Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2002-1729
Cross-site scripting vulnerability (XSS) in ASPjar Guestbook 1.00 allows remote attackers to execute arbitrary script as other users via the "web site" parameter in a guestbook message.
Affected Products: n/a
References: [{'name': 'aspjar-guestbook-css(9005)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9005'}, {'name': '20020504 Security holes : PHP Image View, NewsPro, Photo DB, As_web, GuestBook', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://online.securityfocus.com/archive/82/270970'}, {'name': '4671', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4671'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ifrance.com/kitetoua/tuto/5holes4.txt'}]
CVE State: PUBLISHED
Explain CVE-2002-1730
ASPjar Guestbook 1.00 allows remote attackers to delete arbitrary messages accessing the delete.asp administrative script with certain cookie values set to "true".
Affected Products: n/a
References: [{'name': 'aspjar-guestbook-delete-messages(9006)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9006'}, {'name': '20020504 Security holes : PHP Image View, NewsPro, Photo DB, As_web, GuestBook', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://online.securityfocus.com/archive/82/270970'}, {'name': '4671', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4671'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ifrance.com/kitetoua/tuto/5holes4.txt'}]
CVE State: PUBLISHED
Explain CVE-2002-1731
The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF.
Affected Products: n/a
References: [{'name': 'as400-system-request-information(8179)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8179'}, {'name': '4059', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4059'}, {'name': '1003507', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1003507'}]
CVE State: PUBLISHED
Explain CVE-2002-1732
Multiple cross-site scripting (XSS) vulnerabilities in Actinic Catalog 4.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string argument to certain .pl files, (2) the REFPAGE parameter to ca000007.pl, (3) PRODREF parameter to ss000007.pl, or (4) hop parameter to ca000001.pl.
Affected Products: n/a
References: [{'name': 'actinic-html-tags-css(8180)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8180'}, {'name': '1003502', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1003502'}, {'name': '27095', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/27095'}, {'name': '20060720 vendor ack/fix: Actinic Catalog Unspecified .pl Files XSS (fwd)', 'tags': ['mailing-list', 'x_refsource_VIM'], 'url': 'http://www.attrition.org/pipermail/vim/2006-July/000929.html'}, {'name': '27097', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/27097'}, {'name': '4042', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4042'}, {'name': '27098', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/27098'}, {'name': '27096', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/27096'}]
CVE State: PUBLISHED
Explain CVE-2002-1733
Cross-site scripting (XSS) vulnerability in the web-based message board in Prospero Technologies allows remote attackers to inject arbitrary web script or HTML via a message board post.
Affected Products: n/a
References: [{'name': '4109', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4109'}, {'name': 'prospero-html-msg-css(8184)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8184'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.sentinelchicken.com/advisories/prospero/'}]
CVE State: PUBLISHED
Explain CVE-2002-1734
NewsPro 1.01 allows remote attackers to gain unauthorized administrator access by setting their authentication cookie to "logged,true".
Affected Products: n/a
References: [{'name': '4672', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4672'}, {'name': 'newspro-admin-access(9007)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9007'}, {'name': '20020504 Security holes : PHP Image View, NewsPro, Photo DB, As_web, GuestBook', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://www.derkeiler.com/Mailing-Lists/securityfocus/vuln-dev/2002-05/0135.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1735
Buffer overflow in dlogin 1.0a could allow local users to gain privileges via unknown attack vectors.
Affected Products: n/a
References: [{'name': '4043', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4043'}, {'name': '1003493', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1003493'}, {'name': 'linux-dlogin-bo(8186)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8186'}]
CVE State: PUBLISHED
Explain CVE-2002-1736
Unknown vulnerability in CGINews before 1.06 allow remote attackers to read arbitrary files via "unfiltered user input."
Affected Products: n/a
References: [{'name': '1003506', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1003506'}, {'name': 'cginews-view-files(8187)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8187'}]
CVE State: PUBLISHED
Explain CVE-2002-1737
Astaro Security Linux 2.016 creates world-writable files and directories, which allows local users to overwrite arbitrary files.
Affected Products: n/a
References: [{'name': '20020212 Astaro Security Linux Improper File Permissions Flaw', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/256124'}, {'name': '4103', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4103'}, {'name': '20020212 RE: Astaro Security Linux Improper File Permissions Flaw', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/256127'}, {'name': 'astaro-insecure-file-permissions(8190)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8190'}]
CVE State: PUBLISHED
Explain CVE-2002-1738
Alt-N Technologies MDaemon 5.0.5.0 and earlier creates a default MDaemon mail account with a password of MServer, which could allow remote attackers to send anonymous email.
Affected Products: n/a
References: [{'name': '4685', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4685'}, {'name': 'mdaemon-default-account(9024)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9024'}, {'name': '20020507 Multiple Vulnerabilities in MDaemon + WorldClient', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/271374'}]
CVE State: PUBLISHED
Explain CVE-2002-1739
Alt-N Technologies Mdaemon 5.0 through 5.0.6 uses a weak encryption algorithm to store user passwords, which allows local users to crack passwords.
Affected Products: n/a
References: [{'name': 'mdaemon-weak-encryption(9025)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9025'}, {'name': '20020507 Multiple Vulnerabilities in MDaemon + WorldClient', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/271374'}, {'name': '4686', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4686'}]
CVE State: PUBLISHED
Explain CVE-2002-1740
Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to execute arbitrary code via a long folder name (NewFolder parameter).
Affected Products: n/a
References: [{'name': '4689', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4689'}, {'name': 'mdaemon-worldclient-foldername-bo(9026)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9026'}, {'name': '20020507 Multiple Vulnerabilities in MDaemon + WorldClient', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/271374'}]
CVE State: PUBLISHED
Explain CVE-2002-1741
Directory traversal vulnerability in WorldClient.cgi in WorldClient for Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to delete arbitrary files via a ".." (dot dot) in the Attachments parameter.
Affected Products: n/a
References: [{'name': '4687', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4687'}, {'name': 'mdaemon-worldclient-delete-files(9027)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9027'}, {'name': '20020507 Multiple Vulnerabilities in MDaemon + WorldClient', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/271374'}]
CVE State: PUBLISHED
Explain CVE-2002-1742
SOAP::Lite 0.50 through 0.52 allows remote attackers to load arbitrary Perl functions by suppling a non-existent function in a script using a SOAP::Lite module, which causes the AUTOLOAD subroutine to trigger.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.phrack.org/show.php?p=58&a=9'}, {'tags': ['x_refsource_MISC'], 'url': 'http://use.perl.org/articles/02/04/09/000212.shtml?tid=5'}, {'name': 'FreeBSD-SN-02:02', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A02.asc'}, {'name': '4493', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4493'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.phrack.com/show.php?p=58&a=9'}, {'name': 'soap-perl-execute-functions(8838)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8838'}, {'name': '20020411 SOAP::Lite hole', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/267051'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.soaplite.com/'}]
CVE State: PUBLISHED
Explain CVE-2002-1743
AOL ICQ 2002a Build 3722 allows remote attackers to cause a denial of service (crash) via a malformed .hpf file.
Affected Products: n/a
References: [{'name': '20020414 Possible vulnerabilities of ICQ files opened in IE or OE', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/267656'}, {'name': 'icq-hpf-access-dos(8843)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8843'}, {'name': '4514', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4514'}]
CVE State: PUBLISHED
Explain CVE-2002-1744
Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary files via a hex-encoded "%c0%ae%c0%ae" string, which is the Unicode representation for ".." (dot dot).
Affected Products: n/a
References: [{'name': 'iis-codebrws-view-source(8853)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8853'}, {'name': '20020417 Microsoft IIS 5.0 CodeBrws.asp Source Disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/267945'}, {'name': '20020417 Re: Microsoft IIS 5.0 CodeBrws.asp Source Disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/268065'}, {'name': '4525', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4525'}]
CVE State: PUBLISHED
Explain CVE-2002-1745
Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with extensions containing with one additional character after .html, .htm, .asp, or .inc, such as .aspx files.
Affected Products: n/a
References: [{'name': 'iis-codebrws-view-source(8853)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8853'}, {'name': '20020418 Re: Microsoft IIS 5.0 CodeBrws.asp Source Disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/268303'}, {'name': '4543', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4543'}]
CVE State: PUBLISHED
Explain CVE-2002-1746
Vtun 2.5b1 allows remote attackers to inject data into user sessions by sniffing and replaying packets.
Affected Products: n/a
References: [{'name': '20020109 Security weaknesses of VTun', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/bugtraq/2002/Jan/0119.html'}, {'name': 'vpn-replay-attack(7870)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7870'}]
CVE State: PUBLISHED
Explain CVE-2002-1747
Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on ECB.
Affected Products: n/a
References: [{'name': '20020109 Security weaknesses of VTun', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/bugtraq/2002/Jan/0119.html'}, {'name': 'vpn-modify-packets(7868)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7868'}]
CVE State: PUBLISHED
Explain CVE-2002-1748
Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated users to gain access to arbitrary accounts.
Affected Products: n/a
References: [{'name': '3839', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3839'}, {'name': '20020110 [SA-2002:00] Slashcode login vulunerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/249355'}, {'name': 'slashcode-account-access(7863)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7863'}]
CVE State: PUBLISHED
Explain CVE-2002-1749
Windows 2000 Terminal Services, when using the disconnect feature of the client, does not properly lock itself if it is left idle until the screen saver activates and the user disconnects, which could allow attackers to gain administrator privileges.
Affected Products: n/a
References: [{'name': '4095', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4095'}, {'name': 'win2k-terminal-services-unlocked(8199)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8199'}, {'name': "20020211 Terminal doesn't lock after disconnect in Terminal Services", 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://www.ntbugtraq.com/default.aspx?pid=36&sid=1&A2=ind0202&L=ntbugtraq&T=0&O=D&F=N&P=5224'}]
CVE State: PUBLISHED
Explain CVE-2002-1750
csGuestbook.cgi in CGISCRIPT.NET csGuestbook 1.0 allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.
Affected Products: n/a
References: [{'name': '20020408 multiple CGIscript.net scripts - Remote Code Execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html'}, {'name': '4448', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4448'}, {'name': 'cgiscript-url-execute-commands(8636)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8636'}]
CVE State: PUBLISHED
Explain CVE-2002-1751
csLiveSupport.cgi in CGIScript.net csLiveSupport allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.
Affected Products: n/a
References: [{'name': '20020408 multiple CGIscript.net scripts - Remote Code Execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html'}, {'name': '4450', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4450'}, {'name': 'cgiscript-url-execute-commands(8636)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8636'}]
CVE State: PUBLISHED
Explain CVE-2002-1752
csChatRBox.cgi in CGIScript.net csChat-R-Box allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.
Affected Products: n/a
References: [{'name': '20020408 multiple CGIscript.net scripts - Remote Code Execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html'}, {'name': '4452', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4452'}, {'name': 'cgiscript-url-execute-commands(8636)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8636'}]
CVE State: PUBLISHED
Explain CVE-2002-1753
csNewsPro.cgi in CGIScript.net csNews Professional (csNewsPro) allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.
Affected Products: n/a
References: [{'name': '20020408 multiple CGIscript.net scripts - Remote Code Execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html'}, {'name': '4451', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4451'}, {'name': 'cgiscript-url-execute-commands(8636)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8636'}]
CVE State: PUBLISHED
Explain CVE-2002-1754
Buffer overflow in Novell NetWare Client 4.80 through 4.83 allows local users to cause a denial of service (crash) by using ping, traceroute, or a similar utility to force the client to resolve a large hostname.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/servlet/tidfinder/2962694'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.cqure.net/advisories.jsp?id=15'}, {'name': 'netware-client-hostname-dos(9035)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9035'}]
CVE State: PUBLISHED
Explain CVE-2002-1755
tinc 1.0pre3 and 1.0pre4 VPN does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on CBC.
Affected Products: n/a
References: [{'name': '20020109 Security flaws in tinc', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/249142'}, {'name': 'vpn-modify-packets(7868)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7868'}]
CVE State: PUBLISHED
Explain CVE-2002-1756
ACDSee 4.0 allows remote attackers to cause a denial of service (crash) via an .ais file with a long file description field, which is not properly handled when the file properties of the file are viewed.
Affected Products: n/a
References: [{'name': '20020510 Possible Buffer Overflow in ACDSee 4.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/271963'}, {'name': 'acdsee-ais-description-bo(9052)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9052'}, {'name': '4719', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4719'}]
CVE State: PUBLISHED
Explain CVE-2002-1757
PHProjekt 2.0 through 3.1 relies on the $PHP_SELF variable for authentication, which allows remote attackers to bypass authentication for scripts via a request to a .php file with "sms" in the URL, which is included in the PATH_INFO portion of the $PHP_SELF variable, as demonstrated using "mail_send.php/sms".
Affected Products: n/a
References: [{'name': '4596', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4596'}, {'name': 'phprojekt-unauth-script-access(8943)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8943'}, {'name': '20020424 PHProjekt multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/269407'}]
CVE State: PUBLISHED
Explain CVE-2002-1758
PHProjekt 2.0 through 3.1 allows remote attackers to view or modify data via requests to certain scripts that do not verify if the user is logged in.
Affected Products: n/a
References: [{'name': 'phprojekt-unauth-script-access(8943)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8943'}, {'name': '20020424 PHProjekt multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/269407'}, {'name': '4599', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4599'}]
CVE State: PUBLISHED
Explain CVE-2002-1759
The upload function in PHProjekt 2.0 through 3.1 does not properly verify certain variables related to uploaded data, which allows remote attackers to cause PHProjekt to process arbitrary files.
Affected Products: n/a
References: [{'name': '4597', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4597'}, {'name': '20020424 PHProjekt multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00361.html'}, {'name': 'phprojekt-upload-read-files(8944)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8944'}]
CVE State: PUBLISHED
Explain CVE-2002-1760
Multiple SQL injection vulnerabilities in PHProjekt 2.0 through 3.1 allow remote attackers to execute arbitrary SQL commands via the unknown attack vectors.
Affected Products: n/a
References: [{'name': '20020424 PHProjekt multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00361.html'}, {'name': '4598', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4598'}, {'name': 'phprojekt-sql-injection(8945)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8945'}]
CVE State: PUBLISHED
Explain CVE-2002-1761
Directory traversal vulnerability in PHProjekt 2.0 through 3.1 allows remote attackers to read arbitrary files via .. (dot dot) sequences.
Affected Products: n/a
References: [{'name': '20020424 PHProjekt multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-04/0362.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1762
Microsoft Baseline Security Analyzer (MBSA) 1.0 stores security scans in a known location C:\Documents and Settings\username\SecurityScans in plaintext, which could allow remote attackers to obtain sensitive information about the system via malicious active content such as ActiveX controls or Java.
Affected Products: n/a
References: [{'name': '4594', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4594'}, {'name': "20020425 Microsoft Baseline Security Analyzer exploit (Exposed vulnerabilities' list)", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/269408'}, {'name': 'mbsa-plaintext-system-info(8947)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8947'}]
CVE State: PUBLISHED
Explain CVE-2002-1763
The dtscreen Sun Solaris 8 CDE screensaver crashes when the "Shift" and "Return" keys are pressed repeatedly and quickly, which allows local users to access the current session.
Affected Products: n/a
References: [{'name': 'solaris-dtscreen-screenlock-bypass(9406)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9406'}, {'name': '5040', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5040'}, {'name': '20020619 Solaris 8 Screensaver Issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/277724'}, {'name': '20020617 Re: Solaris 8 Screensaver Issue?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/277335'}, {'name': '20020617 Solaris 8 Screensaver Issue?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/277316'}]
CVE State: PUBLISHED
Explain CVE-2002-1764
acroread in Adobe Acrobat Reader 4.05 on Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Affected Products: n/a
References: [{'name': '20020620 Acrobat reader 4.05 temporary files', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/277932'}, {'name': '5068', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5068'}, {'name': 'adobe-acrobat-tmpfile-symlink(9407)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9407'}]
CVE State: PUBLISHED
Explain CVE-2002-1765
Evolution 1.0.3 and 1.0.4 allows remote attackers to cause a denial of service (memory consumption and crash) via an email with a malformed MIME header.
Affected Products: n/a
References: [{'name': 'CLA-2002:486', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://online.securityfocus.com/advisories/4117'}, {'name': '[gnome-announce] 20020503 Patch for serious bug in 1.0.3', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mail.gnome.org/archives/gnome-announce-list/2002-May/msg00020.html'}, {'name': 'evolution-mime-header-dos(9059)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9059'}, {'name': '4715', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4715'}, {'name': 'RHBA-2002:080', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHBA-2002-080.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1766
Buffer overflow in Composer in Netscape 4.77 allows local users to overwrite process memory and execute arbitrary code via a font tag with a long face attribute.
Affected Products: n/a
References: [{'name': '20020613 Microsoft FrontPage vs Composer Netscape...', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/276876'}, {'name': '5010', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5010'}, {'name': 'netscape-composer-font-bo(9355)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9355'}]
CVE State: PUBLISHED
Explain CVE-2002-1767
Buffer overflow in tnslsnr of Oracle 8i Database Server 8.1.5 for Linux allows local users to execute arbitrary code as the oracle user via a long command line argument.
Affected Products: n/a
References: [{'name': 'oracle-tnslsnr-command-line-bo(8772)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8772'}, {'name': '20020401 Happy Easter / April Fools from Snosoft    (Oracle 8.1.5 tnslsnr)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/265452'}, {'name': '4413', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4413'}]
CVE State: PUBLISHED
Explain CVE-2002-1768
Cisco IOS 11.1 through 12.2, when HSRP support is not enabled, allows remote attackers to cause a denial of service (CPU consumption) via randomly sized UDP packets to the Hot Standby Routing Protocol (HSRP) port 1985.
Affected Products: n/a
References: [{'name': '20020605 Three possible DoS attacks against some IOS versions.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-06/0027.html'}, {'name': 'cisco-ios-hsrp-dos(9282)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9282'}, {'name': '20020606 Re: Three possible DoS attacks against some IOS versions.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-06/0050.html'}, {'name': '4948', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4948'}]
CVE State: PUBLISHED
Explain CVE-2002-1769
Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default password of LdapPassword_1, which allows remote attackers the "Log on locally" privilege.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://online.securityfocus.com/advisories/3843'}, {'name': '3998', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3998'}, {'name': 'Q248840', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3BQ248840'}, {'name': '20020129 RFP2201: MS Site Server Evilness', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0033.html'}, {'name': 'siteserver-ldap-anonymous-account(8048)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8048'}]
CVE State: PUBLISHED
Explain CVE-2002-1770
Qualcomm Eudora 5.1 allows remote attackers to execute arbitrary code via an HTML e-mail message that uses a file:// URL in a t:video tag to reference an attached Windows Media Player file containing JavaScript code, which is launched and executed in the My Computer zone by Internet Explorer.
Affected Products: n/a
References: [{'name': 'msviewer-tvideo-execute-attachment(8609)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8609'}, {'name': '2002032 Automatically opening IE + Executing attachments', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=101680201823534&w=2'}, {'name': '2002032 Automatically opening IE + Executing attachments', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101680576827641&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.greymagic.com/adv/gm002-ie/'}, {'name': '4343', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4343'}]
CVE State: PUBLISHED
Explain CVE-2002-1771
Matt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous e-mail by injecting a newline character followed by CC:, BCC:, or additional TO: fields in the email and realname CGI variables.
Affected Products: n/a
References: [{'name': 'formmail-smtp-header-spam(8013)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8013'}, {'name': '3955', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3955'}, {'name': '20020123 Anonymous Mail Forwarding Vulnerabilities in FormMail 1.9', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-01/0307.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.scriptarchive.com/readme/formmail.html#history'}]
CVE State: PUBLISHED
Explain CVE-2002-1772
Novell Netware 5.0 through 5.1 may allow local users to gain "Domain Admin" rights by logging into a Novell Directory Services (NDS) account, and executing "net use" on an NDS_ADM account that is not in the NT domain but has domain access rights, which allows the user to enter a null password.
Affected Products: n/a
References: [{'name': '20020131 Possible privilege escalation with NDS for NT', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/253373'}, {'name': 'netware-nds-unauth-access(8065)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8065'}, {'name': '4012', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4012'}]
CVE State: PUBLISHED
Explain CVE-2002-1773
Buffer overflow in ICQ 2.6x for MacOS X 10.0 through 10.1.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long request.
Affected Products: n/a
References: [{'name': '20020205 OSX ICQ DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/254133'}, {'name': '20020205 Re: OSX ICQ DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/254141'}, {'name': 'icq-macos-dos(8085)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8085'}, {'name': '4031', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4031'}]
CVE State: PUBLISHED
Explain CVE-2002-1774
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to send viruses that bypass the e-mail scanning via a NULL character in the MIME header before the virus.  NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the AutoProtect feature would detect the virus before it is executed
Affected Products: n/a
References: [{'name': '20020308 Re: Edvice Security Services <support@edvicesecurity.com, 000701c1c5fb$c168f970$5a01010a@mic2000', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/260678'}, {'name': 'nav-nullchar-bypass-protection(8389)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8389'}, {'name': '4242', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4242'}, {'name': '20020307 Various Vulnerabilities in Norton Anti-Virus 2002', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/260271'}]
CVE State: PUBLISHED
Explain CVE-2002-1775
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypass the initial virus scan and cause NAV to prematurely stop scanning by using a non-RFC compliant MIME header.  NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the AutoProtect feature would detect the virus before it is executed
Affected Products: n/a
References: [{'name': '20020308 Re: Edvice Security Services <support@edvicesecurity.com, 000701c1c5fb$c168f970$5a01010a@mic2000', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/260678'}, {'name': '4243', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4243'}, {'name': '20020307 Various Vulnerabilities in Norton Anti-Virus 2002', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/260271'}, {'name': 'nav-nonrfc-bypass-protection(8390)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8390'}]
CVE State: PUBLISHED
Explain CVE-2002-1776
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document.  NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the Office plug-in would detect the virus before it is executed
Affected Products: n/a
References: [{'name': '20020308 Re: Edvice Security Services <support@edvicesecurity.com, 000701c1c5fb$c168f970$5a01010a@mic2000', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/260678'}, {'name': '4245', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4245'}, {'name': 'nav-filetype-bypass-protection(8391)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8391'}, {'name': '20020307 Various Vulnerabilities in Norton Anti-Virus 2002', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/260271'}]
CVE State: PUBLISHED
Explain CVE-2002-1777
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypass e-mail scanning via a filename in the Content-Type field with an excluded extension such as .nch or .dbx, but a malicious extension in the Content-Disposition field, which is used by Outlook to obtain the file name.  NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but Norton AntiVirus or the Office plug-in would detect the virus before it is executed
Affected Products: n/a
References: [{'name': '20020308 Re: Edvice Security Services <support@edvicesecurity.com, 000701c1c5fb$c168f970$5a01010a@mic2000', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/260678'}, {'name': '4246', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4246'}, {'name': 'nav-contenttype-bypass-protection(8392)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8392'}, {'name': '20020307 Various Vulnerabilities in Norton Anti-Virus 2002', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/260271'}]
CVE State: PUBLISHED
Explain CVE-2002-1778
Symantec Norton Personal Firewall 2002 allows remote attackers to bypass the portscan protection by using a (1) SYN/FIN, (2) SYN/FIN/URG, (3) SYN/FIN/PUSH, or (4) SYN/FIN/URG/PUSH scan.
Affected Products: n/a
References: [{'name': 'norton-bypass-portscan-protection(8859)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8859'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://securityresponse.symantec.com/avcenter/security/Content/2002.05.16.html'}, {'name': '20020416 Norton Personal Firewall 2002 vulnerable to SYN/FIN scan', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/267850'}, {'name': '4521', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4521'}]
CVE State: PUBLISHED
Explain CVE-2002-1779
The "block fragmented IP Packets" option in Symantec Norton Personal Firewall 2002 (NPW) does not properly protect against certain attacks on Windows vulnerabilities such as jolt2 (CVE-2000-0305).
Affected Products: n/a
References: [{'name': '4545', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4545'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://securityresponse.symantec.com/avcenter/security/Content/2002.05.16.html'}, {'name': '20020416 Norton Personal Firewall 2002 vulnerable to SYN/FIN scan', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/267850'}]
CVE State: PUBLISHED
Explain CVE-2002-1780
BPM Studio Pro 4.2 by ALCATech GmbH includes a webserver that allows a remote attacker to cause a denial of service (crash) by sending a URL request for a MS-DOS device such as con.  NOTE: it has been disputed that this and possibly other application-level DOS device issues stem from a bug in Windows, and as such, such applications should not be considered vulnerable themselves.
Affected Products: n/a
References: [{'name': '20020227 BPM STUDIO PRO 4.2 DOS DEVICE PATH VULNERABILITY', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/258644'}, {'name': '20020227 Old (and fixed) Windows bug - was Re: BPM STUDIO PRO 4.2 DOS  DEVICE PATH VULNERABILITY', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/258986'}, {'name': 'bpm-http-device-dos(8299)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8299'}]
CVE State: PUBLISHED
Explain CVE-2002-1781
Multiple buffer overflows in DeleGate 7.7.0 through 7.8.1 allow remote attackers to execute arbitrary code, as demonstrated using a long USER command to the POP proxy.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.globalintersec.com/adv/delegate-2002012101.txt'}, {'name': '20020212 Re: [Global InterSec 2002012101] DeleGate Application Proxy -  Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/256117'}, {'name': '20020207 [Global InterSec 2002012101] DeleGate Application Proxy - Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-02/0051.html'}, {'name': 'delegate-proxy-pop-bo(8114)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8114'}, {'name': '4055', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4055'}]
CVE State: PUBLISHED
Explain CVE-2002-1782
The default configuration of University of Washington IMAP daemon (wu-imapd), when running on a system that does not allow shell access, allows a local user with a valid IMAP account to read arbitrary files as that user.
Affected Products: n/a
References: [{'name': '4909', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4909'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security.nnov.ru/advisories/courier.asp'}, {'name': '20020601 SECURITY.NNOV: Courier CPU exhaustion + bonus on imap-uw', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/275127'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.washington.edu/imap/IMAP-FAQs/index.html#5.1'}, {'name': 'wuimapd-information-disclosure(9238)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9238'}]
CVE State: PUBLISHED
Explain CVE-2002-1783
CRLF injection vulnerability in PHP 4.2.1 through 4.2.3, when allow_url_fopen is enabled, allows remote attackers to modify HTTP headers for outgoing requests by causing CRLF sequences to be injected into arguments that are passed to the (1) fopen or (2) file functions.
Affected Products: n/a
References: [{'name': '20020912 Re: PHP fopen() CRLF Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-09/0132.html'}, {'name': '5681', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5681'}, {'name': 'php-fopen-crlf-injection(10080)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10080'}, {'name': 'DSA-168', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-168'}, {'name': '20020909 PHP fopen() CRLF Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-09/0086.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1784
Unknown vulnerability in inetd in HP Tru64 Unix 4.0f through 5.1a allows remote attackers to cause a denial of service via unknown attack vectors.
Affected Products: n/a
References: [{'name': '5242', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5242'}, {'name': 'tru64-inetd-remote-dos(9614)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9614.php'}, {'name': 'SSRT0795', 'tags': ['vendor-advisory', 'x_refsource_COMPAQ'], 'url': 'http://online.securityfocus.com/advisories/4288'}]
CVE State: PUBLISHED
Explain CVE-2002-1785
Cross-site scripting (XSS) vulnerability in Zeus Administration Server in Zeus Web Server 4.0 through 4.1r2 allows remote authenticated users to inject arbitrary web script or HTML via the section parameter to index.fcgi.
Affected Products: n/a
References: [{'name': 'zeus-admin-index-xss(10567)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10567.php'}, {'name': '20021108 Zeus Admin Server v4.1r2 index.fcgi XSS bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-11/0104.html'}, {'name': '20021211 Re: Zeus Admin Server v4.1r2 index.fcgi XSS bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/302961'}, {'name': '6144', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6144'}]
CVE State: PUBLISHED
Explain CVE-2002-1786
SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users to read the core dumps and possibly obtain sensitive information.
Affected Products: n/a
References: [{'name': 'irix-root-coredumps(10138)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10138.php'}, {'name': '5737', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5737'}, {'name': '20020902-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020902-01-I'}]
CVE State: PUBLISHED
Explain CVE-2002-1787
Buffer overflow in uux in eoe.sw.uucp package of SGI IRIX 6.5 through 6.5.17 allows local users to execute arbitrary code via unknown attack vectors.
Affected Products: n/a
References: [{'name': '20020903-02-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020903-02-P'}, {'name': 'N-004', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-004.shtml'}, {'name': '5892', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5892'}, {'name': 'irix-uux-bo(10274)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10274.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1788
Format string vulnerability in the nn_exitmsg function in nn 6.6.0 through 6.6.3 allows remote NNTP servers to execute arbitrary code via format strings in server responses.
Affected Products: n/a
References: [{'name': '27086', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/27086'}, {'name': '5160', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5160'}, {'name': 'nn-error-msg-format-string(9491)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9491.php'}, {'name': '20020704 nn remote format string vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/280639'}]
CVE State: PUBLISHED
Explain CVE-2002-1789
Format string vulnerability in newsx NNTP client before 1.4.8 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a call to the syslog function.
Affected Products: n/a
References: [{'name': '5240', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5240'}, {'name': 'newsx-syslog-format-string(9583)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9583.php'}, {'name': 'FreeBSD-SN-02:05', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc'}]
CVE State: PUBLISHED