DuyTa/cve-kgrag-db huggingface dataset:
CVE-2002-0967
Buffer overflow in eDonkey 2000 35.16.60 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long "ed2k:" URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: edonkey_2000_client
References: http://online.securityfocus.com/archive/1/275708, http://www.edonkey2000.com/, http://www.iss.net/security_center/static/9278.php
CVE-2002-0081
Buffer overflows in (1) php_mime_split in PHP 4.1.0, 4.1.1, and 4.0.6 and earlier, and (2) php3_mime_split in PHP 3.0.x allows remote attackers to execute arbitrary code via a multipart/form-data HTTP POST request when file_uploads is enabled.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000468, http://marc.info/?l=bugtraq&m=101484705523351&w=2, http://marc.info/?l=bugtraq&m=101497256024338&w=2
CVE-2002-1077
IPSwitch IMail Web Calendaring service (iwebcal) allows remote attackers to cause a denial of service (crash) via an HTTP POST request without a Content-Length field.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: imail
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0399.html, http://www.iss.net/security_center/static/9722.php, http://www.securityfocus.com/bid/5365
CVE-2002-0449
Buffer overflow in webpsvc.exe for Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long argument to webplus.exe program, which triggers the overflow in webpsvc.exe.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: web\+_server
References: http://marc.info/?l=bugtraq&m=101535141925150&w=2, http://www.iss.net/security_center/static/8361.php, http://www.kb.cert.org/vuls/id/159907
CVE-2002-0666
IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial of service (kernel panic) via spoofed, short Encapsulating Security Payload (ESP) packets, which result in integer signedness errors.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: frees_wan, ix1010, netbsd, mac_os_x_server, freebsd
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-016.txt.asc, http://razor.bindview.com/publish/advisories/adv_ipsec.html, http://www.debian.org/security/2002/dsa-201
CVE-2002-1149
The installation procedure for Invision Board suggests that users install the phpinfo.php program under the web root, which leaks sensitive information such as absolute pathnames, OS information, and PHP settings.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: invision_board
References: http://marc.info/?l=bugtraq&m=103290602609197&w=2, http://www.iss.net/security_center/static/10178.php, http://www.osvdb.org/3356
CVE-2002-1344
Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filenames containing (1) /absolute/path or (2) .. (dot dot) sequences.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: cobalt_raq_xtr, wget
References: ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-003.0.txt, http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0102.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000552
CVE-2002-1200
Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track the size of a buffer when constant characters are encountered during macro expansion, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: syslog-ng
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000547, http://marc.info/?l=bugtraq&m=103426595021928&w=2, http://www.balabit.hu/static/zsa/ZSA-2002-014-en.txt
CWE: CWE-119
CVE-2002-1854
Rlaj whois CGI script (whois.cgi) 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain name field.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: rlaj_whois
References: http://online.securityfocus.com/archive/1/279268, http://www.iss.net/security_center/static/9439.php, http://www.securityfocus.com/bid/5113
CVE-2002-1526
Cross-site scripting (XSS) vulnerability in emumail.cgi for EMU Webmail 5.0 allows remote attackers to inject arbitrary HTML or script via the email address field.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: emu_webmail
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0131.html, http://www.iss.net/security_center/static/10205.php, http://www.securityfocus.com/bid/5824
CVE-2002-1209
Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences in a GET request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: tftp_server
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0044.html, http://www.idefense.com/advisory/10.24.02.txt, http://www.securityfocus.com/bid/6045
CVE-2002-1646
SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote attackers to override the AllowedAuthentications configuration and use less secure authentication schemes (e.g. password) than configured for the server.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: secure_shell_for_servers
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0204.html, http://www.ciac.org/ciac/bulletins/m-081.shtml, http://www.kb.cert.org/vuls/id/341187
CVE-2002-0735
Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code by triggering log messages.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: nss_ldap, pam_ldap, squid_auth_ldap
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0053.html, http://marc.info/?l=vuln-dev&m=102070267500932&w=2, http://online.securityfocus.com/archive/1/271173
CVE-2002-2419
Direct connect text client (DCTC) client 0.83.3 allows remote attackers to cause a denial of service (crash) via a string ending with a NULL byte character.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: dctc
Related CWEs: CWE-189
References: http://ac2i.tzo.com/dctc/ChangeLog, http://www.iss.net/security_center/static/10181.php, http://www.securityfocus.com/bid/5781
CWE: CWE-189
CVE-2002-1815
Directory traversal vulnerability in source.php and source.cgi in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a ..  (dot dot) in the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: aquonics_file_manager
References: http://online.securityfocus.com/archive/1/288415, http://www.iss.net/security_center/static/9929.php, http://www.securityfocus.com/bid/5533
CVE-2002-0929
Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service (reboot) via long DHCP requests.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netware
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0126.html, http://support.novell.com/servlet/tidfinder/2962999, http://www.iss.net/security_center/static/9428.php
CVE-2002-0979
The Java logging feature for the Java Virtual Machine in Internet Explorer writes output from functions such as System.out.println to a known pathname, which can be used to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: virtual_machine
References: http://marc.info/?l=bugtraq&m=102961031107261&w=2, http://www.iss.net/security_center/static/9886.php, http://www.securityfocus.com/bid/5491
CVE-2002-0459
Cross-site scripting vulnerability in Board-TNK 1.3.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: board-tnk, news-tnk
References: http://translate.google.com/translate?u=http%3A%2F%2Fwww.linux-sottises.net%2Findex.php%3Fnews_init%3D13%23newstag&langpair=fr%7Cen&hl=en&ie=UTF8&oe=UTF8&prev=%2Flanguage_tools, http://www.iss.net/security_center/static/8475.php, http://www.securityfocus.com/archive/1/262694
CVE-2002-1097
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.2, allows restricted administrators to obtain certificate passwords that are stored in plaintext in the HTML source code for Certificate Management pages.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vpn_3002_hardware_client, vpn_3000_concentrator_series_software
References: http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml, http://www.iss.net/security_center/static/10022.php, http://www.securityfocus.com/bid/5612
CVE-2002-0575
Buffer overflow in OpenSSH before 2.9.9, and 3.x before 3.2.1, with Kerberos/AFS support and KerberosTgtPassing or AFSTokenPassing enabled, allows remote and local authenticated users to gain privileges.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openssh
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-022.2.txt, http://archives.neohapsis.com/archives/bugtraq/2002-04/0298.html, http://archives.neohapsis.com/archives/bugtraq/2002-04/0394.html
CVE-2002-1977
Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the "Passphrase Cache" option, which could allow attackers to open encrypted files without providing a passphrase.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: pgp
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0313.html, http://archives.neohapsis.com/archives/bugtraq/2002-07/0322.html, http://www.iss.net/security_center/static/9690.php
CVE-2002-1088
Buffer overflow in Novell GroupWise 6.0.1 Support Pack 1 allows remote attackers to execute arbitrary code via a long RCPT TO command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: groupwise
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0296.html, http://support.novell.com/servlet/tidfinder/2963273, http://www.iss.net/security_center/static/9671.php
CVE-2002-2243
Akfingerd 0.5 and possibly earlier versions only allows one connection at a time and does not time out connections, which allows remote attackers to cause a denial of service (refused connections) by opening a connection and not closing it.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: akfingerd
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0049.html, http://synflood.at/akfingerd, http://www.securityfocus.com/bid/6323
CVE-2002-1116
The "View Bugs" page (view_all_bug_page.php) in Mantis 0.17.4a and earlier includes summaries of private bugs for users that do not have access to any projects.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mantis
References: http://marc.info/?l=bugtraq&m=103014152320112&w=2, http://www.debian.org/security/2002/dsa-161, http://www.securityfocus.com/bid/5565
CVE-2002-1468
Buffer overflow in errpt in AIX 4.3.3 allows local users to execute arbitrary code as root.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://archives.neohapsis.com/archives/aix/2002-q3/0007.html, http://www.securityfocus.com/bid/5885, http://archives.neohapsis.com/archives/aix/2002-q3/0007.html
CVE-2002-2073
Cross-site scripting (XSS) vulnerability in the default ASP pages on Microsoft Site Server 3.0 on Windows NT 4.0 allows remote attackers to inject arbitrary web script or HTML via the (1) ctr parameter in Default.asp and (2) the query string to formslogin.asp.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: site_server_commerce, windows_nt, site_server
References: http://marc.info/?l=vulnwatch&m=101235440104716&w=2, http://www.iss.net/security_center/static/8050.php, http://www.securityfocus.com/bid/3999
CVE-2002-0219
Buffer overflow in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via large command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sas_integration_technologies, sas_base
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0032.html, http://online.securityfocus.com/archive/1/252847, http://online.securityfocus.com/archive/1/252891
CVE-2002-2144
Directory traversal vulnerability in BearShare 4.0.5 and 4.0.6 allows remote attackers to read files outside of the web root by hex-encoding the "/" (forward slash) or "." (dot) characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: bearshare
References: http://online.securityfocus.com/archive/1/294078, http://www.iss.net/security_center/static/10240.php, http://www.securityfocus.com/bid/5888
CVE-2002-2342
Bannermatic 1, 2, and 3 stores the (1) ban.log, (2) ban.bak, (3) ban.dat and (4) banmat.pwd data files under the web document root with insufficient access control, which allows attackers to obtain sensitive information via a direct request for the files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: bannermatic
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: http://marc.info/?l=vuln-dev&m=102121925428844&w=2, http://www.ifrance.com/kitetoua/tuto/5holes5.txt, http://www.securityfocus.com/bid/4738
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-2002-2400
Buffer overflow in the httpdProcessRequest function in LibHTTPD 1.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP POST request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: libhttpd
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0305.html, http://marc.info/?l=bugtraq&m=103720432411860&w=2, http://www.iss.net/security_center/static/10615.php
CWE: CWE-119
CVE-2002-0513
The PHP administration script in popper_mod 1.2.1 and earlier relies on Apache .htaccess authentication, which allows remote attackers to gain privileges if the script is not appropriately configured by the administrator.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: popper_mod
References: http://online.securityfocus.com/archive/1/265438, http://www.iss.net/security_center/static/8746.php, http://www.securityfocus.com/bid/4412
CVE-2002-1311
Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: courier_mta
References: http://marc.info/?l=bugtraq&m=103794021013436&w=2, http://www.debian.org/security/2002/dsa-197, http://www.iss.net/security_center/static/10643.php
CVE-2002-1137
Buffer overflow in the Database Console Command (DBCC) that handles user inputs in Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000, allows attackers to execute arbitrary code via a long SourceDB argument in a "non-SQL OLEDB data source" such as FoxPro, a variant of CAN-2002-0644.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sql_server, data_engine
References: http://www.ciac.org/ciac/bulletins/n-003.shtml, http://www.cisco.com/warp/public/707/cisco-sa-20030126-ms02-061.shtml, http://www.scan-associates.net/papers/foxpro.txt
CVE-2002-2216
Soft3304 04WebServer before 1.20 does not properly process URL strings, which allows remote attackers to obtain unspecified sensitive information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: 04webserver
References: http://www.soft3304.net/04WebServer/Security.html, http://www.soft3304.net/04WebServer/Security.html
CVE-2002-1645
Buffer overflow in the URL catcher feature for SSH Secure Shell for Workstations client 3.1 to 3.2.0 allows remote attackers to execute arbitrary code via a long URL.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ssh2
References: http://www.kb.cert.org/vuls/id/140977, http://www.securityfocus.com/bid/6263, http://www.ssh.com/company/newsroom/article/287/
CVE-2002-0073
The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have established an FTP session to cause a denial of service via a specially crafted status request containing glob characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_information_server, internet_information_services
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0023.html, http://marc.info/?l=bugtraq&m=101901273810598&w=2, http://www.cert.org/advisories/CA-2002-09.html
CVE-2002-0405
Buffer overflow in Transsoft Broker FTP Server 5.0 evaluation allows remote attackers to cause a denial of service and possibly execute arbitrary code via a CWD command with a large number of . (dot) characters.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: broker_ftp_server
References: http://online.securityfocus.com/archive/1/274279, http://www.securityfocus.com/bid/4864, https://exchange.xforce.ibmcloud.com/vulnerabilities/6673
CVE-2002-0421
IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr password changing programs in the /iisadmpwd directory, including (1) aexp2.htr, (2) aexp2b.htr, (3) aexp3.htr , or (4) aexp4.htr.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: windows_nt
References: http://online.securityfocus.com/archive/1/259963, http://www.iss.net/security_center/static/8388.php, http://www.securityfocus.com/bid/4236
CVE-2002-0553
Cross-site scripting vulnerability in SunShop 2.5 and earlier allows remote attackers to gain administrative privileges to SunShop by injecting the script into fields during new customer registration.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunshop_shopping_cart
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0154.html, http://www.iss.net/security_center/static/8840.php, http://www.securityfocus.com/bid/4506
CVE-2002-2018
sastcpd in SAS/Base 8.0 might allow local users to gain privileges by setting the netencralg environment variable, which causes a segmentation fault.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: base, integration_technologies
References: http://online.securityfocus.com/archive/1/253183, http://securitytracker.com/id?1003406, http://www.sas.com/service/techsup/unotes/SN/004/004201.html
CVE-2002-0836
dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mandrake_linux, linux, secure_os
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000537, http://marc.info/?l=bugtraq&m=103497852330838&w=2, http://marc.info/?l=bugtraq&m=104005975415582&w=2
CVE-2002-0256
The telnet port in Arescom NetDSL 1000 router allows remote attackers to cause a denial of service via a series of connections with long strings, which causes a large number of login failures and causes the telnet service to stop.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netdsl
References: http://marc.info/?l=bugtraq&m=101328827420630&w=2, http://www.iss.net/security_center/static/8123.php, http://www.securityfocus.com/bid/4067
CVE-2002-1267
Mac OS X 10.2.2 allows remote attackers to cause a denial of service by accessing the CUPS Printing Web Administration utility, aka "CUPS Printing Web Administration is Remotely Accessible."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mac_os_x
References: http://www.info.apple.com/usen/security/security_updates.html, http://www.osvdb.org/7058, https://exchange.xforce.ibmcloud.com/vulnerabilities/10824
CVE-2002-0465
Directory traversal vulnerability in filemanager.asp for Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files, and execute commands, via a .. (dot dot) in the OpenPath parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hosting_controller
References: http://archives.neohapsis.com/archives/bugtraq/2002-01/0039.html, http://www.hostingcontroller.com/english/patches/ForAll/download/foldersecurity.zip, http://www.securityfocus.com/bid/3811
CVE-2002-0922
CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) default%2edb.style, or remote authenticated users to perform administrative actions via (3) a database parameter set to default%2edb.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: csnews
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0091.html, http://www.iss.net/security_center/static/9332.php, http://www.iss.net/security_center/static/9333.php
CVE-2002-0407
htcgibin.exe in Lotus Domino server 5.0.9a and earlier allows remote attackers to determine the physical pathname for the server via requests that contain certain MS-DOS device names such as com5, such as (1) a request with a .pl or .java extension, or (2) a request containing a large number of periods, which causes htcgibin.exe to leak the pathname in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: domino
References: http://marc.info/?l=bugtraq&m=101310812804716&w=2, http://www.iss.net/security_center/static/8160.php, http://www.securityfocus.com/archive/1/265380
CVE-2002-0040
Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, which might allow the users to gain privileges.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20020306-01-P, http://www.iss.net/security_center/static/8669.php, http://www.osvdb.org/2058
CVE-2002-2334
Joe text editor 2.8 through 2.9.7 does not remove the group and user setuid bits for backup files, which could allow local users to execute arbitrary setuid and setgid root programs when root edits scripts owned by other users.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: joe
Related CWEs: CWE-264
References: http://online.securityfocus.com/archive/1/292138, http://www.iss.net/security_center/static/10125.php, http://www.securityfocus.com/bid/5732
CWE: CWE-264
CVE-2002-1123
Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the "Hello" overflow.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sql_server, data_engine
References: http://marc.info/?l=bugtraq&m=102873609025020&w=2, http://online.securityfocus.com/archive/1/286220, http://www.ciac.org/ciac/bulletins/n-003.shtml
CVE-2002-2060
Buffer overflow in Links 2.0 pre4 allows remote attackers to crash client browsers and possibly execute arbitrary code via gamma tables in large 16-bit PNG images.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: links
References: http://atrey.karlin.mff.cuni.cz/~clock/twibright/links/download/ChangeLog, http://www.iss.net/security_center/static/9287.php, http://www.securityfocus.com/bid/4921
CVE-2002-0310
Netwin WebNews 1.1k CGI program includes several default usernames and cleartext passwords that cannot be deleted by the administrator, which allows remote attackers to gain privileges via the username/password combinations (1) testweb/newstest, (2) alwn3845/imaptest, (3) alwi3845/wtest3452, or (4) testweb2/wtest4879.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webnews
References: http://marc.info/?l=bugtraq&m=101432236729631&w=2, http://www.securityfocus.com/bid/4156, https://exchange.xforce.ibmcloud.com/vulnerabilities/8255
CVE-2002-1498
Directory traversal vulnerability in SWServer 2.2 and earlier allows remote attackers to read arbitrary files via a URL containing .. sequences with "/" or "\" characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: swserver
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0307.html, http://www.iss.net/security_center/static/9981.php, http://www.securityfocus.com/bid/5590
CVE-2002-1683
Cross-site scripting (XSS) vulnerability in BadBlue Personal Edition 1.7.3 allows remote attackers to execute arbitrary script as other users by injecting script into the cleanSearchString() function.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: badblue
References: http://online.securityfocus.com/archive/1/281141, http://www.securityfocus.com/bid/5179, https://exchange.xforce.ibmcloud.com/vulnerabilities/9514
CVE-2002-0763
Vulnerability in administration server for HP VirtualVault 4.5 on HP-UX 11.04 allows remote web servers or privileged external processes to bypass access restrictions and establish connections to the server.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: virtualvault
References: http://archives.neohapsis.com/archives/hp/2002-q2/0037.html, http://www.iss.net/security_center/static/9038.php, http://www.securityfocus.com/bid/4690
CVE-2002-0956
BlackICE Agent 3.1.eal does not always reactivate after a system standby, which could allow remote attackers and local users to bypass intended firewall restrictions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: blackice_agent
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0090.html, http://online.securityfocus.com/archive/1/275710, http://www.iss.net/security_center/static/9275.php
CVE-2002-1191
The Sabserv client component in Sabre Desktop Reservation Software 4.2 through 4.4 allows remote attackers to cause a denial of service via malformed input to TCP port 1001.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: desktop_reservation_software
References: http://marc.info/?l=bugtraq&m=103478372603106&w=2, http://www.idefense.com/advisory/10.16.02.txt, http://www.idefense.com/intelligence/vulnerabilities/display.php?id=48
CVE-2002-0110
Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plaintext in a .ini file, which allows an attacker to gain privileges by reading the passwords from the file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: miramail
References: http://marc.info/?l=bugtraq&m=101063476715154&w=2, http://www.iss.net/security_center/static/7855.php, http://www.kb.cert.org/vuls/id/245707
CVE-2002-0733
Cross-site scripting vulnerability in thttpd 2.20 and earlier allows remote attackers to execute arbitrary script via a URL to a nonexistent page, which causes thttpd to insert the script into a 404 error message.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: thttpd
References: http://archives.neohapsis.com/archives/vuln-dev/2002-q2/0155.html, http://www.acme.com/software/thttpd/#releasenotes, http://www.ifrance.com/kitetoua/tuto/5holes1.txt
CVE-2002-0819
Format string vulnerability in artsd, when called by artswrapper, allows local users to gain privileges via format strings in the -a argument, which results in an error message that is not properly handled in a call to the arts_fatal function.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: artsd
References: http://marc.info/?l=bugtraq&m=102607688730228&w=2, http://marc.info/?l=kde-multimedia&m=102607939232023&w=2, http://marc.info/?l=vuln-dev&m=102614898620164&w=2
CVE-2002-1503
Buffer overflow in Automatic File Distributor (AFD) 1.2.14 and earlier allows local users to gain privileges via a long MON_WORK_DIR environment variable or -w (workdir) argument to (1) afd, (2) afdcmd, (3) afd_ctrl, (4) init_afd, (5) mafd, (6) mon_ctrl, (7) show_olog, or (8) udc.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: afd
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0029.html, http://www.dwd.de/AFD/txt/CHANGES, http://www.iss.net/security_center/static/10036.php
CVE-2002-1106
Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, does not properly verify that certificate DN fields match those of the certificate from the VPN Concentrator, which allows remote attackers to conduct man-in-the-middle attacks.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vpn_client
References: http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml, http://www.securityfocus.com/bid/5652, https://exchange.xforce.ibmcloud.com/vulnerabilities/10045
CVE-2002-1675
Format string vulnerability in the Cio_PrintF function of cio_main.c in Unreal IRCd 3.1.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: unrealircd
References: http://archives.neohapsis.com/archives/vuln-dev/2002-q1/0664.html, http://www.securiteam.com/unixfocus/5MP080A6LQ.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/8360
CVE-2002-2197
Unknown vulnerability in Sun Solaris 8.0 allows local users to cause a denial of service (kernel panic) via a program that uses /dev/poll, triggering a NULL pointer dereference.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F45300&zone_32=45300, http://www.iss.net/security_center/static/9489.php, http://www.securityfocus.com/bid/5171
CVE-2002-1119
os._execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names, which could allow local users to execute arbitrary code via a symlink attack.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: python
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-045.0.txt, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000527, http://mail.python.org/pipermail/python-dev/2002-August/027229.html
CVE-2002-2420
site_searcher.cgi in Super Site Searcher allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: super_site_searcher, simple_site_searcher
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://securitytracker.com/id?1005190, http://www.securityfocus.com/bid/5605, http://securitytracker.com/id?1005190
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2002-0020
Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via malformed protocol options.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, interix
References: http://www.iss.net/security_center/static/8094.php, http://www.securityfocus.com/bid/4061, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-004
CVE-2002-1128
Buffer overflow in inc mail utility for Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long MH environment variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ultrix, osf_1
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0122.html, http://www.iss.net/security_center/static/10147.php, http://www.securityfocus.com/bid/5747
CVE-2002-1949
The Network Attached Storage (NAS) Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which allows remote attackers to sniff the administrative password.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: nas_a300u, nas_a300u_firmware
Related CWEs: CWE-319
Related CAPECs: CAPEC-383, CAPEC-102, CAPEC-477
MITRE ATT&CK Techniques: T1056.004, T1040
MITRE ATT&CK Tactics: T1056
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0440.html, http://www.iss.net/security_center/static/10521.php, http://www.securityfocus.com/bid/6092
CWE: CWE-319
MITRE ATT&CK techniques: T1056.004, T1040
MITRE ATT&CK tactics: T1056
CVE-2002-0968
Buffer overflow in AnalogX SimpleServer:WWW 1.16 and earlier allows remote attackers to cause a denial of service (crash) and execute code via a long HTTP request method name.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: simpleserver_www
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0106.html, http://marc.info/?l=bugtraq&m=102563702928443&w=2, http://www.analogx.com/contents/download/network/sswww.htm
CVE-2002-1478
Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cacti
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0028.html, http://www.debian.org/security/2002/dsa-164, http://www.iss.net/security_center/static/10050.php
CVE-2002-0975
Buffer overflow in Microsoft DirectX Files Viewer ActiveX control (xweb.ocx) 2.0.6.15 and earlier allows remote attackers to execute arbitrary via a long File parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: directx_files_viewer_control
References: http://marc.info/?l=bugtraq&m=102953851705859&w=2, http://www.iss.net/security_center/static/9877.php, http://www.securityfocus.com/bid/5489
CVE-2002-2047
The file preview functionality in Sketch 0.6.12 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an encapsulated Postscript (EPS) file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sketch
References: http://securitytracker.com/id?1003818, http://sketch.sourceforge.net/oldnews.html#N1, http://www.iss.net/security_center/static/8469.php
CVE-2002-0740
Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: slrn
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0302.html, http://online.securityfocus.com/archive/1/269667, http://online.securityfocus.com/archive/1/270235
CVE-2002-1365
Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the "@" character when determining buffer lengths for local addresses, which allows remote attackers to execute arbitrary code via a header with a large number of local addresses.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: fetchmail
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-001.0.txt, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000554, http://marc.info/?l=bugtraq&m=103979751818638&w=2
CWE: CWE-119
CVE-2002-1375
The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netbackup_global_data_manager, netbackup_advanced_reporter, mysql
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555, http://marc.info/?l=bugtraq&m=103971644013961&w=2, http://marc.info/?l=bugtraq&m=104004857201968&w=2
CVE-2002-0573
Format string vulnerability in RPC wall daemon (rpc.rwalld) for Solaris 2.5.1 through 8 allows remote attackers to execute arbitrary code via format strings in a message that is not properly provided to the syslog function when the wall command cannot be executed.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, solaris
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0049.html, http://online.securityfocus.com/archive/1/270268, http://www.cert.org/advisories/CA-2002-10.html
CVE-2002-2353
tftpd32 2.50 and 2.50.2 allows remote attackers to read or write arbitrary files via a full pathname in GET and PUT requests.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: tftpd32
Related CWEs: CWE-264
References: http://tftpd32.jounin.net/, http://www.iss.net/security_center/static/10646.php, http://www.kb.cert.org/vuls/id/632633
CWE: CWE-264
CVE-2002-0683
Directory traversal vulnerability in Carello 1.3 allows remote attackers to execute programs on the server via a .. (dot dot) in the VBEXE parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: carello
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0015.html, http://marc.info/?l=bugtraq&m=102631808212876&w=2, http://www.iss.net/security_center/static/9521.php
CVE-2002-0158
Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color database) command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0000.html, http://marc.info/?l=bugtraq&m=101776858410652&w=2, http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fpatches%2F108652
CVE-2002-0506
Buffer overflow in newt.c of newt windowing library (libnewt) 0.50.33 and earlier may allow attackers to cause a denial of service or execute arbitrary code in setuid programs that use libnewt.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://online.securityfocus.com/archive/1/264699, http://www.iss.net/security_center/static/8700.php, http://www.securityfocus.com/bid/4393
CVE-2002-1898
Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link, which is executed by Terminal.app window.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: terminal, mac_os_x
Related CWEs: CWE-78
Related CAPECs: CAPEC-43, CAPEC-6, CAPEC-88
References: http://apple.slashdot.org/apple/02/09/21/122236.shtml?tid=172, http://lists.apple.com/archives/security-announce/2002/Sep/msg00001.html, http://www.iss.net/security_center/static/10156.php
CWE: CWE-78
CVE-2002-0641
Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database administration privileges to execute arbitrary code via a long filename in the BULK INSERT query.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sql_server, msde
References: http://marc.info/?l=bugtraq&m=102639885223746&w=2, http://www.kb.cert.org/vuls/id/682620, http://www.ngssoftware.com/advisories/ms-sqlbi.txt
CVE-2002-1051
Format string vulnerability in TrACESroute 6.0 GOLD (aka NANOG traceroute) allows local users to execute arbitrary code via the -T (terminator) command line argument.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tracesroute
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0040.html, http://archives.neohapsis.com/archives/bugtraq/2002-07/0254.html, http://marc.info/?l=bugtraq&m=102737546927749&w=2
CVE-2002-1520
The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows remote attackers to access CLI with administrator privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: rapidstream, firebox
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0325.html, http://archives.neohapsis.com/archives/bugtraq/2002-09/0335.html, http://www.iss.net/security_center/static/10218.php
CVE-2002-2322
Ultimate PHP Board (UPB) 1.0b stores the users.dat data file under the web root with insufficient access control, which allows remote attackers to obtain usernames and passwords.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ultimate_php_board
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html, http://www.iss.net/security_center/static/10300.php, http://www.securityfocus.com/bid/5858
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2002-2165
The IMHO Webmail module 0.97.3 and earlier for Roxen leaks the REFERER from the browser's previous login session in an error page, which allows local users to read another user's inbox.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: imho_webmail
References: http://www.iss.net/security_center/static/9615.php, http://www.securitybugware.org/Other/5537.html, http://www.securityfocus.com/bid/5238
CVE-2002-1859
Orion Application Server 1.5.3, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF.").
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: orion_application_server
References: http://online.securityfocus.com/archive/1/279582, http://www.iss.net/security_center/static/9446.php, http://www.securityfocus.com/bid/5119
CVE-2002-1986
Perception LiteServe 2.0 through 2.0.1 allows remote attackers to obtain the source code of CGI scripts via an HTTP request with a trailing dot (".").
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: liteserve
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0074.html, http://www.iss.net/security_center/static/10635.php, http://www.securityfocus.com/bid/6188
CVE-2002-1840
irssi IRC client 0.8.4, when downloaded after 14-March-2002, could contain a backdoor in the configuration file, which allows remote attackers to access the system.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irssi
References: http://online.securityfocus.com/archive/1/274132, http://real.irssi.org/?page=backdoor, http://www.iss.net/security_center/static/9176.php
CVE-2002-1732
Multiple cross-site scripting (XSS) vulnerabilities in Actinic Catalog 4.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string argument to certain .pl files, (2) the REFPAGE parameter to ca000007.pl, (3) PRODREF parameter to ss000007.pl, or (4) hop parameter to ca000001.pl.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: actinic_catalog
References: http://securitytracker.com/id?1003502, http://www.attrition.org/pipermail/vim/2006-July/000929.html, http://www.osvdb.org/27095
CVE-2002-1440
The Gateway GS-400 server has a default root password of "0001n" that can not be changed via the administrative interface, which can allow attackers to gain root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: gs-400
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0126.html, http://www.iss.net/security_center/static/9864.php, http://www.securityfocus.com/bid/5472
CVE-2002-1637
Multiple components in Oracle 9i Application Server (9iAS) are installed with over 160 default usernames and passwords, including (1) SYS, (2) SYSTEM, (3) AQJAVA, (4) OWA, (5) IMAGEUSER, (6) USER1, (7) USER2, (8) PLSQL, (9) DEMO, (10) FINANCE, and many others, which allows attackers to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: application_server
References: http://www.kb.cert.org/vuls/id/712723, http://www.nextgenss.com/papers/hpoas.pdf, https://exchange.xforce.ibmcloud.com/vulnerabilities/968
CVE-2002-2415
Allied Telesyn AT-8024 1.3.1 and Rapier 24 switches allow remote authenticated users to cause a denial of service in the management interface via a stream of zero (null) bytes sent via UDP to a running service.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C
Affected Products: at-8024, rapier_24
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0291.html, http://www.iss.net/security_center/static/10680.php, http://www.securityfocus.com/bid/6233
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2002-1056
Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editing email messages in HTML or Rich Text Format (RTF), which could allow remote attackers to execute arbitrary scripts via an email that the user forwards or replies to.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: outlook, word
References: http://marc.info/?l=bugtraq&m=101760380418890&w=2, http://online.securityfocus.com/archive/1/265621, http://www.iss.net/security_center/static/8708.php