DuyTa/cve-kgrag-db huggingface dataset:
CVE-2002-0888
3Com OfficeConnect Remote 812 ADSL Router, firmware 1.1.9 and 1.1.7, allows remote attackers to bypass port access restrictions by connecting to an approved port and quickly connecting to the desired port, which is allowed by the router.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: 3cp4144
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0230.html, http://archives.neohapsis.com/archives/bugtraq/2002-06/0102.html, http://www.iss.net/security_center/static/9185.php
CVE-2002-1569
gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the filename for (1) a PDF file or (2) a gzip file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gv, ghostview
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0033.html, http://marc.info/?l=bugtraq&m=103348446009076&w=2, http://www.epita.fr/~bevand_m/asa/asa-0000
CVE-2002-1449
eUpload 1.0 stores the password.txt password file in plaintext under the web document root, which allows remote attackers to overwrite arbitrary files by reading password.txt.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: eupload
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0412.html, http://www.iss.net/security_center/static/9733.php, http://www.securityfocus.com/bid/5369
CVE-2002-0232
Directory traversal vulnerability in Multi Router Traffic Grapher (MRTG) allows remote attackers to read portions of arbitrary files via a .. (dot dot) in the cfg parameter for (1) 14all.cgi, (2) 14all-1.1.cgi, (3) traffic.cgi, or (4) mrtg.cgi.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: multi_router_traffic_grapher_cgi
References: http://marc.info/?l=bugtraq&m=101266821909189&w=2, http://www.iss.net/security_center/static/8062.php, http://www.securityfocus.com/bid/4017
CVE-2002-0330
Cross-site scripting vulnerability in codeparse.php of Open Bulletin Board (OpenBB) 1.0.0 allows remote attackers to execute arbitrary script and steal cookies via Javascript in the IMG tag.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openbb
References: http://community.iansoft.net/read.php?TID=5159, http://marc.info/?l=bugtraq&m=101466092601554&w=2, http://www.iss.net/security_center/static/8278.php
CVE-2002-0293
FTP service in Alcatel OmniPCX 4400 allows the "halt" user to gain root privileges by modifying root's .profile file.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: omnipcx
References: http://marc.info/?l=bugtraq&m=101413767925869&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/8225, http://marc.info/?l=bugtraq&m=101413767925869&w=2
CVE-2002-0394
Red-M 1050 (Bluetooth Access Point) uses case insensitive passwords, which makes it easier for attackers to conduct a brute force guessing attack due to the smaller space of possible passwords.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: 1050ap_lan_acess_point
References: http://www.atstake.com/research/advisories/2002/a060502-1.txt, http://www.iss.net/security_center/static/9263.php, http://www.atstake.com/research/advisories/2002/a060502-1.txt
CVE-2002-0706
UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows remote attackers to decrypt the administrative password using a hard-coded key in a Javascript function.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: web_filter, superscout_web_filter
References: http://marc.info/?l=bugtraq&m=103359690824103&w=2, http://www.iss.net/security_center/static/10247.php, http://www.osvdb.org/3491
CVE-2002-1880
LokwaBB 1.2.2 allows remote attackers to read arbitrary messages by modifying the pmid parameter to pm.php.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: lokwabb
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0055.html, http://www.ifrance.com/kitetoua/tuto/LokwaBB.txt, http://archives.neohapsis.com/archives/bugtraq/2002-06/0055.html
CVE-2002-2431
Unspecified vulnerability in GoAhead WebServer before 2.1.4 allows remote attackers to cause "incorrect behavior" via unknown "malicious code," related to incorrect use of the socketInputBuffered function by sockGen.c.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: goahead_webserver
References: http://data.goahead.com/Software/Webserver/2.1.8/release.htm#fixed-vulnerability-to-malicious-code-in-sockgen-c, http://data.goahead.com/Software/Webserver/2.1.8/release.htm#fixed-vulnerability-to-malicious-code-in-sockgen-c
CVE-2002-1435
class.atkdateattribute.js.php in Achievo 0.7.0 through 0.9.1, except 0.8.2, allows remote attackers to execute arbitrary PHP code when the 'allow_url_fopen' setting is enabled via a URL in the config_atkroot parameter that points to the code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: achievo
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0235.html, http://www.achievo.org/lists/2002/Aug/msg00092.html, http://www.iss.net/security_center/static/9947.php
CVE-2002-0818
wwwoffled in World Wide Web Offline Explorer (WWWOFFLE) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a negative Content-Length value.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wwwoffle
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-048.0.txt, http://archives.neohapsis.com/archives/bugtraq/2002-07/0194.html, http://marc.info/?l=bugtraq&m=102821890317683&w=2
CVE-2002-0912
in.uucpd UUCP server in Debian GNU/Linux 2.2, and possibly other operating systems, does not properly terminate long strings, which allows remote attackers to cause a denial of service, possibly due to a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: debian_linux
References: http://www.debian.org/security/2002/dsa-129, http://www.iss.net/security_center/static/9230.php, http://www.securityfocus.com/bid/4910
CVE-2002-1382
Macromedia Flash Player before 6.0.65.0 allows remote attackers to execute arbitrary code via certain malformed data headers in Shockwave Flash file format (SWF) files, a different issue than CAN-2002-0846.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: flash_player
References: http://marc.info/?l=bugtraq&m=104014220727109&w=2, http://marc.info/?l=vulnwatch&m=104013370116670, http://www.macromedia.com/v1/handlers/index.cfm?ID=23569
CVE-2002-1317
Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux, x11r6, solaris, sunos, irix
References: ftp://patches.sgi.com/support/free/security/advisories/20021202-01-I, http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21541, http://marc.info/?l=bugtraq&m=103825150527843&w=2
CVE-2002-1037
Cross-site scripting vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to inject arbitrary HTML, including script, into web pages via the (1) Ticket# Find, (2) Priorities, (3) Severities, (4) Projects, (5) WO# Find, (6) Departments and (7) Users features.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: double_choco_latte
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0022.html, http://dcl.sourceforge.net/index.php, http://marc.info/?l=bugtraq&m=102668783632589&w=2
CVE-2002-0377
Gaim 0.57 stores sensitive information in world-readable and group-writable files in the /tmp directory, which allows local users to access MSN web email accounts of other users who run Gaim by reading authentication information from the files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: gaim
References: http://archives.neohapsis.com/archives/vuln-dev/2002-q2/0584.html, http://gaim.sourceforge.net/ChangeLog, http://marc.info/?l=bugtraq&m=102130733815285&w=2
CVE-2002-0901
Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow (1) remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certain local users to execute arbitrary code via long command line arguments to the programs (2) amcheck, (3) amgetidx, (4) amtrmidx, (5) createindex-dump, or (6) createindex-gnutar.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: amanda
References: http://online.securityfocus.com/archive/1/274215, http://www.iss.net/security_center/static/9181.php, http://www.iss.net/security_center/static/9182.php
CVE-2002-0556
Directory traversal vulnerability in Quik-Serv HTTP server 1.1B allows remote attackers to read arbitrary files via a .. (dot dot) in a URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: quik-serv_webserver
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0051.html, http://www.iss.net/security_center/static/8754.php, http://www.securityfocus.com/bid/4425
CVE-2002-0153
Internet Explorer 5.1 for Macintosh allows remote attackers to bypass security checks and invoke local AppleScripts within a specific HTML element, aka the "Local Applescript Invocation" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ie
References: http://www.iss.net/security_center/static/8851.php, http://www.osvdb.org/5356, http://www.securityfocus.com/archive/1/251805
CVE-2002-0228
Microsoft MSN Messenger allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information such as display names and web site navigation, and possibly more when the user is connected to certain Microsoft sites (or DNS-spoofed sites).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: msn_messenger
References: http://online.securityfocus.com/archive/1/254021, http://www.iss.net/security_center/static/8084.php, http://www.securityfocus.com/bid/4028
CVE-2002-0303
GroupWise 6, when using LDAP authentication and when Post Office has a blank username and password, allows attackers to gain privileges of other users by logging in without a password.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: groupwise
References: http://marc.info/?l=bugtraq&m=101425369510983&w=2, http://www.securityfocus.com/bid/4154, http://marc.info/?l=bugtraq&m=101425369510983&w=2
CVE-2002-0213
xkas in Xinet K-AShare 0.011.01 for IRIX allows local users to read arbitrary files via a symlink attack on the VOLICON file, which is copied to the .HSicon file in a shared directory.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: k-ashare, irix
References: ftp://patches.sgi.com/support/free/security/advisories/20020604-01-I, http://marc.info/?l=bugtraq&m=101223525118717&w=2, http://www.iss.net/security_center/static/8002.php
CVE-2002-1117
Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: backup_exec
References: http://marc.info/?l=bugtraq&m=103134395124579&w=2, http://marc.info/?l=bugtraq&m=103134930629683&w=2, http://seer.support.veritas.com/docs/238618.htm
CVE-2002-0078
The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone by embedding the script in a cookie, aka the "Cookie-based Script Execution" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://marc.info/?l=bugtraq&m=101781180528301&w=2, http://www.iss.net/security_center/static/8701.php, http://www.osvdb.org/3029
CVE-2002-1389
Buffer overflow in typespeed 0.4.2 and earlier allows local users to gain privileges via long input.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: typespeed
References: http://www.debian.org/security/2002/dsa-217, http://www.securityfocus.com/bid/6485, https://exchange.xforce.ibmcloud.com/vulnerabilities/10936
CVE-2002-1787
Buffer overflow in uux in eoe.sw.uucp package of SGI IRIX 6.5 through 6.5.17 allows local users to execute arbitrary code via unknown attack vectors.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20020903-02-P, http://www.ciac.org/ciac/bulletins/n-004.shtml, http://www.iss.net/security_center/static/10274.php
CVE-2002-1635
The Apache configuration file (httpd.conf) in Oracle 9i Application Server (9iAS) uses a Location alias for /perl directory instead of a ScriptAlias, which allows remote attackers to read the source code of arbitrary CGI files via a URL containing the /perl directory instead of /cgi-bin.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: application_server
References: http://www.kb.cert.org/vuls/id/936507, http://www.nextgenss.com/papers/hpoas.pdf, https://exchange.xforce.ibmcloud.com/vulnerabilities/10716
CVE-2002-1818
ezhttpbench.php in eZ httpbench 1.1 allows remote attackers to read arbitrary files via a full pathname in the AnalyseSite parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: httpbench
References: http://online.securityfocus.com/archive/1/299235, http://www.iss.net/security_center/static/10589.php, http://www.securityfocus.com/bid/6153
CVE-2002-1432
MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: metacart, salescart-pro, midicart_asp, midicart_asp_plus, salescart-std
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0074.html, http://www.iss.net/security_center/static/9816.php, http://www.securityfocus.com/bid/5438
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-2002-0450
Buffer overflow in Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long Web Markup Language (wml) file name to (1) webplus.dll or (2) webplus.exe.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: web\+_server
References: http://cert.uni-stuttgart.de/archive/bugtraq/2002/03/msg00208.html, http://www.iss.net/security_center/static/8446.php, http://www.securityfocus.com/bid/4282
CVE-2002-1942
Imatix Xitami 2.5 b5 does not properly terminate certain Keep-Alive connections that have been broken or closed early, which allows remote attackers to cause a denial of service (crash) via a large number of concurrent sessions.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: xitami
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0507.html, http://archives.neohapsis.com/archives/bugtraq/2002-07/0516.html, http://www.iss.net/security_center/static/9751.php
CVE-2002-1641
Multiple buffer overflows in Oracle Web Cache for Oracle 9i Application Server (9iAS) allow remote attackers to execute arbitrary code via unknown vectors.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: application_server_web_cache
References: http://www.kb.cert.org/vuls/id/291555, http://www.nextgenss.com/vna/ora-webcache.txt, http://www.securityfocus.com/bid/4856
CVE-2002-0058
Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in (1) Netscape 6.0 through 6.1 and 4.79 and earlier, (2) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, and possibly other implementations that use vulnerable versions of SDK or JDK.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: virtual_machine, jre, sdk, jdk
References: http://marc.info/?l=bugtraq&m=101534535304228&w=2, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/216, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-013
CVE-2002-1992
Buffer overflow in jrun.dll in ColdFusion MX, when used with IIS 4 or 5, allows remote attackers to cause a denial of service in IIS via (1) a long template file name or (2) a long HTTP header.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: coldfusion_professional, coldfusion
References: http://www.iss.net/security_center/static/9460.php, http://www.macromedia.com/v1/handlers/index.cfm?ID=23161, http://www.securityfocus.com/bid/5121
CVE-2002-1616
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: tru64
References: http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html, http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html, http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html
CVE-2002-1640
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to inject arbitrary web script or HTML via (1) Text Features in the DHTML UI or (2) the test parameter to the oracle.apps.cz.servlet.UiServlet servlet.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: configurator
References: http://securitytracker.com/id?1003967, http://www.oracle.com/technology//deploy/security/htdocs/oconfigvul.html, http://www.securityfocus.com/bid/4430
CVE-2002-0880
Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allow remote attackers to cause a denial of service (crash) via malformed packets as demonstrated by (1) "jolt", (2) "jolt2", (3) "raped", (4) "hping2", (5) "bloop", (6) "bubonic", (7) "mutant", (8) "trash", and (9) "trash2."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: voip_phone_cp-7940, skinny_client_control_protocol_software
References: http://www.cisco.com/warp/public/707/multiple-ip-phone-vulnerabilities-pub.shtml, http://www.cisco.com/warp/public/707/multiple-ip-phone-vulnerabilities-pub.shtml
CVE-2002-1253
Abuse 2.00 and earlier allows local users to gain privileges via command line arguments that specify alternate Lisp scripts that run at escalated privileges, which can contain functions that execute commands or modify files.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: abuse
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0055.html, http://www.idefense.com/advisory/11.01.02.txt, http://www.iss.net/security_center/static/11300.php
CVE-2002-2015
PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and possibly execute code via the caselist parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: postnuke
References: http://archives.neohapsis.com/archives/bugtraq/2002-03/0345.html, http://www.iss.net/security_center/static/8699.php, http://www.securityfocus.com/bid/4381
CVE-2002-1916
Pirch and RusPirch, when auto-log is enabled, allows remote attackers to cause a denial of service (crash) via a nickname containing an MS-DOS device name such as AUX, which is inserted into a filename for saving queries.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ruspirch, pirch_irc
References: http://www.iss.net/security_center/static/10395.php, http://www.securiteam.com/windowsntfocus/6F00A205QQ.html, http://www.iss.net/security_center/static/10395.php
CVE-2002-0325
Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: badblue
References: http://marc.info/?l=bugtraq&m=101474689126219&w=2, http://www.iss.net/security_center/static/8295.php, http://www.securityfocus.com/bid/4179
CVE-2002-1712
Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the NetBIOS port (TCP/139), as demonstrated by stream3.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000, windows_nt
References: http://online.securityfocus.com/archive/1/252616, http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq280446, http://www.securityfocus.com/bid/3967
CVE-2002-1063
Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of FTP PASV requests, which consumes all available FTP ports.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: jana_web_server
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html, http://www.iss.net/security_center/static/9687.php, http://www.securityfocus.com/bid/5325
CVE-2002-0239
Buffer overflow in hanterm 3.3.1 and earlier allows local users to execute arbitrary code via a long string in the (1) -fn, (2) -hfb, or (3) -hfn argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hanterm
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:41.hanterm.asc, http://marc.info/?l=bugtraq&m=101310874106455&w=2, http://online.securityfocus.com/archive/1/255168
CVE-2002-1092
Cisco VPN 3000 Concentrator 3.6(Rel) and earlier, and 2.x.x, when configured to use internal authentication with group accounts and without any user accounts, allows remote VPN clients to log in using PPTP or IPSEC user authentication.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vpn_3000_concentrator_series_software
References: http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml, http://www.securityfocus.com/bid/5613, https://exchange.xforce.ibmcloud.com/vulnerabilities/10017
CVE-2002-1781
Multiple buffer overflows in DeleGate 7.7.0 through 7.8.1 allow remote attackers to execute arbitrary code, as demonstrated using a long USER command to the POP proxy.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: delegate
References: http://archives.neohapsis.com/archives/bugtraq/2002-02/0051.html, http://online.securityfocus.com/archive/1/256117, http://www.globalintersec.com/adv/delegate-2002012101.txt
CVE-2002-1676
BindView NetInventory 1.0, when used with NetRC 1.0, allows local users to read sensitive information (passwords) by deleting the HOSTCFG._NI file and forcing an audit, which rewrites the HOSTCFG._NI to HOSTCFG.INI and stores the passwords in cleartext until the audit is complete.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: netrc, netinventory
References: http://online.securityfocus.com/archive/1/252293, http://online.securityfocus.com/archive/1/256056, http://www.securityfocus.com/bid/3957
CVE-2002-0591
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: instant_messenger
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0203.html, http://www.iss.net/security_center/static/8870.php, http://www.securityfocus.com/bid/4526
CVE-2002-0215
Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi file by requesting a non-existent .html file, which leaks the pathname in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: agora.cgi
References: http://online.securityfocus.com/archive/1/252761, http://www.iss.net/security_center/static/8011.php, http://www.securityfocus.com/bid/3976
CVE-2002-0201
Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request, possibly triggering a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: cyberstop_web_server
References: http://marc.info/?l=bugtraq&m=101174569103289&w=2, http://www.iss.net/security_center/static/7960.php, http://www.securityfocus.com/bid/3930
CVE-2002-2429
webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request that contains a negative integer in the Content-Length header.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: goahead_webserver
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://data.goahead.com/Software/Webserver/2.1.8/release.htm#fixed-vulnerability-to-malicious-code-in-webs-c, http://data.goahead.com/Software/Webserver/2.1.8/release.htm#fixed-vulnerability-to-malicious-code-in-webs-c
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2002-1736
Unknown vulnerability in CGINews before 1.06 allow remote attackers to read arbitrary files via "unfiltered user input."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cginews
References: http://securitytracker.com/id?1003506, https://exchange.xforce.ibmcloud.com/vulnerabilities/8187, http://securitytracker.com/id?1003506
CVE-2002-2225
SafeNet VPN client allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly involving buffer overflows using (1) a large Security Parameter Index (SPI) field, (2) a large number of payloads, or (3) a long payload.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: softremote_vpn_client
References: http://www.kb.cert.org/vuls/id/287771, http://www.kb.cert.org/vuls/id/AAMN-59VTUQ, http://www.safenet-inc.com/knowledgebase/read_item.asp?ID=375
CVE-2002-1882
Unknown vulnerability in AolSecurityPrivate.class in Oracle E-Business Suite 11i 11.1 through 11.6 allows remote attackers to bypass user authentication checks via unknown attack vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: e-business_suite
References: http://www.iss.net/security_center/static/10285.php, http://www.oracle.com/technology/deploy/security/pdf/2002alert44rev1.pdf, http://www.securityfocus.com/bid/5901
CVE-2002-0120
Apple Palm Desktop 4.0b76 and 4.0b77 creates world-readable backup files and folders when a hotsync is performed, which could allow a local user to obtain sensitive information.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: palm_desktop
References: http://online.securityfocus.com/archive/1/250093, http://www.iss.net/security_center/static/7937.php, http://www.securityfocus.com/bid/3863
CVE-2002-1338
The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist, which allows remote attackers to determine the existence of local files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: office_web_components
References: http://marc.info/?l=bugtraq&m=101830175621193&w=2, http://security.greymagic.com/adv/gm008-ie/, http://www.kb.cert.org/vuls/id/156123
CVE-2002-0031
Buffer overflows in Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary code via a ymsgr URI with long arguments to (1) call, (2) sendim, (3) getimv, (4) chat, (5) addview, or (6) addfriend.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: messenger
References: http://online.securityfocus.com/archive/1/274223, http://www.cert.org/advisories/CA-2002-16.html, http://www.kb.cert.org/vuls/id/137115
CVE-2002-1863
Iomega Network Attached Storage (NAS) A300U, and possibly other models, does not allow the FTP service to be disabled, which allows local users to access home directories via FTP even when access to all shared directories have been disabled.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: network_attached_storage
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0440.html, http://www.iss.net/security_center/static/10530.php, http://archives.neohapsis.com/archives/bugtraq/2002-10/0440.html
CVE-2002-0846
The decoder for Macromedia Shockwave Flash allows remote attackers to execute arbitrary code via a malformed SWF header that contains more data than the specified length.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: shockwave_flash
References: http://marc.info/?l=bugtraq&m=103072708329280&w=2, http://www.iss.net/security_center/static/9798.php, http://www.macromedia.com/v1/handlers/index.cfm?ID=23293
CVE-2002-1726
secure_inc.php in PhotoDB 1.4 allows remote attackers to bypass authentication via a URL with a large Time parameter, non-empty rmtusername and rmtpassword parameter, and an accesslevel parameter that is lower than the access level of the requested page.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: photodb
References: http://online.securityfocus.com/archive/82/270970, http://www.ifrance.com/kitetoua/tuto/5holes4.txt, http://www.securityfocus.com/bid/4669
CVE-2002-1228
Unknown vulnerability in NFS on Solaris 2.5.1 through Solaris 9 allows an NFS client to cause a denial of service by killing the lockd daemon.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sunos, solaris
References: http://marc.info/?l=bugtraq&m=103487058823193&w=2, http://sunsolve.sun.com/search/document.do?assetkey=1-26-47815-1, http://www.iss.net/security_center/static/10394.php
CVE-2002-1118
TNS Listener in Oracle Net Services for Oracle 9i 9.2.x and 9.0.x, and Oracle 8i 8.1.x, allows remote attackers to cause a denial of service (hang or crash) via a SERVICE_CURLOAD command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: oracle8i, oracle9i
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0017.html, http://otn.oracle.com/deploy/security/pdf/2002alert42rev1.pdf, http://www.iss.net/security_center/static/10283.php
CVE-2002-2130
publish_xp_docs.php in Gallery 1.3.2 allows remote attackers to execute arbitrary PHP code by modifying the GALLERY_BASEDIR parameter to reference a URL on a remote web server that contains the code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gallery
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0260.html, http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=64&mode=thread&order=0&thold=0, http://www.iss.net/security_center/static/10943.php
CVE-2002-2371
Linksys WET11 firmware 1.31 and 1.32 allows remote attackers to cause a denial of service (crash) via a packet containing the device's hardware address as the source MAC address in the DLC header.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: wet11
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0045.html, http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00375.html, http://www.iss.net/security_center/static/10472.php
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2002-0693
Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink function, or (2) script containing a long argument to the showHelp function.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_nt, windows_me, windows_98se, windows_98
References: http://marc.info/?l=bugtraq&m=103365849505409&w=2, http://marc.info/?l=bugtraq&m=103419115517344&w=2, http://marc.info/?l=bugtraq&m=103435279404182&w=2
CVE-2002-1197
bugzilla_email_append.pl in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, allows remote attackers to execute arbitrary code via shell metacharacters in a system call to processmail.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bugzilla
References: http://bugzilla.mozilla.org/show_bug.cgi?id=163024, http://marc.info/?l=bugtraq&m=103349804226566&w=2, http://www.iss.net/security_center/static/10234.php
CVE-2002-2140
Buffer overflow in Cisco PIX Firewall 5.2.x to 5.2.8, 6.0.x to 6.0.3, 6.1.x to 6.1.3, and 6.2.x to 6.2.1 allows remote attackers to cause a denial of service via HTTP traffic authentication using (1) TACACS+ or (2) RADIUS.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: pix_firewall_software
References: http://www.ciac.org/ciac/bulletins/n-017.shtml, http://www.cisco.com/warp/public/707/pix-multiple-vuln-pub.shtml, http://www.iss.net/security_center/static/10661.php
CVE-2002-0906
Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malicious DNS server.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sendmail
References: http://www.iss.net/security_center/static/9443.php, http://www.kb.cert.org/vuls/id/814627, http://www.securityfocus.com/bid/5122
CVE-2002-0532
EMU Webmail allows local users to execute arbitrary programs via a .. (dot dot) in the HTTP Host header that points to a Trojan horse configuration file that contains a pageroot specifier that contains shell metacharacters.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: emumail_unix, emumail_red_hat_linux, emumail
References: http://online.securityfocus.com/archive/1/266930, http://www.iss.net/security_center/static/8836.php, http://www.osvdb.org/5270
CVE-2002-1759
The upload function in PHProjekt 2.0 through 3.1 does not properly verify certain variables related to uploaded data, which allows remote attackers to cause PHProjekt to process arbitrary files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: phprojekt
References: http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00361.html, http://www.securityfocus.com/bid/4597, https://exchange.xforce.ibmcloud.com/vulnerabilities/8944
CVE-2002-1155
Buffer overflow in KON kon2 0.3.9b and earlier allows local users to execute arbitrary code via a long -Coding command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://marc.info/?l=bugtraq&m=105474080512376&w=2, http://marc.info/?l=bugtraq&m=105577912106710&w=2, http://www.mandriva.com/security/advisories?name=MDKSA-2003:064
CVE-2002-2121
SurfControl SuperScout Email filter for SMTP 3.5.1 allows remote attackers to cause a denial of service (crash) via a long SMTP (1) HELO or (2) RCPT TO command, possibly due to a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: superscout_email_filter
References: http://marc.info/?l=vuln-dev&m=101569966118410&w=2, http://www.iss.net/security_center/static/8424.php, http://www.securityfocus.com/bid/4257
CVE-2002-1924
PowerChute plus 5.0.2 creates a "Pwrchute" directory during installation that is shared and world writeable, which could allow remote attackers to modify or create files in that directory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: powerchute
References: http://online.securityfocus.com/archive/1/277930, http://www.iss.net/security_center/static/9413.php, http://www.security.nnov.ru/news2064.html
CVE-2002-2298
PHP remote file inclusion vulnerability in config.php in Thatware 0.3 through 0.5.3 allows remote attackers to execute arbitrary PHP code via the root_path parameter.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: thatware
Related CWEs: CWE-94
Related CAPECs: CAPEC-242, CAPEC-77, CAPEC-35
MITRE ATT&CK Techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK Tactics: T1564, T1027
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0000.html, http://securitytracker.com/id?1005733, https://exchange.xforce.ibmcloud.com/vulnerabilities/10758
CWE: CWE-94
MITRE ATT&CK techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK tactics: T1564, T1027
CVE-2002-2412
Winamp 2.80 stores authentication credentials in plaintext in the (1) [HTTP-AUTH] and (2) [winamp] sections in winamp.ini, which allows local users to gain access to other accounts.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: winamp
Related CWEs: CWE-255
References: http://online.securityfocus.com/archive/1/273257, http://www.iss.net/security_center/static/9114.php, http://www.securityfocus.com/bid/4781
CWE: CWE-255
CVE-2002-2201
The Printer Administration module for Webmin 0.990 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the printer name.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: webmin
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc, http://www.iss.net/security_center/static/10052.php, http://www.webmin.com/updates.html
CVE-2002-2291
Calisto Internet Talker 0.04 and earlier allows remote attackers to cause a denial of service (hang) via a long request, possibly triggering a buffer overflow.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: calisto_internet_talker
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0090.html, http://online.securityfocus.com/archive/1/300986, http://securityreason.com/securityalert/3241
CWE: CWE-119
CVE-2002-0962
Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script via (1) the url variable in the Link field of a calendar event, (2) the topic parameter in index.php, or (3) the title parameter in comment.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: geeklog
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0058.html, http://geeklog.sourceforge.net/article.php?story=20020610013358149, http://www.iss.net/security_center/static/9309.php
CVE-2002-1479
Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local users to modify databases as the Cacti user and possibly gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cacti
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0028.html, http://www.iss.net/security_center/static/10049.php, http://www.knights-of-the-routing-table.org/advisories/krt_001_20020903_cacti.txt
CVE-2002-1518
mv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory, which could allow local users to modify files and directories.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20020903-01-P, http://www.ciac.org/ciac/bulletins/n-004.shtml, http://www.iss.net/security_center/static/10276.php
CVE-2002-2363
VJE.VJE-RUN in HP-UX 11.00 adds bin to /etc/PATH, which could allow local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
Related CWEs: CWE-264
References: http://archives.neohapsis.com/archives/hp/2002-q3/0064.html, http://www.iss.net/security_center/static/9993.php, http://www.securityfocus.com/bid/5583
CWE: CWE-264
CVE-2002-0272
Buffer overflows in mpg321 before 0.2.9 allows local and possibly remote attackers to execute arbitrary code via a long URL to (1) a command line option, (2) an HTTP request, or (3) an FTP request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mpg321
References: http://marc.info/?l=bugtraq&m=101366518310823&w=2, http://marc.info/?l=vuln-dev&m=101355590918475&w=2, http://sourceforge.net/project/shownotes.php?release_id=79237
CVE-2002-2075
ICQ 2001a and 2002b allows remote attackers to cause a denial of service (memory consumption and hang) via a contact message with a large contacts number.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: icq
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0295.html, http://www.iss.net/security_center/static/8909.php, http://archives.neohapsis.com/archives/bugtraq/2002-04/0295.html
CVE-2002-0745
Buffer overflow in uucp in AIX 4.3.3.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://archives.neohapsis.com/archives/aix/2002-q2/0005.html, http://archives.neohapsis.com/archives/aix/2002-q2/0005.html
CVE-2002-0227
KICQ 2.0.0b1 allows remote attackers to cause a denial of service (crash) via a malformed message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: kicq, kde
References: http://marc.info/?l=bugtraq&m=101266856410129&w=2, http://www.iss.net/security_center/static/8064.php, http://www.securityfocus.com/bid/4018
CVE-2002-1121
SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 ("Message Fragmentation and Reassembly") and supported in such products as Outlook Express, which allows remote attackers to bypass content filtering, including virus checking, via fragmented emails of the message/partial content type.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mailsecurity, canit, interscan_viruswall, webshield_smtp, mimedefang
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0134.html, http://archives.neohapsis.com/archives/bugtraq/2002-09/0135.html, http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0113.html
CVE-2002-0430
MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php.
CVSS v2.0 Score: 3.7 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P
Affected Products: cobalt_raq_3i, cobalt_raq_4, cobalt_raq_2
References: http://archives.neohapsis.com/archives/bugtraq/2002-03/0081.html, http://www.securityfocus.com/bid/4252, http://archives.neohapsis.com/archives/bugtraq/2002-03/0081.html
CVE-2002-1094
Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: vpn_3002_hardware_client, vpn_3000_concentrator_series_software
References: http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml, http://www.iss.net/security_center/static/10020.php, http://www.securityfocus.com/bid/5621
CVE-2002-2090
Caucho Technology Resin server 2.1.1 to 2.1.2 allows remote attackers to obtain server's root path via requests for MS-DOS device names such as lpt9.xtp.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: resin
References: http://seclists.org/bugtraq/2002/Jul/0186.html, http://www.securityfocus.com/bid/5252, http://seclists.org/bugtraq/2002/Jul/0186.html
CVE-2002-0285
Outlook Express 5.5 and 6.0 on Windows treats a carriage return ("CR") in a message header as if it were a valid carriage return/line feed combination (CR/LF), which could allow remote attackers to bypass virus protection and or other filtering mechanisms via a mail message with headers that only contain the CR, which causes Outlook to create separate headers.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: outlook_express
References: http://marc.info/?l=bugtraq&m=101362077701164&w=2, http://www.iss.net/security_center/static/8198.php, http://www.securityfocus.com/bid/4092
CVE-2002-1232
Memory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large number of requests for a map that does not exist.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: debian_linux, linux, secure_os
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-054.0.txt, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000539, http://marc.info/?l=bugtraq&m=103582692228894&w=2
CVE-2002-0296
The installation of Tarantella Enterprise 3 allows local users to overwrite arbitrary files via a symlink attack on the "spinning" temporary file.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: tarantella_enterprise
References: http://archives.neohapsis.com/archives/bugtraq/2002-02/0187.html, http://marc.info/?l=bugtraq&m=101467193803592&w=2, http://www.securityfocus.com/bid/4115
CVE-2002-1443
The Google toolbar 1.1.58 and earlier allows remote web sites to monitor a user's input into the toolbar via an "onkeydown" event handler.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: toolbar
References: http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0066.html, http://online.securityfocus.com/archive/1/286527, http://sec.greymagic.com/adv/gm001-mc/