Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2002-1199
The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments.
Affected Products: n/a
References: [{'name': '47903', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/47903'}, {'name': '20021010 Multiple vendor ypxfrd map handling vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103426842025029&w=2'}, {'name': 'CSSA-2002-SCO.40', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/updates/OpenServer/CSSA-2002-SCO.40'}, {'name': 'ypxfrd-file-disclosure(10329)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10329.php'}, {'name': 'VU#538033', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/538033'}, {'name': 'oval:org.mitre.oval:def:2423', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2423'}, {'name': '5937', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5937'}]
CVE State: PUBLISHED
Explain CVE-2002-1200
Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track the size of a buffer when constant characters are encountered during macro expansion, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.balabit.hu/static/zsa/ZSA-2002-014-en.txt'}, {'name': '5934', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5934'}, {'name': 'ESA-20021029-028', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/other_advisory-2513.html'}, {'name': 'syslogng-macro-expansion-bo(10339)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10339.php'}, {'name': 'SuSE-SA:2002:039', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_039_syslog_ng.html'}, {'name': 'CLA-2002:547', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000547'}, {'name': '20021010 syslog-ng buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103426595021928&w=2'}, {'name': 'DSA-175', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-175'}]
CVE State: PUBLISHED
Explain CVE-2002-1201
IBM AIX 4.3.3 and AIX 5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a flood of malformed TCP packets without any flags set, which prevents AIX from releasing the associated memory buffers.
Affected Products: n/a
References: [{'name': 'aix-tcp-flood-dos(10326)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10326.php'}, {'name': 'IY31641', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?rs=0&q=IY31641&uid=isg1IY31641&loc=en_US&cs=utf-8&cc=us&lang=en'}, {'name': '20021009 Flood ACK packets cause AIX DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103418410408599&w=2'}, {'name': 'VU#102345', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/102345'}, {'name': '5925', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5925'}]
CVE State: PUBLISHED
Explain CVE-2002-1202
Unknown vulnerability in routed for HP Tru64 UNIX V4.0F through V5.1A allows local and remote attackers to read arbitrary files.
Affected Products: n/a
References: [{'name': 'SSRT2208', 'tags': ['vendor-advisory', 'x_refsource_COMPAQ'], 'url': 'http://archives.neohapsis.com/archives/tru64/2002-q4/0002.html'}, {'name': 'tru64-routed-file-access(10316)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10316.php'}, {'name': '5913', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5913'}]
CVE State: PUBLISHED
Explain CVE-2002-1203
IBM SecureWay Firewall before 4.2.2 performs extra processing before determining that a packet is invalid and dropping it, which allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed TCP packets without any flags set.
Affected Products: n/a
References: [{'name': '20021009 Flood ACK packets cause an IBM SecureWay FireWall DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103417988503398&w=2'}, {'name': '5924', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5924'}, {'name': 'secureway-tcp-flood-dos(10249)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10249.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1204
Netscape Communicator 4.x allows attackers to use a link to steal a user's preferences, including potentially sensitive information such as URL history, e-mail address, and possibly the e-mail password, by redefining the user_pref() function and accessing the prefs.js file, which is stored in a directory with a predictable name.
Affected Products: n/a
References: [{'name': '20021119 iDEFENSE Security Advisory 11.19.02c: Netscape Predictable Directory Structure Allows Theft of Preferences File', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0081.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/11.19.02c.txt'}, {'name': 'netscape-preferences-file(10655)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10655.php'}, {'name': '6215', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6215'}]
CVE State: PUBLISHED
Explain CVE-2002-1209
Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences in a GET request.
Affected Products: n/a
References: [{'name': 'tftp-dot-directory-traversal(10469)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10469'}, {'name': '20021024 iDEFENSE Security Advisory 10.24.02: Directory Traversal in SolarWinds TFTP Server', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0044.html'}, {'name': '6045', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6045'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/10.24.02.txt'}]
CVE State: PUBLISHED
Explain CVE-2002-1210
Qualcomm Eudora 5.1.1, 5.2, and possibly other versions stores email attachments in a predictable location, which allows remote attackers to read arbitrary files via a link that loads an attachment with malicious script into a frame, which then executes the script in the local browser context.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/11.19.02b.txt'}, {'name': '20021119 iDEFENSE Security Advisory 11.19.02b: Eudora Script Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0079.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1211
Prometheus 6.0 and earlier allows remote attackers to execute arbitrary PHP code via a modified PROMETHEUS_LIBRARY_BASE that points to code stored on a remote server, which is then used in (1) index.php, (2) install.php, or (3) various test_*.php scripts.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/10.31.02b.txt'}, {'name': 'prometheus-php-file-include(10515)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10515.php'}, {'name': '20021101 iDEFENSE Security Advisory 10.31.02b: Prometheus Application Framework Code Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103616306403031&w=2'}, {'name': '20021101 iDEFENSE Security Advisory 10.31.02b: Prometheus Application Framework Code Injection', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0050.html'}, {'name': '6087', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6087'}]
CVE State: PUBLISHED
Explain CVE-2002-1212
Buffer overflow in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.
Affected Products: n/a
References: [{'name': '5967', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5967'}, {'name': 'webserver-4everyone-filename-bo(10372)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10372.php'}, {'name': '20021014 DoS and Directory Traversal Vulnerabilities in WebServer 4 Everyone', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=49&type=vulnerabilities&flashstatus=true'}]
CVE State: PUBLISHED
Explain CVE-2002-1213
Directory traversal vulnerability in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to read arbitrary files via an HTTP request with ".." (dot-dot) sequences containing URL-encoded forward slash ("%2F") characters.
Affected Products: n/a
References: [{'name': 'webserver-4everyone-encoded-traversal(10373)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10373.php'}, {'name': '20021014 DoS and Directory Traversal Vulnerabilities in WebServer 4 Everyone', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=49&type=vulnerabilities&flashstatus=true'}, {'name': '5968', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5968'}]
CVE State: PUBLISHED
Explain CVE-2002-1214
Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a certain PPTP packet with malformed control data.
Affected Products: n/a
References: [{'name': '5807', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5807'}, {'name': 'win-pptp-packet-bo (10199)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10199.php'}, {'name': 'MS02-063', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-063'}, {'name': '20020926 Microsoft PPTP Server and Client remote vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/293146'}]
CVE State: PUBLISHED
Explain CVE-2002-1215
Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier (claimed as buffer overflows in some sources) allow remote attackers to execute arbitrary code via certain packets to UDP port 694 (incorrectly claimed as TCP in some sources).
Affected Products: n/a
References: [{'name': 'CLA-2002:540', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000540'}, {'name': 'SuSE-SA:2002:037', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_037_heartbeat.html'}, {'name': 'DSA-174', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-174'}, {'name': 'linuxha-heartbeat-bo(10357)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10357.php'}, {'name': '5955', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5955'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://linux-ha.org/security/sec01.txt'}]
CVE State: PUBLISHED
Explain CVE-2002-1216
GNU tar 1.13.19 and other versions before 1.13.25 allows remote attackers to overwrite arbitrary files via a symlink attack, as the result of a modification that effectively disabled the security check.
Affected Products: n/a
References: [{'name': 'RHSA-2002:096', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-096.html'}, {'name': '20020928 GNU tar (Re: Allot Netenforcer problems, GNU TAR flaw)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103419290219680&w=2'}, {'name': 'archive-extraction-directory-traversal(10224)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10224.php'}, {'name': 'MDKSA-2006:219', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:219'}, {'name': 'OpenPKG-SA-2006.038', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.038.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1217
Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses <frame> and <iframe> domain restrictions.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:272', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A272'}, {'name': 'MS02-066', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066'}, {'name': 'oval:org.mitre.oval:def:333', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A333'}, {'name': '20021015 Internet Explorer : The D-Day', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103470310417576&w=2'}, {'name': '20021015 Internet Explorer : The D-Day', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=103470202010570&w=2'}, {'name': 'ie-iframe-document-script-execution(10371)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10371.php'}, {'name': '5963', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5963'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.greymagic.com/adv/gm011-ie/'}, {'name': '20021015 Internet Explorer : The D-Day', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0024.html'}, {'name': 'N-018', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-018.shtml'}]
CVE State: PUBLISHED
Explain CVE-2002-1219
Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server response containing SIG resource records (RR).
Affected Products: n/a
References: [{'name': 'CA-2002-31', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-31.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.isc.org/products/BIND/bind-security.html'}, {'name': '2002-11-21', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html'}, {'name': '20021201-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20021201-01-P'}, {'name': '6160', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6160'}, {'name': 'DSA-196', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-196'}, {'name': 'SSRT2408', 'tags': ['vendor-advisory', 'x_refsource_COMPAQ'], 'url': 'http://online.securityfocus.com/advisories/4999'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F48818'}, {'name': 'oval:org.mitre.oval:def:2539', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2539'}, {'name': '20021118 TSLSA-2002-0076 - bind', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103763574715133&w=2'}, {'name': 'CLA-2002:546', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000546'}, {'name': '20021115 [OpenPKG-SA-2002.011] OpenPKG Security Advisory (bind, bind8)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/300019'}, {'name': '20021112 [Fwd: Notice of serious vulnerabilities in ISC BIND 4 & 8]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103713117612842&w=2'}, {'name': 'N-013', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-013.shtml'}, {'name': 'VU#852283', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/852283'}, {'name': 'bind-sig-rr-bo(10304)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10304'}, {'name': '20021112 Multiple Remote Vulnerabilities in BIND4 and BIND8', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21469'}, {'name': 'MDKSA-2002:077', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-077.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1220
BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via a request for a subdomain that does not exist, with an OPT resource record with a large UDP payload size.
Affected Products: n/a
References: [{'name': 'CA-2002-31', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-31.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.isc.org/products/BIND/bind-security.html'}, {'name': '2002-11-21', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html'}, {'name': 'oval:org.mitre.oval:def:449', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A449'}, {'name': 'DSA-196', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-196'}, {'name': 'SSRT2408', 'tags': ['vendor-advisory', 'x_refsource_COMPAQ'], 'url': 'http://online.securityfocus.com/advisories/4999'}, {'name': '20021118 TSLSA-2002-0076 - bind', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103763574715133&w=2'}, {'name': 'VU#229595', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/229595'}, {'name': 'bind-opt-rr-dos(10332)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10332'}, {'name': '6161', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6161'}, {'name': '20021115 [OpenPKG-SA-2002.011] OpenPKG Security Advisory (bind, bind8)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/300019'}, {'name': '20021112 [Fwd: Notice of serious vulnerabilities in ISC BIND 4 & 8]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103713117612842&w=2'}, {'name': 'N-013', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-013.shtml'}, {'name': '20021112 Multiple Remote Vulnerabilities in BIND4 and BIND8', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21469'}, {'name': 'MDKSA-2002:077', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-077.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1221
BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid expiry times, which are removed from the internal BIND database and later cause a null dereference.
Affected Products: n/a
References: [{'name': 'CA-2002-31', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-31.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.isc.org/products/BIND/bind-security.html'}, {'name': '2002-11-21', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html'}, {'name': '6159', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6159'}, {'name': 'DSA-196', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-196'}, {'name': 'bind-null-dereference-dos(10333)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10333'}, {'name': 'SSRT2408', 'tags': ['vendor-advisory', 'x_refsource_COMPAQ'], 'url': 'http://online.securityfocus.com/advisories/4999'}, {'name': '20021118 TSLSA-2002-0076 - bind', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103763574715133&w=2'}, {'name': 'CLA-2002:546', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000546'}, {'name': 'oval:org.mitre.oval:def:2094', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2094'}, {'name': '20021115 [OpenPKG-SA-2002.011] OpenPKG Security Advisory (bind, bind8)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/300019'}, {'name': '20021112 [Fwd: Notice of serious vulnerabilities in ISC BIND 4 & 8]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103713117612842&w=2'}, {'name': 'N-013', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-013.shtml'}, {'name': 'VU#581682', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/581682'}, {'name': '20021112 Multiple Remote Vulnerabilities in BIND4 and BIND8', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21469'}, {'name': 'MDKSA-2002:077', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-077.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1222
Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote attackers to cause a denial of service (reset) via a long HTTP request.
Affected Products: n/a
References: [{'name': '20021016 Cisco CatOS Embedded HTTP Server Buffer Overflow', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/catos-http-overflow-vuln.shtml'}, {'name': 'cisco-catalyst-ciscoview-bo(10382)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10382.php'}, {'name': '5976', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5976'}]
CVE State: PUBLISHED
Explain CVE-2002-1223
Buffer overflow in DSC 3.0 parser from GSview, as used in KGhostView in KDE 1.1 and KDE 3.0.3a, may allow attackers to cause a denial of service or execute arbitrary code via a modified .ps (PostScript) input file.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20021008-1.txt'}, {'name': 'N-155', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-155.shtml'}, {'name': 'RHSA-2002:220', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-220.html'}, {'name': '101426', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-101426-1'}, {'name': '20021009 KDE Security Advisory: KGhostview Arbitary Code Execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0163.html'}, {'name': 'MDKSA-2002:071', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:071'}, {'name': 'gsview-dsc-ps-bo(11319)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11319.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1224
Directory traversal vulnerability in kpf for KDE 3.0.1 through KDE 3.0.3a allows remote attackers to read arbitrary files as the kpf user via a URL with a modified icon parameter.
Affected Products: n/a
References: [{'name': 'RHSA-2002:220', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-220.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20021008-2.txt'}, {'name': '20021009 KDE Security Advisory: kpf Directory traversal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0164.html'}, {'name': '5951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5951'}, {'name': '20021011 Security hole in kpf - KDE personal fileserver.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/294991'}, {'name': 'kpf-icon-view-files(10347)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10347.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1225
Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access.
Affected Products: n/a
References: [{'name': '5729', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5729'}, {'name': 'DSA-178', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-178'}, {'name': 'SuSE-SA:2002:034', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://marc.info/?l=bugtraq&m=103341355708817&w=2'}, {'name': 'heimdal-kf-kfd-bo(10116)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10116.php'}, {'name': '20021014 GLSA: heimdal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103462479621246&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-1226
Unknown vulnerabilities in Heimdal before 0.5 with unknown impact, possibly in the (1) kadmind and (2) kdc servers, may allow remote or local attackers to gain root or other access, but not via buffer overflows (CVE-2002-1225).
Affected Products: n/a
References: [{'name': 'DSA-178', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-178'}, {'name': 'SuSE-SA:2002:034', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://marc.info/?l=bugtraq&m=103341355708817&w=2'}, {'name': '20021014 GLSA: heimdal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103462479621246&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-1227
PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows local and remote attackers to gain privileges as disabled users.
Affected Products: n/a
References: [{'name': 'pam-disabled-bypass-authentication(10405)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10405.php'}, {'name': '5994', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5994'}, {'name': 'DSA-177', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-177'}]
CVE State: PUBLISHED
Explain CVE-2002-1228
Unknown vulnerability in NFS on Solaris 2.5.1 through Solaris 9 allows an NFS client to cause a denial of service by killing the lockd daemon.
Affected Products: n/a
References: [{'name': '47815', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-47815-1'}, {'name': 'solaris-nfs-lockd-dos(10394)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10394.php'}, {'name': '20021017 NFS Denial of Service advisory from Sun', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103487058823193&w=2'}, {'name': 'VU#855635', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/855635'}, {'name': '5986', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5986'}]
CVE State: PUBLISHED
Explain CVE-2002-1229
Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts (1) manuf and (2) diag with default passwords, which allows remote attackers to gain privileges.
Affected Products: n/a
References: [{'name': 'avaya-cajun-default-passwords(10374)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10374.php'}, {'name': 'VU#482241', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/482241'}, {'name': '5965', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5965'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/japple/css/japple?PAGE=avaya.css.OpenPage&temp.template.name=Avaya_P580_P882_Undocumented'}, {'name': '20021015 Undocumented account vulnerability in Avaya P550R/P580/P880/P882', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103470243012971&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-1230
NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via "shatter" style attack by sending a WM_COPYDATA message followed by a WM_TIMER message, as demonstrated by GetAd, aka "Flaw in Windows WM_TIMER Message Handling Could Enable Privilege Elevation."
Affected Products: n/a
References: [{'name': 'N-027', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-027.shtml'}, {'name': '5927', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5927'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.packetstormsecurity.nl/filedesc/GetAd.c.html'}, {'name': 'MS02-071', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-071'}, {'tags': ['x_refsource_MISC'], 'url': 'http://getad.chat.ru/'}, {'name': 'oval:org.mitre.oval:def:681', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A681'}, {'name': 'win-netdde-gain-privileges(10343)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10343.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1231
SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to cause a denial of service via an rcp call on /proc.
Affected Products: n/a
References: [{'name': '6025', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6025'}, {'name': 'openunix-unixware-rcp-dos(10425)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10425.php'}, {'name': 'CSSA-2002-SCO.41', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenUNIX/CSSA-2002-SCO.41'}]
CVE State: PUBLISHED
Explain CVE-2002-1232
Memory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large number of requests for a map that does not exist.
Affected Products: n/a
References: [{'name': 'HPSBTL0210-074', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/4605'}, {'name': 'RHSA-2003:229', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-229.html'}, {'name': 'CSSA-2002-054.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-054.0.txt'}, {'name': 'DSA-180', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-180'}, {'name': 'RHSA-2002:224', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-224.html'}, {'name': 'MDKSA-2002:078', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-078.php'}, {'name': 'ypserv-map-memory-leak(10423)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10423.php'}, {'name': 'CLA-2002:539', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000539'}, {'name': 'RHSA-2002:223', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-223.html'}, {'name': '6016', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6016'}, {'name': '20021028 GLSA: ypserv', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103582692228894&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-1233
A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0), for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs (1) htpasswd or (2) htdigest, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2001-0131.
Affected Products: n/a
References: [{'name': 'DSA-188', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-188'}, {'name': '5990', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5990'}, {'name': 'DSA-187', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-187'}, {'name': '5981', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5981'}, {'name': 'DSA-195', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-195'}, {'name': 'apache-htdigest-tmpfile-race(10413)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10413.php'}, {'name': '20021016 Apache 1.3.26', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103480856102007&w=2'}, {'name': 'apache-htpasswd-tmpfile-race(10412)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10412.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1236
The remote management web server for Linksys BEFSR41 EtherFast Cable/DSL Router before firmware 1.42.7 allows remote attackers to cause a denial of service (crash) via an HTTP request to Gozila.cgi without any arguments.
Affected Products: n/a
References: [{'name': '20021101 iDEFENSE Security Advisory 10.31.02a: Denial of Service Vulnerability in Linksys BEFSR41 EtherFast Cable/DSL Router', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0049.html'}, {'name': '6086', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6086'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/10.31.02a.txt'}, {'name': 'linksys-etherfast-gozila-dos(10514)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10514.php'}, {'name': '20021101 iDEFENSE Security Advisory 10.31.02a: Denial of Service Vulnerability in Linksys BEFSR41 EtherFast Cable/DSL Router', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103616324103171&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-1238
Peter Sandvik's Simple Web Server 0.5.1 and earlier allows remote attackers to bypass access restrictions for files via an HTTP request with a sequence of multiple / (slash) characters such as http://www.example.com///file/.
Affected Products: n/a
References: [{'name': '6145', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6145'}, {'name': 'simple-server-file-access(10563)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10563'}, {'name': '20021108 iDEFENSE Security Advisory 11.08.02a: File Disclosure Vulnerability in Simple Web Server', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0065.html'}, {'name': '20021108 iDEFENSE Security Advisory 11.08.02a: File Disclosure Vulnerability in Simple Web Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103679016031857&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/11.08.02a.txt'}]
CVE State: PUBLISHED
Explain CVE-2002-1239
QNX Neutrino RTOS 6.2.0 uses the PATH environment variable to find and execute the cp program while operating at raised privileges, which allows local users to gain privileges by modifying the PATH to point to a malicious cp program.
Affected Products: n/a
References: [{'name': '20021108 iDEFENSE Security Advisory 11.08.02b: Non-Explicit Path Vulnerability in QNX Neutrino RTOS', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0066.html'}, {'name': '20021108 iDEFENSE Security Advisory 11.08.02b: Non-Explicit Path Vulnerability in QNX Neutrino RTOS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103679043232178&w=2'}, {'name': '6146', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6146'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/11.08.02b.txt'}, {'name': 'qnx-rtos-gain-privileges(10564)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10564.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1242
SQL injection vulnerability in PHP-Nuke before 6.0 allows remote authenticated users to modify the database and gain privileges via the "bio" argument to modules.php.
Affected Products: n/a
References: [{'name': '20021101 iDEFENSE Security Advisory 10.31.02c: PHP-Nuke SQL Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0051.html'}, {'name': '6088', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6088'}, {'name': '20021101 iDEFENSE Security Advisory 10.31.02c: PHP-Nuke SQL Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103616324103171&w=2'}, {'name': 'phpnuke-accountmanager-sql-injection(10516)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10516.php'}, {'name': '6244', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6244'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/10.31.02c.txt'}]
CVE State: PUBLISHED
Explain CVE-2002-1244
Format string vulnerability in Pablo FTP Server 1.5, 1.3, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format strings in the USER command.
Affected Products: n/a
References: [{'name': '6099', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6099'}, {'name': '4996', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4996'}, {'name': '20021104 iDEFENSE Security Advisory 11.04.02a: Pablo FTP Server DoS Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0057.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.pablovandermeer.nl/ftpserver.zip'}, {'name': '20021104 iDEFENSE Security Advisory 11.04.02a: Pablo FTP Server DoS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103642642802889&w=2'}, {'name': 'pablo-ftp-username-dos(10532)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10532.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1245
Maped in LuxMan 0.41 uses the user-provided search path to find and execute the gzip program, which allows local users to modify /dev/mem and gain privileges via a modified PATH environment variable that points to a Trojan horse gzip program.
Affected Products: n/a
References: [{'name': 'DSA-189', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-189'}, {'name': '20021106 iDEFENSE Security Advisory 11.06.02: Non-Explicit Path Vulnerability in LuxMan', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103660334009855&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/11.06.02.txt'}, {'name': 'luxman-maped-read-memory(10549)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10549.php'}, {'name': '20021106 iDEFENSE Security Advisory 11.06.02: Non-Explicit Path Vulnerability in LuxMan', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0062.html'}, {'name': '6113', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6113'}]
CVE State: PUBLISHED
Explain CVE-2002-1247
Buffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME environment variable for the resLISa daemon.
Affected Products: n/a
References: [{'name': 'MDKSA-2002:080', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2002:080'}, {'name': 'DSA-193', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-193'}, {'name': '20021114 GLSA: kdelibs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103728981029342&w=2'}, {'name': '20021112 KDE Security Advisory: resLISa / LISa Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103712329102632&w=2'}, {'name': '20021111 iDEFENSE Security Advisory 11.11.02: Buffer Overflow in KDE resLISa', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103704823501757&w=2'}, {'name': 'N-020', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-020.shtml'}, {'name': 'RHSA-2002:220', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-220.html'}, {'name': 'kde-kdenetwork-reslisa-bo(10592)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10592.php'}, {'name': '20021111 iDEFENSE Security Advisory 11.11.02: Buffer Overflow in KDE resLISa', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0068.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/11.11.02.txt'}, {'name': '6157', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6157'}]
CVE State: PUBLISHED
Explain CVE-2002-1248
Northern Solutions Xeneo Web Server 2.1.0.0, 2.0.759.6, and other versions before 2.1.5 allows remote attackers to cause a denial of service (crash) via a GET request for a "%" URI.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/11.04.02b.txt'}, {'name': '6098', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6098'}, {'name': 'xeneo-php-dos(10534)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10534.php'}, {'name': '20021104 iDEFENSE Security Advisory 11.04.02b: Denial of Service Vulnerability in Xeneo Web Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103642597302308&w=2'}]
CVE State: PUBLISHED
Explain CVE-2002-1250
Buffer overflow in Abuse 2.00 and earlier allows local users to gain root privileges via a long -net command line argument.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/11.01.02.txt'}, {'name': '6094', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6094'}, {'name': 'abuse-net-command-bo(10519)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10519.php'}, {'name': '20021101 iDEFENSE Security Advisory 11.01.02: Buffer Overflow Vulnerability in Abuse', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0055.html'}]
CVE State: PUBLISHED
Explain CVE-2002-1251
Buffer overflow in log2mail before 0.2.5.1 allows remote attackers to execute arbitrary code via a long log message.
Affected Products: n/a
References: [{'name': 'DSA-186', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-186'}, {'name': '6089', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6089'}, {'name': 'log2mail-log-file-bo(10527)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10527.php'}]
CVE State: PUBLISHED
Explain CVE-2002-1252
The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, allows remote attackers to read arbitrary files via certain XML External Entities (XXE) fields in an HTTP POST request that is processed by the SimpleFileHandler handler.
Affected Products: n/a
References: [{'name': 'peoplesoft-xxe-read-files(10520)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10520.php'}, {'name': '20030120 PeopleSoft XML External Entities Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21811'}, {'name': '6647', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6647'}]
CVE State: PUBLISHED