Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2002-1663
The Post_Method function in method.c for Monkey HTTP Daemon before 0.5.1 allows remote attackers to cause a denial of service (crash) via a POST request with an invalid or missing Content-Length header value.
Affected Products: n/a
References: [{'name': '20021103 Bug in Monkey Webserver 0.5.0 or minors versions', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-11/0023.html'}, {'name': '6096', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6096'}, {'name': '7449', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7449'}, {'name': 'monkey-http-post-dos(10529)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10529'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://monkeyd.sourceforge.net/Changelog.txt'}, {'name': '1005507', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005507'}]
CVE State: PUBLISHED
Explain CVE-2002-1664
Yahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another user's buddy list and possibly obtain sensitive information.
Affected Products: n/a
References: [{'name': 'CA-2002-16', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-16.html'}, {'name': '20020221 Remote crashes in Yahoo messenger', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101439616623230&w=2'}, {'name': 'VU#393195', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/393195'}]
CVE State: PUBLISHED
Explain CVE-2002-1665
Buffer overflow in Yahoo! Messenger before February 2002 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long set_buddygrp field.
Affected Products: n/a
References: [{'name': 'CA-2002-16', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-16.html'}, {'name': '20020221 Remote crashes in Yahoo messenger', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101439616623230&w=2'}, {'name': 'VU#755755', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/755755'}]
CVE State: PUBLISHED
Explain CVE-2002-1666
Unknown vulnerability in Oracle E-Business Suite 11i.1 through 11i.6 allows remote attackers to execute unauthorized PL/SQL procedures by modifying the Oracle Applications URL.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/apps_alert_ebiz2.pdf'}, {'name': '4551', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4551'}, {'name': 'oracle-ebiz-execute-procedures(8897)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8897'}]
CVE State: PUBLISHED
Explain CVE-2002-1667
The virtual memory management system in FreeBSD 4.5-RELEASE and earlier does not properly check the existence of a VM object during page invalidation, which allows local users to cause a denial of service (crash) by calling msync on an unaccessed memory map created with MAP_ANON and MAP_NOSYNC flags.
Affected Products: n/a
References: [{'name': 'FreeBSD-SA-02:22', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:22.mmap.asc'}, {'name': 'freebsd-mmap-msync-dos(8921)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8921'}]
CVE State: PUBLISHED
Explain CVE-2002-1668
HP-UX 11.11 and earlier allows local users to cause a denial of service (kernel deadlock), due to a "file system weakness" that is possibly via an mmap() system call and performing an I/O operation using data from the mapped buffer on the file descriptor for the mapped file.
Affected Products: n/a
References: [{'name': 'HPSBUX0201-178', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/3770'}, {'name': '3817', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3817'}, {'name': 'hp-mmap-dos(7844)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7844'}]
CVE State: PUBLISHED
Explain CVE-2002-1669
pkg_add in FreeBSD 4.2 through 4.4 creates a temporary directory with world-searchable permissions, which may allow local users to modify world-writable parts of the package during installation.
Affected Products: n/a
References: [{'name': '3819', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3819'}, {'name': 'freebsd-pkgadd-insecure-directory(7852)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7852'}, {'name': 'FreeBSD-SA-02:01', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:01.pkg_add.asc'}]
CVE State: PUBLISHED
Explain CVE-2002-1670
Microsoft Windows XP Professional upgrade edition overwrites previously installed patches for Internet Explorer 6.0, leaving Internet Explorer unpatched.
Affected Products: n/a
References: [{'name': 'winxp-ie-patch-rollback(7922)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7922'}, {'name': '3887', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3887'}, {'name': '20020115 MSIE 6.0 will rollback during XP Pro Install -- Ref: MSIE may download and run programs automatically - details', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/250596'}]
CVE State: PUBLISHED
Explain CVE-2002-1671
Microsoft Internet Explorer 5.0, 5.01, and 5.5 allows remote attackers to monitor the contents of the clipboard via the getData method of the clipboardData object.
Affected Products: n/a
References: [{'name': '3862', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3862'}, {'name': 'ie-clipboarddata-view-clipboard(7906)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7906'}, {'name': '20020112 IE Clipboard Stealing Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/250248'}, {'name': '20020115 Re: IE Clipboard Stealing Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/250387/2002-10-11/2002-10-17/2'}]
CVE State: PUBLISHED
Explain CVE-2002-1672
Webmin 0.92, when installed from an RPM, creates /var/webmin with insecure permissions (world readable), which could allow local users to read the root user's cookie-based authentication credentials and possibly hijack the root user's session using the credentials.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.webmin.com/changes.html'}, {'name': '4328', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4328'}, {'name': 'webmin-directory-permissions(8595)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8595'}, {'name': '20020320 Local privalege escalation issues with Webmin 0.92', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/263181'}]
CVE State: PUBLISHED
Explain CVE-2002-1673
The web interface for Webmin 0.92 does not properly quote or filter script code in files that are displayed to the interface, which allows local users to execute script and possibly steal cookies by inserting the script into certain files or fields, such as a real user name entry in the passwd file.
Affected Products: n/a
References: [{'name': '4329', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4329'}, {'name': 'webmin-functions-execute-code(8596)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8596'}, {'name': '20020320 Local privalege escalation issues with Webmin 0.92', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/263181'}]
CVE State: PUBLISHED
Explain CVE-2002-1674
procfs on FreeBSD before 4.5 allows local users to cause a denial of service (kernel panic) by removing a file that the fstatfs function refers to.
Affected Products: n/a
References: [{'name': 'bsd-fstatfs-dos(8112)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8112'}, {'name': '4040', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4040'}, {'name': 'FreeBSD-SA-02:09', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:09.fstatfs.asc'}]
CVE State: PUBLISHED
Explain CVE-2002-1675
Format string vulnerability in the Cio_PrintF function of cio_main.c in Unreal IRCd 3.1.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers.
Affected Products: n/a
References: [{'name': '20020225 Unreal ircd Format String Vuln', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://archives.neohapsis.com/archives/vuln-dev/2002-q1/0664.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/unixfocus/5MP080A6LQ.html'}, {'name': 'unreal-ircd-format-string(8360)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8360'}]
CVE State: PUBLISHED
Explain CVE-2002-1676
BindView NetInventory 1.0, when used with NetRC 1.0, allows local users to read sensitive information (passwords) by deleting the HOSTCFG._NI file and forcing an audit, which rewrites the HOSTCFG._NI to HOSTCFG.INI and stores the passwords in cleartext until the audit is complete.
Affected Products: n/a
References: [{'name': '3957', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3957'}, {'name': '20020213 RE: BindView NetInventory NetRC hostcfg_ni password passed in cle ar text', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/256056'}, {'name': 'bindview-netinventory-plaintext-password(7992)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7992'}, {'name': '20020124 BindView NetInventory NetRC hostcfg_ni password passed in clear t ext', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/252293'}]
CVE State: PUBLISHED
Explain CVE-2002-1677
14all.cgi 1.1p15 in mrtgconfig allows remote attackers to determine the physical path to the web root directory via a request with an invalid cfg parameter, which generates an error message that reveals the path.
Affected Products: n/a
References: [{'name': 'mrtg-14allcgi-path-disclosure(8070)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8070'}, {'name': '20020204 Re: Mrtg Path Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-01/0421.html'}, {'name': '20020205 Mrtg Path Disclosure Vulnerability (Revised)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/254278'}, {'name': '4021', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4021'}]
CVE State: PUBLISHED
Explain CVE-2002-1678
Cross-site scripting (XSS) vulnerability in memberlist.php in Jelsoft vBulletin 2.0 rc 2 through 2.2.4 allows remote attackers to steal authentication credentials by injecting script into $letterbits.
Affected Products: n/a
References: [{'name': '20020322 memberlist.php of vBulletin', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/263609'}, {'name': '4349', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4349'}, {'name': '20020322 RE: memberlist.php of vBulletin', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/264023/2002-11-01/2002-11-07/2'}, {'name': 'vbulletin-memberlist-execute-code(8619)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8619'}]
CVE State: PUBLISHED
Explain CVE-2002-1679
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 2.2.0 allows remote attackers to execute arbitrary script as other users by injecting script into a bulletin board message.
Affected Products: n/a
References: [{'name': '20020131 Fairly serious vulnerability in vBulletin 2.2.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/253365'}, {'name': '20020131 Semi-serious vulnerability in vBulletin 2.2.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/253371'}, {'name': 'vbulletin-bbs-css(8039)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8039'}, {'name': '4008', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4008'}]
CVE State: PUBLISHED
Explain CVE-2002-1680
Cross-site scripting (XSS) vulnerability in CGI Online Worldweb Shopping 1.1 (a.k.a. COWS) allows remote attackers to execute arbitrary script as other users by injecting script into (1) diagnose.cgi or (2) compatible.cgi.
Affected Products: n/a
References: [{'name': '3921', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3921'}, {'name': 'cows-cgi-css(7986)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7986'}, {'name': '3914', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3914'}, {'name': '20020121 Security holes in COWS (CGI Online Worldweb Shopping)', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://online.securityfocus.com/archive/82/251570'}]
CVE State: PUBLISHED
Explain CVE-2002-1681
Cross-site scripting (XSS) vulnerability in Slashcode CVS releases June 17 through July 1 2002 allows remote attackers to execute arbitrary script as other users by injecting script into the paragraph <P> tag.
Affected Products: n/a
References: [{'name': '20020702 Re: XSS in Slashcode', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/280255'}, {'name': '5140', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5140'}, {'name': 'slashcode-cvs-xss(9473)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9473'}, {'name': '20020702 XSS in Slashcode', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/280218'}]
CVE State: PUBLISHED
Explain CVE-2002-1682
NewsReactor 1.0 uses a weak encryption scheme, which could allow local users to decrypt the passwords and gain access to other users' newsgroup accounts.
Affected Products: n/a
References: [{'name': 'newsreactor-insecure-password(7968)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7968'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/windowsntfocus/5SP0P0K60C.html'}, {'name': '3927', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3927'}]
CVE State: PUBLISHED
Explain CVE-2002-1683
Cross-site scripting (XSS) vulnerability in BadBlue Personal Edition 1.7.3 allows remote attackers to execute arbitrary script as other users by injecting script into the cleanSearchString() function.
Affected Products: n/a
References: [{'name': '5179', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5179'}, {'name': '20020708 BadBlue 1.73 EXT.DLL XSS Variant', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/281141'}, {'name': 'badblue-cleansearchstring-xss(9514)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9514'}]
CVE State: PUBLISHED
Explain CVE-2002-1684
Directory traversal vulnerability in (1) Deerfield D2Gfx 1.0.2 or (2) BadBlue Enterprise Edition 1.5.x and BadBlue Personal Edition 1.5.6 allows remote attackers to read arbitrary files via a ../ (dot dot slash) in the script used to read Microsoft Office documents.
Affected Products: n/a
References: [{'name': '3913', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3913'}, {'name': 'badblue-msoffice-script-directory-traversal(7946)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7946'}, {'name': '20020121 [resend] Strumpf Noir Society on BadBlue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/251523'}]
CVE State: PUBLISHED
Explain CVE-2002-1685
Cross-site scripting vulnerability (XSS) in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute arbitrary script as other users by injecting script into ext.dll ISAPI.
Affected Products: n/a
References: [{'name': '20020708 Technical Details of BadBlue EXT.DLL Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/281088'}, {'name': '5086', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5086'}, {'name': 'badblue-extdll-xss(9513)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9513'}]
CVE State: PUBLISHED
Explain CVE-2002-1686
Buffer overflow in lscfg of unknown versions of AIX has unknown impact.
Affected Products: n/a
References: [{'name': 'IY27855', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://archives.neohapsis.com/archives/aix/2002-q1/0005.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1687
Buffer overflow in the diagnostics library in AIX allows local users to "cause data and instructions to be overwritten" via a long DIAGNOSTICS environment variable.
Affected Products: n/a
References: [{'name': 'IY27740', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://archives.neohapsis.com/archives/aix/2002-q1/0005.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1688
The browser history feature in Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to execute arbitrary script as other users and steal authentication information via cookies by injecting JavaScript into the URL, which is executed when the user hits the Back button.
Affected Products: n/a
References: [{'name': '4505', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4505'}, {'name': 'ie-history-javascript-urls(8844)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8844'}, {'name': '20020414 Using the backbutton in IE is dangerous', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/267561'}]
CVE State: PUBLISHED
Explain CVE-2002-1689
Unknown vulnerability in the login program on AIX before 4.0 could allow remote users to specify 100 or more environment variables when logging on, which exceeds the length of a certain string, possibly triggering a buffer overflow.
Affected Products: n/a
References: [{'name': 'IY27778', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://archives.neohapsis.com/archives/aix/2002-q1/0005.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1690
Unknown vulnerability in AIX before 4.0 with unknown attack vectors and unknown impact, aka "security issue," as fixed by APAR IY28225.
Affected Products: n/a
References: [{'name': 'IY28225', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://archives.neohapsis.com/archives/aix/2002-q1/0005.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1691
Alcatel OmniPCX 4400 installs known user accounts and passwords in the /etc/password file by default, which allows remote attackers to gain unauthorized access.
Affected Products: n/a
References: [{'name': 'omnipcx-default-user-accounts(8224)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8224'}, {'name': '20020219 Security BugWare : Alcatel 4400 PBX hack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101413767925869&w=2'}, {'name': '4127', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4127'}]
CVE State: PUBLISHED
Explain CVE-2002-1692
Buffer overflow in backup utility of Microsoft Windows 95 allows attackers to execute arbitrary code by causing a filename with a long extension to be placed in a folder to be backed up.
Affected Products: n/a
References: [{'name': 'win95-backup-bo(7892)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7892'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securitytracker.com/alerts/2002/Jan/1003201.html'}, {'name': '3864', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3864'}]
CVE State: PUBLISHED
Explain CVE-2002-1694
Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to modify the log file contents while IIS is running.
Affected Products: n/a
References: [{'name': '3888', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3888'}, {'name': 'iis-modify-log(7919)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7919'}, {'name': '20020114 NMRC Advisory: OpenFile Win32 API Log Overwriting/Rewriting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/250591'}]
CVE State: PUBLISHED
Explain CVE-2002-1695
Norton Internet Security 2001 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to modify the log file contents while Norton Internet Security is running.
Affected Products: n/a
References: [{'name': '3888', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3888'}, {'name': 'iis-modify-log(7919)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7919'}, {'name': '20020114 NMRC Advisory: OpenFile Win32 API Log Overwriting/Rewriting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/250591'}]
CVE State: PUBLISHED
Explain CVE-2002-1696
Microsoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a message to hard disk when "Automatically decrypt/verify when opening messages" option is checked, "Always use Secure Viewer when decrypting" option is not checked, and the user replies to an encrypted message.
Affected Products: n/a
References: [{'name': 'pgp-outlook-decrypted-copy(7900)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7900'}, {'name': '3825', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3825'}, {'name': '20020108 PGP 7.0 Outlook Plug-in flaw', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=528'}]
CVE State: PUBLISHED
Explain CVE-2002-1697
Electronic Code Book (ECB) mode in VTun 2.0 through 2.5 uses a weak encryption algorithm that produces the same ciphertext from the same plaintext blocks, which could allow remote attackers to gain sensitive information.
Affected Products: n/a
References: [{'name': '20020109 Security weaknesses of VTun', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/bugtraq/2002/Jan/0119.html'}, {'name': 'vtun-ecb-weak-encryption(7904)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7904'}, {'name': '3845', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3845'}]
CVE State: PUBLISHED
Explain CVE-2002-1698
Buffer overflow in Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via a long FN (font) argument in the message header.
Affected Products: n/a
References: [{'name': '4675', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4675'}, {'name': 'msn-font-header-bo(9014)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9014'}, {'name': '20020506 Misformated message header causes msn messenger to crash', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/271130'}]
CVE State: PUBLISHED
Explain CVE-2002-1699
SQL injection vulnerability in ASP Client Check (ASPCC) 1.3 and 1.5 allows remote attackers to bypass authentication and gain unauthorized access via the password field.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/windowsntfocus/5BP031P75C.html'}, {'name': 'aspcc-sql-injection(9015)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9015'}, {'name': '21558', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/21558'}, {'name': '4676', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4676'}]
CVE State: PUBLISHED
Explain CVE-2002-1700
Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as other users by injecting script into the HTTP request for the name of a template, which is not filtered in the resulting 404 error message.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.macromedia.com/v1/Handlers/index.cfm?ID=23047'}, {'name': '5011', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5011'}, {'name': '20020618 ColdFusion MX Cross Site Scripting vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/277487'}, {'name': 'coldfusion-missing-template-css(9360)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9360'}]
CVE State: PUBLISHED
Explain CVE-2002-1702
Cross-site scripting vulnerability (XSS) in DeltaScripts PHP Classifieds 6.0.5 allows remote attackers to execute arbitrary script as other users via the URL parameter.
Affected Products: n/a
References: [{'name': 'phpclassifieds-parameters-css(9363)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9363'}, {'name': '20020614 Mewsoft Auction, PHP Classifieds and eFax.com - CrossSiteScripting issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/277049'}, {'name': '5022', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5022'}]
CVE State: PUBLISHED
Explain CVE-2002-1703
Cross-site scripting vulnerability (XSS) in auction.cgi for Mewsoft NetAuction 3.0 allows remote attackers to execute arbitrary script as other users via the Term parameter.
Affected Products: n/a
References: [{'name': '5023', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5023'}, {'name': 'netauction-parameters-css(9365)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9365'}, {'name': '20020614 Mewsoft Auction, PHP Classifieds and eFax.com - CrossSiteScripting issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/277049'}]
CVE State: PUBLISHED
Explain CVE-2002-1704
Zeroboard 4.1, when the "allow_url_fopen" and "register_globals" variables are enabled, allows remote attackers to execute arbitrary PHP code by modifying the _zb_path parameter to reference a URL on a remote web server that contains the code.
Affected Products: n/a
References: [{'name': '5028', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5028'}, {'name': 'zeroboard-include-remote-file(9366)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9366'}, {'name': '20020615 malicious PHP source injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/277126'}]
CVE State: PUBLISHED
Explain CVE-2002-1705
Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to cause a denial of service (crash) via a Cascading Style Sheet (CSS) with the p{cssText} element declared and a bold font weight.
Affected Products: n/a
References: [{'name': '20020615 RE: IE 5.-6 CSS parsing error', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/277140/2002-12-07/2002-12-13/2'}, {'name': 'ie-css-bold-dos(9367)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9367'}, {'name': '20020615 IE 5.-6 CSS parsing error', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/277133'}, {'name': '5027', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5027'}]
CVE State: PUBLISHED
Explain CVE-2002-1706
Cisco IOS software 11.3 through 12.2 running on Cisco uBR7200 and uBR7100 series Universal Broadband Routers allows remote attackers to modify Data Over Cable Service Interface Specification (DOCSIS) settings via a DOCSIS file without a Message Integrity Check (MIC) signature, which is approved by the router.
Affected Products: n/a
References: [{'name': '5041', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5041'}, {'name': 'cisco-ubr-mic-bypass(9368)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9368'}, {'name': '20020617 Cable Modem Termination System Authentication Bypass', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cmts-MD5-bypass-pub.shtml'}]
CVE State: PUBLISHED
Explain CVE-2002-1707
install.php in phpBB 2.0 through 2.0.1, when "allow_url_fopen" and "register_globals" variables are set to "on", allows remote attackers to execute arbitrary PHP code by modifying the phpbb_root_dir parameter to reference a URL on a remote web server that contains the code.
Affected Products: n/a
References: [{'name': 'phpbb-include-remote-files(9370)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9370'}, {'name': '5038', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5038'}, {'name': '20020616 malicious PHP source injection in phpBB', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/277318'}]
CVE State: PUBLISHED
Explain CVE-2002-1708
Cross-site scripting vulnerability (XSS) in BasiliX Webmail 1.10 allows remote attackers to execute arbitrary script as other users by injecting script into the (1) subject or (2) message fields.
Affected Products: n/a
References: [{'name': '5060', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5060'}, {'name': 'basilix-webmail-headers-css(9384)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9384'}, {'name': '20020619 [VulnWatch] BasiliX multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0117.html'}, {'name': '20020618 BasiliX multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/277710'}]
CVE State: PUBLISHED
Explain CVE-2002-1709
SQL injection vulnerability in BasiliX Webmail 1.10 allows remote attackers to obtain sensitive information or possibly modify data via the id variable.
Affected Products: n/a
References: [{'name': '20020619 [VulnWatch] BasiliX multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0117.html'}, {'name': 'basilix-webmail-sql-injection(9385)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9385'}, {'name': '5061', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5061'}, {'name': '20020618 BasiliX multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/277710'}]
CVE State: PUBLISHED
Explain CVE-2002-1710
The attachment capability in Compose Mail in BasiliX Webmail 1.1.0 does not check whether the attachment was uploaded by the user or came from a HTTP POST, which could allow local users to steal sensitive information like a password file.
Affected Products: n/a
References: [{'name': '5062', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5062'}, {'name': 'basilix-webmail-attach-files(9386)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9386'}, {'name': '20020619 [VulnWatch] BasiliX multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0117.html'}, {'name': '20020618 BasiliX multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00247.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1711
BasiliX 1.1.0 saves attachments in a world readable /tmp/BasiliX directory, which allows local users to read other users' attachments.
Affected Products: n/a
References: [{'name': 'basilix-webmail-view-attachments(9387)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9387'}, {'name': '20020619 [VulnWatch] BasiliX multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0117.html'}, {'name': '5065', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5065'}, {'name': '20020618 BasiliX multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/277710'}]
CVE State: PUBLISHED
Explain CVE-2002-1712
Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the NetBIOS port (TCP/139), as demonstrated by stream3.
Affected Products: n/a
References: [{'name': 'Q280446', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq280446'}, {'name': 'win2k-empty-tcp-dos(8037)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8037'}, {'name': '3967', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3967'}, {'name': '20020128 SECURITY.NNOV: stream3 Windows NT/2000 DoS (Q280446)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/252616'}]
CVE State: PUBLISHED
Explain CVE-2002-1713
The Standard security setting for Mandrake-Security package (msec) in Mandrake 8.2 installs home directories with world-readable permissions, which could allow local users to read other user's files.
Affected Products: n/a
References: [{'name': '5050', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5050'}, {'name': 'mandrake-msec-home-permissions(9389)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9389'}, {'name': 'VU#455323', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/455323'}, {'name': '20020617 Mandrake 8.2 msec security issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/277515'}]
CVE State: PUBLISHED
Explain CVE-2002-1714
Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to cause a denial of service (crash) via an object of type "text/html" with the DATA field that identifies the HTML document that contains the object, which may cause infinite recursion.
Affected Products: n/a
References: [{'name': '20020420 DoS in Multiple IE Versions (Self-Referenced Directives)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/268776'}, {'name': '4564', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4564'}, {'name': 'ie-object-directive-dos(8904)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8904'}]
CVE State: PUBLISHED
Explain CVE-2002-1715
SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then executing that script to gain normal shell access.
Affected Products: n/a
References: [{'name': 'ssh-bypass-restricted-shells(8908)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8908'}, {'name': '4547', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4547'}, {'name': '20020418 Restricted Shells', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/268446'}]
CVE State: PUBLISHED
Explain CVE-2002-1716
The Host() function in the Microsoft spreadsheet component on Microsoft Office XP allows remote attackers to create arbitrary files using the SaveAs capability.
Affected Products: n/a
References: [{'name': '4398', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4398'}, {'name': 'msoffice-spreadsheet-host-cas(8711)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8711'}, {'name': '20020331 More Office XP problems', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/265087'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.guninski.com/m%24oxp-2.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1717
Microsoft Internet Information Server (IIS) 5.1 allows remote attackers to view path information via a GET request to (1) /_vti_pvt/access.cnf, (2) /_vti_pvt/botinfs.cnf, (3) /_vti_pvt/bots.cnf, or (4) /_vti_pvt/linkinfo.cnf.
Affected Products: n/a
References: [{'name': '20020212 Re: This is the CORRECTED POST please ignore the one befor same subject MULTIPLE Remote Issues with II5.1 on Windows XP', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/256125'}, {'name': 'iis-cnf-reveal-information(8174)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8174'}, {'name': '4078', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4078'}, {'name': '20020210 This is the CORRECTED POST please ignore the one befor same subject MULTIPLE Remote Issues with II5.1 on Windows XP', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/255555'}]
CVE State: PUBLISHED
Explain CVE-2002-1718
Microsoft Internet Information Server (IIS) 5.1 may allow remote attackers to view the contents of a Frontpage Server Extension (FPSE) file, as claimed using an HTTP request for colegal.htm that contains .. (dot dot) sequences.
Affected Products: n/a
References: [{'name': '20020212 Re: This is the CORRECTED POST please ignore the one befor same subject MULTIPLE Remote Issues with II5.1 on Windows XP', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/256125'}, {'name': '4084', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4084'}, {'name': '20020210 This is the CORRECTED POST please ignore the one befor same subject MULTIPLE Remote Issues with II5.1 on Windows XP', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/255555'}]
CVE State: PUBLISHED
Explain CVE-2002-1719
Unknown vulnerability in Bavo 0.3 allows remote attackers to modify posted messages.
Affected Products: n/a
References: [{'name': 'bavo-unspecified-security-bypass(40988)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40988'}, {'name': '1003503', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1003503'}, {'name': '4079', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4079'}]
CVE State: PUBLISHED
Explain CVE-2002-1720
SQL injection vulnerability in Spooky Login 2.0 through 2.5 allows remote attackers to bypass authentication and gain privileges via the password field.
Affected Products: n/a
References: [{'name': '4661', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4661'}, {'name': 'spooky-login-sql-injection(8991)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8991'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/windowsntfocus/5VP030K75G.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1721
Off-by-one error in alterMIME 0.1.10 and 0.1.11 allows remote attackers to cause a denial of service (crash) via an x-header that causes snprintf overwrite the FFGET_FILE variable with a (null) byte.
Affected Products: n/a
References: [{'name': 'altermime-snprintf-dos(8992)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8992'}, {'name': '4650', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4650'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.pldaniels.com/altermime/CHANGELOG'}]
CVE State: PUBLISHED
Explain CVE-2002-1722
Logitech iTouch keyboards allows attackers with physical access to the system to bypass the screen locking function and execute user-defined commands that have been assigned to a button.
Affected Products: n/a
References: [{'name': 'logitech-itouch-execute-commands(8994)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8994'}, {'name': '4662', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4662'}, {'name': '20020502 Logitech Keyboard Insecurity', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/270702'}]
CVE State: PUBLISHED
Explain CVE-2002-1723
Powerboards 2.2b allows remote attackers to view the full path to the backend database by sending a cookie containing a non-existent username to profiles.php, which displays the full path in the error message.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.ifrance.com/kitetoua/tuto/powerboards.txt'}, {'name': 'powerboards-path-disclosure(8824)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8824'}, {'name': '20020409 Security holes in Powerboard forum', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://online.securityfocus.com/archive/82/266665'}]
CVE State: PUBLISHED
Explain CVE-2002-1724
Cross-site scripting vulnerability (XSS) in phpimageview.php for PHPImageView 1.0 allows remote attackers to execute arbitrary script as other users via the pic parameter.
Affected Products: n/a
References: [{'name': '20020504 Security holes : PHP Image View, NewsPro, Photo DB, As_web, GuestBook', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://online.securityfocus.com/archive/82/270970'}, {'name': '4668', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4668'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ifrance.com/kitetoua/tuto/5holes4.txt'}, {'name': 'phpimageview-var-css(9000)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9000'}]
CVE State: PUBLISHED
Explain CVE-2002-1725
phpimageview.php in PHPImageView 1.0 allows remote attackers to obtain sensitive information via the pw=show option, which invokes the phpinfo function.
Affected Products: n/a
References: [{'name': '4668', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4668'}, {'name': 'phpimageview-phpinfo-gain-info(9001)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9001'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ifrance.com/kitetoua/tuto/5holes4.txt'}, {'name': '20020504 Security holes : PHP Image View, NewsPro, Photo DB, As_web, GuestBook', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://online.securityfocus.com/archive/82/270970/2002-12-21/2002-12-27/2'}]
CVE State: PUBLISHED
Explain CVE-2002-1726
secure_inc.php in PhotoDB 1.4 allows remote attackers to bypass authentication via a URL with a large Time parameter, non-empty rmtusername and rmtpassword parameter, and an accesslevel parameter that is lower than the access level of the requested page.
Affected Products: n/a
References: [{'name': '20020504 Security holes : PHP Image View, NewsPro, Photo DB, As_web, GuestBook', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://online.securityfocus.com/archive/82/270970'}, {'name': 'photodb-admin-access(9002)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9002'}, {'name': '4669', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4669'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ifrance.com/kitetoua/tuto/5holes4.txt'}]
CVE State: PUBLISHED
Explain CVE-2002-1727
Cross-site scripting vulnerability (XSS) in (1) as_web.exe and (2) as_web4.exe in askSam Web Publisher 1 and 4 allows remote attackers to execute arbitrary script as other users via a URL.
Affected Products: n/a
References: [{'name': '20020504 Security holes : PHP Image View, NewsPro, Photo DB, As_web, GuestBook', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://online.securityfocus.com/archive/82/270970'}, {'name': '4670', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4670'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ifrance.com/kitetoua/tuto/5holes4.txt'}, {'name': 'asksam-webpub-css(9003)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9003'}]
CVE State: PUBLISHED
Explain CVE-2002-1728
askSam Web Publisher 1.0 and 4.0 allows remote attackers to determine the full path to the web root directory via a request for a file that does not exist, which generates an error message that reveals the full path.
Affected Products: n/a
References: [{'name': '20020504 Security holes : PHP Image View, NewsPro, Photo DB, As_web, GuestBook', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://online.securityfocus.com/archive/82/270970'}, {'name': '4670', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4670'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ifrance.com/kitetoua/tuto/5holes4.txt'}, {'name': 'asksam-webpub-path-disclosure(9004)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9004'}]
CVE State: PUBLISHED