DuyTa/cve-kgrag-db huggingface dataset:
CVE-2002-0661
Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to read arbitrary files and execute commands via .. (dot dot) sequences containing \ (backslash) characters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: http_server
References: http://httpd.apache.org/info/security_bulletin_20020908a.txt, http://marc.info/?l=bugtraq&m=102892744011436&w=2, http://marc.info/?l=bugtraq&m=102951160411052&w=2
CVE-2002-0403
DNS dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (CPU consumption) via a malformed packet that causes Ethereal to enter an infinite loop.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ethereal
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-037.0.txt, http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000505, http://marc.info/?l=bugtraq&m=102268626526119&w=2
CVE-2002-0335
Buffer overflow in Galacticomm Worldgroup web server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long HTTP GET request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: worldgroup, worldgroup_lite_personal_server
References: http://marc.info/?l=bugtraq&m=101484128203523&w=2, http://www.iss.net/security_center/static/8298.php, http://www.securityfocus.com/bid/4186
CVE-2002-0150
Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_information_server, internet_information_services
References: http://www.cert.org/advisories/CA-2002-09.html, http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml, http://www.iss.net/security_center/static/8797.php
CVE-2002-1321
Multiple buffer overflows in RealOne and RealPlayer allow remote attackers to execute arbitrary code via (1) a Synchronized Multimedia Integration Language (SMIL) file with a long parameter, (2) a long long filename in a rtsp:// request, e.g. from a .m3u file, or (3) certain "Now Playing" options on a downloaded file with a long filename.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: realplayer, realone_player
References: http://marc.info/?l=bugtraq&m=103808645120764&w=2, http://service.real.com/help/faq/security/bufferoverrun_player.html, http://www.securityfocus.com/bid/6227
CVE-2002-1987
Directory traversal vulnerability in view_source.jsp in Resin 2.1.2 allows remote attackers to read arbitrary files via a "\.." (backslash dot dot).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: resin
References: http://online.securityfocus.com/archive/1/277225, http://www.iss.net/security_center/static/9351.php, http://www.securityfocus.com/bid/5031
CVE-2002-1985
iSMTP 5.0.1 allows remote attackers to cause a denial of service via a long "MAIL FROM" command, possibly triggering a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ismtp_gateway
References: http://online.securityfocus.com/archive/1/299232, http://www.iss.net/security_center/static/10577.php, http://www.nii.co.in/vuln/ismtp.html
CVE-2002-1212
Buffer overflow in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: webserver_4_all
References: http://www.idefense.com/application/poi/display?id=49&type=vulnerabilities&flashstatus=true, http://www.iss.net/security_center/static/10372.php, http://www.securityfocus.com/bid/5967
CVE-2002-0947
Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6.0.8.18.0 and earlier, as used in Oracle9iAS and other products, allows remote attackers to execute arbitrary code via a long database name parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: reports, application_server
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0097.html, http://online.securityfocus.com/archive/1/276524, http://technet.oracle.com/deploy/security/pdf/reports6i_alert.pdf
CVE-2002-0056
Buffer overflow in SQL Server 7.0 and 2000 allows remote attackers to execute arbitrary code via a long OLE DB provider name to (1) OpenDataSource or (2) OpenRowset in an ad hoc connection.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sql_server
References: http://marc.info/?l=bugtraq&m=101422555428036&w=2, http://marc.info/?l=vuln-dev&m=101413924631329&w=2, http://www.kb.cert.org/vuls/id/619707
CVE-2002-0518
The SYN cache (syncache) and SYN cookie (syncookie) mechanism in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service (crash) (1) via a SYN packet that is accepted using syncookies that causes a null pointer to be referenced for the socket's TCP options, or (2) by killing and restarting a process that listens on the same socket, which does not properly clear the old inpcb pointer on restart.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: freebsd
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:20.syncache.asc, http://www.iss.net/security_center/static/8873.php, http://www.iss.net/security_center/static/8875.php
CVE-2002-0935
Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of requests to the server with null characters, which causes the working threads to hang.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: tomcat
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0120.html, http://online.securityfocus.com/archive/1/277940, http://www.iss.net/security_center/static/9396.php
CVE-2002-1790
The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send spam or spoofed messages via encapsulated SMTP addresses, a similar vulnerability to CVE-1999-0682.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: internet_information_server, internet_information_services, exchange_server
References: http://online.securityfocus.com/archive/1/281914, http://www.iss.net/security_center/static/9580.php, http://www.securityfocus.com/bid/5213
CVE-2002-0709
SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote attackers to execute arbitrary SQL queries via the RunReport option to SimpleBar.dll, and possibly other DLLs.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: web_filter, superscout_web_filter
References: http://marc.info/?l=bugtraq&m=103359690824103&w=2, http://www.iss.net/security_center/static/10245.php, http://www.securityfocus.com/bid/5859
CVE-2002-1441
Multiple buffer overflows in Tomahawk SteelArrow before 4.5 allow remote attackers to execute arbitrary code via (1) the Steelarrow Service (Steelarrow.exe) using a long UserIdent Cookie header, (2) DLLHOST.EXE (Steelarrow.dll) via a request for a long .aro file, or (3) DLLHOST.EXE via a Chunked Transfer-Encoding request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: steelarrow
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0085.html, http://online.securityfocus.com/archive/1/288013, http://www.iss.net/security_center/static/9888.php
CVE-2002-2269
Directory traversal vulnerability in Webster HTTP Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
CVSS v2.0 Score: 9.4 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:N
Affected Products: webster_http_server
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://securityreason.com/securityalert/3262, http://www.securityfocus.com/archive/1/301893, http://www.securityfocus.com/bid/6291
CWE: CWE-22
CVE-2002-2052
Cisco 2611 router running IOS 12.1(6.5), possibly an interim release, allows remote attackers to cause a denial of service via port scans such as (1) scanning all ports on a single host and (2) scanning a network of hosts for a single open port through the router.  NOTE: the vendor could not reproduce this issue, saying that the original reporter was using an interim release of the software.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ios
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0027.html, http://archives.neohapsis.com/archives/bugtraq/2002-06/0050.html, http://www.iss.net/security_center/static/9281.php
CVE-2002-2208
Extended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service (flood) by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: ios, extended_interior_gateway_routing_protocol
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040330.html, http://marc.info/?l=full-disclosure&m=113504451523186&w=2, http://secunia.com/advisories/7766
CVE-2002-0404
Vulnerability in GIOP dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (memory consumption).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ethereal
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-037.0.txt, http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000505, http://marc.info/?l=bugtraq&m=102268626526119&w=2
CVE-2002-1609
Buffer overflow in binmail in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux, tru64
References: http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11, http://www.kb.cert.org/vuls/id/602009, https://exchange.xforce.ibmcloud.com/vulnerabilities/10016
CVE-2002-0432
Buffer overflow in (1) lprintf and (2) cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attacks such as a long HELO command to the SMTP server.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ux
References: http://online.securityfocus.com/archive/1/260934, http://uncensored.citadel.org/pub/citadel/citadel-ux-5.91.tar.gz, http://www.iss.net/security_center/static/8426.php
CVE-2002-1607
Buffer overflow in ypmatch in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux, tru64
References: http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11, http://www.kb.cert.org/vuls/id/706817, https://exchange.xforce.ibmcloud.com/vulnerabilities/10016
CVE-2002-1785
Cross-site scripting (XSS) vulnerability in Zeus Administration Server in Zeus Web Server 4.0 through 4.1r2 allows remote authenticated users to inject arbitrary web script or HTML via the section parameter to index.fcgi.
CVSS v2.0 Score: 1.9 (LOW)
CVSS v2.0 Vector: AV:L/AC:M/Au:N/C:N/I:P/A:N
Affected Products: zeus_web_server
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0104.html, http://online.securityfocus.com/archive/1/302961, http://www.iss.net/security_center/static/10567.php
CVE-2002-1934
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 2.0.1 leaks sensitive information during boot-up, which allows attackers to obtain the MD5 hash of the Admin password, MD5 hash of the physical password, and other registration information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: xpressa
References: http://online.securityfocus.com/archive/1/288383, http://www.iss.net/security_center/static/9948.php, http://www.securityfocus.com/bid/5534
CVE-2002-0328
Cross-site scripting vulnerability in Ikonboard 3.0.1 allows remote attackers to execute arbitrary script as other Ikonboard users and steal cookies via Javascript in an IMG tag.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ikonboard
References: http://marc.info/?l=bugtraq&m=101475420818274&w=2, http://www.securityfocus.com/bid/4182, http://marc.info/?l=bugtraq&m=101475420818274&w=2
CVE-2002-1626
Directory traversal vulnerability in Mike Spice My Calendar before 1.5 allows remote attackers to write arbitrary files via .. (dot dot) sequences in a URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: my_calendar
References: http://securitytracker.com/id?1003256, http://www.kb.cert.org/vuls/id/806091, http://www.securityfocus.com/bid/3856
CVE-2002-0659
The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: http_server, corporate_time_outlook_connector, openssl, application_server, mac_os_x
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt, ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt, ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc
CVE-2002-1789
Format string vulnerability in newsx NNTP client before 1.4.8 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a call to the syslog function.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: newsx
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc, http://www.iss.net/security_center/static/9583.php, http://www.securityfocus.com/bid/5240
CVE-2002-1483
db4web_c and db4web_c.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP request whose argument is a filename of the form (1) C: (drive letter), (2) //absolute/path (double-slash), or (3) .. (dot-dot).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: db4web
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0197.html, http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0124.html, http://www.db4web.de/download/homepage/hotfix/readme_en.txt
CVE-2002-0280
Buffer overflow in CodeBlue 4 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via a long string in an SMTP reply.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: codeblue
References: http://freshmeat.net/releases/71514/, http://marc.info/?l=bugtraq&m=101392671306875&w=2, http://freshmeat.net/releases/71514/
CVE-2002-0584
WorkforceROI Xpede 4.1 allows remote attackers to read user timesheets by modifying the TSN ID parameter to the ts_app_process.asp script, which is easily guessable because it is incremented by 1 for each new timesheet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: xpede
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html, http://www.iss.net/security_center/static/8907.php, http://www.securityfocus.com/bid/4556
CVE-2002-1073
Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via a long password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mercur_mailserver
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0195.html, http://www.iss.net/security_center/static/9618.php, http://www.securityfocus.com/bid/5261
CVE-2002-1668
HP-UX 11.11 and earlier allows local users to cause a denial of service (kernel deadlock), due to a "file system weakness" that is possibly via an mmap() system call and performing an I/O operation using data from the mapped buffer on the file descriptor for the mapped file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: hp-ux, hp-ux_series_800, hp-ux_series_700
References: http://www.securityfocus.com/advisories/3770, http://www.securityfocus.com/bid/3817, https://exchange.xforce.ibmcloud.com/vulnerabilities/7844
CVE-2002-0938
Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote attackers to execute arbitrary script or HTML as other web users via the action argument in a link to setup.exe.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: secure_access_control_server
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0156.html, http://online.securityfocus.com/archive/1/278222, http://www.iss.net/security_center/static/9353.php
CVE-2002-0435
Race condition in the recursive (1) directory deletion and (2) directory move in GNU File Utilities (fileutils) 4.1 and earlier allows local users to delete directories as the user running fileutils by moving a low-level directory to a higher level as it is being deleted, which causes fileutils to chdir to a ".." directory that is higher than expected, possibly up to the root file system.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: fileutils
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-018.1.txt, http://mail.gnu.org/archive/html/bug-fileutils/2002-03/msg00028.html, http://www.iss.net/security_center/static/8432.php
CVE-2002-2279
Unspecified vulnerability in the bind function in config.inc of aldap 0.09 allows remote attackers to authenticate with Manager permissions.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aldap
Related CWEs: CWE-287
Related CAPECs: CAPEC-151, CAPEC-94, CAPEC-593
MITRE ATT&CK Techniques: T1134, T1550.001, T1557
MITRE ATT&CK Tactics: T1550, T1505
References: http://alcastle.com/index.php?id=6&subject=%2Faldap%2F&view=CHANGE.LOG.txt, http://www.securityfocus.com/bid/6310, https://exchange.xforce.ibmcloud.com/vulnerabilities/10733
CWE: CWE-287
MITRE ATT&CK techniques: T1134, T1550.001, T1557, T1185, T1505.003, T1548, T1563, T1040
MITRE ATT&CK tactics: T1550, T1505
CVE-2002-0281
Cross-site scripting vulnerability in DCP-Portal 4.2 and earlier allows remote attackers to gain privileges of other portal users by providing Javascript in the job information field to user_update.php.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: dcp-portal
References: http://marc.info/?l=bugtraq&m=101379217032525&w=2, http://www.dcp-portal.com/contents.php?id=18, http://www.securityfocus.com/bid/4112
CVE-2002-0102
Oracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via (1) a request to TCP ports 1100, 4000, 4001, and 4002 with a large number of null characters, and (2) a request to TCP port 4000 with a large number of "." characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: application_server_web_cache
References: http://otn.oracle.com/deploy/security/pdf/webcache2.pdf, http://www.securityfocus.com/bid/3760, http://www.securityfocus.com/bid/3762
CVE-2002-1761
Directory traversal vulnerability in PHProjekt 2.0 through 3.1 allows remote attackers to read arbitrary files via .. (dot dot) sequences.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phprojekt
References: http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-04/0362.html, http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-04/0362.html
CVE-2002-1047
The FTP service in Watchguard Soho Firewall 5.0.35a allows remote attackers to gain privileges with a correct password but an incorrect user name.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: soho_firewall
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0139.html, http://www.iss.net/security_center/static/9511.php, http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0139.html
CVE-2002-2061
Heap-based buffer overflow in Netscape 6.2.3 and Mozilla 1.0 and earlier allows remote attackers to crash client browsers and execute arbitrary code via a PNG image with large width and height values and an 8-bit or 16-bit alpha channel.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mozilla, navigator
References: http://bugzilla.mozilla.org/show_bug.cgi?id=157202, http://www.iss.net/security_center/static/9287.php, http://www.mandriva.com/security/advisories?name=MDKSA-2002:074
CVE-2002-2170
Working Resources Inc. BadBlue Enterprise Edition 1.7 through 1.74 attempts to restrict administrator actions to the IP address of the local host, but does not provide additional authentication, which allows remote attackers to execute arbitrary code via a web page containing an HTTP POST request that accesses the dir.hts page on the localhost and adds an entire hard drive to be shared.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: badblue
References: http://online.securityfocus.com/archive/1/283418, http://www.iss.net/security_center/static/9642.php, http://www.securityfocus.com/bid/5276
CVE-2002-1214
Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a certain PPTP packet with malformed control data.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_2000_terminal_services, windows_xp
References: http://online.securityfocus.com/archive/1/293146, http://www.iss.net/security_center/static/10199.php, http://www.securityfocus.com/bid/5807
CVE-2002-2359
Cross-site scripting (XSS) vulnerability in the FTP view feature in Mozilla 1.0 allows remote attackers to inject arbitrary web script or HTML via the title tag of an ftp URL.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: mozilla
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0060.html, http://bugzilla.mozilla.org/show_bug.cgi?id=154030, http://www.iss.net/security_center/static/9757.php
CWE: CWE-79
CVE-2002-1470
SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to port 8001, which causes the password to be logged in the world-readable sc_serv.log file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: shoutcast_server
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0017.html, http://www.iss.net/security_center/static/9775.php, http://www.securityfocus.com/bid/5414
CVE-2002-1204
Netscape Communicator 4.x allows attackers to use a link to steal a user's preferences, including potentially sensitive information such as URL history, e-mail address, and possibly the e-mail password, by redefining the user_pref() function and accessing the prefs.js file, which is stored in a directory with a predictable name.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: communicator
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0081.html, http://www.idefense.com/advisory/11.19.02c.txt, http://www.iss.net/security_center/static/10655.php
CVE-2002-0360
Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbitmap CGI program.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: solaris_answerbook2
References: http://marc.info/?l=bugtraq&m=102198846905064&w=2, http://marc.info/?l=vulnwatch&m=102194510509450&w=2, http://www.eSecurityOnline.com/advisories/eSO5063.asp
CVE-2002-0713
Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper (msnt_auth) when using denyusers or allowusers files, (2) via the gopher client, or (3) via the FTP server directory listing parser when HTML output is generated.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: squid
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-046.0.txt, http://marc.info/?l=bugtraq&m=102674543407606&w=2, http://rhn.redhat.com/errata/RHSA-2002-051.html
CVE-2002-1193
tkmail before 4.0beta9-8.1 allows local users to create or overwrite files as users via a symlink attack on temporary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: tkmail
References: http://www.debian.org/security/2002/dsa-172, http://www.iss.net/security_center/static/10307.php, http://www.securityfocus.com/bid/5911
CVE-2002-0748
LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request that ends in two newline characters, instead of the expected carriage return/newline combinations.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: labview
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0323.html, http://digital.ni.com/public.nsf/websearch/4C3F86E655E5389886256BA00064B22F?OpenDocument, http://www.iss.net/security_center/static/8919.php
CVE-2002-0522
ASP-Nuke RC2 and earlier allows remote attackers to bypass authentication and gain privileges by modifying the "pseudo" cookie.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: asp-nuke
References: http://online.securityfocus.com/archive/82/266705, http://www.asp-nuke.com/news.asp?date=20020412&cat=11, http://www.ifrance.com/kitetoua/tuto/ASPNuke.txt
CVE-2002-2064
isadmin.php in PhpWebGallery 1.0 allows remote attackers to gain administrative access via by setting the photo_login cookie to pseudo.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpwebgallery
References: http://seclists.org/lists/vuln-dev/2002/Apr/0270.html, http://www.ifrance.com/kitetoua/tuto/PWG.txt, http://www.securityfocus.com/bid/4622
CVE-2002-0499
The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: linux_kernel
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0074.html, http://www.cs.helsinki.fi/linux/linux-kernel/2002-13/0054.html, http://www.iss.net/security_center/static/8634.php
CVE-2002-1550
dump_smutil.sh in IBM AIX allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aix
References: http://archives.neohapsis.com/archives/aix/2002-q4/0002.html, http://www.securityfocus.com/bid/8802, http://archives.neohapsis.com/archives/aix/2002-q4/0002.html
CVE-2002-2417
acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to hide or misrepresent certain activity from log files and possibly gain privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: acftp
Related CWEs: CWE-287
Related CAPECs: CAPEC-151, CAPEC-94, CAPEC-593
MITRE ATT&CK Techniques: T1134, T1550.001, T1557
MITRE ATT&CK Tactics: T1550, T1505
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0088.html, http://securityreason.com/securityalert/3334, http://www.iss.net/security_center/static/10681.php
CWE: CWE-287
MITRE ATT&CK techniques: T1134, T1550.001, T1557, T1185, T1505.003, T1548, T1563, T1040
MITRE ATT&CK tactics: T1550, T1505
CVE-2002-1430
Unknown vulnerability in Sympoll 1.2 allows remote attackers to read arbitrary files when register_globals is enabled, possibly by modifying certain PHP variables through URL parameters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sympoll
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0401.html, http://www.iss.net/security_center/static/9723.php, http://www.ralusp.net/downloads/sympoll/changelog.txt
CVE-2002-0386
The administration module for Oracle Web Cache in Oracle9iAS (9i Application Suite) 9.0.2 allows remote attackers to cause a denial of service (crash) via (1) an HTTP GET request containing a ".." (dot dot) sequence, or (2) a malformed HTTP GET request with a chunked Transfer-Encoding with missing data.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: application_server
References: http://otn.oracle.com/deploy/security/pdf/2002alert43rev1.pdf, http://www.atstake.com/research/advisories/2002/a102802-1.txt, http://www.iss.net/security_center/static/10284.php
CVE-2002-2163
KvPoll 1.1 allows remote authenticated users to vote more than once by setting the "already_voted" cookie by various methods, including a direct call to clear_cookies.php.
CVSS v2.0 Score: 4.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N
Affected Products: kvpoll
References: http://www.ifrance.com/kitetoua/tuto/5holes5.txt, http://www.securityfocus.com/bid/4736, http://www.ifrance.com/kitetoua/tuto/5holes5.txt
CVE-2002-1835
The default configuration of Xerox DocuTech 6110 and DocuTech 6115 running Solaris 8.0 has a large number of unnecessary services enabled such as RPC and sprayd, which could allow remote attackers to obtain access to the device.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: docutech_6115, docutech_6110
References: http://online.securityfocus.com/archive/1/273029, http://totally.righteous.net/jedgar/overview_of_security.pdf, http://www.iss.net/security_center/static/9108.php
CVE-2002-0071
Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows attackers to cause a denial of service or execute arbitrary code via HTR requests with long variable names.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_information_server, internet_information_services
References: http://marc.info/?l=bugtraq&m=101854087828265&w=2, http://www.atstake.com/research/advisories/2002/a041002-1.txt, http://www.cert.org/advisories/CA-2002-09.html
CVE-2002-2011
Cross-site scripting (XSS) vulnerability in the fom CGI program (fom.cgi) in Faq-O-Matic 2.711 and 2.712 allows remote attackers to inject arbitrary web script or HTML via the file parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: faq-o-matic
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0287.html, http://www.iss.net/security_center/static/8906.php, http://www.securityfocus.com/bid/4565
CVE-2002-0199
Buffer overflow in admin.cgi for Nullsoft Shoutcast Server 1.8.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an argument with a large number of backslashes.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: shoutcast_server
References: http://marc.info/?l=bugtraq&m=101167484012724&w=2, http://www.securityfocus.com/bid/3934, http://marc.info/?l=bugtraq&m=101167484012724&w=2
CVE-2002-0563
The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including Dynamic Monitoring Services (1) dms0, (2) dms/DMSDump, (3) servlet/DMSDump, (4) servlet/Spy, (5) soap/servlet/Spy, and (6) dms/AggreSpy; and Oracle Java Process Manager (7) oprocmgr-status and (8) oprocmgr-service, which can be used to control Java processes.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: application_server_web_cache, application_server, oracle9i, oracle8i
Related CWEs: CWE-287
Related CAPECs: CAPEC-151, CAPEC-94, CAPEC-593
MITRE ATT&CK Techniques: T1134, T1550.001, T1557
MITRE ATT&CK Tactics: T1550, T1505
References: http://marc.info/?l=bugtraq&m=101301813117562&w=2, http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf, http://securitytracker.com/id?1009167
CWE: CWE-287
MITRE ATT&CK techniques: T1134, T1550.001, T1557, T1185, T1505.003, T1548, T1563, T1040
MITRE ATT&CK tactics: T1550, T1505
CVE-2002-1710
The attachment capability in Compose Mail in BasiliX Webmail 1.1.0 does not check whether the attachment was uploaded by the user or came from a HTTP POST, which could allow local users to steal sensitive information like a password file.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: basilix_webmail
References: http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00247.html, http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0117.html, http://www.securityfocus.com/bid/5062
CVE-2002-1179
Buffer overflow in the S/MIME Parsing capability in Microsoft Outlook Express 5.5 and 6.0 allows remote attackers to execute arbitrary code via a digitally signed email with a long "From" address, which triggers the overflow when the user views or previews the message.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: outlook_express
References: http://marc.info/?l=bugtraq&m=103435413105661&w=2, http://marc.info/?l=ntbugtraq&m=103429637822920&w=2, http://marc.info/?l=ntbugtraq&m=103429681123297&w=2
CVE-2002-0891
The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers to cause a denial of service (crash) via a long user name.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netscreen_screenos
References: http://online.securityfocus.com/archive/1/274240, http://www.iss.net/security_center/static/9186.php, http://www.netscreen.com/support/ns25_reboot.html
CVE-2002-2188
OpenBSD before 3.2 allows local users to cause a denial of service (kernel crash) via a call to getrlimit(2) with invalid arguments, possibly due to an integer signedness error.
CVSS v2.0 Score: 4.9 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
Affected Products: openbsd
References: ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/018_kernresource.patch, http://www.iss.net/security_center/static/10572.php, http://www.openbsd.org/errata30.html#kernresource
CVE-2002-0300
gnujsp 1.0.0 and 1.0.1 allows remote attackers to list directories, read source code of certain scripts, and bypass access restrictions by directly requesting the target file from the gnujsp servlet, which does not work around a limitation of JServ and does not process the requested file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: gnujsp
References: http://marc.info/?l=bugtraq&m=101415804625292&w=2, http://marc.info/?l=bugtraq&m=101422432123898&w=2, http://www.debian.org/security/2002/dsa-114
CVE-2002-2175
phpSquidPass before 0.2 uses an incomplete regular expression to find a matching username in its database, which allows remote authenticated attackers to effectively delete other usernames via a short username that matches the end of the targeted username.
CVSS v2.0 Score: 4.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Affected Products: phpsquidpass
References: http://marc.info/?l=bugtraq&m=102508071021631&w=2, http://sourceforge.net/forum/forum.php?forum_id=188359, http://www.iss.net/security_center/static/9417.php
CVE-2002-0592
AOL Instant Messenger (AIM) allows remote attackers to steal files that are being transferred to other clients by connecting to port 4443 (Direct Connection) or port 5190 (file transfer) before the intended user.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: instant_messenger
References: http://online.securityfocus.com/archive/1/269006, http://www.securityfocus.com/bid/4574, https://exchange.xforce.ibmcloud.com/vulnerabilities/8931
CVE-2002-0949
Telindus 1100 series ADSL router allows remote attackers to gain privileges to the device via a certain packet to UDP port 9833, which generates a reply that includes the router's password and other sensitive information in cleartext.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: adsl_router
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0028.html, http://www.iss.net/security_center/static/9277.php, http://www.securityfocus.com/bid/4946
CVE-2002-1394
Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tomcat
References: http://issues.apache.org/bugzilla/show_bug.cgi?id=13365, http://marc.info/?l=bugtraq&m=103470282514938&w=2, http://marc.info/?l=tomcat-dev&m=103417249325526&w=2
CVE-2002-1768
Cisco IOS 11.1 through 12.2, when HSRP support is not enabled, allows remote attackers to cause a denial of service (CPU consumption) via randomly sized UDP packets to the Hot Standby Routing Protocol (HSRP) port 1985.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ios
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0027.html, http://archives.neohapsis.com/archives/bugtraq/2002-06/0050.html, http://www.securityfocus.com/bid/4948
CVE-2002-0186
Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data queries with a long content-type parameter, aka "Unchecked Buffer in SQLXML ISAPI Extension."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sql_server
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0100.html, http://marc.info/?l=bugtraq&m=102397345410856&w=2, http://www.iss.net/security_center/static/9328.php
CVE-2002-1764
acroread in Adobe Acrobat Reader 4.05 on Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: acrobat_reader
References: http://online.securityfocus.com/archive/1/277932, http://www.securityfocus.com/bid/5068, https://exchange.xforce.ibmcloud.com/vulnerabilities/9407
CVE-2002-1091
Netscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and execute arbitrary code via a GIF image with a zero width.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mozilla, navigator, opera_web_browser
References: http://bugzilla.mozilla.org/show_bug.cgi?id=157989, http://crash.ihug.co.nz/~Sneuro/zerogif/, http://marc.info/?l=bugtraq&m=103134051120770&w=2
CVE-2002-1276
An incomplete fix for a cross-site scripting (XSS) vulnerability in SquirrelMail 1.2.8 calls the strip_tags function on the PHP_SELF value but does not save the result back to that variable, leaving it open to cross-site scripting attacks.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Affected Products: squirrelmail
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=167471, http://secunia.com/advisories/8220, http://www.debian.org/security/2002/dsa-191
CVE-2002-1896
Buffer overflow in Alsaplayer 0.99.71, when installed setuid root, allows local users to execute arbitrary code via a long (1) -f or (2) -o command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: alsaplayer
References: http://alsaplayer.org/changelog.php3, http://cvs.sourceforge.net/viewcvs.py/alsaplayer/alsaplayer/app/Main.cpp.diff?r1=1.66&r2=1.67, http://lists.grok.org.uk/pipermail/full-disclosure/2002-September/001730.html
CVE-2002-1124
Multiple buffer overflows in purity 1-16 allow local users to gain privileges and modify high scores tables.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: purity
References: http://www.debian.org/security/2002/dsa-166, http://www.iss.net/security_center/static/10100.php, http://www.securityfocus.com/bid/5702
CVE-2002-1129
Buffer overflow in dxterm allows local users to execute arbitrary code via a long -xrm argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: tru64, osf_1
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0122.html, http://marc.info/?l=bugtraq&m=103248659816294&w=2, http://www.iss.net/security_center/static/10148.php
CVE-2002-0266
Thunderstone Texis CGI script allows remote attackers to obtain the full path of the web root via a request for a nonexistent file, which generates an error message that includes the full pathname.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: texis
References: http://marc.info/?l=bugtraq&m=101301228031165&w=2, http://marc.info/?l=bugtraq&m=101346478229431&w=2, http://www.iss.net/security_center/static/8103.php
CVE-2002-0741
psyBNC 2.3 allows remote attackers to cause a denial of service (CPU consumption and resource exhaustion) by sending a PASS command with a long password argument and quickly killing the connection, which is not properly terminated by psyBNC.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: psybnc
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0322.html, http://online.securityfocus.com/archive/1/269131, http://www.iss.net/security_center/static/8912.php
CVE-2002-1983
The timer implementation in QNX RTOS 6.1.0 allows local users to cause a denial of service (hang) and possibly execute arbitrary code by creating multiple timers with a 1-ms tick.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: rtos
References: http://online.securityfocus.com/archive/1/298689, http://www.securityfocus.com/bid/6114, https://exchange.xforce.ibmcloud.com/vulnerabilities/10550
CVE-2002-1517
fsr_efs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink attack, possibly via the .fsrlast file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: freeware, irix
References: ftp://patches.sgi.com/support/free/security/advisories/20020903-01-P, ftp://patches.sgi.com/support/free/security/advisories/20020903-02-P, ftp://patches.sgi.com/support/free/security/advisories/20021103-01-P
CVE-2002-0681
Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web users via script in a URL that generates a "404 not found" message, which does not quote the script.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: goahead_webserver
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0013.html, http://freecode.com/projects/embedthis-goahead-webserver/releases/343539, http://marc.info/?l=bugtraq&m=102631742711795&w=2
CVE-2002-1782
The default configuration of University of Washington IMAP daemon (wu-imapd), when running on a system that does not allow shell access, allows a local user with a valid IMAP account to read arbitrary files as that user.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: uw-imap
References: http://online.securityfocus.com/archive/1/275127, http://www.security.nnov.ru/advisories/courier.asp, http://www.securityfocus.com/bid/4909
CVE-2002-2224
Buffer overflow in PGPFreeware 7.03 running on Windows NT 4.0 SP6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) large number of payloads, or (3) a long payload.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: pgp_freeware
References: http://www.kb.cert.org/vuls/id/287771, http://www.kb.cert.org/vuls/id/AAMN-5A5RXM, http://www.securityfocus.com/bid/5449
CVE-2002-2103
Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double-reverse lookup fails, which allows remote attackers to hide the original source of activities.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: http_server
References: http://www.apache.org/dist/httpd/CHANGES_1.3, http://www.iss.net/security_center/static/8629.php, http://www.securityfocus.com/bid/4358
CVE-2002-0496
The HTTP server for SouthWest Talker server 1.0.0 allows remote attackers to cause a denial of service (server crash) via a malformed URL to port 5002.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: southwest
References: http://www.iss.net/security_center/static/8626.php, http://www.securityfocus.com/archive/1/264168, http://www.securityfocus.com/bid/4362
CVE-2002-0637
InterScan VirusWall 3.52 build 1462 allows remote attackers to bypass virus protection via e-mail messages with headers that violate RFC specifications by having (or missing) space characters in unexpected places (aka "space gap"), such as (1) Content-Type :", (2) "Content-Transfer-Encoding :", (3) no space before a boundary declaration, or (4) "boundary= ", which is processed by Outlook Express.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: interscan_viruswall
References: http://www.iss.net/security_center/static/9464.php, http://www.securiteam.com/securitynews/5KP000A7QE.html, http://www.iss.net/security_center/static/9464.php
CVE-2002-1288
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to determine the current directory of the Internet Explorer process via the getAbsolutePath() method in a File() call.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: java_virtual_machine
References: http://marc.info/?l=bugtraq&m=103682630823080&w=2, http://marc.info/?l=ntbugtraq&m=103684360031565&w=2, http://www.securityfocus.com/bid/6139
CVE-2002-0010
Bugzilla before 2.14.1 allows remote attackers to inject arbitrary SQL code and create files or gain privileges via (1) the sql parameter in buglist.cgi, (2) invalid field names from the "boolean chart" query in buglist.cgi, (3) the mybugslink parameter in userprefs.cgi, (4) a malformed bug ID in the buglist parameter in long_list.cgi, and (5) the value parameter in editusers.cgi, which allows groupset privileges to be modified by attackers with blessgroupset privileges.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bugzilla
References: http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html, http://archives.neohapsis.com/archives/bugtraq/2002-01/0052.html, http://bugzilla.mozilla.org/show_bug.cgi?id=108812