Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2001-1593
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737385'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://pkgs.fedoraproject.org/cgit/a2ps.git/plain/a2ps-4.13-security.patch'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1060630'}, {'name': '[oss-security] 20140204 Re: CVE request: a2ps insecure temporary file use', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2014/q1/253'}, {'name': '[oss-security] 20140205 Re: CVE request: a2ps insecure temporary file use', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2014/q1/257'}, {'name': 'DSA-2892', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2014/dsa-2892'}, {'name': '[oss-security] 20140205 Re: CVE request: a2ps insecure temporary file use', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2014/q1/237'}]
CVE State: PUBLISHED
Explain CVE-2001-1594
GE Healthcare eNTEGRA P&R has a password of (1) entegra for the entegra user, (2) passme for the super user of the Polestar/Polestar-i Starlink 4 upgrade, (3) 0 for the entegra user of the Codonics printer FTP service, (4) eNTEGRA for the eNTEGRA P&R user account, (5) insite for the WinVNC Login, and possibly other accounts, which has unspecified impact and attack vectors.  NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://apps.gehealthcare.com/servlet/ClientServlet/2263784.pdf?DOCCLASS=A&REQ=RAC&DIRECTION=2263784-100&FILENAME=2263784.pdf&FILEREV=5&DOCREV_ORG=5&SUBMIT=+ACCEPT+'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://twitter.com/digitalbond/status/619250429751222277'}, {'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02'}]
CVE State: PUBLISHED
Explain CVE-2002-0001
Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list.
Affected Products: n/a
References: [{'name': 'HPSBTL0201-011', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/3778'}, {'name': 'FreeBSD-SA-02:04', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:04.mutt.asc'}, {'name': 'DSA-096', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-096'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mutt.org/announce/mutt-1.2.5.1-1.3.25.html'}, {'name': 'CLA-2002:449', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000449'}, {'name': 'mutt-address-handling-bo(7759)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7759.php'}, {'name': '3774', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3774'}, {'name': 'CSSA-2002-002.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-002.0.txt'}, {'name': 'SuSE-SA:2002:001', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_001_mutt_txt.html'}, {'name': '20020101 [Announce] SECURITY: mutt-1.2.5.1 and mutt-1.3.25 released.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100994648918287&w=2'}, {'name': 'RHSA-2002:003', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-003.html'}]
CVE State: PUBLISHED
Explain CVE-2002-0002
Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://marc.info/?l=stunnel-users&m=100869449828705&w=2'}, {'name': '3748', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3748'}, {'name': 'MDKSA-2002:004', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-004.php3'}, {'name': '20020102 Stunnel: Format String Bug update', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/248149'}, {'name': 'stunnel-client-format-string(7741)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7741'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://stunnel.mirt.net/news.html'}, {'name': 'RHSA-2002:002', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-002.html'}, {'name': '20011227 Stunnel: Format String Bug in versions <3.22', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/247427'}]
CVE State: PUBLISHED
Explain CVE-2002-0003
Buffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to gain privileges via lpd in the LPRng printing system.
Affected Products: n/a
References: [{'name': 'MDKSA-2002:012', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-012.php'}, {'name': 'HPSBTL0201-014', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/3793'}, {'name': 'linux-groff-preprocessor-bo(7881)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7881'}, {'name': 'RHSA-2002:004', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-004.html'}, {'name': '3869', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3869'}]
CVE State: PUBLISHED
Explain CVE-2002-0004
Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice.
Affected Products: n/a
References: [{'name': 'linux-at-exetime-heap-corruption(7909)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7909'}, {'name': 'HPSBTL0302-034', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/3969'}, {'name': 'DSA-102', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-102'}, {'name': 'RHSA-2002:015', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-015.html'}, {'name': 'HPSBTL0201-021', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/3833'}, {'name': "20020117 '/usr/bin/at 31337 + vuln' problem + exploit", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101128661602088&w=2'}, {'name': '3886', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3886'}, {'name': 'SuSE-SA:2002:003', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_003_at_txt.html'}, {'name': 'MDKSA-2002:007', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://marc.info/?l=bugtraq&m=101147632721031&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0005
Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions allows remote attackers to execute arbitrary code via a long argument in a game request (AddGame).
Affected Products: n/a
References: [{'name': 'aim-game-overflow(7743)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7743'}, {'name': 'VU#907819', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/907819'}, {'name': '20020102 w00w00 on AOL Instant Messenger (serious vulnerability)', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=72'}, {'name': '20020102 AIM addendum', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=198'}, {'name': '3769', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3769'}, {'name': '20020102 w00w00 on AOL Instant Messenger (serious vulnerability)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=100998295512885&w=2'}, {'name': '20020102 AIM addendum', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/247944'}]
CVE State: PUBLISHED
Explain CVE-2002-0006
XChat 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allows remote attackers to execute arbitrary IRC commands as other clients via encoded characters in a PRIVMSG command that calls CTCP PING, which expands the characters in the client response when the percascii variable is set.
Affected Products: n/a
References: [{'name': 'xchat-ctcp-ping-command(7856)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7856'}, {'name': 'CLA-2002:453', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000453'}, {'name': 'RHSA-2002:005', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2002-005.html'}, {'name': 'HPSBTL0201-016', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/3806'}, {'name': '3830', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3830'}, {'name': '20020109 xchat IRC session hijacking vulnerability (versions 1.4.1, 1.4.2)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101060676210255&w=2'}, {'name': 'DSA-099', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-099'}]
CVE State: PUBLISHED
Explain CVE-2002-0007
CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server.
Affected Products: n/a
References: [{'name': 'RHSA-2002:001', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2002-001.html'}, {'name': '20020105 Security Advisory for Bugzilla v2.15 (cvs20020103) and older', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.bugzilla.org/security2_14_1.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=54901'}, {'name': 'bugzilla-ldap-auth-bypass(7812)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7812'}, {'name': '3792', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3792'}]
CVE State: PUBLISHED
Explain CVE-2002-0008
Bugzilla before 2.14.1 allows remote attackers to (1) spoof a user comment via an HTTP request to process_bug.cgi using the "who" parameter, instead of the Bugzilla_login cookie, or (2) post a bug as another user by modifying the reporter parameter to enter_bug.cgi, which is passed to post_bug.cgi.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=108385'}, {'name': 'bugzilla-processbug-comment-spoofing(7805)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7805.php'}, {'name': '3794', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3794'}, {'name': 'RHSA-2002:001', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2002-001.html'}, {'name': '20020105 Security Advisory for Bugzilla v2.15 (cvs20020103) and older', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html'}, {'name': '3793', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3793'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.bugzilla.org/security2_14_1.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=108516'}, {'name': 'bugzilla-postbug-report-spoofing(7804)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7804.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0009
show_bug.cgi in Bugzilla before 2.14.1 allows a user with "Bugs Access" privileges to see other products that are not accessible to the user, by submitting a bug and reading the resulting Product pulldown menu.
Affected Products: n/a
References: [{'name': 'RHSA-2002:001', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2002-001.html'}, {'name': '20020105 Security Advisory for Bugzilla v2.15 (cvs20020103) and older', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.bugzilla.org/security2_14_1.html'}, {'name': '3798', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3798'}, {'name': 'bugzilla-showbug-reveal-bugs(7802)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7802.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=102141'}]
CVE State: PUBLISHED
Explain CVE-2002-0010
Bugzilla before 2.14.1 allows remote attackers to inject arbitrary SQL code and create files or gain privileges via (1) the sql parameter in buglist.cgi, (2) invalid field names from the "boolean chart" query in buglist.cgi, (3) the mybugslink parameter in userprefs.cgi, (4) a malformed bug ID in the buglist parameter in long_list.cgi, and (5) the value parameter in editusers.cgi, which allows groupset privileges to be modified by attackers with blessgroupset privileges.
Affected Products: n/a
References: [{'name': '20020106 Inproper input validation in Bugzilla <=2.14 - exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-01/0052.html'}, {'name': '3805', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3805'}, {'name': '3802', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3802'}, {'name': '3801', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3801'}, {'name': 'bugzilla-longlist-modify-sql(7811)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7811.php'}, {'name': 'bugzilla-editusers-change-groupset(7814)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7814.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=108821'}, {'name': 'bugzilla-buglist-sql-logic(7813)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7813.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=108812'}, {'name': 'RHSA-2002:001', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2002-001.html'}, {'name': '20020105 Security Advisory for Bugzilla v2.15 (cvs20020103) and older', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html'}, {'name': 'bugzilla-buglist-modify-sql(7807)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7807.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.bugzilla.org/bugzilla2.14to2.14.1.patch'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=108822'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.bugzilla.org/security2_14_1.html'}, {'name': 'bugzilla-userprefs-change-groupset(7809)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7809.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=109679'}, {'name': '3804', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3804'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=109690'}]
CVE State: PUBLISHED
Explain CVE-2002-0011
Information leak in doeditvotes.cgi in Bugzilla before 2.14.1 may allow remote attackers to more easily conduct attacks on the login.
Affected Products: n/a
References: [{'name': 'RHSA-2002:001', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2002-001.html'}, {'name': '20020105 Security Advisory for Bugzilla v2.15 (cvs20020103) and older', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.bugzilla.org/security2_14_1.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=98146'}, {'name': '3800', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3800'}, {'name': 'bugzilla-doeditvotes-login-information(7803)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7803.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0012
Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite.  NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor.  This and other SNMP-related candidates will be updated when more accurate information is available.
Affected Products: n/a
References: [{'name': 'RHSA-2001:163', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-163.html'}, {'name': 'oval:org.mitre.oval:def:161', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A161'}, {'name': 'oval:org.mitre.oval:def:144', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A144'}, {'name': 'MS02-006', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-006'}, {'name': '5043', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5043'}, {'name': 'HPSBMP0206-015', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/4211'}, {'name': '20020201-01-A', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020201-01-A'}, {'name': 'CA-2002-03', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-03.html'}, {'name': 'VU#107186', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/107186'}, {'name': 'oval:org.mitre.oval:def:1048', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1048'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/snmpv1/index.html'}, {'name': 'oval:org.mitre.oval:def:298', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A298'}, {'name': '20020212 PROTOS Remote SNMP Attack Tool', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://www.iss.net/security_center/alerts/advise110.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0013
Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via (1) GetRequest, (2) GetNextRequest, and (3) SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test suite.  NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor.  This and other SNMP-related candidates will be updated when more accurate information is available.
Affected Products: n/a
References: [{'name': 'RHSA-2001:163', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-163.html'}, {'name': '57404', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57404-1'}, {'name': 'MS02-006', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-006'}, {'name': 'oval:org.mitre.oval:def:87', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A87'}, {'name': '20020201-01-A', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020201-01-A'}, {'name': 'CA-2002-03', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-03.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/snmpv1/index.html'}, {'name': 'oval:org.mitre.oval:def:298', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A298'}, {'name': 'VU#854306', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/854306'}, {'name': '20020212 PROTOS Remote SNMP Attack Tool', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://www.iss.net/security_center/alerts/advise110.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0014
URL-handling code in Pine 4.43 and earlier allows remote attackers to execute arbitrary commands via a URL enclosed in single quotes and containing shell metacharacters (&).
Affected Products: n/a
References: [{'name': 'CLA-2002:460', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000460'}, {'name': '3815', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3815'}, {'name': 'RHSA-2002:009', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2002-009.html'}, {'name': 'HPSBTL0201-015', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0201-015'}, {'name': '20020105 Pine 4.33 (at least) URL handler allows embedded commands.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101027841605918&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0017
Buffer overflow in SNMP daemon (snmpd) on SGI IRIX 6.5 through 6.5.15m allows remote attackers to execute arbitrary code via an SNMP request.
Affected Products: n/a
References: [{'name': '20020403 Remote Buffer Overflow Vulnerability in IRIX SNMP Daemon', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://www.iss.net/security_center/alerts/advise113.php'}, {'name': 'irix-snmp-bo(7846)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7846.php'}, {'name': '4421', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4421'}, {'name': '20020201-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020201-01-P'}]
CVE State: PUBLISHED
Explain CVE-2002-0018
In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domain does not verify that the trusted domain is authoritative for all listed SIDs, which allows remote attackers to gain Domain Administrator privileges on the trusting domain by injecting SIDs from untrusted domains into the authorization data that comes from from the trusted domain.
Affected Products: n/a
References: [{'name': '3997', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3997'}, {'name': 'win-sid-gain-privileges(8023)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8023'}, {'name': 'oval:org.mitre.oval:def:159', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A159'}, {'name': 'MS02-001', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-001'}, {'name': 'oval:org.mitre.oval:def:64', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A64'}]
CVE State: PUBLISHED
Explain CVE-2002-0020
Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via malformed protocol options.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:424', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A424'}, {'name': '4061', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4061'}, {'name': 'ms-telnet-option-bo(8094)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8094.php'}, {'name': 'MS02-004', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-004'}]
CVE State: PUBLISHED
Explain CVE-2002-0021
Network Product Identification (PID) Checker in Microsoft Office v. X for Mac allows remote attackers to cause a denial of service (crash) via a malformed product announcement.
Affected Products: n/a
References: [{'name': 'MS02-002', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-002'}, {'name': '2041', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2041'}, {'name': '4045', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4045'}]
CVE State: PUBLISHED
Explain CVE-2002-0022
Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via a web page that specifies embedded ActiveX controls in a way that causes 2 Unicode strings to be concatenated.
Affected Products: n/a
References: [{'name': 'CA-2002-04', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-04.html'}, {'name': '20020213 dH & SECURITY.NNOV: buffer overflow in mshtml.dll', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101362984930597&w=2'}, {'name': 'oval:org.mitre.oval:def:925', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A925'}, {'name': 'ie-html-directive-bo(8116)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8116.php'}, {'name': 'MS02-005', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005'}, {'name': '20020227 Details and exploitation of buffer overflow in mshtml.dll (and few sidenotes on Unicode overflows in general)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/258614'}, {'name': '4080', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4080'}]
CVE State: PUBLISHED
Explain CVE-2002-0023
Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function, which bypass some of GetObject's security checks.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:77', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A77'}, {'name': '3767', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3767'}, {'name': 'ie-getobject-directory-traversal(7758)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7758'}, {'name': 'oval:org.mitre.oval:def:50', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A50'}, {'name': '3030', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3030'}, {'name': 'oval:org.mitre.oval:def:40', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A40'}, {'name': '20020101 IE GetObject() problems', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-01/0000.html'}, {'name': 'oval:org.mitre.oval:def:17', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17'}, {'name': 'MS02-005', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005'}]
CVE State: PUBLISHED
Explain CVE-2002-0024
File Download box in Internet Explorer 5.01, 5.5 and 6.0 allows an attacker to use the Content-Disposition and Content-Type HTML header fields to modify how the name of the file is displayed, which could trick a user into believing that a file is safe to download.
Affected Products: n/a
References: [{'name': '4087', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4087'}, {'name': 'MS02-005', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005'}]
CVE State: PUBLISHED
Explain CVE-2002-0025
Internet Explorer 5.01, 5.5 and 6.0 does not properly handle the Content-Type HTML header field, which allows remote attackers to modify which application is used to process a document.
Affected Products: n/a
References: [{'name': '4085', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4085'}, {'name': 'ie-application-invocation(8118)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8118'}, {'name': '20020212 [ GFISEC04102001 ] Internet Explorer and Access allow macros to be executed automatically', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/255767'}, {'name': 'MS02-005', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005'}]
CVE State: PUBLISHED
Explain CVE-2002-0026
Internet Explorer 5.5 and 6.0 allows remote attackers to bypass restrictions for executing scripts via an object that processes asynchronous events after the initial security checks have been made.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:32', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A32'}, {'name': 'oval:org.mitre.oval:def:12', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12'}, {'name': 'oval:org.mitre.oval:def:23', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A23'}, {'name': 'MS02-005', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005'}, {'name': '4082', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4082'}]
CVE State: PUBLISHED
Explain CVE-2002-0027
Internet Explorer 5.5 and 6.0 allows remote attackers to read certain files and spoof the URL in the address bar by using the Document.open function to pass information between two frames from different domains, a new variant of the "Frame Domain Verification" vulnerability described in MS:MS01-058/CAN-2001-0874.
Affected Products: n/a
References: [{'name': '3031', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3031'}, {'name': '20011219 Internet Explorer Document.Open() Without Close() Cookie Stealing, File Reading, Site Spoofing Bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/246522'}, {'name': '3721', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3721'}, {'name': 'oval:org.mitre.oval:def:974', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A974'}, {'name': 'MS02-005', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005'}]
CVE State: PUBLISHED
Explain CVE-2002-0028
Buffer overflow in ICQ before 2001B Beta v5.18 Build #3659 allows remote attackers to execute arbitrary code via a Voice Video & Games request.
Affected Products: n/a
References: [{'name': 'CA-2002-02', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-02.html'}, {'name': '20020106 ICQ remote buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101043894627851&w=2'}, {'name': 'aim-game-overflow(7743)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7743'}, {'name': 'VU#570167', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/570167'}, {'name': '3813', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3813'}, {'name': '20020107 ICQ remote buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=101043076806401&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-0029
Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as BSD libc and GNU glibc, allow remote attackers to execute arbitrary code via DNS server responses that trigger the overflow in the (1) getnetbyname, or (2) getnetbyaddr functions, aka "LIBRESOLV: buffer overrun" and a different vulnerability than CVE-2002-0684.
Affected Products: n/a
References: [{'name': 'bind-dns-libresolv-bo(10624)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10624.php'}, {'name': 'NetBSD-SA2002-028', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-028.txt.asc'}, {'name': 'CA-2002-31', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-31.html'}, {'name': '6186', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6186'}, {'name': 'VU#844360', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/844360'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.isc.org/products/BIND/bind-security.html'}, {'name': '2002-11-21', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html'}, {'name': '20021201-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20021201-01-P'}]
CVE State: PUBLISHED
Explain CVE-2002-0030
The digital signature mechanism for the Adobe Acrobat PDF viewer only verifies the PE header of executable code for a plug-in, which can allow attackers to execute arbitrary code in certified mode by making the plug-in appear to be signed by Adobe.
Affected Products: n/a
References: [{'name': 'VU#549913', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/549913'}, {'name': '20030324 Vulnerability (critical): Digital signature for Adobe Acrobat/Reader plug-in can be forged', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004230.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kb.cert.org/vuls/id/JSHA-5EZQGZ'}, {'name': '20030324 Vulnerability (critical): Digital signature for Adobe Acrobat/Reader plug-in can be forged', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0148.html'}]
CVE State: PUBLISHED
Explain CVE-2002-0031
Buffer overflows in Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary code via a ymsgr URI with long arguments to (1) call, (2) sendim, (3) getimv, (4) chat, (5) addview, or (6) addfriend.
Affected Products: n/a
References: [{'name': 'CA-2002-16', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-16.html'}, {'name': 'VU#137115', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/137115'}, {'name': '20020527 Yahoo Messenger - Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274223'}, {'name': '4837', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4837'}]
CVE State: PUBLISHED
Explain CVE-2002-0032
Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary script as other users via the addview parameter of a ymsgr URI.
Affected Products: n/a
References: [{'name': 'CA-2002-16', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-16.html'}, {'name': '20020527 Yahoo Messenger - Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274223'}, {'name': '4838', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4838'}, {'name': 'VU#172315', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/172315'}, {'name': 'yahoo-messenger-script-injection(9184)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9184.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0033
Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309'}, {'name': 'oval:org.mitre.oval:def:124', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A124'}, {'name': 'VU#635811', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/635811'}, {'name': 'CA-2002-11', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-11.html'}, {'name': '4674', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4674'}, {'name': 'oval:org.mitre.oval:def:31', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A31'}, {'name': '20020505 [LSD] Solaris cachefsd remote buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-05/0026.html'}, {'name': 'solaris-cachefsd-name-bo(8999)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8999.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0034
The Microsoft CONVERT.EXE program, when used on Windows 2000 and Windows XP systems, does not apply the default NTFS permissions when converting a FAT32 file system, which could cause the conversion to produce a file system with less secure permissions than expected.
Affected Products: n/a
References: [{'name': 'Q237399', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B237399'}, {'name': 'VU#361065', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/361065'}]
CVE State: PUBLISHED
Explain CVE-2002-0036
Integer signedness error in MIT Kerberos V5 ASN.1 decoder before krb5 1.2.5 allows remote attackers to cause a denial of service via a large unsigned data element length, which is later used as a negative value.
Affected Products: n/a
References: [{'name': 'RHSA-2003:052', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-052.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-001-multiple.txt'}, {'name': 'RHSA-2003:051', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-051.html'}, {'name': 'MDKSA-2003:043', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:043'}, {'name': '4896', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4896'}, {'name': '6713', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6713'}, {'name': 'kerberos-kdc-neglength-bo(11190)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11190'}, {'name': 'CLA-2003:639', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000639'}, {'name': 'VU#587579', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/587579'}, {'name': 'RHSA-2003:168', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-168.html'}]
CVE State: PUBLISHED
Explain CVE-2002-0037
Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NSFDbReadObject) that directly accesses the object.
Affected Products: n/a
References: [{'name': 'lotus-domino-nsfdbreadobject(10095)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10095.php'}, {'name': '20010917 Re: Lotus Notes: File attachments may be extracted regardless of document security', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-09/0150.html'}, {'name': '20010917 Lotus Notes: File attachments may be extracted regardless of document security', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-09/0147.html'}, {'name': 'VU#657899', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/657899'}]
CVE State: PUBLISHED
Explain CVE-2002-0038
Vulnerability in the cache-limiting function of the unified name service daemon (nsd) in IRIX 6.5.4 through 6.5.11 allows remote attackers to cause a denial of service by forcing the cache to fill the disk.
Affected Products: n/a
References: [{'name': '20020102-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020102-01-I'}, {'name': '20020102-02-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020102-02-I'}, {'name': '3882', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3882'}, {'name': '20020102-03-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020102-03-P'}, {'name': 'irix-nsd-cache-dos(7907)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7907'}]
CVE State: PUBLISHED
Explain CVE-2002-0039
rpcbind in SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via malformed RPC packets with invalid lengths.
Affected Products: n/a
References: [{'name': '20020306-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020306-01-P'}]
CVE State: PUBLISHED
Explain CVE-2002-0040
Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, which might allow the users to gain privileges.
Affected Products: n/a
References: [{'name': '20020306-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020306-01-P'}, {'name': '4388', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4388'}, {'name': '2058', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2058'}, {'name': 'irix-hostaliases-gain-privileges(8669)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8669.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0041
Unknown vulnerability in Mail for SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, when running with the -R option, allows local and remote attackers to cause a core dump.
Affected Products: n/a
References: [{'name': 'irix-mail-core-dump(8835)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8835.php'}, {'name': '20020401-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020401-01-P'}, {'name': '4499', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4499'}, {'name': 'M-067', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/m-067.shtml'}]
CVE State: PUBLISHED
Explain CVE-2002-0042
Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service (hang) by creating a file that is not properly processed by XFS.
Affected Products: n/a
References: [{'name': '4511', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4511'}, {'name': 'irix-xfs-dos(8839)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8839.php'}, {'name': '20020402-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020402-01-P'}]
CVE State: PUBLISHED