] eSecurityOnline Security Advisory 3761 - Sun Solaris lbxproxy display name buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0041.html'}]
CVE State: PUBLISHED
Explain CVE-2002-0091
Multiple CGI scripts in CIDER SHADOW 1.5 and 1.6 allows remote attackers to execute arbitrary commands via certain form fields.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.esecurityonline.com/advisories/eSO2408.asp'}, {'name': 'shadow-cgi-execute-commands(8953)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8953.php'}, {'name': '4625', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4625'}, {'name': '20020429 eSecurityOnline Security Advisory 2408 - CIDER SHADOW CGI', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0400.html'}]
CVE State: PUBLISHED
Explain CVE-2002-0092
CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (server crash) via the diff capability.
Affected Products: n/a
References: [{'name': '4234', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4234'}, {'name': '20020220 Help needed with bufferoverflow in cvs', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=101422243817321&w=2'}, {'name': '20020220 Re: [Fwd: Help needed with bufferoverflow in cvs]', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=101433077724524&w=2'}, {'name': 'RHSA-2002:026', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-026.html'}, {'name': 'cvs-global-var-dos(8366)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8366.php'}, {'name': 'DSA-117', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-117'}]
CVE State: PUBLISHED
Explain CVE-2002-0093
Buffer overflow in ipcs for HP Tru64 UNIX 4.0f through 5.1a may allow attackers to execute arbitrary code, a different vulnerability than CVE-2001-0423.
Affected Products: n/a
References: [{'name': 'VU#771155', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/771155'}, {'name': 'tru64-ipcs-bo(9613)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9613.php'}, {'name': 'SSRT2275', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/compaq/2002-q3/0010.html'}, {'name': 'SSRT0794U', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/compaq/2002-q3/0010.html'}, {'name': '5241', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5241'}]
CVE State: PUBLISHED
Explain CVE-2002-0094
config_converters.py in BSCW (Basic Support for Cooperative Work) 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion.
Affected Products: n/a
References: [{'name': '20020102 BSCW: Vulnerabilities and Problems', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/248000'}, {'name': '3776', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3776'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bscw.gmd.de/WhatsNew.html'}, {'name': 'bscw-remote-shell-execution(7774)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7774.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0095
The default configuration of BSCW (Basic Support for Cooperative Work) 3.x and possibly version 4 enables user self registration, which could allow remote attackers to upload files and possibly join a user community that was intended to be closed.
Affected Products: n/a
References: [{'name': '20020102 BSCW: Vulnerabilities and Problems', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/248000'}, {'name': '3777', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3777'}, {'name': 'bscw-default-installation-registration(7775)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7775.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0096
The installation of Geeklog 1.3 creates an extra group_assignments record which is not properly deleted, which causes the first newly created user to be added to the GroupAdmin and UserAdmin groups, which could provide that user with administrative privileges that were not intended.
Affected Products: n/a
References: [{'name': 'geeklog-default-admin-privileges(7780)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7780.php'}, {'name': '3783', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3783'}, {'name': '20020103 Vulnerability in new user creation in Geeklog 1.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/248367'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://geeklog.sourceforge.net/index.php?topic=Security'}]
CVE State: PUBLISHED
Explain CVE-2002-0097
Geeklog 1.3 allows remote attackers to hijack user accounts, including the administrator account, by modifying the UID of a user's permanent cookie to the target account.
Affected Products: n/a
References: [{'name': 'geeklog-modify-auth-cookie(7869)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7869.php'}, {'name': '3844', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3844'}, {'name': '20020110 Cookie modification allows unauthenticated user login in Geeklog 1.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/249443'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://geeklog.sourceforge.net/index.php?topic=Security'}]
CVE State: PUBLISHED
Explain CVE-2002-0098
Buffer overflow in index.cgi administration interface for Boozt! Standard 0.9.8 allows local users to execute arbitrary code via a long name field when creating a new banner.
Affected Products: n/a
References: [{'name': 'boozt-long-name-bo(7790)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7790.php'}, {'name': '3787', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://online.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3787'}, {'name': "20020105 BOOZT! Standard 's administration cgi vulnerable to buffer overflow", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101027773404836&w=2'}, {'name': '20020109 BOOZT! Standard CGI Vulnerability : Exploit Released', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/249219'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.boozt.com/news_detail.php?id=3'}]
CVE State: PUBLISHED
Explain CVE-2002-0099
Buffer overflow in Michael Lamont Savant Web Server 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP request to the cgi-bin directory in which the CGI program name contains a large number of . (dot) characters.
Affected Products: n/a
References: [{'name': '3788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3788'}, {'name': '20020109 Savant Webserver Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=101062823305479&w=2'}, {'name': '20020105 Savant Webserver Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101027722904078&w=2'}, {'name': 'savant-long-parameter-bo(7786)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7786.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0100
AOL AOLserver 3.4.2 Win32 allows remote attackers to bypass authentication and read password-protected files via a URL that directly references the file.
Affected Products: n/a
References: [{'name': '20020106 AOLserver 3.4.2 Unauthorized File Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0005.html'}, {'name': '20020106 AOLserver 3.4.2 Unauthorized File Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101038936305397&w=2'}, {'name': '20020109 AOLserver 3.4.2 Unauthorized File Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=101062823205474&w=2'}, {'name': 'aolserver-protected-file-access(7825)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7825.php'}, {'name': '3791', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3791'}]
CVE State: PUBLISHED
Explain CVE-2002-0101
Microsoft Internet Explorer 6.0 and earlier allows local users to cause a denial of service via an infinite loop for modeless dialogs showModelessDialog, which causes CPU usage while the focus for the dialog is not released.
Affected Products: n/a
References: [{'name': '3789', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3789'}, {'name': '20020106 Internet Explorer Javascript Modeless Popup Local Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101039104608083&w=2'}, {'name': 'ie-modeless-dialog-dos(7826)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7826.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0102
Oracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via (1) a request to TCP ports 1100, 4000, 4001, and 4002 with a large number of null characters, and (2) a request to TCP port 4000 with a large number of "." characters.
Affected Products: n/a
References: [{'name': '3760', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3760'}, {'name': 'oracle-appserver-null-dos(7765)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7765'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/webcache2.pdf'}, {'name': '3762', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3762'}]
CVE State: PUBLISHED
Explain CVE-2002-0103
An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2) obtaining the administrator password from webcache.xml.
Affected Products: n/a
References: [{'name': '20020107 [PTL-2002-01] Vulnerabilities in Oracle9iAS Web Cache', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101041510727937&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/webcache2.pdf'}, {'name': '3764', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3764'}, {'name': '3761', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3761'}, {'name': 'oracle-appserver-webcached-privileges(7766)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7766.php'}, {'name': 'oracle-appserver-webcache-password(7768)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7768.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0104
AFTPD 5.4.4 allows remote attackers to gain sensitive information via a CD (CWD) ~ (tilde) command, which causes a core dump.
Affected Products: n/a
References: [{'name': 'aftpd-crash-core-dump(7832)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7832.php'}, {'name': '20020107 Aftpd core dump vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101041333323486&w=2'}, {'name': '3806', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3806'}]
CVE State: PUBLISHED
Explain CVE-2002-0105
CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable.
Affected Products: n/a
References: [{'name': '3818', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3818'}, {'name': '20020108 CDE bug in Unixware 7.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101060400802428&w=2'}, {'name': 'unixware-dtlogin-log-symlink(7864)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7864.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0106
BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an MS-DOS device name.
Affected Products: n/a
References: [{'name': 'weblogic-dos-jsp-dos(7808)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7808.php'}, {'name': '20020108 KPMG-2002003: Bea Weblogic DOS-device Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101050440629269&w=2'}, {'name': '3816', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3816'}]
CVE State: PUBLISHED
Explain CVE-2002-0107
Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another version string, which causes the information to be leaked in the error message.
Affected Products: n/a
References: [{'name': '3841', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3841'}, {'name': '20020108 svindel.net security advisory - web admin vulnerability in CacheOS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101052887431488&w=2'}, {'name': '20020205 RE: svindel.net security advisory - web admin vulnerability in Ca cheOS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/254167'}, {'name': 'cachos-insecure-web-interface(7835)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7835.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0108
Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.
Affected Products: n/a
References: [{'name': 'allaire-forums-message-spoofing(7841)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7841.php'}, {'name': '20020108 Allaire Forums Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/249026'}, {'name': '3827', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3827'}, {'name': 'VU#575619', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/575619'}]
CVE State: PUBLISHED
Explain CVE-2002-0109
Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via an SNMP query for the default community string "public," which causes the router to change its configuration and send SNMP trap information back to the system that initiated the query.
Affected Products: n/a
References: [{'name': '3795', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3795'}, {'name': '3797', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3797'}, {'name': 'linksys-etherfast-default-snmp(7827)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7827.php'}, {'name': "20020106 Linksys 'routers', SNMP issues", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101039288111680&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0110
Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plaintext in a .ini file, which allows an attacker to gain privileges by reading the passwords from the file.
Affected Products: n/a
References: [{'name': 'VU#245707', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/245707'}, {'name': 'miramail-plaintext-auth-info(7855)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7855.php'}, {'name': '3843', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3843'}, {'name': '20020109 MiraMail 1.04 can give POP account access and details', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101063476715154&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0111
Directory traversal vulnerability in Funsoft Dino's Webserver 1.2 and earlier allows remote attackers to read files or execute arbitrary commands via a .. (dot dot) in the URL.
Affected Products: n/a
References: [{'name': '3861', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://online.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3861'}, {'name': "20020109 File Transversal Vulnerability in Dino's WebServer", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101062213627501&w=2'}, {'name': 'dinos-webserver-directory-traversal(7853)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7853.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0112
Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL.
Affected Products: n/a
References: [{'name': '20020109 Eserv 2.97 Password Protected File Arbitrary Read Access Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0010.html'}, {'name': '20020109 Eserv 2.97 Password Protected File Arbitrary Read Access Vulnerability', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=101062823505486&w=2'}, {'name': '3838', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3838'}, {'name': '20020109 Eserv 2.97 Password Protected File Arbitrary Read Access Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101062172226812&w=2'}, {'name': '20020111 Eserv 2.97 Password Protected File Arbitrary Read Access Vulnerability (Solution)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/249734'}, {'name': 'eserv-protected-file-access(7849)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7849.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0113
EMC NetWorker (formerly Legato NetWorker) before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which allows local users to read sensitive information and possibly gain privileges.  NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform.
Affected Products: n/a
References: [{'name': '20020110 Legato Vulnerable', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/249420'}, {'name': '3840', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3840'}, {'name': 'legato-nsrd-log-permissions(7897)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7897.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0114
EMC NetWorker (formerly Legato NetWorker) before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain privileges by reading the password from the file.  NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform.
Affected Products: n/a
References: [{'name': 'legato-nsrd-log-plaintext(7898)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7898.php'}, {'name': '20020110 Legato Vulnerable', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/249420'}, {'name': '3842', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3842'}]
CVE State: PUBLISHED
Explain CVE-2002-0115
Snort 1.8.3 does not properly define the minimum ICMP header size, which allows remote attackers to cause a denial of service (crash and core dump) via a malformed ICMP packet.
Affected Products: n/a
References: [{'name': '3849', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3849'}, {'name': '20020110 Snort core dumped', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/249340'}, {'name': '2022', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2022'}, {'name': '20020110 Re: Snort core dumped', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/cgi-bin/archive.pl?id=1&start=2002-03-08&end=2002-03-14&mid=249623&threads=1'}, {'name': 'snort-icmp-dos(7874)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7874.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0116
Palm OS 3.5h and possibly other versions, as used in Handspring Visor and Xircom products, allows remote attackers to cause a denial of service via a TCP connect scan, e.g. from nmap.
Affected Products: n/a
References: [{'name': '20020110 Re: Handspring Visor D.O.S', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101070523119956&w=2'}, {'name': 'palmos-nmap-dos(7865)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7865.php'}, {'name': '3847', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3847'}, {'name': '20020110 Handspring Visor D.O.S', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101069677929208&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0117
Cross-site scripting vulnerability in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 and earlier allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag.
Affected Products: n/a
References: [{'name': '20020108 CSS vulnerabilities in YaBB and UBB allow account hijack [Multiple Vendor]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/249031'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.yabbforum.com/'}, {'name': 'yabb-encoded-css(7840)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7840.php'}, {'name': '3828', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://online.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3828'}, {'name': '2019', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2019'}]
CVE State: PUBLISHED
Explain CVE-2002-0118
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag.
Affected Products: n/a
References: [{'name': '20020108 CSS vulnerabilities in YaBB and UBB allow account hijack [Multiple Vendor]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/249031'}, {'name': 'ultimatebb-encoded-css(7838)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7838.php'}, {'name': '3829', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3829'}]
CVE State: PUBLISHED
Explain CVE-2002-0119
Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service (reboot) via a network scan with unusual packets, such as nmap with OS detection.
Affected Products: n/a
References: [{'name': 'alcatel-speedtouch-nmap-dos(7893)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7893.php'}, {'name': '20020111 Bug in alcatel speed touch home adsl modem', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/249746'}, {'name': '3851', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3851'}]
CVE State: PUBLISHED
Explain CVE-2002-0120
Apple Palm Desktop 4.0b76 and 4.0b77 creates world-readable backup files and folders when a hotsync is performed, which could allow a local user to obtain sensitive information.
Affected Products: n/a
References: [{'name': '20020112 Palm Desktop 4.0b76-77 for Mac OS X', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/250093'}, {'name': '3863', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3863'}, {'name': 'palm-macos-backup-permissions(7937)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7937.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0121
PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections.
Affected Products: n/a
References: [{'name': '3873', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3873'}, {'name': 'php-session-temp-disclosure(7908)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7908.php'}, {'name': '20020113 PHP 4.x session spoofing', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/250196'}]
CVE State: PUBLISHED
Explain CVE-2002-0122
Siemens 3568i WAP mobile phones allows remote attackers to cause a denial of service (crash) via an SMS message containing unusual characters.
Affected Products: n/a
References: [{'name': 'siemens-invalid-sms-dos(7902)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7902.php'}, {'name': '20020114 Siemens Mobie SMS Exceptional Character Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/250115'}, {'name': '3870', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3870'}]
CVE State: PUBLISHED
Explain CVE-2002-0123
MDG Computer Services Web Server 4D WS4D/eCommerce 3.0 and earlier, and possibly 3.5.3, allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.
Affected Products: n/a
References: [{'name': 'ws4d-long-url-dos(7879)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7879.php'}, {'name': '20020114 Web Server 4D/eCommerce 3.5.3 DoS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/250242'}, {'name': '3874', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3874'}]
CVE State: PUBLISHED
Explain CVE-2002-0124
MDG Computer Services Web Server 4D/eCommerce 3.5.3 allows remote attackers to exploit directory traversal vulnerability via a ../ (dot dot) containing URL-encoded slashes in the HTTP request.
Affected Products: n/a
References: [{'name': 'ws4d-dot-directory-traversal(7878)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7878.php'}, {'name': '3872', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3872'}, {'name': '20020114 Web Server 4D/eCommerce 3.5.3 Directory Traversal Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/250231'}]
CVE State: PUBLISHED
Explain CVE-2002-0125
Buffer overflow in ClanLib library 0.5 may allow local users to execute arbitrary code in games that use the library, such as (1) Super Methane Brothers, (2) Star War, (3) Kwirk, (4) Clankanoid, and others, via a long HOME environment variable.
Affected Products: n/a
References: [{'name': '3877', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3877'}, {'name': '20020114 Clanlib overflow / Super Methane Brothers overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/250414'}, {'name': 'clanlib-long-env-bo(7905)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7905.php'}]
CVE State: PUBLISHED