Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2002-1316
importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell metacharacters in the dir parameter, and possibly allows remote attackers to exploit this vulnerability via a separate XSS issue (CVE-2002-1315).
Affected Products: n/a
References: [{'name': '49475', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-49475-1'}, {'name': 'iplanet-perl-command-execution(10693)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10693.php'}, {'name': '6203', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6203'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngsec.com/docs/advisories/NGSEC-2002-4.txt'}, {'name': '20021118 iPlanet WebServer, remote root compromise', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0078.html'}, {'name': '20021119 iPlanet WebServer, remote root compromise', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103772308030269&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-1317
Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.
Affected Products: n/a
References: [{'name': 'HPSBUX0212-228', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/4988'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/48879'}, {'name': '20021125 ISS Security Brief: Solaris fs.auto Remote Compromise Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103825150527843&w=2'}, {'name': 'oval:org.mitre.oval:def:149', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A149'}, {'name': 'CA-2002-34', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-34.html'}, {'name': 'oval:org.mitre.oval:def:152', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A152'}, {'name': 'oval:org.mitre.oval:def:2816', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2816'}, {'name': 'VU#312313', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/312313'}, {'name': '20021125 Solaris fs.auto Remote Compromise Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21541'}, {'name': 'solaris-fsauto-execute-code(10375)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10375.php'}, {'name': '20021202-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20021202-01-I'}, {'name': '6241', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6241'}, {'name': 'N-024', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-024.shtml'}]
CVE State: PUBLISHED
Explain CVE-2002-1318
Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a little-endian UCS2 unicode string.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:1467', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1467'}, {'name': 'VU#958321', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/958321'}, {'name': 'CLA-2002:550', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000550'}, {'name': 'samba-password-change-bo(10683)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10683'}, {'name': 'SuSE-SA:2002:045', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_045_samba.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://us1.samba.org/samba/whatsnew/samba-2.2.7.html'}, {'name': '20021121 GLSA: samba', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103801986818076&w=2'}, {'name': 'DSA-200', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-200'}, {'name': 'HPSBUX0212-230', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.ciac.org/ciac/bulletins/n-023.shtml'}, {'name': '20021129 [OpenPKG-SA-2002.012] OpenPKG Security Advisory (samba)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103859045302448&w=2'}, {'name': 'N-019', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-019.shtml'}, {'name': '6210', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6210'}, {'name': 'RHSA-2002:266', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-266.html'}, {'name': '53580', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/53580'}, {'name': '20021204-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20021204-01-I'}, {'name': 'N-023', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-023.shtml'}, {'name': 'MDKSA-2002:081', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-081.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1319
The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a denial of service (hang) via the emulation mode, which does not properly clear TF and NT EFLAGs.
Affected Products: n/a
References: [{'name': '20021111 i386 Linux kernel DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103714004623587&w=2'}, {'name': 'linux-kernel-tf-dos(10576)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10576'}, {'name': 'CLA-2002:553', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000553'}, {'name': '20021114 Re: i386 Linux kernel DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103737292709297&w=2'}, {'name': 'RHSA-2002:264', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2002-264.html'}, {'name': '6115', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6115'}, {'name': 'RHSA-2002:262', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2002-262.html'}, {'name': 'RHSA-2002:263', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-263.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1320
Pine 4.44 and earlier allows remote attackers to cause a denial of service (core dump and failed restart) via an email message with a From header that contains a large number of quotation marks (").
Affected Products: n/a
References: [{'name': 'RHSA-2002:270', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-270.html'}, {'name': 'MDKSA-2002:084', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-084.php'}, {'name': 'pine-from-header-dos(10555)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10555.php'}, {'name': '6120', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6120'}, {'name': '20021107 Remote pine Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103668430620531&w=2'}, {'name': 'ESA-20021127-032', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/engarde_advisory-2614.html'}, {'name': 'SuSE-SA:2002:046', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_046_pine.html'}, {'name': 'RHSA-2002:271', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-271.html'}, {'name': '20021202 GLSA: pine', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103884988306241&w=2'}, {'name': 'CLA-2002:551', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000551'}]
CVE State: PUBLISHED
Explain CVE-2002-1321
Multiple buffer overflows in RealOne and RealPlayer allow remote attackers to execute arbitrary code via (1) a Synchronized Multimedia Integration Language (SMIL) file with a long parameter, (2) a long long filename in a rtsp:// request, e.g. from a .m3u file, or (3) certain "Now Playing" options on a downloaded file with a long filename.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://service.real.com/help/faq/security/bufferoverrun_player.html'}, {'name': '6229', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6229'}, {'name': '20021122 Mulitple Buffer Overflow conditions in RealPlayer/RealOne (#NISR22112002)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103808645120764&w=2'}, {'name': '6227', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6227'}, {'name': 'realplayer-rtsp-filename-bo(10677)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10677'}]
CVE State: PUBLISHED
Explain CVE-2002-1322
Rational ClearCase 4.1, 2002.05, and possibly other versions allows remote attackers to cause a denial of service (crash) via certain packets to port 371, e.g. via nmap.
Affected Products: n/a
References: [{'name': '20021122 ClearCase DoS vulnerabilty', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103808239618238&w=2'}, {'name': '20021122 ClearCase DoS vulnerabilty', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0084.html'}, {'name': '6228', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6228'}, {'name': 'clearcase-tcp-scan-dos(10675)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10675'}]
CVE State: PUBLISHED
Explain CVE-2002-1323
Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.
Affected Products: n/a
References: [{'name': 'RHSA-2003:256', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-256.html'}, {'name': '20021220 GLSA: perl', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104040175522502&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://use.perl.org/articles/02/10/06/1118222.shtml?tid=5'}, {'name': 'SCOSA-2004.1', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.1/SCOSA-2004.1.txt'}, {'name': 'RHSA-2003:257', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-257.html'}, {'name': '20021219 TSLSA-2002-0087 - perl', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104033126305252&w=2'}, {'name': '20030606-01-A', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20030606-01-A'}, {'name': '20021216 [OpenPKG-SA-2002.014] OpenPKG Security Advisory (perl)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104005919814869&w=2'}, {'name': 'CSSA-2004-007.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-007.0.txt'}, {'name': 'safe-pm-bypass-restrictions(10574)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10574.php'}, {'name': '3814', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3814'}, {'name': 'oval:org.mitre.oval:def:1160', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1160'}, {'name': '2183', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2183'}, {'name': 'DSA-208', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-208'}, {'name': '6111', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6111'}, {'name': '20021105 Perl Safe.pm compartment reuse vuln', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0061.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs6.perl.org/rt2/Ticket/Display.html?id=17744'}]
CVE State: PUBLISHED
Explain CVE-2002-1325
Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet that accesses the user.dir system property, aka "User.dir Exposure Vulnerability."
Affected Products: n/a
References: [{'name': 'MS02-069', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069'}, {'name': '6380', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6380'}]
CVE State: PUBLISHED
Explain CVE-2002-1327
Buffer overflow in the Windows Shell function in Microsoft Windows XP allows remote attackers to execute arbitrary code via an .MP3 or .WMA audio file with a corrupt custom attribute, aka "Unchecked Buffer in Windows Shell Could Enable System Compromise."
Affected Products: n/a
References: [{'name': 'VU#591890', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/591890'}, {'name': '20021219 Foundstone Research Labs Advisory - Exploitable Windows XP Media Files', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104025849109384&w=2'}, {'name': '6427', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6427'}, {'name': 'winxp-windows-shell-bo(10892)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10892'}, {'name': 'CA-2002-37', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-37.html'}, {'name': 'MS02-072', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-072'}]
CVE State: PUBLISHED
Explain CVE-2002-1334
Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi, or (2) nph-build.cgi.
Affected Products: n/a
References: [{'name': 'imagefolio-imagefolio-nphbuild-xss(10718)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10718'}, {'name': '1005681', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005681'}, {'name': '20021127 Cross-site Scripting Vulnerability in ImageFolio Image Gallery Software', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103842773205148&w=2'}, {'name': '6265', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6265'}]
CVE State: PUBLISHED
Explain CVE-2002-1335
Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitrary web script or HTML and access files or cookies.
Affected Products: n/a
References: [{'name': 'RHSA-2003:045', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-045.html'}, {'name': '6793', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6793'}, {'name': '8031', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8031'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://mi.med.tohoku.ac.jp/~satodai/w3m-dev-en/200211.month/838.html'}, {'name': 'OpenPKG-SA-2003.009', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://www.openpkg.com/security/advisories/OpenPKG-SA-2003.009.html'}, {'name': '8015', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8015'}, {'name': '8016', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8016'}, {'name': '6981', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6981'}, {'name': 'DSA-251', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-251'}, {'name': 'RHSA-2003:044', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-044.html'}, {'name': '8053', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8053'}, {'name': 'w3m-html-frame-xss(10842)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10842'}, {'name': 'DSA-249', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-249'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=124484'}, {'name': 'DSA-250', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-250'}]
CVE State: PUBLISHED
Explain CVE-2002-1336
TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users.
Affected Products: n/a
References: [{'name': 'vnc-weak-authentication(5992)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5992'}, {'name': 'RHSA-2002:287', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-287.html'}, {'name': '20020724 VNC authentication weakness', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102753170201524&w=2'}, {'name': 'RHSA-2003:041', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-041.html'}, {'name': 'MDKSA-2003:022', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:022'}, {'name': 'CLA-2003:640', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000640'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.tightvnc.com/WhatsNew.txt'}, {'name': '20020726 RE: VNC authentication weakness', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102769183913594&w=2'}, {'name': '5296', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5296'}]
CVE State: PUBLISHED
Explain CVE-2002-1338
The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist, which allows remote attackers to determine the existence of local files.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://security.greymagic.com/adv/gm008-ie/'}, {'name': 'owc-chart-load-exist(8784)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8784'}, {'name': 'VU#156123', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/156123'}, {'name': '20020408 Multiple local files detection issues with OWC in IE (GM#008-IE)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101830175621193&w=2'}, {'name': '4454', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4454'}]
CVE State: PUBLISHED
Explain CVE-2002-1339
The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to determine the existence of local files based on exceptions, or to read WorkSheet XML files.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://security.greymagic.com/adv/gm008-ie/'}, {'name': '20020408 Multiple local files detection issues with OWC in IE (GM#008-IE)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101830175621193&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-1340
The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the existence of local files by detecting an exception.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://security.greymagic.com/adv/gm008-ie/'}, {'name': '20020408 Multiple local files detection issues with OWC in IE (GM#008-IE)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101830175621193&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-1341
Cross-site scripting (XSS) vulnerability in read_body.php for SquirrelMail 1.2.10, 1.2.9, and earlier allows remote attackers to insert script and HTML via the (1) mailbox and (2) passed_id parameters.
Affected Products: n/a
References: [{'name': '20021215 GLSA: squirrelmail', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104004924002662&w=2'}, {'name': 'squirrelmail-readbody-xss(10754)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10754'}, {'name': '6302', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6302'}, {'name': '20021203 SquirrelMail v1.2.9 XSS bugs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103893844126484&w=2'}, {'name': '20021203 Re: SquirrelMail v1.2.9 XSS bugs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103911130503272&w=2'}, {'name': 'DSA-220', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-220'}, {'name': '8220', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8220'}, {'tags': ['x_refsource_MISC'], 'url': 'http://f0kp.iplus.ru/bz/008.txt'}, {'name': 'RHSA-2003:042', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-042.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1342
Unknown vulnerability in smb2www 980804-16 and earlier allows remote attackers to execute arbitrary commands.
Affected Products: n/a
References: [{'name': 'smb2www-command-execution(10768)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10768.php'}, {'name': 'DSA-203', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-203'}, {'name': '6313', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6313'}]
CVE State: PUBLISHED
Explain CVE-2002-1344
Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filenames containing (1) /absolute/path or (2) .. (dot dot) sequences.
Affected Products: n/a
References: [{'name': 'CLSA-2002:552', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000552'}, {'name': 'CSSA-2003-003.0', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-003.0.txt'}, {'name': 'DSA-209', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2002/dsa-209'}, {'name': '20021219 TSLSA-2002-0089 - wget', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104033016703851&w=2'}, {'name': 'N-022', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-022.shtml'}, {'name': '6360', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6360'}, {'name': 'RHSA-2002:256', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-256.html'}, {'name': 'MDKSA-2002:086', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-086.php'}, {'name': '20021211 Directory Traversal Vulnerabilities in FTP Clients', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103962838628940&w=2'}, {'name': 'CLA-2002:552', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000552'}, {'name': 'RHSA-2002:229', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-229.html'}, {'name': 'CSSA-2003.003.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.securityfocus.com/archive/1/307045/30/26300/threaded'}, {'name': '20021210 Directory Traversal Vulnerabilities in FTP Clients', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0102.html'}, {'name': '6352', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6352'}, {'name': 'VU#210148', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/210148'}, {'name': 'wget-ftp-filename-traversal(10820)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10820.php'}, {'name': 'OpenPKG-SA-2003.007', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://www.openpkg.com/security/advisories/OpenPKG-SA-2003.007.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1345
Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user via filenames containing /absolute/path or .. (dot dot) sequences.
Affected Products: n/a
References: [{'name': '6360', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6360'}, {'name': 'VU#210409', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/210409'}, {'name': '20021211 Directory Traversal Vulnerabilities in FTP Clients', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103962838628940&w=2'}, {'name': '20021205-01-A', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20021205-01-A'}, {'name': '20021210 Directory Traversal Vulnerabilities in FTP Clients', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0102.html'}, {'name': 'ftp-client-filename-traversal(10821)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10821.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1347
Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long inputs during user name canonicalization, (2) characters that need to be escaped during LDAP authentication using saslauthd, or (3) an off-by-one error in the log writer, which does not allocate space for the null character that terminates a string.
Affected Products: n/a
References: [{'name': 'cyrus-sasl-logwriter-bo(10812)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10812'}, {'name': 'SuSE-SA:2002:048', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://archives.neohapsis.com/archives/linux/suse/2002-q4/1275.html'}, {'name': '000557', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000557'}, {'name': '6349', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6349'}, {'name': '20021209 Cyrus SASL library buffer overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103946297703402&w=2'}, {'name': 'DSA-215', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-215'}, {'name': 'cyrus-sasl-saslauthd-bo(10811)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10811'}, {'name': '6348', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6348'}, {'name': 'APPLE-SA-2005-03-21', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html'}, {'name': '6347', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6347'}, {'name': '200212-10', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.securityfocus.com/advisories/4826'}, {'name': 'cyrus-sasl-username-bo(10810)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10810'}, {'name': 'RHSA-2002:283', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-283.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1348
w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files or cookies.
Affected Products: n/a
References: [{'name': 'RHSA-2003:045', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-045.html'}, {'name': 'DSA-251', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-251'}, {'name': 'RHSA-2003:044', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-044.html'}, {'name': 'DSA-249', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-249'}, {'name': 'DSA-250', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-250'}, {'name': '20030217 GLSA:  w3m', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104552193927323&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=126233'}, {'name': 'w3m-img-alt-xss(11266)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11266.php'}, {'name': '6794', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6794'}]
CVE State: PUBLISHED
Explain CVE-2002-1349
Buffer overflow in pop3trap.exe for PC-cillin 2000, 2002, and 2003 allows local users to execute arbitrary code via a long input string to TCP port 110 (POP3).
Affected Products: n/a
References: [{'name': 'VU#157961', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/157961'}, {'name': '20021210 Unchecked buffer in PC-cillin', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103953822705917&w=2'}, {'name': '6350', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6350'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=12982'}, {'name': 'pccillin-pop3trap-bo(10814)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10814'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.texonet.com/advisories/TEXONET-20021210.txt'}]
CVE State: PUBLISHED
Explain CVE-2002-1350
The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers to cause a denial of service (application crash).
Affected Products: n/a
References: [{'name': 'CSSA-2002-050.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-050.0.txt'}, {'name': 'tcpdump-sizeof-memory-corruption(10695)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10695'}, {'name': '[tcpdump-workers] 20011015 Bug in print-bgp.c?', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.tcpdump.org/lists/workers/2001/10/msg00101.html'}, {'name': 'RHSA-2003:033', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-033.html'}, {'name': 'MDKSA-2003:027', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:027'}, {'name': 'RHSA-2003:214', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-214.html'}, {'name': '20021219 TSLSA-2002-0084 - tcpdump', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104032975103398&w=2'}, {'name': 'DSA-206', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-206'}, {'name': 'RHSA-2003:032', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-032.html'}, {'name': '6213', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6213'}]
CVE State: PUBLISHED
Explain CVE-2002-1351
Buffer overflow in Melange Chat System 1.10 allows remote attackers to cause a denial of service (chat server crash) and possibly execute arbitrary code via the msgText buffer in the chat_InterpretData function, as demonstrated via a long Nick (nickname) request.
Affected Products: n/a
References: [{'name': '20021216 Melange Chat System Remote Buffer Overflow', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=33&type=vulnerabilities&flashstatus=false'}, {'name': '1005831', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005831'}, {'name': '6477', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6477'}, {'name': 'melange-msgtext-chatinterpretdata-bo(10939)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10939'}]
CVE State: PUBLISHED
Explain CVE-2002-1352
Per Magne Knutsen's CartMan shopping cart (cartman.php) 1.04 and earlier allows remote attackers to modify product prices by changing the price parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/12.16.02c.txt'}, {'name': '1005829', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005829'}]
CVE State: PUBLISHED
Explain CVE-2002-1353
LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst.
Affected Products: n/a
References: [{'name': 'localweb2k-userslst-plaintext-passwords(10948)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10948'}, {'name': '7740', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7740/'}, {'name': '1005830', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005830'}, {'name': '20021216 LocalWEB 2000 Insecure Password Storage', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=31&type=vulnerabilities&flashstatus=false'}]
CVE State: PUBLISHED
Explain CVE-2002-1354
Directory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the contents of arbitrary directories via a ... (dot dot dot) in the cd/CWD command.
Affected Products: n/a
References: [{'name': '7737', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7737/'}, {'name': 'typsoft-ftp-directory-traversal(6165)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6165'}, {'name': '1005832', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005832'}]
CVE State: PUBLISHED
Explain CVE-2002-1355
Multiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a denial of service (infinite loop) via malformed messages.
Affected Products: n/a
References: [{'name': 'RHSA-2002:290', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-290.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/cgi-bin/viewcvs.cgi/ethereal/packet-bgp.c.diff?r1=1.68&r2=1.69'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00007.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1356
Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed packets to the (1) LMP, (2) PPP, or (3) TDS dissectors, possibly related to a missing field for EndVerifyAck messages.
Affected Products: n/a
References: [{'name': 'RHSA-2002:290', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-290.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/cgi-bin/viewcvs.cgi/ethereal/packet-lmp.c#rev1.13'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00007.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1357
Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.
Affected Products: n/a
References: [{'name': '1005812', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005812'}, {'name': 'CA-2002-36', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-36.html'}, {'name': 'oval:org.mitre.oval:def:5849', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5849'}, {'name': 'VU#389665', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/389665'}, {'name': 'ssh-transport-length-bo(10868)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10868'}, {'name': '20021216 R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html'}, {'name': '6405', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6405'}, {'name': '1005813', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005813'}]
CVE State: PUBLISHED
Explain CVE-2002-1358
Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.
Affected Products: n/a
References: [{'name': '1005812', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005812'}, {'name': 'CA-2002-36', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-36.html'}, {'name': 'oval:org.mitre.oval:def:5721', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5721'}, {'name': '20021216 R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html'}, {'name': '1005813', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005813'}]
CVE State: PUBLISHED
Explain CVE-2002-1359
Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite.
Affected Products: n/a
References: [{'name': '1005812', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005812'}, {'name': 'CA-2002-36', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-36.html'}, {'name': 'ssh-transport-multiple-bo(10870)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10870'}, {'name': '20021216 R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html'}, {'name': '6407', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6407'}, {'name': 'oval:org.mitre.oval:def:5848', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5848'}, {'name': '1005813', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005813'}]
CVE State: PUBLISHED
Explain CVE-2002-1360
Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a length field, which could allow remote attackers to cause a denial of service or possibly execute arbitrary code due to interactions with the use of null-terminated strings as implemented using languages such as C, as demonstrated by the SSHredder SSH protocol test suite.
Affected Products: n/a
References: [{'name': '1005812', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005812'}, {'name': 'oval:org.mitre.oval:def:5797', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5797'}, {'name': 'CA-2002-36', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-36.html'}, {'name': '20021216 R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html'}, {'name': '1005813', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005813'}]
CVE State: PUBLISHED
Explain CVE-2002-1361
overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to execute arbitrary code via a POST request with shell metacharacters in the email parameter.
Affected Products: n/a
References: [{'name': 'N-025', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-025.shtml'}, {'name': '49377', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/49377'}, {'name': 'cobalt-shp-overflow-privileges(10776)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10776'}, {'name': 'CA-2002-35', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-35.html'}, {'name': 'VU#810921', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/810921'}, {'name': '6326', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6326'}, {'name': '20021205 Cobalt RaQ4 Remote root exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103912513522807&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-1362
mICQ 0.4.9 and earlier allows remote attackers to cause a denial of service (crash) via malformed ICQ message types without a 0xFE separator character.
Affected Products: n/a
References: [{'name': 'RHSA-2003:118', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-118.html'}, {'name': 'micq-0xfe-dos(10872)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10872'}, {'name': '6392', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6392'}, {'name': 'DSA-211', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-211'}]
CVE State: PUBLISHED