Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2002-1503
Buffer overflow in Automatic File Distributor (AFD) 1.2.14 and earlier allows local users to gain privileges via a long MON_WORK_DIR environment variable or -w (workdir) argument to (1) afd, (2) afdcmd, (3) afd_ctrl, (4) init_afd, (5) mafd, (6) mon_ctrl, (7) show_olog, or (8) udc.
Affected Products: n/a
References: [{'name': 'afd-multiple-binaries-bo(10036)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10036.php'}, {'name': '5626', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5626'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.dwd.de/AFD/txt/CHANGES'}, {'name': '20020904 AFD 1.2.14 multiple local root compromises', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-09/0029.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1504
Directory traversal vulnerability in WebServer 4 Everyone 1.22 allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences in a URL.
Affected Products: n/a
References: [{'name': 'webserver-4everyone-directory-traversal(10051)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10051.php'}, {'name': '20020905 advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-09/0045.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1505
SQL injection vulnerability in board.php for WoltLab Burning Board (wBB) 2.0 RC 1 and earlier allows remote attackers to modify the database and possibly gain privileges via the boardid parameter.
Affected Products: n/a
References: [{'name': '20020908 sql injection vulnerability in WBB 2.0 RC1 and below', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-09/0083.html'}, {'name': 'wbb-board-sql-injection(10069)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10069.php'}, {'name': '5675', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5675'}]
CVE State: PUBLISHED
Explain CVE-2002-1506
Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG environment variable, which overflows an error string that is generated.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.solucorp.qc.ca/changes.hc?projet=linuxconf&version=1.28r4'}, {'name': '5585', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5585'}, {'name': '20020828 iDEFENSE Security Advisory: Linuxconf locally exploitable buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-08/0304.html'}, {'name': '20020828 iDEFENSE Security Advisory: Linuxconf locally exploitable buffer overflow', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0093.html'}, {'name': 'linuxconf-linuxconflang-env-bo(9980)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9980.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1507
Unreal Tournament 2003 (ut2003) clients and servers allow remote attackers to cause a denial of service via malformed messages containing a small number of characters to UDP ports 7778 or 10777.
Affected Products: n/a
References: [{'name': '20020917 Fw: [ut2003bugs] remote denial of service in ut2003 demo', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0116.html'}, {'name': 'ut-console-dos(10128)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10128.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1508
slapd in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows local users to overwrite arbitrary files via a race condition during the creation of a log file for rejected replication requests.
Affected Products: n/a
References: [{'name': 'openldap-acl-slapd-bo(11288)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11288.php'}, {'name': 'RHSA-2003:040', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-040.html'}, {'name': 'SuSE-SA:2002:047', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_047_openldap2.html'}, {'name': 'MDKSA-2003:006', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:006'}, {'name': 'DSA-227', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-227'}]
CVE State: PUBLISHED
Explain CVE-2002-1509
A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of the new user's group (mode 660), which allows other users in the same group to read or modify the new user's incoming email.
Affected Products: n/a
References: [{'name': 'RHSA-2003:058', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-058.html'}, {'name': 'MDKSA-2003:026', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:026'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=75418'}, {'name': 'RHSA-2003:057', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-057.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1510
xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth directory does not exist.
Affected Products: n/a
References: [{'name': 'CLA-2002:533', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000533'}, {'name': 'RHSA-2003:064', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-064.html'}, {'name': 'RHSA-2003:065', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-065.html'}, {'name': '55602', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/55602'}, {'tags': ['x_refsource_MISC'], 'url': 'http://wuarchive.wustl.edu/mirrors/NetBSD/NetBSD-current/xsrc/xfree/xc/programs/Xserver/hw/xfree86/CHANGELOG'}, {'name': 'xfree86-xdm-unauth-access(11389)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11389.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1511
The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies.
Affected Products: n/a
References: [{'name': '56161', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/56161'}, {'name': 'CLSA-2003:640', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000640'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://changelogs.credativ.org/debian/pool/main/v/vnc/vnc_3.3.6-3/changelog'}, {'name': 'RHSA-2003:041', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-041.html'}, {'name': 'vnc-rand-weak-cookie(11384)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11384.php'}, {'name': 'MDKSA-2003:022', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:022'}, {'name': '200302-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200302-15.xml'}, {'name': 'RHSA-2003:068', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-068.html'}, {'name': '6905', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6905'}]
CVE State: PUBLISHED
Explain CVE-2002-1512
xbru in BRU Workstation 17.0 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the xbru_dscheck.dd temporary file.
Affected Products: n/a
References: [{'name': '5708', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5708'}, {'name': 'bru-xbru-race-condition(10101)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10101.php'}, {'name': '20020912 Race condition in BRU Workstation 17.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-09/0154.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1513
The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions because the server runs with the SYSPRV and BYPASS privileges.
Affected Products: n/a
References: [{'name': '5790', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5790'}, {'name': 'openvms-pop-gain-privileges(10236)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10236.php'}, {'name': '20020927 OpenVMS POP server local vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/293070'}, {'name': '20021001 [security bulletin] SSRT2371 HP OpenVMS Potential POP server local vulnerability (fwd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0010.html'}, {'name': 'SSRT2371', 'tags': ['vendor-advisory', 'x_refsource_COMPAQ'], 'url': 'http://archives.neohapsis.com/archives/compaq/2002-q4/0000.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1514
gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc_init1.X" temporary file, as demonstrated by modifying the xinetdbd file.
Affected Products: n/a
References: [{'name': 'interbase-gdslockmgr-bo(10196)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10196.php'}, {'name': '20020925 Borland Interbase local root exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-09/0311.html'}, {'name': '5805', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5805'}]
CVE State: PUBLISHED
Explain CVE-2002-1515
Directory traversal vulnerability in avatar.php in CoolForum 0.5 beta allows remote attackers to read arbitrary files via .. (dot dot) sequences in the img parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.coolforum.net/index.php?p=dlcoolforum'}, {'name': '20021012 CoolForum v 0.5 beta shows content of PHP files', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/295358'}, {'name': '20021001 [VulnWatch] CoolForum v 0.5 beta shows content of PHP files', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0001.html'}, {'name': '5973', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5973'}, {'name': 'coolforum-avatar-view-php(10237)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10237.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1516
rpcbind in SGI IRIX, when using the -w command line switch, allows local users to overwrite arbitrary files via a symlink attack.
Affected Products: n/a
References: [{'name': 'N-004', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-004.shtml'}, {'name': '5889', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5889'}, {'name': 'irix-rpcbind-w-symlink(10272)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10272.php'}, {'name': '20020903-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020903-01-P'}]
CVE State: PUBLISHED
Explain CVE-2002-1517
fsr_efs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink attack, possibly via the .fsrlast file.
Affected Products: n/a
References: [{'name': '20020903-02-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020903-02-P'}, {'name': 'N-004', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-004.shtml'}, {'name': '20021103-02-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20021103-02-P'}, {'name': '20021103-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20021103-01-P'}, {'name': '5897', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5897'}, {'name': '8579', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/8579'}, {'name': '20020903-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020903-01-P'}, {'name': 'irix-fsr-efs-symlink(10275)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10275.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1518
mv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory, which could allow local users to modify files and directories.
Affected Products: n/a
References: [{'name': 'N-004', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-004.shtml'}, {'name': 'irix-mv-directory-insecure(10276)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10276.php'}, {'name': '5893', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5893'}, {'name': '8580', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/8580'}, {'name': '20020903-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020903-01-P'}]
CVE State: PUBLISHED
Explain CVE-2002-1519
Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the password parameter.
Affected Products: n/a
References: [{'name': '20020926 Watchguard firewall appliances security issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-09/0325.html'}, {'name': '20020927 Software Update Available for Legacy RapidStream Appliances and WatchGuard Firebox Vclass appliances', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-09/0335.html'}, {'name': 'firebox-vclass-cli-format-string(10217)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10217.php'}, {'name': '5814', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5814'}, {'name': '4924', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4924'}]
CVE State: PUBLISHED
Explain CVE-2002-1520
The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows remote attackers to access CLI with administrator privileges.
Affected Products: n/a
References: [{'name': '20020926 Watchguard firewall appliances security issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-09/0325.html'}, {'name': '20020927 Software Update Available for Legacy RapidStream Appliances and WatchGuard Firebox Vclass appliances', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-09/0335.html'}, {'name': '4831', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4831'}, {'name': 'firebox-vclass-cli-admin-privileges(10218)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10218.php'}, {'name': '5815', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5815'}]
CVE State: PUBLISHED
Explain CVE-2002-1521
Web Server 4D (WS4D) 3.6 stores passwords in plaintext in the Ws4d.4DD file, which allows attackers to gain privileges.
Affected Products: n/a
References: [{'name': 'webserver-4d-plaintext-passwords(10198)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10198.php'}, {'name': '20020925 [SecurityOffice] Webserver 4D v3.6 Weak Password Preservation Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0128.html'}, {'name': '5803', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5803'}]
CVE State: PUBLISHED
Explain CVE-2002-1522
Buffer overflow in PowerFTP FTP server 2.24, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long USER argument.
Affected Products: n/a
References: [{'name': '20021005 Vulnerabilitie in PowerFTP server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0075.html'}, {'name': '5899', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5899'}, {'name': '20021012 Coolsoft PowerFTP <= v2.24 Denial of Service (Linux Source)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0194.html'}, {'name': 'powerftp-long-username-dos(10286)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10286.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1523
Directory traversal vulnerability in Daniel Arenz Mini Server 2.1.6 allows remote attackers to read arbitrary files via (1) ../ (dot-dot slash) or (2) ..\ (dot-dot backslash) sequences.
Affected Products: n/a
References: [{'name': "20021013 Directory traversal in Daniel Arenz' Mini Server", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0181.html'}, {'name': 'mini-server-directory-traversal(10366)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10366.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.da-home.de/miniserver/update.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1524
Buffer overflow in XML parser in wsabi.dll of Winamp 3 (1.0.0.488) allows remote attackers to execute arbitrary code via a skin file (.wal) with a long include file tag.
Affected Products: n/a
References: [{'name': '20020929 IIL Advisory: Winamp 3 (1.0.0.488) XML parser buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-09/0346.html'}, {'name': '5832', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5832'}, {'name': 'winamp-xml-parser-bo(10228)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10228.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1525
Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack on port (1) 6015 or (2) 6016, or (3) an absolute pathname to port 6017.
Affected Products: n/a
References: [{'name': '20020929 [LoWNOISE] "Get Knowledge" SunONE Starter Kit - Sun Microsystems/Astaware', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/293545'}, {'name': '5828', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5828'}, {'name': 'sunone-starterkit-search-traversal(10225)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10225.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1526
Cross-site scripting (XSS) vulnerability in emumail.cgi for EMU Webmail 5.0 allows remote attackers to inject arbitrary HTML or script via the email address field.
Affected Products: n/a
References: [{'name': 'emu-webmail-address-xss(10205)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10205.php'}, {'name': '20020926 [VulnWatch] EMU Webmail 5.0 XSS vuln, and webroot path disclosure', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0131.html'}, {'name': '5824', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5824'}]
CVE State: PUBLISHED
Explain CVE-2002-1527
emumail.cgi in EMU Webmail 5.0 allows remote attackers to determine the full pathname for emumail.cgi via a malformed string containing script, which generates a regular expression matching error that includes the pathname in the resulting error message.
Affected Products: n/a
References: [{'name': 'emu-webmail-address-xss(10205)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10205.php'}, {'name': '20020926 [VulnWatch] EMU Webmail 5.0 XSS vuln, and webroot path disclosure', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0131.html'}, {'name': 'emu-webmail-path-disclosure(10204)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10204.php'}, {'name': '5823', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5823'}]
CVE State: PUBLISHED
Explain CVE-2002-1528
MsmMask.exe in MondoSearch 4.4 allows remote attackers to obtain the source code of scripts via the mask parameter.
Affected Products: n/a
References: [{'name': 'mondosearch-url-souce-disclosure(10350)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10350.php'}, {'name': '20021010 MondoSearch show the source of all files', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0147.html'}, {'name': '5941', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5941'}]
CVE State: PUBLISHED
Explain CVE-2002-1529
Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter.
Affected Products: n/a
References: [{'name': 'superscout-emailfilter-error-xss(10319)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10319.php'}, {'name': "20021008 Four Vulnerabilities in SurfControl's SuperScout Email Filter Administrative Server", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html'}, {'name': '5928', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5928'}]
CVE State: PUBLISHED
Explain CVE-2002-1530
The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to the userlist.asp program, which includes the passwords in a user editing form.
Affected Products: n/a
References: [{'name': "20021008 Four Vulnerabilities in SurfControl's SuperScout Email Filter Administrative Server", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html'}, {'name': '5929', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5929'}, {'name': 'superscout-emailfilter-plaintext-passwords(10320)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10320.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1531
The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (crash) via an HTTP request without a Content-Length parameter.
Affected Products: n/a
References: [{'name': "20021008 Four Vulnerabilities in SurfControl's SuperScout Email Filter Administrative Server", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html'}, {'name': '5930', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5930'}, {'name': 'superscout-emailfilter-content-dos(10321)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10321.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1532
The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (resource exhaustion) via a GET request without the terminating /r/n/r/n (CRLF) sequence, which causes the interface to wait for the sequence and blocks other users from accessing it.
Affected Products: n/a
References: [{'name': '5931', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5931'}, {'name': 'superscout-emailfilter-get-dos(10322)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10322.php'}, {'name': "20021008 Four Vulnerabilities in SurfControl's SuperScout Email Filter Administrative Server", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1533
Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a).
Affected Products: n/a
References: [{'name': '20020928 Jetty jsp/servlet engine xss / uname disclosure vuln', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-09/0337.html'}, {'name': 'jetty-http-xss(10219)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10219.php'}, {'name': '5821', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5821'}]
CVE State: PUBLISHED
Explain CVE-2002-1534
Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share.
Affected Products: n/a
References: [{'name': '20021006 Flash player can read local files', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0083.html'}, {'name': '5904', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5904'}, {'name': 'flash-xml-read-files(10297)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10297.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1535
Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal network via a CONNECT request, which generates different error messages if the host is present.
Affected Products: n/a
References: [{'name': '5959', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5959'}, {'name': 'simple-webserver-topology-disclosure(10363)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10363.php'}, {'name': '20021014 Symantec Enterprise Firewall Secure Webserver info leak', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0190.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://securityresponse.symantec.com/avcenter/security/Content/2002.10.11a.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1536
Molly IRC bot 0.5 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $host variable for nslookup.pl, (2) the $to, $from, or $message variables in pop.pl, (3) the $words or $text variables in sms.pl, or (4) the $server or $printer variables in hpled.pl.
Affected Products: n/a
References: [{'name': 'molly-host-execute-commands(10397)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10397.php'}, {'name': '20021018 SCAN Associates Advisory: Molly 0.5 - Remote Command Execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/296163'}, {'name': '20021018 SCAN Associates Advisory: Molly 0.5 - Remote Command Execution', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0028.html'}, {'name': '6007', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6007'}]
CVE State: PUBLISHED
Explain CVE-2002-1537
admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form fields such as "u".
Affected Products: n/a
References: [{'name': '6056', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6056'}, {'name': 'phpbb-adminugauth-admin-privileges(10489)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10489.php'}, {'name': '20021027 Privilege Escalation Vulnerability In phpBB 2.0.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0385.html'}, {'name': '4284', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4284'}]
CVE State: PUBLISHED
Explain CVE-2002-1538
Acuma Acusend 4, and possibly earlier versions, allows remote authenticated users to read the reports of other users by inferring the full URL, whose name is easily predictable.
Affected Products: n/a
References: [{'name': '20021025 Sec-Tec advisory 24.10.02 Unauthorised file acces in Acuma', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0366.html'}, {'name': '6048', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6048'}, {'name': 'acusend-unauthorized-file-access(10473)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10473.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1539
Buffer overflow in MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service via long (1) DELE or (2) UIDL arguments.
Affected Products: n/a
References: [{'name': 'mdaemon-dele-uidl-dos(10488)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10488.php'}, {'name': '20021027 MDaemon SMTP/POP/IMAP server DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0382.html'}, {'name': '6053', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6053'}]
CVE State: PUBLISHED
Explain CVE-2002-1540
The client for Symantec Norton AntiVirus Corporate Edition 7.5.x before 7.5.1 Build 62 and 7.6.x before 7.6.1 Build 35a runs winhlp32 with raised privileges, which allows local users to gain privileges by using certain features of winhlp32.
Affected Products: n/a
References: [{'name': '20021025 RE:  DH team: Norton Antivirus Corporate Edition Privilege Escalation, http://online.securityfocus.com/archive/1/296979/2002-10-22/2002-10-28/0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0369.html'}, {'name': '6258', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6258'}, {'name': 'nav-winhlp32-gain-privileges(10475)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10475.php'}, {'name': '20021024 DH team: Norton Antivirus Corporate Edition Privilege Escalation', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0346.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1541
BadBlue 1.7 allows remote attackers to bypass password protections for directories and files via an HTTP request containing an extra / (slash).
Affected Products: n/a
References: [{'name': 'badblue-protected-file-access(10466)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10466.php'}, {'name': '6044', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6044'}, {'name': '20021024 [SecurityOffice] BadBlue Web Server v1.7 Protected File Access Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0041.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1542
SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP datagram, possibly triggering a buffer overflow.
Affected Products: n/a
References: [{'name': 'tftp-udp-datagram-bo(10462)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10462.php'}, {'name': '20021024 TFTP Server DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0344.html'}, {'name': '20021024 TFTP Server DoS', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0040.html'}, {'name': '6043', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6043'}]
CVE State: PUBLISHED
Explain CVE-2002-1543
Buffer overflow in trek on NetBSD 1.5 through 1.5.3 allows local users to gain privileges via long keyboard input.
Affected Products: n/a
References: [{'name': 'NetBSD-SA2002-025', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-025.txt.asc'}, {'name': '6036', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6036'}, {'name': 'trek-keyboard-input-bo(10458)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10458.php'}, {'name': '7570', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7570'}]
CVE State: PUBLISHED
Explain CVE-2002-1544
Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, (3) put, or (4) get.
Affected Products: n/a
References: [{'name': "20021010 more silly bugs in cooolsoft 'personal ftp server'", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0142.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1545
CooolSoft Personal FTP Server 2.24 allows remote attackers to obtain the absolute pathname of the FTP root via a PWD command, which includes the full path in the response.
Affected Products: n/a
References: [{'name': "20021010 more silly bugs in cooolsoft 'personal ftp server'", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0142.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1546
BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityoffice.net/articles/webweaver/'}, {'name': 'brs-webweaver-file-access(10467)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10467.php'}, {'name': '6041', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6041'}, {'name': '20021024 [SecurityOffice] BRS WebWeaver Web Server v1.01 Protected File Access Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0043.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1547
Netscreen running ScreenOS 4.0.0r6 and earlier allows remote attackers to cause a denial of service via a malformed SSH packet to the Secure Command Shell (SCS) management interface, as demonstrated via certain CRC32 exploits, a different vulnerability than CVE-2001-0144.
Affected Products: n/a
References: [{'name': 'netscreen-ssh-dos(10528)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10528.php'}, {'name': '20021101 Netscreen SSH1 CRC32 Compensation Denial of service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0443.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.netscreen.com/support/alerts/11_06_02.html'}, {'name': '4376', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4376'}, {'name': '20021101 Netscreen SSH1 CRC32 Compensation Denial of service', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0053.html'}, {'name': 'VU#930161', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/930161'}, {'name': '20021101 (Correction) Netscreen SSH1 CRC32 Compensation Denial of service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0446.html'}, {'name': '20021101 (Correction) Netscreen SSH1 CRC32 Compensation Denial of service', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0054.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1548
Unknown vulnerability in autofs on AIX 4.3.0, when using executable maps, allows attackers to execute arbitrary commands as root, possibly related to "string handling around how the executable map is called."
Affected Products: n/a
References: [{'name': 'IY31934', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://archives.neohapsis.com/archives/aix/2002-q4/0002.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1549
Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.
Affected Products: n/a
References: [{'name': '20021112 Remote Buffer Overflow vulnerability in Light HTTPd', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-11/0138.html'}, {'name': '6162', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6162'}, {'name': 'light-httpd-bo(10607)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10607.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1550
dump_smutil.sh in IBM AIX allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Affected Products: n/a
References: [{'name': 'IY34617', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://archives.neohapsis.com/archives/aix/2002-q4/0002.html'}, {'name': '8802', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8802'}]
CVE State: PUBLISHED
Explain CVE-2002-1551
Buffer overflow in nslookup in IBM AIX may allow attackers to cause a denial of service or execute arbitrary code.
Affected Products: n/a
References: [{'name': 'IY34670', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://archives.neohapsis.com/archives/aix/2002-q4/0002.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1552
Novell eDirectory (eDir) 8.6.2 and Netware 5.1 eDir 85.x allows users with expired passwords to gain inappropriate permissions when logging in from Remote Manager.
Affected Products: n/a
References: [{'name': '20021112 NOVL-2002-2963827 - Remote Manager Security Issue - NW5.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103712790808781&w=2'}, {'name': 'novell-edirectory-expired-accounts(10604)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10604'}, {'name': '20021112 NOVL-2002-2963767 - Remote Manager Security Issue - eDir 8.6.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103712498905027&w=2'}, {'name': '6163', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6163'}]
CVE State: PUBLISHED
Explain CVE-2002-1553
Cisco ONS15454 and ONS15327 running ONS before 3.4 allows remote attackers to modify the system configuration and delete files by establishing an FTP connection to the TCC, TCC+ or XTC using a username and password that does not exist.
Affected Products: n/a
References: [{'name': 'cisco-ons-ftp-no-account(10505)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10505.php'}, {'name': '6076', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6076'}, {'name': '20021031 Cisco ONS15454 and Cisco ONS15327 Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml'}]
CVE State: PUBLISHED
Explain CVE-2002-1554
Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could allow attackers to gain privileges by obtaining the passwords from the image database or a backup.
Affected Products: n/a
References: [{'name': 'cisco-ons-plaintext-accounts(10506)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10506.php'}, {'name': '6078', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6078'}, {'name': '20021031 Cisco ONS15454 and Cisco ONS15327 Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml'}]
CVE State: PUBLISHED
Explain CVE-2002-1555
Cisco ONS15454 and ONS15327 running ONS before 3.4 uses a "public" SNMP community string that cannot be changed, which allows remote attackers to obtain sensitive information.
Affected Products: n/a
References: [{'name': 'cisco-ons-snmp-public(10507)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10507.php'}, {'name': '6081', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6081'}, {'name': '20021031 Cisco ONS15454 and Cisco ONS15327 Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml'}]
CVE State: PUBLISHED
Explain CVE-2002-1556
Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset) via an HTTP request to the TCC, TCC+ or XTC, in which the request contains an invalid CORBA Interoperable Object Reference (IOR).
Affected Products: n/a
References: [{'name': '6084', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6084'}, {'name': 'cisco-ons-corba-dos(10508)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10508.php'}, {'name': '20021031 Cisco ONS15454 and Cisco ONS15327 Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml'}]
CVE State: PUBLISHED
Explain CVE-2002-1557
Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset to TCC, TCC+, TCCi or XTC) via a malformed HTTP request that does not contain a leading / (slash) character.
Affected Products: n/a
References: [{'name': '6082', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6082'}, {'name': 'cisco-ons-http-dos(10509)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10509.php'}, {'name': '20021031 Cisco ONS15454 and Cisco ONS15327 Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml'}]
CVE State: PUBLISHED
Explain CVE-2002-1558
Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote attackers to gain privileges by connecting to the account via Telnet.
Affected Products: n/a
References: [{'name': 'cisco-ons-default-vsworks-account(10510)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10510.php'}, {'name': '6083', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6083'}, {'name': '20021031 Cisco ONS15454 and Cisco ONS15327 Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml'}]
CVE State: PUBLISHED
Explain CVE-2002-1559
Directory traversal vulnerability in ion-p.exe (aka ion-p) allows remote attackers to read arbitrary files via (1) C: (drive letter) or (2) .. (dot-dot) sequences in the page parameter.
Affected Products: n/a
References: [{'name': 'ion-ionp-view-files(10518)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10518.php'}, {'name': '20021101 Re: ion-p.exe allows Remote File Retrieving', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0448.html'}, {'name': '6091', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6091'}, {'name': '20021101 ion-p.exe allows Remote File Retrieving', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0447.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1560
index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by setting the login parameter to true.
Affected Products: n/a
References: [{'name': '20021022 gBook', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0328.html'}, {'name': 'gbook-mysql-admin-access(10455)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10455.php'}, {'name': '6033', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6033'}]
CVE State: PUBLISHED
Explain CVE-2002-1561
The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service) via a malformed packet to the RPC Endpoint Mapper at TCP port 135, which triggers a null pointer dereference.
Affected Products: n/a
References: [{'name': '6005', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6005'}, {'name': 'oval:org.mitre.oval:def:59', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A59'}, {'name': 'MS03-010', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-010'}, {'name': 'VU#261537', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/261537'}, {'name': '20021018 [Immunity, Inc.]Vulnerability: RPC Service DoS (port 135/tcp) onWindows 2000 SP3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/296114/2002-10-14/2002-10-20/0'}]
CVE State: PUBLISHED