Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2002-0882
The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1) the stream ID of the StreamingStatistics script, or (2) the port ID of the PortInformation script.
Affected Products: n/a
References: [{'name': '20020522 Multiple Vulnerabilities in CISCO VoIP Phones', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/273673'}, {'name': '4794', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4794'}, {'name': '20020522 Multiple Vulnerabilities in Cisco IP Telephones', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/multiple-ip-phone-vulnerabilities-pub.shtml'}, {'name': '4798', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4798'}, {'name': 'cisco-ipphone-streamingstatistics-dos(9142)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9142.php'}, {'name': 'cisco-ipphone-portinformation(9143)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9143.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0883
Vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10, allows authenticated users with Telnet, SSH, or console access to conduct unauthorized activities.
Affected Products: n/a
References: [{'name': 'compaq-proliant-gain-access(9202)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9202.php'}, {'name': '4802', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4802'}, {'name': 'SSRT2179', 'tags': ['vendor-advisory', 'x_refsource_COMPAQ'], 'url': 'http://ftp.support.compaq.com/patches/.new/html/SSRT2179.shtml'}]
CVE State: PUBLISHED
Explain CVE-2002-0884
Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to execute arbitrary code via format strings that are not properly handled in the functions (1) syserr and (2) error.
Affected Products: n/a
References: [{'name': '4791', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4791'}, {'name': '20020521 [VulnWatch] [DER Adv #7] - Multiple Vulnerabilities in solaris in.rarpd', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0074.html'}, {'name': '20020522 [DER Adv #7] - Multiple Vulnerabilities in solaris in.rarpd', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/273584'}, {'name': 'CSSA-2002-SCO.29', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.29/CSSA-2002-SCO.29.txt'}, {'name': 'solaris-inrarpd-code-execution(9150)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9150.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0885
Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera UnixWare and Open UNIX, allow remote attackers to execute arbitrary code, possibly via the functions (1) syserr and (2) error.
Affected Products: n/a
References: [{'name': '4791', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4791'}, {'name': '20020521 [VulnWatch] [DER Adv #7] - Multiple Vulnerabilities in solaris in.rarpd', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0074.html'}, {'name': '20020522 [DER Adv #7] - Multiple Vulnerabilities in solaris in.rarpd', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/273584'}, {'tags': ['x_refsource_MISC'], 'url': 'ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.29/CSSA-2002-SCO.29.txt'}, {'name': 'solaris-inrarpd-code-execution(9150)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9150.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0886
Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service (hang or memory consumption) via (1) a large packet to the DHCP port, (2) a large packet to the Telnet port, or (3) a flood of large packets to the CPE, which causes the TCP/IP stack to consume large amounts of memory.
Affected Products: n/a
References: [{'name': '20020523 CBOS - Improving Resilience to Denial-of-Service Attacks', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/CBOS-DoS.shtml'}, {'name': '4813', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4813'}, {'name': 'cisco-cbos-telnet-cpe-dos(9152)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9152'}, {'name': '4814', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4814'}, {'name': 'cisco-cbos-tcpip-dos(9153)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9153.php'}, {'name': 'cisco-cbos-dhcp-dos(9151)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9151.php'}, {'name': '4815', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4815'}]
CVE State: PUBLISHED
Explain CVE-2002-0887
scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using log files.
Affected Products: n/a
References: [{'name': '20010522 [SRT2001-10] - scoadmin /tmp issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=99057164129869&w=2'}, {'name': 'openserver-scoadmin-symlink(9210)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9210.php'}, {'name': '4875', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4875'}, {'name': 'CSSA-2002-SCO.22', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.22/CSSA-2002-SCO.22.txt'}]
CVE State: PUBLISHED
Explain CVE-2002-0888
3Com OfficeConnect Remote 812 ADSL Router, firmware 1.1.9 and 1.1.7, allows remote attackers to bypass port access restrictions by connecting to an approved port and quickly connecting to the desired port, which is allowed by the router.
Affected Products: n/a
References: [{'name': '3com-officeconnect-pat-access(9185)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9185.php'}, {'name': '20020612 Part II: Vulnerability in 3Com® OfficeConnect® Remote 812 ADSL Router', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-06/0102.html'}, {'name': '4841', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4841'}, {'name': '20020527 Vulnerability in 3Com® OfficeConnect® Remote 812 ADSL Router', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-05/0230.html'}]
CVE State: PUBLISHED
Explain CVE-2002-0889
Buffer overflow in Qpopper (popper) 4.0.4 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a long bulldir argument in the user's .qpopper-options configuration file.
Affected Products: n/a
References: [{'name': '20020428 QPopper 4.0.4 buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/269969'}, {'name': '20020428 QPopper 4.0.4 buffer overflow', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=102003707432457&w=2'}, {'name': 'qpopper-bulldir-bo(8949)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8949.php'}, {'name': '4614', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4614'}]
CVE State: PUBLISHED
Explain CVE-2002-0891
The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers to cause a denial of service (crash) via a long user name.
Affected Products: n/a
References: [{'name': 'netscreen-screenos-username-dos(9186)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9186.php'}, {'name': '4842', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4842'}, {'name': '20020527 Netscreen 25 unauthorised reboot issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274240'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.netscreen.com/support/ns25_reboot.html'}]
CVE State: PUBLISHED
Explain CVE-2002-0892
The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web root via a direct request to com.newatlanta.servletexec.JSP10Servlet without a filename, which leaks the pathname in an error message.
Affected Products: n/a
References: [{'name': '20020522 Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/273615'}, {'name': '20020522 [VulnWatch] Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0077.html'}, {'name': 'servletexec-jsp10servlet-path-disclosure(9139)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9139.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.newatlanta.com/do/findFaq?faq_id=151'}, {'name': '4793', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4793'}]
CVE State: PUBLISHED
Explain CVE-2002-0893
Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files via a URL-encoded request to com.newatlanta.servletexec.JSP10Servlet containing "..%5c" (modified dot-dot) sequences.
Affected Products: n/a
References: [{'name': '20020522 Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/273615'}, {'name': '4795', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4795'}, {'name': 'servletexec-dotdot-directory-traversal(9140)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9140.php'}, {'name': '20020522 [VulnWatch] Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0077.html'}]
CVE State: PUBLISHED
Explain CVE-2002-0894
NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service (crash) via (1) a request for a long .jsp file, or (2) a long URL sent directly to com.newatlanta.servletexec.JSP10Servlet.
Affected Products: n/a
References: [{'name': '20020522 Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/273615'}, {'name': '4796', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4796'}, {'name': '20020522 [VulnWatch] Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0077.html'}, {'name': 'servletexec-long-jsp-dos(9141)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9141.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0895
Buffer overflow in MatuFtpServer 1.1.3.0 (1.1.3) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PASS (password) command.
Affected Products: n/a
References: [{'name': '4792', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4792'}, {'name': 'matuftpserver-pass-bo(9138)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9138.php'}, {'name': '20020522 MatuFtpServer Remote Buffer Overflow and Possible DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/273581'}]
CVE State: PUBLISHED
Explain CVE-2002-0896
The throttle capability in Swatch may fail to report certain events if (1) the same type of event occurs after the throttle period, or (2) when multiple events matching the same "watchfor" expression do not occur after the throttle period, which could allow attackers to avoid detection.
Affected Products: n/a
References: [{'name': '20020515 swatch bug in throttle', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/272582'}, {'name': '4746', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4746'}, {'name': 'swatch-event-reporting-failure(9100)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9100.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0897
LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that contains the "/./" directory.
Affected Products: n/a
References: [{'name': '4820', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4820'}, {'name': 'localweb2k-protection-bypass(9165)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9165.php'}, {'name': '20020524 [SecurityOffice] LocalWeb2000 Web Server Protected File Access Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274020'}, {'name': '20020524 [SecurityOffice] LocalWeb2000 Web Server Protected File Access Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0079.html'}]
CVE State: PUBLISHED
Explain CVE-2002-0898
Opera 6.0.1 and 6.0.2 allows a remote web site to upload arbitrary files from the client system, without prompting the client, via an input type=file tag whose value contains a newline.
Affected Products: n/a
References: [{'name': '20020527 Reading ANY local file in Opera (GM#001-OP)', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=102256058220402&w=2'}, {'name': '20020527 Reading ANY local file in Opera (GM#001-OP)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274202'}, {'name': 'opera-browser-file-retrieval(9188)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9188.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.opera.com/windows/changelog/log603.html'}, {'name': '4834', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4834'}]
CVE State: PUBLISHED
Explain CVE-2002-0899
Falcon web server 2.0.0.1021 and earlier allows remote attackers to bypass access restrictions for protected files via a URL whose directory portion ends in a . (dot).
Affected Products: n/a
References: [{'name': '20020527 [SecurityOffice] Falcon Web Server Unauthorized File Disclosure Vulnerability #2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274205'}, {'name': 'falcon-protected-file-access(9179)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9179.php'}, {'name': '20020527 [VulnWatch] [SecurityOffice] Falcon Web Server Unauthorized File Disclosure Vulnerability #2', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0084.html'}, {'name': '4833', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4833'}]
CVE State: PUBLISHED
Explain CVE-2002-0900
Buffer overflow in pks PGP public key web server before 0.9.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long search argument to the lookup capability.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.rubin.ch/pgp/src/patch_buffoverflow20020525'}, {'name': 'pgp-pks-search-bo(9171)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9171.php'}, {'name': '20020524 pks public key server DOS and remote execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274107'}, {'name': '4828', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4828'}]
CVE State: PUBLISHED
Explain CVE-2002-0901
Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow (1) remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certain local users to execute arbitrary code via long command line arguments to the programs (2) amcheck, (3) amgetidx, (4) amtrmidx, (5) createindex-dump, or (6) createindex-gnutar.
Affected Products: n/a
References: [{'name': 'amanda-amindexd-bo(9181)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9181.php'}, {'name': '20020527 AMANDA security issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274215'}, {'name': '4836', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4836'}, {'name': 'amanda-operator-bo(9182)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9182.php'}, {'name': '4840', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4840'}]
CVE State: PUBLISHED
Explain CVE-2002-0902
Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a http:// and a double-quote (") in the [IMG] tag, which bypasses phpBB's security check, terminates the src parameter of the resulting HTML IMG tag, and injects the script.
Affected Products: n/a
References: [{'name': '4858', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4858'}, {'name': "20020526 Cross Site Scripting Vulnerability in phpBB2's [IMG] tag and remote avatar", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274273'}, {'name': 'phpbb-bbcode-image-css(9178)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9178.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0903
register.php for WoltLab Burning Board (wbboard) 1.1.1 uses a small number of random values for the "code" parameter that is provided to action.php to approve a new registration, along with predictable new user ID's, which allows remote attackers to hijack new user accounts via a brute force attack on the new user ID and the code value.
Affected Products: n/a
References: [{'name': 'burningboard-bbs-account-hijacking(9177)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9177.php'}, {'name': '20020526 wbbboard 1.1.1 registration _new_users_vulnerability_', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274269'}, {'name': '4859', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4859'}]
CVE State: PUBLISHED
Explain CVE-2002-0904
SayText function in Kismet 2.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters (backtick or pipe) in the essid argument.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kismetwireless.net/CHANGELOG'}, {'name': '4883', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4883'}, {'name': 'kismet-saytext-command-execution(9213)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9213.php'}, {'name': '20020529 New Kismet Packages available - SayText() and suid kismet_server issues', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=102269718506080&w=2'}, {'name': '20020528 New Kismet Packages available - SayText() and suid kismet_server issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-05/0259.html'}]
CVE State: PUBLISHED
Explain CVE-2002-0905
Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR environment variable.
Affected Products: n/a
References: [{'name': '4891', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4891'}, {'name': '20020529 Informix SE-7.25 /lib/sqlexec Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-05/0270.html'}, {'name': 'informix-sqlexec-bo(9219)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9219.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0906
Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malicious DNS server.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sendmail.org/8.12.5.html'}, {'name': 'oval:org.mitre.oval:def:2183', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2183'}, {'name': 'VU#814627', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/814627'}, {'name': '5122', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5122'}, {'name': 'sendmail-dns-txt-bo(9443)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9443.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0907
Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-".
Affected Products: n/a
References: [{'name': 'shoutcast-icy-remote-bo(9251)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9251.php'}, {'name': '4934', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4934'}, {'name': '20020604 SHOUTcast 1.8.9 bufferoverflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-06/0016.html'}]
CVE State: PUBLISHED
Explain CVE-2002-0908
Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTPS request.
Affected Products: n/a
References: [{'name': 'cisco-ids-directory-traversal(9174)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9174.php'}, {'name': '20020524 Cisco IDS Device Manager 3.1.1 Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-05/0214.html'}, {'name': '4760', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4760'}]
CVE State: PUBLISHED
Explain CVE-2002-0909
Multiple buffer overflows in mnews 1.22 and earlier allow (1) a remote NNTP server to execute arbitrary code via long responses, or local users can gain privileges via long command line arguments (2) -f, (3) -n, (4) -D, (5) -M, or (6) -P, or via long environment variables (7) JNAMES or (8) MAILSERVER.
Affected Products: n/a
References: [{'name': '20020531 Mnews 1.22 PoC exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102306166201275&w=2'}, {'name': '4900', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4900'}, {'name': '4899', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4899'}, {'name': 'mnews-multiple-local-bo(9227)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9227.php'}, {'name': '20020531 SRT Security Advisory (SRT2002-04-31-1159):  Mnews', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-05/0287.html'}, {'name': '20020531 Mnews 1.22 PoC exploit', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=102297259123103&w=2'}, {'name': 'mnews-nntp-response-bo(9226)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9226.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0910
Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, as observed in the utilities (1) linux-ftpd, (2) pcnfsd, (3) tftp, (4) traceroute, or (5) from/to.
Affected Products: n/a
References: [{'name': '4816', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4816'}, {'name': 'netstd-utilities-bo(9164)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9164.php'}, {'name': '20020524 Netstd 3.07-17 multiple remote buffer overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/273987'}, {'name': '20020525 Re: Netstd 3.07-17 multiple remote buffer overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274143'}]
CVE State: PUBLISHED
Explain CVE-2002-0911
Caldera Volution Manager 1.1 stores the Directory Administrator password in cleartext in the slapd.conf file, which could allow local users to gain privileges.
Affected Products: n/a
References: [{'name': 'CSSA-2002-024.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-024.0.txt'}, {'name': 'volution-manager-plaintext-password(9240)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9240.php'}, {'name': '4923', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4923'}]
CVE State: PUBLISHED
Explain CVE-2002-0912
in.uucpd UUCP server in Debian GNU/Linux 2.2, and possibly other operating systems, does not properly terminate long strings, which allows remote attackers to cause a denial of service, possibly due to a buffer overflow.
Affected Products: n/a
References: [{'name': 'DSA-129', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-129'}, {'name': 'debian-in-uucpd-dos(9230)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9230.php'}, {'name': '4910', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4910'}]
CVE State: PUBLISHED
Explain CVE-2002-0913
Format string vulnerability in log_doit function of Slurp NNTP client 1.1.0 allows a malicious news server to execute arbitrary code on the client via format strings in a server response.
Affected Products: n/a
References: [{'name': '20020604 SRT Security Advisory (SRT2002-06-04-1011): slurp', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=102323341407280&w=2'}, {'name': 'slurp-syslog-format-string(9270)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9270.php'}, {'name': '20020604 SRT Security Advisory (SRT2002-06-04-1011): slurp', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-06/0014.html'}, {'name': '4935', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4935'}]
CVE State: PUBLISHED
Explain CVE-2002-0914
Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU consumption) via a message with an extremely large or negative value for the year, which causes a tight loop.
Affected Products: n/a
References: [{'name': 'courier-mta-year-dos(9228)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9228.php'}, {'name': '5052', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5052'}, {'name': '4908', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4908'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=93065'}]
CVE State: PUBLISHED
Explain CVE-2002-0915
autorun in Xandros based Linux distributions allows local users to read the first line of arbitrary files via the -c parameter, which causes autorun to print the first line of the file.
Affected Products: n/a
References: [{'name': '4884', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4884'}, {'name': '20020528 Xandros based linux autorun -c', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-05/0260.html'}, {'name': 'xandros-autorun-view-files(9211)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9211.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0916
Format string vulnerability in the allowuser code for the Stellar-X msntauth authentication module, as distributed in Squid 2.4.STABLE6 and earlier, allows remote attackers to execute arbitrary code via format strings in the user name, which are not properly handled in a syslog call.
Affected Products: n/a
References: [{'name': '20020603 [VulnWatch] [DER #11] - Remotey exploitable fmt string bug in squid', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0087.html'}, {'name': 'msntauth-squid-format-string(9248)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9248.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/Versions/v2/2.4/diff-2.4.STABLE6-2.4.STABLE7.gz'}, {'name': '20020604 [DER #11] - Remotey exploitable fmt string bug in squid', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/275347'}, {'name': '4929', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4929'}]
CVE State: PUBLISHED
Explain CVE-2002-0917
CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users.
Affected Products: n/a
References: [{'name': '20020529 CGIscript.net - csPassword.cgi - Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274727'}, {'name': '4885', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4885'}, {'name': 'cgiscript-cspassword-htpasswd-access(9220)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9220.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0918
CGIScript.net csPassword.cgi leaks sensitive information such as the pathname of the server in debug messages that are presented when the script fails, which allows remote attackers to obtain the information via a "remove" option in the command parameter, which generates an error.
Affected Products: n/a
References: [{'name': 'cgiscript-cspassword-information-disclosure(9221)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9221.php'}, {'name': '4887', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4887'}, {'name': '20020529 CGIscript.net - csPassword.cgi - Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274727'}]
CVE State: PUBLISHED
Explain CVE-2002-0919
CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newlines in the title field of the edit page.
Affected Products: n/a
References: [{'name': '20020529 CGIscript.net - csPassword.cgi - Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274727'}, {'name': 'cgiscript-cspassword-htaccess-modification(9222)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9222.php'}, {'name': '4888', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4888'}]
CVE State: PUBLISHED
Explain CVE-2002-0920
CGIScript.net csPassword.cgi stores usernames and unencrypted passwords in the password.cgi.tmp temporary file while modifying data, which could allow local users (and possibly remote attackers) to gain privileges by stealing the file before it has been processed.
Affected Products: n/a
References: [{'name': '4889', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4889'}, {'name': '20020529 CGIscript.net - csPassword.cgi - Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274727'}, {'name': 'cgiscript-cspassword-tmpfile-access(9223)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9223.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0921
CGIScript.net csNews.cgi allows remote attackers to obtain potentially sensitive information, such as the full server pathname and other configuration settings, via the viewnews command with an invalid database, which leaks the information in error messages.
Affected Products: n/a
References: [{'name': 'cgiscript-csnews-information-disclosure(9331)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9331.php'}, {'name': '20020611 CGIscript.net - csNews.cgi - Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-06/0091.html'}]
CVE State: PUBLISHED
Explain CVE-2002-0922
CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) default%2edb.style, or remote authenticated users to perform administrative actions via (3) a database parameter set to default%2edb.
Affected Products: n/a
References: [{'name': '4991', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4991'}, {'name': 'cgiscript-csnews-admin-access(9333)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9333.php'}, {'name': 'cgiscript-csnews-file-disclosure(9332)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9332.php'}, {'name': '4993', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4993'}, {'name': '20020611 CGIscript.net - csNews.cgi - Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-06/0091.html'}]
CVE State: PUBLISHED
Explain CVE-2002-0923
CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the (1) pheader or (2) pfooter parameters in the "Advanced Settings" capability.
Affected Products: n/a
References: [{'name': 'cgiscript-csnews-admin-access(9333)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9333.php'}, {'name': '4994', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4994'}, {'name': '20020611 CGIscript.net - csNews.cgi - Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-06/0091.html'}]
CVE State: PUBLISHED
Explain CVE-2002-0924
CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quotes and metacharacters in text fields of the "Advanced Settings" capability.
Affected Products: n/a
References: [{'name': '4451', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4451'}, {'name': '20020611 CGIscript.net - csNews.cgi - Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-06/0091.html'}]
CVE State: PUBLISHED
Explain CVE-2002-0925
Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via (1) the USER command to mmpop3d for mmmail 0.0.13 and earlier, (2) the HELO command to mmsmtpd for mmmail 0.0.13 and earlier, or (3) the USER command to mmftpd 0.0.7 and earlier.
Affected Products: n/a
References: [{'name': 'mmftpd-mmsyslog-format-string(9337)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9337.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://mmondor.gobot.ca/software/linux/mmftpd-changelog.txt'}, {'name': '4990', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4990'}, {'name': 'mmmail-mmsyslog-format-string(9336)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9336.php'}, {'name': '20020612 [CERT-intexxia] mmmail POP3-SMTP Daemon Format String Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-06/0095.html'}, {'name': '20020612 [CERT-intexxia] mmftpd FTP Daemon Format String Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/276523'}, {'name': '4999', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4999'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://mmondor.gobot.ca/software/linux/mmmail-changelog.txt'}]
CVE State: PUBLISHED
Explain CVE-2002-0926
Directory traversal vulnerability in Wolfram Research webMathematica 1.0.0 and 1.0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the MSPStoreID parameter.
Affected Products: n/a
References: [{'name': '5035', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5035'}, {'name': 'webmathematica-dot-directory-traversal(9373)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9373.php'}, {'name': 'VU#664323', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/664323'}, {'name': "20020617 Directory Traversal in Wolfram Research's webMathematica", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-06/0174.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.wolfram.com/webmathematica/security/fileaccess.html'}]
CVE State: PUBLISHED
Explain CVE-2002-0928
Buffer overflow in the Pirch 98 IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hyperlink in a channel or private message.
Affected Products: n/a
References: [{'name': '20020621 Pirch 98 Link Handling Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-06/0256.html'}, {'name': 'pirch-irc-link-bo(9409)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9409.php'}, {'name': '5079', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5079'}]
CVE State: PUBLISHED
Explain CVE-2002-0929
Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service (reboot) via long DHCP requests.
Affected Products: n/a
References: [{'name': 'netware-dhcp-dos(9428)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9428.php'}, {'name': '5097', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5097'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/servlet/tidfinder/2962999'}, {'name': '20020625 [VulnWatch] cqure.net.20020604.netware_dhcpsrvr', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0126.html'}]
CVE State: PUBLISHED
Explain CVE-2002-0930
Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 (NWFTPD) allows remote attackers to cause a denial of service (ABEND) via format strings in the USER command.
Affected Products: n/a
References: [{'name': '20020625 [VulnWatch] cqure.net.20020521.netware_nwftpd_fmtstr', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0127.html'}, {'name': 'netware-ftp-username-dos(9429)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9429.php'}, {'name': '5099', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5099'}, {'name': '20020625 cqure.net.20020521.netware_nwftpd_fmtstr', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/278689'}]
CVE State: PUBLISHED
Explain CVE-2002-0931
Cross-site scripting vulnerabilities in MyHelpDesk 20020509, and possibly other versions, allows remote attackers to execute script as other users via a (1) Title or (2) Description when a new ticket is created by a support assistant, via the "id" parameter to the index.php script with the (3) tickettime, (4) ticketfiles, or (5) updateticketlog operations, or (6) via the update section when a ticket is edited.
Affected Products: n/a
References: [{'name': 'myhelpdesk-index-php-xss(9320)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9320.php'}, {'name': '4970', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4970'}, {'name': '20020610 [ARL02-A15] Multiple Security Issues in MyHelpdesk', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-06/0057.html'}, {'name': '4967', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4967'}, {'name': 'myhelpdesk-new-ticket-xss(9319)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9319.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0932
SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the "id" parameter for the operations (1) detailticket, (2) editticket, or (3) updateticketlog.
Affected Products: n/a
References: [{'name': '20020610 [ARL02-A15] Multiple Security Issues in MyHelpdesk', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-06/0057.html'}, {'name': 'myhelpdesk-sql-injection(9321)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9321.php'}, {'name': '4971', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4971'}]
CVE State: PUBLISHED
Explain CVE-2002-0933
Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain privileges via Cross-site scripting or sniffing attacks.
Affected Products: n/a
References: [{'name': '4972', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4972'}, {'name': '20020610 Datalex BookIt! Consumer Password Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-06/0063.html'}, {'name': 'bookit-plaintext-passwords(9316)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9316.php'}]
CVE State: PUBLISHED
Explain CVE-2002-0934
Directory traversal vulnerability in Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) allows remote attackers to read or modify arbitrary files via an illegal character in the middle of a .. (dot dot) sequence in the parameters (1) _browser_out or (2) _out_file.
Affected Products: n/a
References: [{'name': 'alienform2-directory-traversal(9325)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9325.php'}, {'name': '4983', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4983'}, {'name': '20020610 AlienForm2 CGI script: arbitrary file read/write', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-06/0068.html'}]
CVE State: PUBLISHED
Explain CVE-2002-0935
Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of requests to the server with null characters, which causes the working threads to hang.
Affected Products: n/a
References: [{'name': '20020620 KPMG-2002025: Apache Tomcat Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/277940'}, {'name': '20020620 [VulnWatch] KPMG-2002025: Apache Tomcat Denial of Service', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0120.html'}, {'name': '5051', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5051'}, {'name': '5067', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5067'}, {'name': 'tomcat-null-thread-dos(9396)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9396.php'}, {'name': '[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E'}, {'name': '[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E'}, {'name': '[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E'}]
CVE State: PUBLISHED