DuyTa/cve-kgrag-db huggingface dataset:
CVE-2002-0175
libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: libsafe
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0070.html, http://online.securityfocus.com/archive/1/263121, http://www.iss.net/security_center/static/8593.php
CVE-2002-2360
The RPC module in Webmin 0.21 through 0.99, when installed without root or admin privileges, allows remote attackers to read and write to arbitrary files and execute arbitrary commands via remote_foreign_require and remote_foreign_call requests.
CVSS v2.0 Score: 9.3 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected Products: webmin
Related CWEs: CWE-264
References: http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-08/0403.html, http://www.iss.net/security_center/static/9983.php, http://www.securiteam.com/unixfocus/5CP0R1P80G.html
CWE: CWE-264
CVE-2002-1502
Symbolic link vulnerability in xbreaky before 0.5.5 allows local users to overwrite arbitrary files via a symlink from the user's .breakyhighscores file to the target file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: xbreaky
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0131.html, http://www.iss.net/security_center/static/10078.php, http://www.securityfocus.com/bid/5700
CVE-2002-0389
Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allows local users to read private mailing list archives.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mailman
References: http://marc.info/?l=bugtraq&m=101902003314968&w=2, http://rhn.redhat.com/errata/RHSA-2015-1417.html, http://sourceforge.net/tracker/?func=detail&atid=100103&aid=474616&group_id=103
CVE-2002-0959
Cross-site scripting vulnerability in Splatt Forum 3.0 allows remote attackers to execute arbitrary script as other users via an [img] tag with a closing quote followed by the script.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: splatt_forum
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0091.html, http://online.securityfocus.com/archive/1/275744, http://www.iss.net/security_center/static/9279.php
CVE-2002-0931
Cross-site scripting vulnerabilities in MyHelpDesk 20020509, and possibly other versions, allows remote attackers to execute script as other users via a (1) Title or (2) Description when a new ticket is created by a support assistant, via the "id" parameter to the index.php script with the (3) tickettime, (4) ticketfiles, or (5) updateticketlog operations, or (6) via the update section when a ticket is edited.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: myhelpdesk
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0057.html, http://www.iss.net/security_center/static/9319.php, http://www.iss.net/security_center/static/9320.php
CVE-2002-1829
Cross-site scripting (XSS) vulnerability in codeparse.php in Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to inject arbitrary web script or HTML via (1) myhome.php, (2) an onerror attribute in an IMG tag (a variant of CVE-2002-0330), or (3) a glow tag.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: openbb
References: http://marc.info/?l=vuln-dev&m=102221487407632&w=2, http://www.securityfocus.com/bid/4819, https://exchange.xforce.ibmcloud.com/vulnerabilities/9160
CVE-2002-0723
Microsoft Internet Explorer 5.5 and 6.0 does not properly verify the domain of a frame within a browser window, which allows remote attackers to read client files or invoke executable objects via the Object tag, aka "Cross Domain Verification in Object Tag."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://www.iss.net/security_center/static/9537.php, http://www.securityfocus.com/bid/5196, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-047
CVE-2002-0601
ISS RealSecure Network Sensor 5.x through 6.5 allows remote attackers to cause a denial of service (crash) via malformed DHCP packets that cause RealSecure to dereference a null pointer.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: realsecure_network_sensor
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0420.html, http://www.iss.net/security_center/alerts/advise116.php, http://www.iss.net/security_center/static/8961.php
CVE-2002-0758
ifup-dhcp script in the sysconfig package for SuSE 8.0 allows remote attackers to execute arbitrary commands via spoofed DHCP responses, which are stored and executed in a file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: suse_linux
References: http://www.iss.net/security_center/static/9040.php, http://www.novell.com/linux/security/advisories/2002_016_sysconfig_txt.html, http://www.securityfocus.com/bid/4695
CVE-2002-2033
faqmanager.cgi in FAQManager 2.2.5 and earlier allows remote attackers to read arbitrary files by specifying the filename in the toc parameter with a trailing null character (%00).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: faqmanager.cgi
References: http://archives.neohapsis.com/archives/bugtraq/2002-01/0065.html, http://www.iss.net/security_center/static/7833.php, http://www.securityfocus.com/bid/3810
CVE-2002-1775
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypass the initial virus scan and cause NAV to prematurely stop scanning by using a non-RFC compliant MIME header.  NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the AutoProtect feature would detect the virus before it is executed
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: norton_antivirus
References: http://online.securityfocus.com/archive/1/260271, http://online.securityfocus.com/archive/1/260678, http://www.securityfocus.com/bid/4243
CVE-2002-1444
The Google toolbar 1.1.60, when running on Internet Explorer 5.5 and 6.0, allows remote attackers to cause a denial of service (crash with an exception in oleaut32.dll) via malicious HTML, possibly related to small width and height parameters or an incorrect call to the Google.Search() function.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: toolbar, internet_explorer
References: http://online.securityfocus.com/archive/1/287498, http://www.iss.net/security_center/static/9883.php, http://www.securityfocus.com/bid/5477
CVE-2002-0903
register.php for WoltLab Burning Board (wbboard) 1.1.1 uses a small number of random values for the "code" parameter that is provided to action.php to approve a new registration, along with predictable new user ID's, which allows remote attackers to hijack new user accounts via a brute force attack on the new user ID and the code value.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: burning_board
References: http://online.securityfocus.com/archive/1/274269, http://www.iss.net/security_center/static/9177.php, http://www.securityfocus.com/bid/4859
CVE-2002-0317
Gator ActiveX component (IEGator.dll) 3.0.6.1 allows remote web sites to install arbitrary software by specifying a Trojan Gator installation file (setup.ex_) in the src parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gator
References: http://marc.info/?l=bugtraq&m=101438671922874&w=2, http://www.gator.com/update/, http://www.iss.net/security_center/static/8266.php
CVE-2002-1844
Microsoft Windows Media Player (WMP) 6.3, when installed on Solaris, installs executables with world-writable permissions, which allows local users to delete or modify the executables to gain privileges.
CVSS v3.1 Score: 7.8 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_media_player, solaris
Related CWEs: CWE-276
Related CAPECs: CAPEC-127, CAPEC-1, CAPEC-81
MITRE ATT&CK Techniques: T1083, T1574.010
MITRE ATT&CK Tactics: T1574
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0260.html, http://www.iss.net/security_center/static/10398.php, http://www.securityfocus.com/bid/6003
CWE: CWE-276
MITRE ATT&CK techniques: T1083, T1574.010
MITRE ATT&CK tactics: T1574
CVE-2002-1238
Peter Sandvik's Simple Web Server 0.5.1 and earlier allows remote attackers to bypass access restrictions for files via an HTTP request with a sequence of multiple / (slash) characters such as http://www.example.com///file/.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: simple_web_server
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0065.html, http://marc.info/?l=bugtraq&m=103679016031857&w=2, http://www.idefense.com/advisory/11.08.02a.txt
CVE-2002-2029
PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and possibly execute arbitrary programs via an HTTP request for php.exe with a filename in the query string.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: http_server
References: http://www.iss.net/security_center/static/7815.php, http://www.securiteam.com/windowsntfocus/5ZP030U60U.html, http://www.securityfocus.com/bid/3786
CVE-2002-0084
Buffer overflow in the fscache_setup function of cachefsd in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long mount argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00416.html, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309, http://www.esecurityonline.com/advisories/eSO4198.asp
CVE-2002-0767
simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a child process, which allows the child process to cause simpleinit to execute arbitrary programs with root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: simpleinit
References: http://online.securityfocus.com/archive/1/276739, http://www.iss.net/security_center/static/9357.php, http://www.securityfocus.com/bid/5001
CVE-2002-2069
PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: personal_privacy
Related CWEs: CWE-459
References: http://www.ciac.org/ciac/bulletins/m-034.shtml, http://www.iss.net/security_center/static/7953.php, http://www.securityfocus.com/archive/1/251565
CWE: CWE-459
CVE-2002-0264
PowerFTP Personal FTP Server 2.03 through 2.10 stores sensitive account information in plaintext in the ftpserver.ini file, which allows attackers with access to the file to gain privileges.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: powerftp
References: http://marc.info/?l=bugtraq&m=101361745222207&w=2, http://www.iss.net/security_center/static/8183.php, http://www.securityfocus.com/bid/4074
CVE-2002-0118
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ultimate_bulletin_board
References: http://online.securityfocus.com/archive/1/249031, http://www.iss.net/security_center/static/7838.php, http://www.securityfocus.com/bid/3829
CVE-2002-0109
Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via an SNMP query for the default community string "public," which causes the router to change its configuration and send SNMP trap information back to the system that initiated the query.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Affected Products: befn2ps4, befsr81, befsr41
References: http://marc.info/?l=bugtraq&m=101039288111680&w=2, http://www.iss.net/security_center/static/7827.php, http://www.securityfocus.com/bid/3795
CVE-2002-0856
SQL*NET listener for Oracle Net Oracle9i 9.0.x and 9.2 allows remote attackers to cause a denial of service (crash) via certain debug requests that are not properly handled by the debugging feature.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: database_server, oracle9i
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0072.html, http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20941, http://otn.oracle.com/deploy/security/pdf/2002alert38rev1.pdf
CVE-2002-1656
X-News (x_news) 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the password, e.g. via sniffing or the users.txt data file, and providing it in a cookie.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: x-news
References: http://securitytracker.com/id?1003828, http://www.ifrance.com/kitetoua/tuto/x_holes.txt, http://www.kb.cert.org/vuls/id/162723
CVE-2002-0344
Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers to impersonate the LiveUpdate server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: liveupdate
References: http://marc.info/?l=bugtraq&m=101466781122312&w=2, http://marc.info/?l=bugtraq&m=101496301307285&w=2, http://www.iss.net/security_center/static/8282.php
CVE-2002-0193
Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the first variant of the "Content Disposition" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://www.securityfocus.com/bid/4752, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023, https://exchange.xforce.ibmcloud.com/vulnerabilities/9085
CVE-2002-1408
Unknown vulnerability or vulnerabilities in HP OpenView EMANATE 14.2 snmpModules allow the SNMP read-write community name to be exposed, related to (1) "'read-only' community access," and/or (2) an easily guessable community name.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vvos, openview_emanate_snmp_agent
References: http://online.securityfocus.com/advisories/4360, http://www.iss.net/security_center/static/9814.php, http://www.securityfocus.com/bid/5428
CVE-2002-1763
The dtscreen Sun Solaris 8 CDE screensaver crashes when the "Shift" and "Return" keys are pressed repeatedly and quickly, which allows local users to access the current session.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos
References: http://online.securityfocus.com/archive/1/277316, http://online.securityfocus.com/archive/1/277335, http://online.securityfocus.com/archive/1/277724
CVE-2002-1819
Directory traversal vulnerability in TinyHTTPD 0.1 .0 allows remote attackers to read or execute arbitrary files via a ".." (dot dot) in the URL.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: tinyhttpd
References: http://online.securityfocus.com/archive/1/299287, http://www.iss.net/security_center/static/10596.php, http://www.securityfocus.com/bid/6158
CVE-2002-1939
FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: flashfxp
References: http://online.securityfocus.com/archive/1/296658, http://www.iss.net/security_center/static/10445.php, http://www.securityfocus.com/bid/6032
CVE-2002-2242
The Apple Package Manager in KisMAC 0.02a and earlier modifies file permissions of sensitive files after installation, which could allow attackers to conduct unauthorized activities on those files.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: kismac
Related CWEs: CWE-264
References: http://securitytracker.com/id?1005764, http://www.securityfocus.com/bid/6336, https://exchange.xforce.ibmcloud.com/vulnerabilities/10813
CWE: CWE-264
CVE-2002-0805
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, (1) creates new directories with world-writable permissions, and (2) creates the params file with world-writable permissions, which allows local users to modify the files and execute code.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bugzilla
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html, http://bugzilla.mozilla.org/show_bug.cgi?id=134575, http://www.iss.net/security_center/static/9302.php
CVE-2002-2101
Microsoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when scripting is disabled, via an "about:" or "javascript:" URI in the href attribute of an "a" tag.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: outlook
References: http://archives.neohapsis.com/archives/bugtraq/2002-03/0267.html, http://www.iss.net/security_center/static/8613.php, http://www.securityfocus.com/bid/4337
CVE-2002-1198
Bugzilla 2.16.x before 2.16.1 does not properly filter apostrophes from an email address during account creation, which allows remote attackers to execute arbitrary SQL via a SQL injection attack.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bugzilla
References: http://bugzilla.mozilla.org/show_bug.cgi?id=165221, http://marc.info/?l=bugtraq&m=103349804226566&w=2, http://www.iss.net/security_center/static/10235.php
CVE-2002-0005
Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions allows remote attackers to execute arbitrary code via a long argument in a game request (AddGame).
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: instant_messenger
References: http://marc.info/?l=ntbugtraq&m=100998295512885&w=2, http://www.kb.cert.org/vuls/id/907819, http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=198
CVE-2002-0493
Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, which could allow attackers to bypass intended restrictions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tomcat
Related CWEs: CWE-254
References: http://marc.info/?l=bugtraq&m=101709002410365&w=2, http://www.apachelabs.org/tomcat-dev/200108.mbox/%3C20010810000819.6350.qmail%40icarus.apache.org%3E, http://www.iss.net/security_center/static/9863.php
CWE: CWE-254
CVE-2002-1563
stunnel 4.0.3 and earlier allows attackers to cause a denial of service (crash) via SIGCHLD signal handler race conditions that cause an inconsistency in the child counter.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:N/A:P
Affected Products: stunnel
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000736, http://marc.info/?l=bugtraq&m=104247606910598, http://marc.info/?l=bugtraq&m=106029168514511&w=2
CVE-2002-2277
SQL injection vulnerability in mod_search/index.php in PortailPHP 0.99 allows remote attackers to execute arbitrary SQL commands via the (1) $rech, (2) $BD_Tab_docs, (3) $BD_Tab_file, (4) $BD_Tab_liens, (5) $BD_Tab_faq, or (6) $chemin variables.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: portail_web_php
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0359.html, http://www.securityfocus.com/bid/6273, https://exchange.xforce.ibmcloud.com/vulnerabilities/10735
CWE: CWE-89
CVE-2002-1679
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 2.2.0 allows remote attackers to execute arbitrary script as other users by injecting script into a bulletin board message.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: vbulletin
References: http://online.securityfocus.com/archive/1/253365, http://online.securityfocus.com/archive/1/253371, http://www.securityfocus.com/bid/4008
CVE-2002-1652
Buffer overflow in cgicso.c for cgiemail 1.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long query parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cgiemail
References: http://securitytracker.com/id?1002395, http://www.kb.cert.org/vuls/id/185251, http://www.securiteam.com/exploits/5TP0W005FE.html
CVE-2002-1157
Cross-site scripting vulnerability in the mod_ssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wildcard DNS is enabled, allows remote attackers to execute script as other web site visitors, via the server name in an HTTPS response on the SSL port, which is used in a self-referencing URL, a different vulnerability than CAN-2002-0840.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mod_ssl
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0374.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000541, http://online.securityfocus.com/archive/1/296753
CVE-2002-1473
Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 (11i) allow local users to cause a denial of service and possibly execute arbitrary code.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: http://archives.neohapsis.com/archives/hp/2002-q3/0064.html, http://www.iss.net/security_center/static/9992.php, http://archives.neohapsis.com/archives/hp/2002-q3/0064.html
CVE-2002-1139
The Compressed Folders feature in Microsoft Windows 98 with Plus! Pack, Windows Me, and Windows XP does not properly check the destination folder during the decompression of ZIP files, which allows attackers to place an executable file in a known location on a user's system, aka "Incorrect Target Path for Zipped File Decompression."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: windows_me, windows_xp, windows_98_plus_pack
References: http://www.iss.net/security_center/static/10252.php, http://www.securityfocus.com/bid/5876, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-054
CVE-2002-0859
Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sql_server, jet
References: http://marc.info/?l=bugtraq&m=102450188620081&w=2, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ282010, http://www.iss.net/security_center/static/9375.php
CVE-2002-2120
Multiple buffer overflows in QNX RTOS 4.25 may allow attackers to execute arbitrary code via long filename arguments to (1) Watcom or (2) int10.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: rtos
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0292.html, http://archives.neohapsis.com/archives/bugtraq/2002-05/0293.html, http://www.iss.net/security_center/static/9235.php
CVE-2002-0839
The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1 signal to any process as root, resulting in a denial of service (process kill) or possibly other behaviors that would not normally be allowed, by modifying the parent[].pid and parent[].last_rtime segments in the scoreboard.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, http_server
References: ftp://patches.sgi.com/support/free/security/advisories/20021105-01-I, http://archives.neohapsis.com/archives/bugtraq/2002-10/0195.html, http://archives.neohapsis.com/archives/bugtraq/2002-10/0254.html
CVE-2002-2228
MailScanner before 4.0 5-1 and before 3.2 6-1 allows remote attackers to bypass protection via attachments with a filename with (1) extra leading spaces, (2) extra trailing spaces, or (3) alternate character encodings that cannot be processed by MailScanner.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: mailscanner
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://www.iss.net/security_center/static/10609.php, http://www.securityfocus.com/bid/6148, http://www.iss.net/security_center/static/10609.php
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2002-1678
Cross-site scripting (XSS) vulnerability in memberlist.php in Jelsoft vBulletin 2.0 rc 2 through 2.2.4 allows remote attackers to steal authentication credentials by injecting script into $letterbits.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Affected Products: vbulletin
References: http://online.securityfocus.com/archive/1/263609, http://online.securityfocus.com/archive/1/264023/2002-11-01/2002-11-07/2, http://www.securityfocus.com/bid/4349
CVE-2002-2072
java.security.AccessController in Sun Java Virtual Machine (JVM) in JRE 1.2.2 and 1.3.1 allows remote attackers to cause a denial of service (JVM crash) via a Java program that calls the doPrivileged method with a null argument.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: jre
References: http://ohhara.sarang.net/security/jvmcrash.txt, http://securitytracker.com/id?1003418, http://www.iss.net/security_center/static/8042.php
CVE-2002-0568
Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information including usernames and passwords by requesting (1) XSQLConfig.xml or (2) soapConfig.xml through a virtual directory.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: oracle8i, application_server, oracle9i
References: http://marc.info/?l=bugtraq&m=101301813117562&w=2, http://www.cert.org/advisories/CA-2002-08.html, http://www.kb.cert.org/vuls/id/476619
CVE-2002-2146
cgitest.exe in Savant Web Server 3.1 and earlier allows remote attackers to cause a denial of service (crash) via a long HTTP request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: savant_webserver
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0151.html, http://www.iss.net/security_center/static/10102.php, http://www.securityfocus.com/bid/5706
CVE-2002-1248
Northern Solutions Xeneo Web Server 2.1.0.0, 2.0.759.6, and other versions before 2.1.5 allows remote attackers to cause a denial of service (crash) via a GET request for a "%" URI.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: xeneo_web_server
References: http://marc.info/?l=bugtraq&m=103642597302308&w=2, http://www.idefense.com/advisory/11.04.02b.txt, http://www.iss.net/security_center/static/10534.php
CVE-2002-2204
The default --checksig setting in RPM Package Manager 4.0.4 checks that a package's signature is valid without listing who signed it, which can allow remote attackers to make it appear that a malicious package comes from a trusted source.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: redhat_package_manager
References: http://lists.netsys.com/pipermail/full-disclosure/2002-August/001167.html, http://www.iss.net/security_center/static/10011.php, http://www.securityfocus.com/bid/5594
CVE-2002-0934
Directory traversal vulnerability in Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) allows remote attackers to read or modify arbitrary files via an illegal character in the middle of a .. (dot dot) sequence in the parameters (1) _browser_out or (2) _out_file.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: alienform2
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0068.html, http://www.iss.net/security_center/static/9325.php, http://www.securityfocus.com/bid/4983
CVE-2002-0896
The throttle capability in Swatch may fail to report certain events if (1) the same type of event occurs after the throttle period, or (2) when multiple events matching the same "watchfor" expression do not occur after the throttle period, which could allow attackers to avoid detection.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: swatch
References: http://online.securityfocus.com/archive/1/272582, http://www.iss.net/security_center/static/9100.php, http://www.securityfocus.com/bid/4746
CVE-2002-0528
Watchguard SOHO firewall 5.0.35 unpredictably disables certain IP restrictions for customized services that were set before the administrator upgrades to 5.0.35, which could allow remote attackers to bypass the intended access control rules.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: soho_firewall
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0009.html, http://online.securityfocus.com/archive/1/266948, http://www.iss.net/security_center/static/8814.php
CVE-2002-0021
Network Product Identification (PID) Checker in Microsoft Office v. X for Mac allows remote attackers to cause a denial of service (crash) via a malformed product announcement.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: office
References: http://www.osvdb.org/2041, http://www.securityfocus.com/bid/4045, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-002
CVE-2002-1919
SQL injection vulnerability in shopadmin.asp in VP-ASP 4.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password fields.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vp-asp
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0233.html, http://archives.neohapsis.com/archives/bugtraq/2002-06/0061.html, http://www.securityfocus.com/bid/4861
CVE-2002-1602
Buffer overflow in the Braille module for GNU screen 3.9.11, when HAVE_BRAILLE is defined, allows local users to execute arbitrary code.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: screen
References: http://www.kb.cert.org/vuls/id/524227, http://www.securityfocus.com/archive/1/268998, http://www.securityfocus.com/bid/4578
CVE-2002-1040
Unknown vulnerability in the WebSecure (DFSWeb) configuration utilities in AIX 4.x, possibly related to relative pathnames.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: aix
References: http://archives.neohapsis.com/archives/aix/2002-q3/0000.html, http://archives.neohapsis.com/archives/aix/2002-q3/0000.html
CVE-2002-0206
index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by specifying a URL to the malicious code in the file parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php-nuke
References: http://marc.info/?l=bugtraq&m=101121913914205&w=2, http://www.kb.cert.org/vuls/id/221683, http://www.securityfocus.com/bid/3889
CVE-2002-1694
Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to modify the log file contents while IIS is running.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: internet_information_server, internet_information_services
References: http://online.securityfocus.com/archive/1/250591, http://www.securityfocus.com/bid/3888, https://exchange.xforce.ibmcloud.com/vulnerabilities/7919
CVE-2002-2028
The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when a valid password is provided, which makes it easier for users with physical access to conduct brute force password guessing.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_2000, windows_nt, windows_xp
References: http://cert.uni-stuttgart.de/archive/bugtraq/2002/01/msg00278.html, http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq188700, http://www.heysoft.de/nt/lbh.htm
CVE-2002-0594
Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet (CSS) page that causes an HTTP redirect.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: galeon_browser, mozilla, navigator
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000490, http://online.securityfocus.com/archive/1/270249, http://www.iss.net/security_center/static/8977.php
CVE-2002-1776
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document.  NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the Office plug-in would detect the virus before it is executed
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: norton_antivirus
References: http://online.securityfocus.com/archive/1/260271, http://online.securityfocus.com/archive/1/260678, http://www.securityfocus.com/bid/4245
CVE-2002-2439
Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts.
CVSS v3.1 Score: 7.8 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gcc
Related CWEs: CWE-190
Related CAPECs: CAPEC-92
References: https://access.redhat.com/security/cve/cve-2002-2439, https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2002-2439, https://gcc.gnu.org/bugzilla/show_bug.cgi?id=19351
CWE: CWE-190
CVE-2002-2150
Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as (1) TCP SYN flood, (2) UDP flood, or (3) Crikey CRC Flood, which causes the firewall to refuse any new connections.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netscreen_screenos
References: http://www.iss.net/security_center/static/10449.php, http://www.kb.cert.org/vuls/id/539363, http://www.securityfocus.com/bid/6023
CVE-2002-1104
Cisco Virtual Private Network (VPN) Client software 2.x.x and 3.x before 3.0.5 allows remote attackers to cause a denial of service (crash) via TCP packets with source and destination ports of 137 (NETBIOS).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: vpn_client
References: http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml, http://www.securityfocus.com/bid/5649, https://exchange.xforce.ibmcloud.com/vulnerabilities/10042
CVE-2002-1913
phptonuke.php in myPHPNuke 1.8.8 allows remote attackers to read arbitrary files via a full pathname in the filnavn variable.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: myphpnuke
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0225.html, http://www.iss.net/security_center/static/10396.php, http://www.securityfocus.com/bid/5982
CVE-2002-1431
Belkin F5D5230-4 4-Port Cable/DSL Gateway Router 1.20.000 modifies the source IP address of internal packets to that of the router's external interface when forwarding a request from an internal host to an internal web server, which allows remote attackers to hide which host is being used to access the web server.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: f5d5230-4_4-port_cable_dsl_gateway_router
References: http://online.securityfocus.com/archive/1/276256, http://www.iss.net/security_center/static/9324.php, http://www.securityfocus.com/bid/4982
CVE-2002-1839
Trend Micro InterScan VirusWall for Windows NT 3.52 does not record the sender's IP address in the headers for a mail message when it is passed from VirusWall to the MTA, which allows remote attackers to hide the origin of the message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: interscan_viruswall_for_windows_nt
References: http://online.securityfocus.com/archive/1/274144, http://www.iss.net/security_center/static/9168.php, http://www.securityfocus.com/bid/4830
CVE-2002-2282
McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for particular DLLs from the user's home directory, even when browsing the local hard drive, which allows local users to run arbitrary code via malicious versions of those DLLs.
CVSS v2.0 Score: 6.9 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Affected Products: virusscan
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0007.html, http://www.securityfocus.com/bid/6288, https://exchange.xforce.ibmcloud.com/vulnerabilities/10741
CVE-2002-1216
GNU tar 1.13.19 and other versions before 1.13.25 allows remote attackers to overwrite arbitrary files via a symlink attack, as the result of a modification that effectively disabled the security check.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: tar
References: http://marc.info/?l=bugtraq&m=103419290219680&w=2, http://www.iss.net/security_center/static/10224.php, http://www.mandriva.com/security/advisories?name=MDKSA-2006:219
CVE-2002-1210
Qualcomm Eudora 5.1.1, 5.2, and possibly other versions stores email attachments in a predictable location, which allows remote attackers to read arbitrary files via a link that loads an attachment with malicious script into a frame, which then executes the script in the local browser context.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: eudora
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0079.html, http://www.idefense.com/advisory/11.19.02b.txt, http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0079.html
CVE-2002-1695
Norton Internet Security 2001 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to modify the log file contents while Norton Internet Security is running.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: internet_information_server, norton_internet_security, internet_information_services
References: http://online.securityfocus.com/archive/1/250591, http://www.securityfocus.com/bid/3888, https://exchange.xforce.ibmcloud.com/vulnerabilities/7919
CVE-2002-1725
phpimageview.php in PHPImageView 1.0 allows remote attackers to obtain sensitive information via the pw=show option, which invokes the phpinfo function.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpimageview
References: http://online.securityfocus.com/archive/82/270970/2002-12-21/2002-12-27/2, http://www.ifrance.com/kitetoua/tuto/5holes4.txt, http://www.securityfocus.com/bid/4668
CVE-2002-1643
Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a long Transport field in a SETUP RTSP request, (2) a DESCRIBE RTSP request with a long URL argument, or (3) two simultaneous HTTP GET requests with long arguments.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: helix_universal_server
References: http://www.kb.cert.org/vuls/id/974689, http://www.nextgenss.com/advisories/realhelix.txt, http://www.securityfocus.com/archive/1/304203
CVE-2002-0753
Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: web\+_server
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0210.html, http://www.iss.net/security_center/static/8861.php, http://www.securityfocus.com/bid/4530
CVE-2002-0130
Buffer overflow in efax 0.9 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -x argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: efax
References: http://marc.info/?l=vuln-dev&m=101133782204289&w=2, http://seclists.org/bugtraq/2002/Jan/0212.html, http://www.iss.net/security_center/static/7920.php
CVE-2002-0424
efingerd 1.61 and earlier, when configured without the -u option, executes .efingerd files as the efingerd user (typically "nobody"), which allows local users to gain privileges as the efingerd user by modifying their own .efingerd file and running finger.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: efingerd
References: http://archives.neohapsis.com/archives/bugtraq/2002-03/0050.html, http://melkor.dnp.fmph.uniba.sk/~garabik/efingerd/efingerd_1.6.2.tar.gz, http://www.iss.net/security_center/static/8381.php
CVE-2002-0417
Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the ALTERNATE_TEMPLATES parameter for various mmstdo*.cgi programs.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mailman_webmail
References: http://online.securityfocus.com/archive/1/259730, http://www.endymion.com/products/mailman/history.htm, http://www.iss.net/security_center/static/8357.php
CVE-2002-1856
HP Application Server 8.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF.").
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: application_server
References: http://online.securityfocus.com/archive/1/279582, http://www.iss.net/security_center/static/9446.php, http://www.securityfocus.com/bid/5119
CVE-2002-1620
Unknown vulnerability in IBM AIX Parallel Systems Support Programs (PSSP) 3.1.1, 3.2, and 3.4 allows remote attackers to read arbitrary files from a file collection.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: aix_parallel_systems_support_programs
References: http://www-1.ibm.com/support/search.wss?rs=0&q=IY20699&apar=only, http://www-1.ibm.com/support/search.wss?rs=0&q=IY28063&apar=only, http://www-1.ibm.com/support/search.wss?rs=0&q=IY28065&apar=only
CVE-2002-2067
East-Tec Eraser 2002 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: eraser
Related CWEs: CWE-459
References: http://www.ciac.org/ciac/bulletins/m-034.shtml, http://www.east-tec.com/eraser/faq.htm, http://www.iss.net/security_center/static/7953.php
CWE: CWE-459
CVE-2002-0525
Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gain privileges via format string specifiers in NTTP responses.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: inn
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0140.html, http://www.iss.net/security_center/static/8834.php, http://www.securityfocus.com/bid/4501
CVE-2002-2338
The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail) via a mail message containing a dot (.) at a newline, which is interpreted as the end of the message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: navigator, mozilla, communicator
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://bugzilla.mozilla.org/show_bug.cgi?id=144228, http://mozilla.org/releases/mozilla1.0.1/security-fixes-1.0.1.html, http://online.securityfocus.com/archive/1/276628
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2002-0811
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, may allow remote attackers to cause a denial of service or execute certain queries via a SQL injection attack on the sort order parameter to buglist.cgi.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bugzilla
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html, http://bugzilla.mozilla.org/show_bug.cgi?id=130821, http://www.securityfocus.com/bid/4964
CVE-2002-0482
Directory traversal vulnerability in PCI Netsupport Manager before version 7, when running web extensions, allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP GET request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: netsupport_manager
References: http://archives.neohapsis.com/archives/bugtraq/2002-03/0285.html, http://www.iss.net/security_center/static/8610.php, http://www.securityfocus.com/bid/4348
CVE-2002-1871
pkgadd in Sun Solaris 2.5.1 through 8 installs files setuid/setgid root if the pkgmap file contains a "?" (question mark) in the (1) mode, (2) owner, or (3) group fields, which allows attackers to elevate privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-45693-1, http://www.iss.net/security_center/static/9544.php, http://www.securityfocus.com/bid/5208
CVE-2002-0501
Format string vulnerability in log_print() function of Posadis DNS server before version m5pre2 allows local users and possibly remote attackers to execute arbitrary code via format strings that are inserted into logging messages.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: posadis
References: http://online.securityfocus.com/archive/1/264450, http://sourceforge.net/forum/forum.php?forum_id=165094, http://www.iss.net/security_center/static/8653.php