DuyTa/cve-kgrag-db huggingface dataset:
CVE-2002-1666
Unknown vulnerability in Oracle E-Business Suite 11i.1 through 11i.6 allows remote attackers to execute unauthorized PL/SQL procedures by modifying the Oracle Applications URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: e-business_suite
References: http://otn.oracle.com/deploy/security/pdf/apps_alert_ebiz2.pdf, http://www.securityfocus.com/bid/4551, https://exchange.xforce.ibmcloud.com/vulnerabilities/8897
CVE-2002-1957
Buffer overflow in the netlog function in pen.c for Pen 0.9.1 and 0.9.2 allows remote attackers to execute arbitrary commands via malformed log messages.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pen
References: http://siag.nu/pen/news-0.9.3.shtml, http://www.iss.net/security_center/static/9505.php, http://www.securityfocus.com/bid/5152
CVE-2002-2111
Fwmon before 1.0.10 allows remote attackers to cause a denial of service (crash) by causing the kernel to return a large packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: fwmon
References: http://www.scaramanga.co.uk/fwmon/fwmon-1.0.10.tar.gz, http://www.securityfocus.com/bid/3984, https://exchange.xforce.ibmcloud.com/vulnerabilities/8104
CVE-2002-2220
Buffer overflow in Pedro Lineu Orso chetcpasswd before 1.12, when configured for access from 0.0.0.0, allows local users to gain privileges via unspecified vectors.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: chetcpasswd
References: http://sourceforge.net/project/shownotes.php?group_id=68912&release_id=466649, http://sourceforge.net/project/shownotes.php?group_id=68912&release_id=466649
CVE-2002-1582
compose.cgi in Mailreader.com 2.3.30 and 2.3.31, when using Sendmail as the Mail Transfer Agent, allows remote attackers to execute arbitrary commands via shell metacharacters in the RealEmail configuration variable, which is used to call Sendmail in network.cgi.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mailreader.com
References: http://www.iss.net/security_center/static/10491.php, http://www.mailreader.com/download/ChangeLog, http://www.securityfocus.com/archive/1/297428
CVE-2002-2081
cphost.dll in Microsoft Site Server 3.0 allows remote attackers to cause a denial of service (disk consumption) via an HTTP POST of a file with a long TargetURL parameter, which causes Site Server to abort and leaves the uploaded file in c:\temp.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: site_server_commerce, site_server
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0033.html, http://www.iss.net/security_center/static/8053.php, http://www.securityfocus.com/bid/4002
CVE-2002-1952
phpRank 1.8 does not properly check the return codes for MySQL operations when authenticating users, which could allow remote attackers to authenticate using a NULL password when database errors occur or if the database is unavailable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phprank
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0148.html, http://www.iss.net/security_center/static/10353.php, http://www.securityfocus.com/bid/5948
CVE-2002-0439
Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal credit card numbers or delete items by injecting the script into new customer information fields such as the message field.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cauposhop
References: http://www.iss.net/security_center/static/8431.php, http://www.securityfocus.com/archive/1/261218, http://www.securityfocus.com/bid/4270
CVE-2002-1975
Sharp Zaurus PDA SL-5000D and SL-5500 uses a salt of "A0" to encrypt the screen-locking password as stored in the Security.conf file, which makes it easier for local users to guess the password via brute force methods.
CVSS v3.1 Score: 5.5 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: zaurus_sl-5500_firmware, zaurus_sl-5000d_firmware, zaurus_sl-5500, zaurus_sl-5000d
Related CWEs: CWE-326
Related CAPECs: CAPEC-112, CAPEC-192, CAPEC-20
MITRE ATT&CK Techniques: T1110
References: http://online.securityfocus.com/archive/1/281437, http://www.iss.net/security_center/static/9535.php, http://www.securityfocus.com/bid/5201
CWE: CWE-326
MITRE ATT&CK techniques: T1110
CVE-2002-1467
Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrary files via (1) an HTTP redirect, (2) a "file://" base in a web document, or (3) a relative URL from a web archive (mht file).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: shockwave, flash_player
References: http://online.securityfocus.com/archive/1/286625, http://www.iss.net/security_center/static/9797.php, http://www.macromedia.com/v1/handlers/index.cfm?ID=23294
CVE-2002-1727
Cross-site scripting vulnerability (XSS) in (1) as_web.exe and (2) as_web4.exe in askSam Web Publisher 1 and 4 allows remote attackers to execute arbitrary script as other users via a URL.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: asksam_web_publisher
References: http://online.securityfocus.com/archive/82/270970, http://www.ifrance.com/kitetoua/tuto/5holes4.txt, http://www.securityfocus.com/bid/4670
CVE-2002-0108
Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: forums
References: http://online.securityfocus.com/archive/1/249026, http://www.iss.net/security_center/static/7841.php, http://www.kb.cert.org/vuls/id/575619
CVE-2002-1978
IPFilter 3.1.1 through 3.4.28 allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP server, which generates a response that contains the string, causing IPFilter to treat the response as if it were a legitimate PASV command from the server.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ipfilter
Related CWEs: CWE-264
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-024.txt.asc, http://securitytracker.com/id?1005442, http://www.iss.net/security_center/static/10409.php
CWE: CWE-264
CVE-2002-0385
Vignette Story Server 4.1 and 6.0 allows remote attackers to obtain sensitive information via a request that contains a large number of '"' (double quote) and and '>' characters, which causes the TCL interpreter to crash and include stack data in the output.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: vignette, storyserver
References: http://www.atstake.com/research/advisories/2003/a040703-1.txt, http://www.securityfocus.com/bid/7296, https://exchange.xforce.ibmcloud.com/vulnerabilities/11725
CVE-2002-0854
Buffer overflows in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the i4l package on SuSE 7.3, 8.0, and possibly other operating systems, may allow local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux
References: https://lists.opensuse.org/opensuse-security-announce/2002-08/msg00006.html, https://lists.opensuse.org/opensuse-security-announce/2002-08/msg00006.html
CVE-2002-0453
The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout period, which makes it easier for remote attackers to conduct brute force password guessing by waiting until the lockout period ends, then guessing passwords without being locked out again.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netpoint
References: http://www.iss.net/security_center/static/8461.php, http://www.securityfocus.com/archive/1/262066, http://www.securityfocus.com/bid/4288
CVE-2002-2097
The compression code in MaraDNS before 0.9.01 allows remote attackers to cause a denial of service via crafted DNS packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: maradns
References: http://securitytracker.com/id?1003252, http://www.securityfocus.com/bid/3852, https://exchange.xforce.ibmcloud.com/vulnerabilities/7972
CVE-2002-1634
Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) ndsobj.nlm, (2) allfield.jse, (3) websinfo.bas, (4) ndslogin.pl, (5) volscgi.pl, (6) lancgi.pl, (7) test.jse, or (8) env.pl.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: netware
References: http://support.novell.com/cgi-bin/search/searchtid.cgi?/10064452.htm, http://www.kb.cert.org/vuls/id/159203, http://www.osvdb.org/17461
CVE-2002-0443
Microsoft Windows 2000 allows local users to bypass the policy that prohibits reusing old passwords by changing the current password before it expires, which does not enable the check for previous passwords.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000
References: http://online.securityfocus.com/archive/1/260704, http://www.iss.net/security_center/static/8402.php, http://www.securityfocus.com/bid/4256
CVE-2002-0884
Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to execute arbitrary code via format strings that are not properly handled in the functions (1) syserr and (2) error.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: unixware, sunos, openunix
References: ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.29/CSSA-2002-SCO.29.txt, http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0074.html, http://online.securityfocus.com/archive/1/273584
CVE-2002-2184
Digi-Net Technologies DigiChat 3.5 allows chat users to obtain the IP addresses of other chat users via a "Showip" parameter in the chat applet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: digichat
References: http://www.securityfocus.com/bid/5019, http://www.securityfocus.com/bid/5019
CVE-2002-0608
Buffer overflow in Matu FTP client 1.74 allows remote FTP servers to execute arbitrary code via a long "220" banner.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: matu_ftp
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0310.html, http://www.iss.net/security_center/static/8911.php, http://www.securityfocus.com/bid/4572
CVE-2002-2005
Unknown vulnerability in Java web start 1.0.1_01, 1.0.1, 1.0 and 1.0.1.01 (HP-UX 11.x only) allows attackers to gain access to restricted resources via unknown attack vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: java_web_start
References: http://archives.neohapsis.com/archives/hp/2002-q1/0084.html, http://cert.uni-stuttgart.de/archive/bugtraq/2002/03/msg00279.html, http://www.iss.net/security_center/static/8483.php
CVE-2002-1177
Multiple buffer overflows in Winamp 3.0, when displaying an MP3 in the Media Library window, allows remote attackers to execute arbitrary code via an MP3 file containing a long (1) Artist or (2) Album ID3v2 tag.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: winamp
References: http://marc.info/?l=bugtraq&m=104025874209567&w=2, http://www.securityfocus.com/bid/6429, http://marc.info/?l=bugtraq&m=104025874209567&w=2
CVE-2002-1728
askSam Web Publisher 1.0 and 4.0 allows remote attackers to determine the full path to the web root directory via a request for a file that does not exist, which generates an error message that reveals the full path.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: asksam_web_publisher
References: http://online.securityfocus.com/archive/82/270970, http://www.ifrance.com/kitetoua/tuto/5holes4.txt, http://www.securityfocus.com/bid/4670
CVE-2002-0251
Buffer overflow in licq 1.0.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string of format string characters such as "%d".
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: licq
References: http://marc.info/?l=bugtraq&m=101301254432079&w=2, http://marc.info/?l=bugtraq&m=101318594420200&w=2, http://www.iss.net/security_center/static/8107.php
CVE-2002-0710
Directory traversal vulnerability in sendform.cgi 1.44 and earlier allows remote attackers to read arbitrary files by specifying the desired files in the BlurbFilePath parameter.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: sendform.cgi
References: http://marc.info/?l=bugtraq&m=102809084218422&w=2, http://www.iss.net/security_center/static/9725.php, http://www.osvdb.org/3568
CVE-2002-2172
Informed (1) Designer and (2) Filler 3.05 does not zero out newly allocated disk blocks as an encrypted file grows in size, which may allow attackers to obtain sensitive information.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: informed_designer, informed_filler
References: http://online.securityfocus.com/archive/1/293052, http://www.cirt.net/advisories/shana.shtml, http://www.iss.net/security_center/static/10192.php
CVE-2002-1551
Buffer overflow in nslookup in IBM AIX may allow attackers to cause a denial of service or execute arbitrary code.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aix
References: http://archives.neohapsis.com/archives/aix/2002-q4/0002.html, http://archives.neohapsis.com/archives/aix/2002-q4/0002.html
CVE-2002-0697
Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP client to directly connect to MMS and bypass the checks for MMS credentials.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: metadirectory_services
References: http://www.iss.net/security_center/static/9657.php, http://www.securityfocus.com/bid/5308, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-036
CVE-2002-0582
WorkforceROI Xpede 4.1 stores temporary expense claim reports in a world-readable and indexable /reports/temp directory, which allows remote attackers to read the reports by accessing the directory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: xpede
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html, http://www.iss.net/security_center/static/8905.php, http://www.securityfocus.com/bid/4554
CVE-2002-0088
Buffer overflow in admintool in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long media installation path.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://www.esecurityonline.com/advisories/eSO4123.asp, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A48, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A60
CVE-2002-1757
PHProjekt 2.0 through 3.1 relies on the $PHP_SELF variable for authentication, which allows remote attackers to bypass authentication for scripts via a request to a .php file with "sms" in the URL, which is included in the PATH_INFO portion of the $PHP_SELF variable, as demonstrated using "mail_send.php/sms".
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phprojekt
References: http://online.securityfocus.com/archive/1/269407, http://www.securityfocus.com/bid/4596, https://exchange.xforce.ibmcloud.com/vulnerabilities/8943
CVE-2002-1603
GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, \, %2f (encoded /), %20 (encoded space), or %00 (encoded null) character, which returns the ASP source code unparsed.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: goahead_webserver
References: http://aluigi.altervista.org/adv/goahead-adv3.txt, http://data.goahead.com/Software/Webserver/2.1.8/release.htm#bug-with-urls-like-asp, http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729
CVE-2002-1384
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: xpdf, cups
References: http://marc.info/?l=bugtraq&m=104152282309980&w=2, http://www.debian.org/security/2003/dsa-222, http://www.debian.org/security/2003/dsa-226
CVE-2002-2171
Cross-site scripting (XSS) vulnerability in acWEB 1.8 and 1.14 allows remote attackers to insert arbitrary HTML and web script via a URL, possibly via a "%db" request in a URL.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: acweb
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0304.html, http://www.iss.net/security_center/static/10191.php, http://www.securityfocus.com/bid/5793
CVE-2002-1236
The remote management web server for Linksys BEFSR41 EtherFast Cable/DSL Router before firmware 1.42.7 allows remote attackers to cause a denial of service (crash) via an HTTP request to Gozila.cgi without any arguments.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: befsr41
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0049.html, http://marc.info/?l=bugtraq&m=103616324103171&w=2, http://www.idefense.com/advisory/10.31.02a.txt
CVE-2002-1487
The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) by sending the raw messages (1) 206, (2) 211, (3) 213, (4) 214, (5) 215, (6) 217, (7) 218, (8) 243, (9) 302, (10) 317, (11) 324, (12) 332, (13) 333, (14) 352, and (15) 367.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: trillian
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0268.html, http://www.iss.net/security_center/static/10161.php, http://www.securityfocus.com/bid/5775
CVE-2002-0719
SQL injection vulnerability in the function that services for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to execute arbitrary commands via an MCMS resource request for image files or other files.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: content_management_server
References: http://www.iss.net/security_center/static/9785.php, http://www.securityfocus.com/bid/5422, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-041
CVE-2002-1345
Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user via filenames containing /absolute/path or .. (dot dot) sequences.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: openbsd, sunos, ncftp, solaris
References: ftp://patches.sgi.com/support/free/security/advisories/20021205-01-A, http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0102.html, http://marc.info/?l=bugtraq&m=103962838628940&w=2
CVE-2002-2043
SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and 1.5.27 allows remote attackers to execute arbitrary SQL commands and log in as arbitrary POP mail users via the password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sasl
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0020.html, http://www.iss.net/security_center/static/8748.php, http://www.securityfocus.com/bid/4409
CVE-2002-0041
Unknown vulnerability in Mail for SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, when running with the -R option, allows local and remote attackers to cause a core dump.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20020401-01-P, http://www.ciac.org/ciac/bulletins/m-067.shtml, http://www.iss.net/security_center/static/8835.php
CVE-2002-0908
Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTPS request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ids_device_manager
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0214.html, http://www.iss.net/security_center/static/9174.php, http://www.securityfocus.com/bid/4760
CVE-2002-1779
The "block fragmented IP Packets" option in Symantec Norton Personal Firewall 2002 (NPW) does not properly protect against certain attacks on Windows vulnerabilities such as jolt2 (CVE-2000-0305).
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: norton_personal_firewall
References: http://online.securityfocus.com/archive/1/267850, http://securityresponse.symantec.com/avcenter/security/Content/2002.05.16.html, http://www.securityfocus.com/bid/4545
CVE-2002-1315
Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability in conjunction with another issue (CVE-2002-1316).
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: iplanet_web_server
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0078.html, http://marc.info/?l=bugtraq&m=103772308030269&w=2, http://sunsolve.sun.com/search/document.do?assetkey=1-26-49475-1
CVE-2002-1415
Format string vulnerability in SMTP service for WebEasyMail 3.4.2.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in SMTP requests.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: webeasymail
References: http://online.securityfocus.com/archive/1/288222, http://www.iss.net/security_center/static/9924.php, http://www.securityfocus.com/bid/5518
CVE-2002-0549
Cross-site scripting vulnerabilities in Anthill allow remote attackers to execute script as other Anthill users.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: anthill
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0089.html, http://www.iss.net/security_center/static/8770.php, http://www.securityfocus.com/bid/4442
CVE-2002-1875
Entercept Agent 2.5 agent for Windows, released before May 21, 2002, allows local administrative users to obtain the entercept agent password, which could allow the administrators to log on as the entercept_agent account and conceal their identity.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: entercept_agent
References: http://www.derkeiler.com/Mailing-Lists/NT-Bugtraq/2002-07/0010.html, http://www.iss.net/security_center/static/9546.php, http://www.securityfocus.com/bid/5206
CVE-2002-0762
shadow package in SuSE 8.0 allows local users to destroy the /etc/passwd and /etc/shadow files or assign extra group privileges to some users by changing filesize limits before calling programs that modify the files.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux
References: http://www.iss.net/security_center/static/9102.php, http://www.novell.com/linux/security/advisories/2002_17_shadow.html, http://www.securityfocus.com/bid/4757
CVE-2002-1084
The VerifyLogin function in ezContents 1.41 and earlier does not properly halt program execution if a user fails to log in properly, which allows remote attackers to modify and view restricted information via HTTP POST requests.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: ezcontents
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html, http://online.securityfocus.com/archive/1/284229, http://www.iss.net/security_center/static/9711.php
CVE-2002-2433
NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote authenticated users to cause a denial of service (abend) via a crafted ABOR command.
CVSS v2.0 Score: 4.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Affected Products: netware_ftp_server, netware
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1, http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2002-1801
ImageFolio 2.23 through 2.27 allows remote attackers to obtain sensitive information via a nonexistent image category, which leaks the web root in the resulting error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: imagefolio
References: http://online.securityfocus.com/archive/1/276133, http://www.iss.net/security_center/static/9308.php, http://www.securityfocus.com/bid/4976
CVE-2002-0113
EMC NetWorker (formerly Legato NetWorker) before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which allows local users to read sensitive information and possibly gain privileges.  NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: networker
References: http://online.securityfocus.com/archive/1/249420, http://www.iss.net/security_center/static/7897.php, http://www.securityfocus.com/bid/3840
CVE-2002-0980
The Web Folder component for Internet Explorer 5.5 and 6.0 writes an error message to a known location in the temporary folder, which allows remote attackers to execute arbitrary code by injecting it into the error message, then referring to the error message file via a mhtml: URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://marc.info/?l=bugtraq&m=102942234427691&w=2, http://marc.info/?l=ntbugtraq&m=102937705527922&w=2, http://marc.info/?l=vuln-dev&m=102943486811091&w=2
CVE-2002-0255
The default configuration of Arescom NetDSL 800 does not require authentication, which allows remote attackers to cause a denial of service or reconfigure the router.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: netdsl
References: http://marc.info/?l=bugtraq&m=101323620111951&w=2, http://www.iss.net/security_center/static/8125.php, http://www.securityfocus.com/bid/4066
CVE-2002-1963
Linux kernel 2.4.1 through 2.4.19 sets root's NR_RESERVED_FILES limit to 10 files, which allows local users to cause a denial of service (resource exhaustion) by opening 10 setuid binaries.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: http://online.securityfocus.com/archive/1/281100, http://www.iss.net/security_center/static/9515.php, http://www.securityfocus.com/archive/1/281359
CVE-2002-2341
Cross-site scripting (XSS) vulnerability in content blocking in SonicWALL SOHO3 6.3.0.0 allows remote attackers to inject arbitrary web script or HTML via a blocked URL.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: soho3
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://online.securityfocus.com/archive/1/272935, http://www.iss.net/security_center/static/9103.php, http://www.securityfocus.com/bid/4755
CWE: CWE-79
CVE-2002-1706
Cisco IOS software 11.3 through 12.2 running on Cisco uBR7200 and uBR7100 series Universal Broadband Routers allows remote attackers to modify Data Over Cable Service Interface Specification (DOCSIS) settings via a DOCSIS file without a Message Integrity Check (MIC) signature, which is approved by the router.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: ios, ubr7200, ubr7100
Related CWEs: CWE-347
Related CAPECs: CAPEC-475, CAPEC-463
References: http://www.cisco.com/warp/public/707/cmts-MD5-bypass-pub.shtml, http://www.securityfocus.com/bid/5041, https://exchange.xforce.ibmcloud.com/vulnerabilities/9368
CWE: CWE-347
CVE-2002-2129
Cross-site scripting vulnerability (XSS) in editform.php for w-Agora 4.1.5 allows remote attackers to execute arbitrary web script via an arbitrary form field name containing the script, which is echoed back to the user when displaying the form.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: w-agora
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0222.html, http://archives.neohapsis.com/archives/bugtraq/2002-12/0225.html, http://www.securityfocus.com/bid/6464
CVE-2002-1221
BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid expiry times, which are removed from the internal BIND database and later cause a null dereference.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: bind, openbsd, freebsd
References: http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21469, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000546, http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html
CVE-2002-0530
Cross-site scripting vulnerability in Novell Web Search 2.0.1 allows remote attackers to execute arbitrary script as other Web Search users via the search parameter.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: web_search
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0010.html, http://seclists.org/bugtraq/2002/Apr/0126.html, http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0010.html
CVE-2002-2446
GE Healthcare Millennium MG, NC, and MyoSIGHT has a password of insite.genieacq for the insite account that cannot be changed without disabling product functionality for remote InSite support, which has unspecified impact and attack vectors.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: millennium_nc_firmware, millennium_mg_firmware, millennium_myosight_firmware
Related CWEs: CWE-255
References: http://apps.gehealthcare.com/servlet/ClientServlet/2338955-100.pdf?REQ=RAA&DIRECTION=2338955-100&FILENAME=2338955-100.pdf&FILEREV=1&DOCREV_ORG=1, http://apps.gehealthcare.com/servlet/ClientServlet/2354459-100.pdf?REQ=RAA&DIRECTION=2354459-100&FILENAME=2354459-100.pdf&FILEREV=4&DOCREV_ORG=4, http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/
CWE: CWE-255
CVE-2002-0795
The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attack on X Windows lock files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: freebsd
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:27.rc.asc, http://www.iss.net/security_center/static/9217.php, http://www.osvdb.org/5083
CVE-2002-1979
WatchGuard SOHO products running firmware 5.1.6 and earlier, and Vclass/RSSA using 3.2 SP1 and earlier, allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP server, which generates a response that contains the string, causing IPFilter to treat the response as if it were a legitimate PASV command from the server.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: legacy_rssa, vclass, soho
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://www.kb.cert.org/vuls/id/328867, http://www.kb.cert.org/vuls/id/AAMN-5EQR65, http://www.kb.cert.org/vuls/id/328867
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2002-1489
Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long URL or (2) a request with a long method name.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: planetweb
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0166.html, http://archives.neohapsis.com/archives/bugtraq/2002-10/0236.html, http://www.iss.net/security_center/static/10124.php
CVE-2002-1281
Unknown vulnerability in the rlogin KIO subsystem (rlogin.protocol) of KDE 2.x 2.1 and later, and KDE 3.x 3.0.4 and earlier, allows local and remote attackers to execute arbitrary code via a certain URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: kde
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-012.0.txt, http://marc.info/?l=bugtraq&m=103712550205730&w=2, http://marc.info/?l=bugtraq&m=103728981029342&w=2
CVE-2002-0665
Macromedia JRun Administration Server allows remote attackers to bypass authentication on the login form via an extra slash (/) in the URL.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: jrun
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0133.html, http://marc.info/?l=bugtraq&m=102529402127195&w=2, http://www.iss.net/security_center/static/9450.php
CVE-2002-0941
The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, as used by the TrustedCodeTool and possibly other applications, may leak a passphrase when the user aborts an application that is prompting for the passphrase, which could allow attackers to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: nforce, nshield
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0172.html, http://www.iss.net/security_center/static/9354.php, http://www.securityfocus.com/bid/5024
CVE-2002-1459
Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is off, allows remote attackers to insert arbitrary script or HTML via message fields including (1) From, (2) E-Mail, and (3) Subject.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: l-forum
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0115.html, http://sourceforge.net/tracker/download.php?group_id=53716&atid=471343&file_id=26687&aid=579278, http://sourceforge.net/tracker/index.php?func=detail&aid=579278&group_id=53716&atid=471343
CVE-2002-1677
14all.cgi 1.1p15 in mrtgconfig allows remote attackers to determine the physical path to the web root directory via a request with an invalid cfg parameter, which generates an error message that reveals the path.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mrtgconfig
References: http://archives.neohapsis.com/archives/bugtraq/2002-01/0421.html, http://online.securityfocus.com/archive/1/254278, http://www.securityfocus.com/bid/4021
CVE-2002-0871
xinetd 2.3.4 leaks file descriptors for the signal pipe to services that are launched by xinetd, which could allow those services to cause a denial of service via the pipe.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: xinetd
References: http://marc.info/?l=bugtraq&m=102935383506155&w=2, http://www.iss.net/security_center/static/9844.php, http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-053.php
CVE-2002-0505
Memory leak in the Call Telephony Integration (CTI) Framework authentication for Cisco CallManager 3.0 and 3.1 before 3.1(3) allows remote attackers to cause a denial of service (crash and reload) via a series of authentication failures, e.g. via incorrect passwords.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: call_manager
References: http://www.cisco.com/warp/public/707/callmanager-ctifw-leak-pub.shtml, http://www.iss.net/security_center/static/8655.php, http://www.securityfocus.com/bid/4370
CVE-2002-0277
Add2it Mailman Free 1.73 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the list parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mailman_free
References: http://marc.info/?l=bugtraq&m=101371994219708&w=2, http://www.add2it.com/scripts/mailman-free-history.shtml, http://www.iss.net/security_center/static/8202.php
CVE-2002-1841
The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: nola
Related CWEs: CWE-434
Related CAPECs: CAPEC-1
MITRE ATT&CK Techniques: T1574.010
MITRE ATT&CK Tactics: T1574
References: http://marc.info/?l=vuln-dev&m=102511114021370&w=2, http://marc.info/?l=vuln-dev&m=102520790718208&w=2, http://online.securityfocus.com/archive/1/280340
CWE: CWE-434
MITRE ATT&CK techniques: T1574.010
MITRE ATT&CK tactics: T1574
CVE-2002-1866
Simple Web Server (SWS) 0.0.4 through 0.1.0 does not close file descriptors for 404 error messages, which could allow remote attackers to cause a denial of service (file descriptor exhaustion) via multiple requests for pages that do not exist.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sws_simple_web_server
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0047.html, http://www.iss.net/security_center/static/10071.php, http://www.securityfocus.com/bid/5659
CVE-2002-1428
index.php in dotProject 0.2.1.5 allows remote attackers to bypass authentication via a cookie or URL with the user_cookie parameter set to 1.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: dotproject
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0366.html, http://www.iss.net/security_center/static/9720.php, http://www.securityfocus.com/bid/5347
CVE-2002-1011
Buffer overflow in web server for Tivoli Management Framework (TMF) Endpoint 3.6.x through 3.7.1, before Fixpack 2, allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tivoli_management_framework
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0023.html, http://online.securityfocus.com/archive/1/282292, http://www.iss.net/security_center/static/9555.php
CVE-2002-1244
Format string vulnerability in Pablo FTP Server 1.5, 1.3, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format strings in the USER command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pablo_ftp_server
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0057.html, http://marc.info/?l=bugtraq&m=103642642802889&w=2, http://www.iss.net/security_center/static/10532.php
CVE-2002-0367
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.
CVSS v3.1 Score: 7.8 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_nt
Related CWEs: CWE-269
Related CAPECs: CAPEC-122, CAPEC-233, CAPEC-58
MITRE ATT&CK Techniques: T1548
WARNING: This vulnerability is in CISA's Known Exploited Vulnerabilities (KEV) catalog
References: http://marc.info/?l=ntbugtraq&m=101614320402695&w=2, http://www.iss.net/security_center/static/8462.php, http://www.securityfocus.com/archive/1/262074
CWE: CWE-269
MITRE ATT&CK techniques: T1548
CVE-2002-0642
The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, has insecure permissions, which allows local users to gain privileges, aka "Incorrect Permission on SQL Server Service Account Registry Key."
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sql_server, msde
References: http://www.cert.org/advisories/CA-2002-22.html, http://www.iss.net/security_center/static/9523.php, http://www.kb.cert.org/vuls/id/796313
CVE-2002-0196
GetRelativePath in ACD Incorporated CwpAPI 1.1 only verifies if the server root is somewhere within the path, which could allow remote attackers to read or write files outside of the web root, in other directories whose path includes the web root.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: cwpapi
References: http://online.securityfocus.com/archive/1/251699, http://sourceforge.net/forum/forum.php?forum_id=144966, http://www.iss.net/security_center/static/7981.php
CVE-2002-1599
DansGuardian before 2.4.5-1 allows remote attackers to bypass content filtering rules via hex-encoded URLs.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: dansguardian
References: http://dansguardian.org/?page=history, http://dansguardian.org/?page=knownbugs, http://www.kb.cert.org/vuls/id/940203
CVE-2002-1588
Mailtool for OpenWindows 3.6, 3.6.1, and 3.6.2 allows remote attackers to cause a denial of service (mailtool segmentation violation and crash) via a malformed mail attachment.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openwindows
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-48216-1, http://www.securityfocus.com/bid/6279, https://exchange.xforce.ibmcloud.com/vulnerabilities/10732
CVE-2002-0437
Smsd in SMS Server Tools (SMStools) before 1.4.8 allows remote attackers to execute arbitrary commands via shell metacharacters (backquotes) in message text, as described with the term "string format vulnerability" by some sources.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sms_server_tools
References: http://archives.neohapsis.com/archives/bugtraq/2002-03/0103.html, http://www.isis.de/members/~s.frings/smstools/history.html, http://www.iss.net/security_center/static/8433.php
CVE-2002-2231
Cross-site scripting (XSS) vulnerability in Ikonboard 3.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) a javascript: URL in a photo URL or (2) an X-Forwarded-For: header.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: ikonboard
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0073.html, http://www.iss.net/security_center/static/10797.php, http://www.securityfocus.com/bid/6342
CWE: CWE-79
CVE-2002-1071
ZyXEL Prestige 642R allows remote attackers to cause a denial of service in the Telnet, FTP, and DHCP services (crash) via a TCP packet with both the SYN and ACK flags set.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: prestige
References: http://online.securityfocus.com/archive/1/277242, http://online.securityfocus.com/archive/1/277303, http://online.securityfocus.com/archive/1/277307
CVE-2002-0997
Buffer overflows in IMAP Agent (imapd) for Novell NetMail (NIMS) 3.0.3 before 3.0.3A allows remote attackers to cause a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netmail_xe, netmail
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0152.html, http://support.novell.com/servlet/tidfinder/2962974, http://www.iss.net/security_center/static/9559.php
CVE-2002-0990
The web proxy component in Symantec Enterprise Firewall (SEF) 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociRaptor, and Symantec Gateway Security allow remote attackers to cause a denial of service (connection resource exhaustion) via multiple connection requests to domains whose DNS server is unresponsive or does not exist, which generates a long timeout.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: gateway_security, raptor_firewall, velociraptor, enterprise_firewall
References: http://marc.info/?l=bugtraq&m=103463869503124&w=2, http://securityresponse.symantec.com/avcenter/security/Content/2002.10.11.html, http://www.iss.net/security_center/static/10364.php
CVE-2002-1686
Buffer overflow in lscfg of unknown versions of AIX has unknown impact.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://archives.neohapsis.com/archives/aix/2002-q1/0005.html, http://archives.neohapsis.com/archives/aix/2002-q1/0005.html
CVE-2002-1397
Vulnerability in the cash_words() function for PostgreSQL 7.2 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a large negative argument, possibly triggering an integer signedness error or buffer overflow.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: postgresql
References: http://developer.postgresql.org/cvsweb.cgi/pgsql-server/src/backend/utils/adt/cash.c.diff?r1=1.51&r2=1.52, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000524, http://marc.info/?l=bugtraq&m=102977465204357&w=2
CVE-2002-2177
BEA WebLogic Server and Express 6.1 through 7.0.0.1 buffers HTTP requests in a way that can cause BEA to send the same response for two different HTTP requests, which could allow remote attackers to obtain sensitive information that was intended for other users.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: weblogic_server
References: http://dev2dev.bea.com/pub/advisory/38, http://www.iss.net/security_center/static/10221.php, http://www.securityfocus.com/bid/5819
CVE-2002-2234
NetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: screenos
Related CWEs: CWE-16
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0093.html, http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0094.html, http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-11/0338.html
CWE: CWE-16