DuyTa/cve-kgrag-db huggingface dataset:
CVE-2002-0098
Buffer overflow in index.cgi administration interface for Boozt! Standard 0.9.8 allows local users to execute arbitrary code via a long name field when creating a new banner.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: boozt_standard
References: http://marc.info/?l=bugtraq&m=101027773404836&w=2, http://online.securityfocus.com/archive/1/249219, http://online.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3787
CVE-2002-0654
Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a request for a .var file, which leaks the pathname in the resulting error message, or (2) via an error message that occurs when a script (child process) cannot be invoked.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: http_server
References: http://marc.info/?l=bugtraq&m=102951160411052&w=2, http://www.apache.org/dist/httpd/CHANGES_2.0, http://www.iss.net/security_center/static/9875.php
CVE-2002-0384
Buffer overflow in Jabber plug-in for Gaim client before 0.58 allows remote attackers to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gaim
References: http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:054, http://online.securityfocus.com/advisories/4358, http://www.iss.net/security_center/static/9766.php
CVE-2002-1660
calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vbulletin
Related CWEs: CWE-78
Related CAPECs: CAPEC-43, CAPEC-6, CAPEC-88
References: http://securitytracker.com/id?1005284, http://www.securiteam.com/exploits/5QP0P158AC.html, http://www.securityfocus.com/bid/5820
CWE: CWE-78
CVE-2002-2366
Buffer overflow in the XML parser of Trillian 0.6351, 0.725 and 0.73 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a skin with a long colors file name in trillian.xml.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: trillian
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0334.html, http://www.iss.net/security_center/static/9999.php, http://www.securityfocus.com/bid/5601
CWE: CWE-119
CVE-2002-0992
Unknown vulnerability in IPV6 functionality for DCE daemons (1) dced or (2) rpcd on HP-UX 11.11 allows attackers to cause a denial of service (crash) via an attack that modifies internal data.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: hp-ux
References: http://online.securityfocus.com/advisories/4258, http://www.iss.net/security_center/static/9475.php, http://www.securityfocus.com/bid/5143
CVE-2002-2340
Cross-site scripting (XSS) vulnerability in read.php in Phorum 3.3.2a allows remote attackers to inject arbitrary web script or HTML via (1) the t parameter or (2) the body of an email response.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phorum
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://marc.info/?l=vuln-dev&m=102121925428844&w=2, http://www.ifrance.com/kitetoua/tuto/5holes5.txt, http://www.phorum.org/changelog.txt
CWE: CWE-79
CVE-2002-1704
Zeroboard 4.1, when the "allow_url_fopen" and "register_globals" variables are enabled, allows remote attackers to execute arbitrary PHP code by modifying the _zb_path parameter to reference a URL on a remote web server that contains the code.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: zeroboard
References: http://online.securityfocus.com/archive/1/277126, http://www.securityfocus.com/bid/5028, https://exchange.xforce.ibmcloud.com/vulnerabilities/9366
CVE-2002-1857
jo! jo Webserver 1.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF.").
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: jo_webserver
References: http://online.securityfocus.com/archive/1/279582, http://www.iss.net/security_center/static/9446.php, http://www.securityfocus.com/bid/5119
CVE-2002-0942
Buffer overflows in Lugiment Log Explorer before 3.02 allow attackers with database permissions to execute arbitrary code via long arguments to the extended stored procedures (1) xp_logattach_StartProf, (2) xp_logattach_setport, or (3) xp_logattach.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: log_explorer
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0146.html, http://online.securityfocus.com/archive/1/277026, http://www.iss.net/security_center/static/9346.php
CVE-2002-2131
Directory traversal vulnerability in Perl-HTTPd before 1.0.2 allows remote attackers to view arbitrary files via a .. (dot dot) in an unknown argument.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: perl-httpd
References: http://citrustech.net/~chrisj/perl-httpd/INFO.txt, http://www.iss.net/security_center/static/10992.php, http://www.securityfocus.com/bid/6497
CVE-2002-1959
Nagios 1.0b1 through 1.0b3 allows remote attackers to execute arbitrary commands via shell metacharacters in plugin output.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: nagios
References: http://www.iss.net/security_center/static/9508.php, http://www.nagios.org/changelog.php, http://www.securityfocus.com/bid/5174
CVE-2002-1422
admbrowse.php in FUDforum before 2.2.0 allows remote attackers to create or delete files via URL-encoded pathnames in the cur and dest parameters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: fudforum
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0082.html, http://online.securityfocus.com/archive/1/288042, http://www.iss.net/security_center/static/9901.php
CVE-2002-1217
Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses <frame> and <iframe> domain restrictions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0024.html, http://marc.info/?l=bugtraq&m=103470310417576&w=2, http://marc.info/?l=ntbugtraq&m=103470202010570&w=2
CVE-2002-1262
Internet Explorer 5.5 and 6.0 does not perform complete security checks on external caching, which allows remote attackers to read arbitrary files.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://marc.info/?l=bugtraq&m=103825484331857&w=2, http://marc.info/?l=bugtraq&m=103910416824172&w=2, http://marc.info/?l=ntbugtraq&m=103824668621672&w=2
CVE-2002-0928
Buffer overflow in the Pirch 98 IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hyperlink in a channel or private message.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pirch_irc
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0256.html, http://www.iss.net/security_center/static/9409.php, http://www.securityfocus.com/bid/5079
CVE-2002-0696
Microsoft Visual FoxPro 6.0 does not register its associated files with Internet Explorer, which allows remote attackers to execute Visual FoxPro applications without warning via HTML that references specially-crafted filenames.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: visual_foxpro
References: http://www.ciac.org/ciac/bulletins/m-120.shtml, http://www.iss.net/security_center/static/10035.php, http://www.securityfocus.com/bid/5633
CVE-2002-0703
An interaction between the Perl MD5 module (perl-Digest-MD5) and Perl could produce incorrect MD5 checksums for UTF-8 data, which could prevent a system from properly verifying the integrity of the data.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: digest-md5
References: http://rhn.redhat.com/errata/RHSA-2002-081.html, http://www.iss.net/security_center/static/9051.php, http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-035.php
CVE-2002-2205
Buffer overflow in Webresolve 0.1.0 and earlier allows remote attackers to execute arbitrary code by connecting to the server from an IP address that resolves to a long hostname.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: webresolve
References: http://siag.nu/webresolve/news-0.2.0.shtml, http://www.iss.net/security_center/static/9503.php, http://www.securityfocus.com/bid/5175
CVE-2002-1847
Buffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) 6.3 through 7.1 allows remote attackers to execute arbitrary commands via a long mp3 filename command line argument. NOTE: since the only known attack vector requires command line access, this may not be a vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_media_player
References: http://online.securityfocus.com/archive/1/285082, http://www.iss.net/security_center/static/9727.php, http://www.securityfocus.com/bid/5357
CVE-2002-2437
The JavaScript implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: thunderbird, seamonkey, firefox
Related CWEs: CWE-264
References: http://blog.mozilla.com/security/2010/03/31/plugging-the-css-history-leak/, http://bugzilla.mozilla.org/show_bug.cgi?id=147777, http://w2spconf.com/2010/papers/p26.pdf
CWE: CWE-264
CVE-2002-2119
Novell eDirectory 8.6.2 and 8.7 use case insensitive passwords, which makes it easier for remote attackers to conduct brute force password guessing.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: edirectory
Related CWEs: CWE-178
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0273.html, http://www.iss.net/security_center/static/9229.php, http://www.securityfocus.com/bid/4893
CWE: CWE-178
CVE-2002-0638
setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow local users to gain privileges via a complex race condition that uses an open file descriptor in utility programs such as chfn and chsh.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: mandrake_linux, linux, mandrake_linux_corporate_server, mandrake_single_network_firewall, secure_os
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-043.0.txt, http://archives.neohapsis.com/archives/bugtraq/2002-07/0357.html, http://archives.neohapsis.com/archives/bugtraq/2002-07/0396.html
CVE-2002-1146
The BIND 4 and BIND 8.2.x stub resolver libraries, and other libraries such as glibc 2.2.5 and earlier, libc, and libresolv, use the maximum buffer size instead of the actual size when processing a DNS response, which causes the stub resolvers to read past the actual boundary ("read buffer overflow"), allowing remote attackers to cause a denial of service (crash).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: glibc
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-015.txt.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000535, http://www.iss.net/security_center/static/10295.php
CVE-2002-1406
Unknown vulnerability in passwd for VVOS HP-UX 11.04, with unknown impact, related to "Unexpected behavior."
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://archives.neohapsis.com/archives/hp/2002-q3/0049.html, http://www.iss.net/security_center/static/9847.php, http://www.securityfocus.com/bid/5454
CVE-2002-1001
Buffer overflows in AnalogX Proxy before 4.12 allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long HTTP request to TCP port 6588 or (2) a SOCKS 4A request to TCP port 1080 with a long DNS hostname.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: proxy
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0006.html, http://www.analogx.com/contents/download/network/proxy.htm, http://www.iss.net/security_center/static/9455.php
CVE-2002-0252
Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute arbitrary code via a response containing a long Content-Type MIME header.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: quicktime
References: http://marc.info/?l=bugtraq&m=101320742616105&w=2, http://www.iss.net/security_center/static/8126.php, http://www.securityfocus.com/bid/4064
CVE-2002-2004
portmapper in Compaq Tru64 4.0G and 5.0A allows remote attackers to cause a denial of service via a flood of packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: tru64
References: http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml, http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml
CVE-2002-1617
Multiple buffer overflows in HP Tru64 UNIX 5.x allow local users to execute arbitrary code via (1) a long -contextDir argument to dtaction, (2) a long -p argument to dtprintinfo, (3) a long -customization argument to dxterm, or (4) a long DISPLAY environment variable to dtterm.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: tru64
References: http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html, http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html, http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtaction.txt
CVE-2002-0564
PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a Database Access Descriptor (DAD) by modifying the URL to reference an alternate DAD that already has valid credentials.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: application_server_web_cache, application_server, oracle9i, oracle8i
References: http://marc.info/?l=bugtraq&m=101301813117562&w=2, http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf, http://www.cert.org/advisories/CA-2002-08.html
CVE-2002-1865
Buffer overflow in the Embedded HTTP server, as used in (1) D-Link DI-804 4.68, Dl-704 V2.56b6, and Dl-704 V2.56b5 and (2) Linksys Etherfast BEFW11S4 Wireless AP + Cable/DSL Router 1.37.2 through 1.42.7 and Linksys WAP11 1.3 and 1.4, allows remote attackers to cause a denial of service (crash) via a long header, as demonstrated using the Host header.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: di-804, wap11, dl-704, befw11s4
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0052.html, http://www.iss.net/security_center/static/10537.php, http://www.securityfocus.com/bid/6090
CVE-2002-0597
LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service (CPU/memory exhaustion) via a stream of malformed data to microsoft-ds port 445.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0025.html, http://online.securityfocus.com/archive/1/268066, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ320751
CVE-2002-1890
rhmask 1.0-9 in Red Hat Linux 7.1 allows local users to overwrite arbitrary files via a symlink attack on the mask file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: rhmask
References: http://online.securityfocus.com/archive/1/276317, http://www.iss.net/security_center/static/9335.php, http://www.securityfocus.com/bid/4984
CVE-2002-0233
Directory traversal vulnerability in eshare Expressions 4 Web server allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: eshare_expressions
References: http://marc.info/?l=bugtraq&m=101292885809975&w=2, http://www.iss.net/security_center/static/8079.php, http://www.securityfocus.com/bid/4029
CVE-2002-0033
Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0026.html, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309, http://www.cert.org/advisories/CA-2002-11.html
CVE-2002-1553
Cisco ONS15454 and ONS15327 running ONS before 3.4 allows remote attackers to modify the system configuration and delete files by establishing an FTP connection to the TCC, TCC+ or XTC using a username and password that does not exist.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: optical_networking_systems_software
References: http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml, http://www.iss.net/security_center/static/10505.php, http://www.securityfocus.com/bid/6076
CVE-2002-0837
wordtrans 1.1pre8 and earlier in the wordtrans-web package allows remote attackers to (1) execute arbitrary code or (2) conduct cross-site scripting attacks via certain parameters (possibly "dict") to the wordtrans.php script.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wordtrans-web
References: http://marc.info/?l=bugtraq&m=103158607631137&w=2, http://rhn.redhat.com/errata/RHSA-2002-188.html, http://www.guardent.com/comp_news_wordtrans-web.html#
CVE-2002-0738
MHonArc 2.5.2 and earlier does not properly filter Javascript from archived e-mail messages, which could allow remote attackers to execute script in web clients by (1) splitting the SCRIPT tag into smaller pieces, (2) including the script in a SRC argument to an IMG tag, or (3) using "&={script}" syntax.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mhonarc
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0260.html, http://www.debian.org/security/2002/dsa-163, http://www.iss.net/security_center/static/8894.php
CVE-2002-0092
CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (server crash) via the diff capability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: cvs
References: http://marc.info/?l=vuln-dev&m=101422243817321&w=2, http://marc.info/?l=vuln-dev&m=101433077724524&w=2, http://www.debian.org/security/2002/dsa-117
CVE-2002-1254
Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system or in other domains, and possibly execute code, via cached methods and objects, aka "Cross Domain Verification via Cached Methods."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ie, internet_explorer
References: http://marc.info/?l=bugtraq&m=103530131201191&w=2, http://security.greymagic.com/adv/gm012-ie/, http://www.ciac.org/ciac/bulletins/n-018.shtml
CVE-2002-1618
JFS (JFS3.1 and OnlineJFS) in HP-UX 10.20, 11.00, and 11.04 does not properly implement the sticky bit functionality, which could allow attackers to bypass intended restrictions on filesystems.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux, jfs
References: http://www.kb.cert.org/vuls/id/248337, http://www.securityfocus.com/advisories/4569, http://www.securityfocus.com/bid/5979
CVE-2002-2187
Unknown "file disclosure" vulnerability in Macromedia JRun 3.0, 3.1, and 4.0, related to a log file or jrun.ini, with unknown impact.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: jrun
References: http://www.iss.net/security_center/static/10571.php, http://www.macromedia.com/v1/Handlers/index.cfm?ID=23500, http://www.securityfocus.com/bid/6125
CVE-2002-2191
Lotus Domino 5.0.9a and earlier, even when configured with the 'DominoNoBanner=1' option, allows remote attackers to obtain potential sensitive information such as the version via a request for a non-existent .nsf database, which leaks the version in the HTTP banner.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: domino
References: http://www.iss.net/security_center/static/10557.php, http://www.securityfocus.com/archive/1/298874/2002-11-05/2002-11-11/2, http://www.securityfocus.com/bid/6128
CVE-2002-0214
Compaq Intel PRO/Wireless 2011B LAN USB Device Driver 1.5.16.0 through 1.5.18.0 stores the 128-bit WEP (Wired Equivalent Privacy) key in plaintext in a registry key with weak permissions, which allows local users to decrypt network traffic by reading the WEP key from the registry key.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: intel_pro_wireless_2011b_lan_usb_device_driver
References: http://online.securityfocus.com/archive/1/252607, http://www.iss.net/security_center/static/8015.php, http://www.securityfocus.com/bid/3968
CVE-2002-2003
ypbind in Compaq Tru64 4.0F, 4.0G, 5.0A, 5.1 and 5.1A allows remote attackers to cause the process to core dump via certain network packets generated by nmap.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: tru64
References: http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml, http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml
CVE-2002-2345
Oracle 9i Application Server 9.0.2 stores the web cache administrator interface password in plaintext, which allows remote attackers to gain access.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: application_server
Related CWEs: CWE-255
References: http://otn.oracle.com/deploy/security/pdf/2002alert39rev1.pdf, http://www.iss.net/security_center/static/9841.php, http://www.securityfocus.com/bid/7395
CWE: CWE-255
CVE-2002-1964
Unknown vulnerability in WesMo phpEventCalendar 1.1 allows remote attackers to execute arbitrary commands via unknown attack vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpeventcalendar
References: http://www.securityfocus.com/bid/5021, http://www.securityfocus.com/bid/5021
CVE-2002-0503
Directory traversal vulnerability in boilerplate.asp for Citrix NFuse 1.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the NFuse_Template parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: nfuse
References: http://archives.neohapsis.com/archives/bugtraq/2002-03/0343.html, http://www.iss.net/security_center/static/8654.php, http://www.securityfocus.com/bid/4382
CVE-2002-1151
The cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 through 3.0.3 does not properly initialize the domains on sub-frames and sub-iframes, which can allow remote attackers to execute script and steal cookies from subframes that are in other domains.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: konqueror, kde
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-047.0.txt, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000525, http://marc.info/?l=bugtraq&m=103175850925395&w=2
CVE-2002-0649
Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sql_server, data_engine
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://marc.info/?l=bugtraq&m=102760196931518&w=2, http://marc.info/?l=ntbugtraq&m=102760479902411&w=2, http://secunia.com/advisories/7945
CWE: CWE-119
CVE-2002-1944
Motorola Surfboard 4200 cable modem allows remote attackers to cause a denial of service (crash) by performing a SYN scan using a tool such as nmap.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: surfboard
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0429.html, http://www.iss.net/security_center/static/10513.php, http://archives.neohapsis.com/archives/bugtraq/2002-10/0429.html
CVE-2002-1122
Buffer overflow in the parsing mechanism for ISS Internet Scanner 6.2.1, when using the license banner HTTP check, allows remote attackers to execute arbitrary code via a long web server response.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_scanner
References: http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21165, http://www.iss.net/security_center/static/10130.php, http://www.osvdb.org/3150
CVE-2002-2248
Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the WDefaultFontCharset constructor with a long string and invokes the canConvert method.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: communicator
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://marc.info/?l=bugtraq&m=103834439321292&w=2, http://www.securityfocus.com/bid/6256, https://exchange.xforce.ibmcloud.com/vulnerabilities/10706
CWE: CWE-119
CVE-2002-1608
Buffer overflow in traceroute in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux, tru64
References: http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11, http://www.kb.cert.org/vuls/id/629289, https://exchange.xforce.ibmcloud.com/vulnerabilities/10016
CVE-2002-2375
Directory traversal vulnerability in CommuniGate Pro 4.0b4 and possibly earlier versions allows remote attackers to list the contents of the WebUser directory and its parent directory via a (1) .. (dot dot) or (2) . (dot) in a URL.  NOTE: it is not clear whether this issue reveals any more information regarding directory structure than is already available to any CommuniGate Pro user, although there is a possibility that it could be used to infer product version information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: communigate_pro
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0016.html, http://www.iss.net/security_center/static/9463.php, http://archives.neohapsis.com/archives/bugtraq/2002-07/0016.html
CWE: CWE-22
CVE-2002-1442
The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar operations including script execution and file reading in other zones such as "My Computer" by opening a window to tools.google.com or the res: protocol, then using script to modify the window's location to the toolbar's configuration URL, which bypasses the origin verification check.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: toolbar
References: http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0066.html, http://online.securityfocus.com/archive/1/286527, http://sec.greymagic.com/adv/gm001-mc/
CVE-2002-0963
SQL injection vulnerability in comment.php for GeekLog 1.3.5 and earlier allows remote attackers to obtain sensitive user information via the pid parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: geeklog
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0058.html, http://geeklog.sourceforge.net/article.php?story=20020610013358149, http://www.iss.net/security_center/static/9311.php
CVE-2002-2320
MySimpleNews 1.0 allows remote attackers to delete arbitrary email messages via a direct request to vider.php3.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:C/A:N
Affected Products: mysimplenews
Related CWEs: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0027.html, http://www.iss.net/security_center/static/10299.php, http://archives.neohapsis.com/archives/bugtraq/2002-10/0027.html
CWE: CWE-264
CVE-2002-1360
Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a length field, which could allow remote attackers to cause a denial of service or possibly execute arbitrary code due to interactions with the use of null-terminated strings as implemented using languages such as C, as demonstrated by the SSHredder SSH protocol test suite.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: winscp, securenetterm, putty, shellguard_ssh, ssh_client
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html, http://securitytracker.com/id?1005812, http://securitytracker.com/id?1005813
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2002-1794
Unknown vulnerability in pam_authz in the LDAP-UX Integration product on HP-UX 11.00 and 11.11 allows remote attackers to execute r-commands with privileges of other users.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ldap-ux_integration, hp-ux
References: http://online.securityfocus.com/advisories/4512, http://www.ciac.org/ciac/bulletins/n-006.shtml, http://www.iss.net/security_center/static/10266.php
CVE-2002-0086
Buffer overflow in bindsock in Lotus Domino 5.0.4 and 5.0.7 on Linux allows local users to gain root privileges via a long (1) Notes_ExecDirectory or (2) PATH environment variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: lotus_domino
References: http://www-1.ibm.com/support/docview.wss?uid=swg21095569, http://www-1.ibm.com/support/docview.wss?uid=swg21100441, http://www.esecurityonline.com/advisories/eSO4124.asp
CVE-2002-1318
Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a little-endian UCS2 unicode string.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cifs-9000_server, samba, irix
References: ftp://patches.sgi.com/support/free/security/advisories/20021204-01-I, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000550, http://marc.info/?l=bugtraq&m=103801986818076&w=2
CVE-2002-0953
globals.php in PHP Address before 0.2f, with the PHP allow_url_fopen and register_globals variables enabled, allows remote attackers to execute arbitrary PHP code via a URL to the code in the LangCookie parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php_address
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0182.html, http://online.securityfocus.com/archive/1/277987, http://www.iss.net/security_center/static/9379.php
CVE-2002-1390
The daemon for GeneWeb before 4.09 does not properly handle requested paths, which allows remote attackers to read arbitrary files via a crafted URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: geneweb
References: http://cristal.inria.fr/~ddr/GeneWeb/en/version/4.09.html, http://www.debian.org/security/2003/dsa-223, http://www.securityfocus.com/bid/6549
CVE-2002-2335
Killer Protection 1.0 stores the vars.inc include file under the web root with insufficient access control, which allows remote attackers to obtain user names and passwords and log in using protection.php.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: killer_protection
Related CWEs: CWE-16
References: http://online.securityfocus.com/archive/1/294208, http://www.iss.net/security_center/static/10315.php, http://www.securityfocus.com/bid/5905
CWE: CWE-16
CVE-2002-1743
AOL ICQ 2002a Build 3722 allows remote attackers to cause a denial of service (crash) via a malformed .hpf file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: icq
References: http://online.securityfocus.com/archive/1/267656, http://www.securityfocus.com/bid/4514, https://exchange.xforce.ibmcloud.com/vulnerabilities/8843
CVE-2002-1491
The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving "Default Connection" settings, which could allow local users to gain privileges.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: vpn_5000_client
References: http://www.cisco.com/warp/public/707/vpn5k-client-multiple-vuln-pub.shtml, http://www.iss.net/security_center/static/10129.php, http://www.osvdb.org/7041
CVE-2002-0052
Internet Explorer 6.0 and earlier does not properly handle VBScript in certain domain security checks, which allows remote attackers to read arbitrary files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: http://securitytracker.com/id?1003630, http://www.osvdb.org/763, http://www.securityfocus.com/bid/4158
CVE-2002-0598
Format string vulnerability in Foundstone FScan 1.12 with banner grabbing enabled allows remote attackers to execute arbitrary code on the scanning system via format string specifiers in the server banner.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: fscan
References: http://online.securityfocus.com/archive/1/268581, http://www.foundstone.com/knowledge/fscan112_advisory.html, http://www.iss.net/security_center/static/8895.php
CVE-2002-0768
Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code via a long PASV command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: suse_linux, lukemftp
References: http://www.iss.net/security_center/static/9130.php, http://www.novell.com/linux/security/advisories/2002_18_lukemftp.html, http://www.iss.net/security_center/static/9130.php
CVE-2002-0495
csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup command and the setup parameter, which overwrites the setup.cgi configuration file that is loaded by csSearch.cgi.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cssearch_professional
Related CWEs: CWE-94
Related CAPECs: CAPEC-242, CAPEC-77, CAPEC-35
MITRE ATT&CK Techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK Tactics: T1564, T1027
References: http://www.cgiscript.net/cgi-script/csNews/csNews.cgi?database=cgi.db&command=viewone&id=7, http://www.iss.net/security_center/static/8636.php, http://www.securityfocus.com/archive/1/264169
CWE: CWE-94
MITRE ATT&CK techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK tactics: T1564, T1027
CVE-2002-1189
The default configuration of Cisco Unity 2.x and 3.x does not block international operator calls in the predefined restriction tables, which could allow authenticated users to place international calls using call forwarding.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: unity_server
References: http://www.cisco.com/warp/public/707/toll-fraud-pub.shtml, http://www.iss.net/security_center/static/10282.php, http://www.securityfocus.com/bid/5896
CVE-2002-1433
Kerio MailServer 5.0 allows remote attackers to cause a denial of service (hang) via SYN packets to the supported network services.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: kerio_mailserver
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0183.html, http://www.iss.net/security_center/static/9904.php, http://www.securityfocus.com/bid/5505
CVE-2002-1080
The Administration console for Abyss Web Server 1.0.3 before Patch 2 allows remote attackers to gain privileges and modify server configuration via direct requests to CHL files such as (1) srvstatus.chl, (2) consport.chl, (3) general.chl, (4) srvparam.chl, and (5) advanced.chl.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: abyss_web_server
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0229.html, http://www.aprelium.com/news/patch1033.html, http://www.iss.net/security_center/static/9957.php
CVE-2002-0729
Microsoft SQL Server 2000 allows remote attackers to cause a denial of service via a malformed 0x08 packet that is missing a colon separator.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sql_server
References: http://marc.info/?l=bugtraq&m=102760196931518&w=2, http://marc.info/?l=ntbugtraq&m=102760479902411&w=2, http://marc.info/?l=bugtraq&m=102760196931518&w=2
CVE-2002-1222
Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote attackers to cause a denial of service (reset) via a long HTTP request.
CVSS v2.0 Score: 7.1 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Affected Products: catos
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://www.cisco.com/warp/public/707/catos-http-overflow-vuln.shtml, http://www.iss.net/security_center/static/10382.php, http://www.securityfocus.com/bid/5976
CWE: CWE-119
CVE-2002-1940
LCC-Win32 3.2 compiler, when running on Windows 95, 98, or ME, writes portions of previously used memory after the import table, which could allow attackers to gain sensitive information.  NOTE: it has been reported that this problem is due to the OS and not the application.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: lcc-win32
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0504.html, http://www.iss.net/security_center/static/9749.php, http://www.securityfocus.com/bid/5391
CVE-2002-1654
iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provides a distinct attack vector and may make it easier to conduct brute force password guessing without detection.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enterprise_server, iplanet_web_server
References: http://lists.virus.org/vulnwatch-0201/msg00008.html, http://securitytracker.com/id?1003157, http://www.kb.cert.org/vuls/id/985347
CVE-2002-0783
Opera 6.01, 6.0, and 5.12 allows remote attackers to execute arbitrary JavaScript in the security context of other sites by setting the location of a frame or iframe to a Javascript: URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: opera_web_browser
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0117.html, http://www.iss.net/security_center/static/9096.php, http://www.securityfocus.com/bid/4745
CVE-2002-1536
Molly IRC bot 0.5 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $host variable for nslookup.pl, (2) the $to, $from, or $message variables in pop.pl, (3) the $words or $text variables in sms.pl, or (4) the $server or $printer variables in hpled.pl.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: molly
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0028.html, http://online.securityfocus.com/archive/1/296163, http://www.iss.net/security_center/static/10397.php
CVE-2002-0042
Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service (hang) by creating a file that is not properly processed by XFS.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20020402-01-P, http://www.iss.net/security_center/static/8839.php, http://www.securityfocus.com/bid/4511
CVE-2002-1826
grsecurity 1.9.4 for Linux kernel 2.4.18 allows local users to bypass read-only permissions by using mmap to directly map /dev/mem or /dev/kmem to kernel memory.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: grsecurity_kernel_patch
References: http://online.securityfocus.com/archive/1/273002, http://www.iss.net/security_center/static/9109.php, http://www.securityfocus.com/bid/4762
CVE-2002-1717
Microsoft Internet Information Server (IIS) 5.1 allows remote attackers to view path information via a GET request to (1) /_vti_pvt/access.cnf, (2) /_vti_pvt/botinfs.cnf, (3) /_vti_pvt/bots.cnf, or (4) /_vti_pvt/linkinfo.cnf.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_services
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: http://online.securityfocus.com/archive/1/255555, http://online.securityfocus.com/archive/1/256125, http://www.securityfocus.com/bid/4078
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-2002-2324
The "System Restore" directory and subdirectories, and possibly other subdirectories in the "System Volume Information" directory on Windows XP Professional, have insecure access control list (ACL) permissions, which allows local users to access restricted files and modify registry settings.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_xp
Related CWEs: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0070.html, http://www.iss.net/security_center/static/10279.php, http://www.securityfocus.com/bid/5894
CWE: CWE-264
CVE-2002-2155
Format string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and 0.73 allows remote IRC servers to execute arbitrary code via an invite to a channel with format string specifiers in the name.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: trillian
References: http://www.iss.net/security_center/static/9761.php, http://www.securityfocus.com/archive/1/285695, http://www.securityfocus.com/bid/5388
CVE-2002-0831
The kqueue mechanism in FreeBSD 4.3 through 4.6 STABLE allows local users to cause a denial of service (kernel panic) via a pipe call in which one end is terminated and an EVFILT_WRITE filter is registered for the other end.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: freebsd
References: http://marc.info/?l=bugtraq&m=102865142610126&w=2, http://www.iss.net/security_center/static/9774.php, http://www.osvdb.org/5069
CVE-2002-2382
cvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on /var/tmp/cvsupd.out.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cvsup
Related CWEs: CWE-59
Related CAPECs: CAPEC-132, CAPEC-76, CAPEC-17
MITRE ATT&CK Techniques: T1547.009, T1027.006, T1564.009
MITRE ATT&CK Tactics: T1574, T1547, T1564
References: http://archives.neohapsis.com/archives/freebsd/2002-11/0011.html, http://www.iss.net/security_center/static/10610.php, http://www.securityfocus.com/bid/6150
CWE: CWE-59
MITRE ATT&CK techniques: T1547.009, T1027.006, T1564.009, T1574.010, T1574.005, T1027.009
MITRE ATT&CK tactics: T1574, T1547, T1564, T1027
CVE-2002-0039
rpcbind in SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via malformed RPC packets with invalid lengths.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20020306-01-P, ftp://patches.sgi.com/support/free/security/advisories/20020306-01-P
CVE-2002-1376
libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_one_row routines, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netbackup_global_data_manager, netbackup_advanced_reporter, mysql
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555, http://marc.info/?l=bugtraq&m=103971644013961&w=2, http://marc.info/?l=bugtraq&m=104004857201968&w=2
CVE-2002-2152
The Czech edition of Software602's Web Server before 2002.0.02.0916 allows remote attackers to gain administrator privileges via direct HTTP requests to the /admin/ directory, which is not password protected.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: 602pro_lan_suite
References: http://online.securityfocus.com/archive/1/296119, http://www.iss.net/security_center/static/10408.php, http://www.securityfocus.com/bid/6006
CVE-2002-1600
Directory traversal vulnerability in Mike Spice's My Classifieds (classifieds.cgi) before 1.3 allows remote attackers to overwrite arbitrary files via the category parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: my_classifieds
References: http://securitytracker.com/id?1003255, http://www.iss.net/security_center/static/7967.php, http://www.kb.cert.org/vuls/id/181907
CVE-2002-2045
x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to (1) execute PHP commands such as phpinfo or (2) obtain the full path of the web server via an invalid action parameter, which leaks the pathname in an error message.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: x-stat
References: http://seclists.org/lists/vuln-dev/2002/Mar/0156.html, http://securitytracker.com/id?1003827, http://www.ifrance.com/kitetoua/tuto/x_holes.txt