DuyTa/cve-kgrag-db huggingface dataset:
CVE-2002-0306
ans.pl in Avenger's News System (ANS) 2.11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the p (plugin) parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: avengers_news_system
References: http://marc.info/?l=bugtraq&m=101430868616112&w=2, http://www.securityfocus.com/bid/4149, http://marc.info/?l=bugtraq&m=101430868616112&w=2
CVE-2002-0333
Directory traversal vulnerability in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to read files with short names, and local users to read more files using a symlink with a short name, via a .. in the TTY argument.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: xtell
References: http://marc.info/?l=bugtraq&m=101494896516467&w=2, http://www.debian.org/security/2002/dsa-121, http://www.iss.net/security_center/static/8313.php
CVE-2002-0529
HP Photosmart printer driver for Mac OS X installs the hp_imaging_connectivity program and the hp_imaging_connectivity.app directory with world-writable permissions, which allows local users to gain privileges of other Photosmart users by replacing hp_imaging_connectivity with a Trojan horse.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: photosmart_print_driver
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0169.html, http://www.iss.net/security_center/static/8856.php, http://www.securityfocus.com/bid/4518
CVE-2002-2006
The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: tomcat
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0311.html, http://secunia.com/advisories/30899, http://secunia.com/advisories/30908
CVE-2002-2056
Cross-site scripting (XSS) vulnerability in TeeKai Forum 1.2 allows remote attackers to inject arbitrary web script or HTML via the valid_username_online cookie.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: teekai_forum
References: http://marc.info/?l=vuln-dev&m=102313697923798&w=2, http://www.ifrance.com/kitetoua/tuto/Teekai.txt, http://marc.info/?l=vuln-dev&m=102313697923798&w=2
CVE-2002-0217
Cross-site scripting (CSS) vulnerabilities in the Private Message System for XOOPS 1.0 RC1 allow remote attackers to execute Javascript on other web clients via (1) the Title field or a Private Message Box or (2) the image field parameter in pmlite.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xoops
References: http://online.securityfocus.com/archive/1/252828, http://www.iss.net/security_center/static/8025.php, http://www.iss.net/security_center/static/8030.php
CVE-2002-0864
The Remote Data Protocol (RDP) version 5.1 in Microsoft Windows XP allows remote attackers to cause a denial of service (crash) when Remote Desktop is enabled via a PDU Confirm Active data packet that does not set the Pattern BLT command, aka "Denial of Service in Remote Desktop."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000, windows_2000_terminal_services, windows_xp, .net_windows_server
References: http://marc.info/?l=bugtraq&m=103235745116592&w=2, http://marc.info/?l=bugtraq&m=103236181522253&w=2, http://www.iss.net/security_center/static/10120.php
CVE-2002-1493
Cross-site scripting (XSS) vulnerability in Lycos HTMLGear guestbook allows remote attackers to inject arbitrary script via (1) STYLE attributes or (2) SRC attributes in an IMG tag.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: htmlgear_guestgear
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0198.html, http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0132.html, http://www.securityfocus.com/bid/5728
CVE-2002-0131
ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prevent a script from reading files from the client's filesystem, which allows remote attackers to read arbitrary files via a malicious web page containing Python script.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: activepython
References: http://marc.info/?t=101113015900001&r=1&w=2, http://www.iss.net/security_center/static/7910.php, http://www.securityfocus.com/archive/1/250814
CVE-2002-1994
advserver.exe in Advanced Web Server (AdvServer) Professional 1.030000 allows remote attackers to cause a denial of service via multiple HTTP requests containing a single carriage return/line feed (CRLF) sequence.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: advanced_web_server_professional
References: http://elaboration.8bit.co.uk/projects/texts/advisories/AdvServer.DoS.txt, http://online.securityfocus.com/archive/1/278181, http://www.iss.net/security_center/static/9410.php
CVE-2002-1485
The AIM component of Trillian 0.73 and 0.74 allows remote attackers to cause a denial of service (crash) via certain strings such as "P > O < C".
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: trillian
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0282.html, http://www.securityfocus.com/bid/5783, http://archives.neohapsis.com/archives/bugtraq/2002-09/0282.html
CVE-2002-1111
print_all_bug_page.php in Mantis 0.17.3 and earlier does not verify the limit_reporters option, which allows remote attackers to view bug summaries for bugs that would otherwise be restricted.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mantis
Related CWEs: CWE-264
References: http://mantisbt.sourceforge.net/advisories/2002/2002-02.txt, http://marc.info/?l=bugtraq&m=102978873620491&w=2, http://www.debian.org/security/2002/dsa-153
CWE: CWE-264
CVE-2002-1153
IBM Websphere 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with long HTTP headers, such as "Host".
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: websphere_application_server
References: ftp://ftp.software.ibm.com/software/websphere/appserv/support/fixes/pq62144/readme.txt, http://marc.info/?l=bugtraq&m=103244572803950&w=2, http://www.iss.net/security_center/static/10140.php
CVE-2002-0848
Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type of Password Authentication Protocol (PAP) or Challenge, sends the user password in cleartext in a validation retry request, which could allow remote attackers to steal passwords via sniffing.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: vpn_5000_concentrator_series_software, vpn_5000_concentrator
References: http://www.cisco.com/warp/public/707/vpn5k-radius-pap-vuln-pub.shtml, http://www.iss.net/security_center/static/9781.php, http://www.securityfocus.com/bid/5417
CVE-2002-1245
Maped in LuxMan 0.41 uses the user-provided search path to find and execute the gzip program, which allows local users to modify /dev/mem and gain privileges via a modified PATH environment variable that points to a Trojan horse gzip program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: luxman
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0062.html, http://marc.info/?l=bugtraq&m=103660334009855&w=2, http://www.debian.org/security/2002/dsa-189
CVE-2002-2049
configure for Dsniff 2.3, fragroute 1.2, and fragrouter 1.6, when downloaded from monkey.org on May 17, 2002, has been modified to contain a backdoor, which allows remote attackers to access the system.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: fragrouter, dsniff, fragroute
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0281.html, http://www.freebsd.org/cgi/query-pr.cgi?pr=38716, http://www.iss.net/security_center/static/9272.php
CVE-2002-0572
FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from restricted files by closing the file descriptors 0 (standard input), 1 (standard output), or 2 (standard error), which may then be reused by a called setuid process that intended to perform I/O on normal files.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openbsd, sunos, freebsd, solaris
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:23.stdio.asc, http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0033.html, http://online.securityfocus.com/archive/1/268970
CVE-2002-1251
Buffer overflow in log2mail before 0.2.5.1 allows remote attackers to execute arbitrary code via a long log message.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: log2mail
References: http://www.debian.org/security/2002/dsa-186, http://www.iss.net/security_center/static/10527.php, http://www.securityfocus.com/bid/6089
CVE-2002-1307
Cross-site scripting vulnerability (XSS) in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML via an email message with the script in a MIME header name.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: mhonarc
References: http://www.debian.org/security/2002/dsa-199, http://www.mhonarc.org/archive/cgi-bin/mesg.cgi?a=mhonarc-users&i=200210211713.g9LHDXE02256%40mcguire.earlhood.com, http://www.osvdb.org/7353
CVE-2002-1413
RCONAG6 for Novell Netware SP2, while running RconJ in secure mode, allows remote attackers to bypass authentication using the RconJ "Secure IP" (SSL) option during a connection.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netware
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0216.html, http://support.novell.com/servlet/tidfinder/2963349, http://www.iss.net/security_center/static/9928.php
CVE-2002-0869
Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_information_server, internet_information_services
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0059.html, http://marc.info/?l=bugtraq&m=103642839205574&w=2, http://www.ciac.org/ciac/bulletins/n-011.shtml
CVE-2002-0381
The TCP implementation in various BSD operating systems (tcp_input.c) does not properly block connections to broadcast addresses, which could allow remote attackers to bypass intended filters via packets with a unicast link layer address and an IP broadcast address.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: netbsd, openbsd, freebsd
References: ftp://patches.sgi.com/support/free/security/advisories/20030604-01-I, http://cvsweb.netbsd.org/bsdweb.cgi/syssrc/sys/netinet/tcp_input.c.diff?r1=1.136&r2=1.137, http://online.securityfocus.com/archive/1/262733
CVE-2002-1703
Cross-site scripting vulnerability (XSS) in auction.cgi for Mewsoft NetAuction 3.0 allows remote attackers to execute arbitrary script as other users via the Term parameter.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: netauction
References: http://online.securityfocus.com/archive/1/277049, http://www.securityfocus.com/bid/5023, https://exchange.xforce.ibmcloud.com/vulnerabilities/9365
CVE-2002-1012
Buffer overflow in web server for Tivoli Management Framework (TMF) ManagedNode 3.6.x through 3.7.1 allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tivoli_management_framework
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0024.html, http://online.securityfocus.com/archive/1/282283, http://www.iss.net/security_center/static/9556.php
CVE-2002-0876
Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: shambala_server
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0282.html, http://online.securityfocus.com/archive/1/281265, http://www.iss.net/security_center/static/9225.php
CVE-2002-1460
L-Forum 2.40 and earlier does not properly verify whether a file was uploaded or if the associated variables were set by POST (attachment, attachment_name, attachment_size and attachment_type), which allows remote attackers to read arbitrary files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: l-forum
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0115.html, http://sourceforge.net/tracker/download.php?group_id=53716&atid=471343&file_id=26687&aid=579278, http://sourceforge.net/tracker/index.php?func=detail&aid=579278&group_id=53716&atid=471343
CVE-2002-1762
Microsoft Baseline Security Analyzer (MBSA) 1.0 stores security scans in a known location C:\Documents and Settings\username\SecurityScans in plaintext, which could allow remote attackers to obtain sensitive information about the system via malicious active content such as ActiveX controls or Java.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: baseline_security_analyzer
References: http://online.securityfocus.com/archive/1/269408, http://www.securityfocus.com/bid/4594, https://exchange.xforce.ibmcloud.com/vulnerabilities/8947
CVE-2002-0586
Format string vulnerability in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote attackers to execute arbitrary code via the Error or Notice parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aol_server
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0195.html, http://sourceforge.net/tracker/index.php?func=detail&aid=533141&group_id=3152&atid=303152, http://www.iss.net/security_center/static/8860.php
CVE-2002-2281
Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute arbitrary Java commands via an applet that uses a jump call, which is not correctly compiled by the JIT compiler.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: java
References: http://marc.info/?l=bugtraq&m=103798147613151&w=2, http://www.lsd-pl.net/documents/javasecurity-1.0.0.pdf, http://www.securityfocus.com/bid/6222
CVE-2002-1933
The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, which could allow local users to gain access to the terminal server window.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000_terminal_services
References: http://online.securityfocus.com/archive/1/288415, http://www.iss.net/security_center/static/9946.php, http://www.securityfocus.com/bid/5535
CVE-2002-0295
Alcatel OmniPCX 4400 installs files with world-writable permissions, which allows local users to reconfigure the system and possibly gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: omnipcx
References: http://marc.info/?l=bugtraq&m=101413767925869&w=2, http://www.securityfocus.com/bid/4133, http://marc.info/?l=bugtraq&m=101413767925869&w=2
CVE-2002-0204
Buffer overflow in GNU Chess (gnuchess) 5.02 and earlier, if modified or used in a networked capacity contrary to its own design as a single-user application, may allow local or remote attackers to execute arbitrary code via a long command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: chess
References: http://marc.info/?l=bugtraq&m=101189688815514&w=2, http://www.iss.net/security_center/static/7991.php, http://www.securityfocus.com/bid/3949
CVE-2002-2062
Cross-site scripting (XSS) vulnerability in ftp.htt in Internet Explorer 5.5 and 6.0, when running on Windows 2000 with "Enable folder view for FTP sites" and "Enable Web content in folders" selected, allows remote attackers to inject arbitrary web script or HTML via the hostname portion of an FTP URL.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: internet_explorer
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0037.html, http://www.geocities.co.jp/SiliconValley/1667/advisory02e.html, http://www.iss.net/security_center/static/9290.php
CVE-2002-1537
admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form fields such as "u".
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: phpbb
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0385.html, http://www.iss.net/security_center/static/10489.php, http://www.osvdb.org/4284
CVE-2002-0585
Unknown vulnerability in ndd for HP-UX 11.11 with certain TRANSPORT patches allows attackers to cause a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: hp-ux
References: http://archives.neohapsis.com/archives/hp/2002-q2/0034.html, http://www.iss.net/security_center/static/9020.php, http://www.securityfocus.com/bid/4680
CVE-2002-2263
The installation program for HP-UX Visualize Conference B.11.00.11 running on HP-UX 11.00 and 11.11 installs /etc/dt and its subdirecties with insecure permissions, which allows local users to read or write arbitrary files.
CVSS v2.0 Score: 6.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:N
Affected Products: hp-ux, visualize_conference_ftp
Related CWEs: CWE-16
References: http://www.securityfocus.com/advisories/4766, http://www.securityfocus.com/bid/6357, https://exchange.xforce.ibmcloud.com/vulnerabilities/10838
CWE: CWE-16
CVE-2002-0664
The default Access Control Lists (ACLs) of the administration database for ZMerge 4.x and 5.x provides arbitrary users (including anonymous users) with Manager level access, which allows the users to read or modify import/export scripts.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: zmerge
References: http://marc.info/?l=bugtraq&m=103134154721846&w=2, http://www.iss.net/security_center/static/10057.php, http://www.securityfocus.com/bid/5101
CVE-2002-1714
Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to cause a denial of service (crash) via an object of type "text/html" with the DATA field that identifies the HTML document that contains the object, which may cause infinite recursion.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ie, internet_explorer
References: http://online.securityfocus.com/archive/1/268776, http://www.securityfocus.com/bid/4564, https://exchange.xforce.ibmcloud.com/vulnerabilities/8904
CVE-2002-1900
Cross-site scripting (XSS) vulnerability in Pinboard 1.0 allows remote attackers to inject arbitrary web script or HTML via tasklists.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: pinboard
References: http://www.securityfocus.com/bid/4988, http://www.securityfocus.com/bid/4988
CVE-2002-0567
Oracle 8i and 9i with PL/SQL package for External Procedures (EXTPROC) allows remote attackers to bypass authentication and execute arbitrary functions by using the TNS Listener to directly connect to the EXTPROC process.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: oracle8i, database_server, oracle9i
References: http://marc.info/?l=bugtraq&m=101301332402079&w=2, http://otn.oracle.com/deploy/security/pdf/plsextproc_alert.pdf, http://www.cert.org/advisories/CA-2002-08.html
CVE-2002-1560
index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by setting the login parameter to true.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: gbook
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0328.html, http://www.iss.net/security_center/static/10455.php, http://www.securityfocus.com/bid/6033
CVE-2002-1873
Microsoft Exchange 2000, when used with Microsoft Remote Procedure Call (MSRPC), allows remote attackers to cause a denial of service (crash or memory consumption) via malformed MSRPC calls.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: exchange_server
Related CWEs: CWE-400
Related CAPECs: CAPEC-147, CAPEC-492, CAPEC-227
MITRE ATT&CK Techniques: T1499
References: http://online.securityfocus.com/archive/1/286220, http://www.iss.net/security_center/static/9789.php, http://www.securityfocus.com/bid/5412
CWE: CWE-400
MITRE ATT&CK techniques: T1499
CVE-2002-2088
The MOSIX Project clump/os 5.4 creates a default VNC account without a password, which allows remote attackers to gain root access.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: clump_os
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0327.html, http://www.iss.net/security_center/static/8928.php, http://www.securityfocus.com/bid/4581
CVE-2002-1914
dump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention) by using flock() to lock the /etc/dumpdates file.
CVSS v3.1 Score: 5.5 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: dump
Related CWEs: CWE-667
Related CAPECs: CAPEC-25, CAPEC-27, CAPEC-26
MITRE ATT&CK Techniques: T1499.004
MITRE ATT&CK Tactics: T1499
References: http://online.securityfocus.com/archive/1/283033, http://secunia.com/advisories/21520, http://support.avaya.com/elmodocs2/security/ASA-2006-156.htm
CWE: CWE-667
MITRE ATT&CK techniques: T1499.004
MITRE ATT&CK tactics: T1499
CVE-2002-0077
Microsoft Internet Explorer 5.01, 5.5 and 6.0 treats objects invoked on an HTML page with the codebase property as part of Local Computer zone, which allows remote attackers to invoke executables present on the local system through objects such as the popup object, aka the "Local Executable Invocation via Object tag" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://marc.info/?l=bugtraq&m=101103188711920&w=2, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-015, http://marc.info/?l=bugtraq&m=101103188711920&w=2
CVE-2002-0454
Qpopper (aka in.qpopper or popper) 4.0.3 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a very large string, which causes an infinite loop.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: qpopper
References: ftp://ftp.qualcomm.com/eudora/servers/unix/popper/qpopper4.0.4.tar.gz, http://www.iss.net/security_center/static/8458.php, http://www.securityfocus.com/archive/1/262213
CVE-2002-1009
Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the (1) "Name" or (2) "E-mail" parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: lil_http_server
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0112.html, http://www.iss.net/security_center/static/9548.php, http://www.securityfocus.com/bid/5211
CVE-2002-2301
Lawson Financials 8.0, when configured to use a third party relational database, stores usernames and passwords in a world-readable file, which allows local users to read the passwords and log onto the database.
CVSS v2.0 Score: 3.3 (LOW)
CVSS v2.0 Vector: AV:L/AC:M/Au:N/C:P/I:P/A:N
Affected Products: lawson_financials
Related CWEs: CWE-255
References: http://seclists.org/lists/bugtraq/2002/Dec/0012.html, http://www.securityfocus.com/bid/6293, https://exchange.xforce.ibmcloud.com/vulnerabilities/10742
CWE: CWE-255
CVE-2002-0406
Menasoft SPHERE server 0.99x and 0.5x allows remote attackers to cause a denial of service by establishing a large number of connections to the server without providing login credentials, which prevents other users from being able to log in.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sphereserver
References: http://online.securityfocus.com/archive/1/259334, http://www.iss.net/security_center/static/8338.php, http://www.securityfocus.com/bid/4258
CVE-2002-1585
Unknown vulnerability in Solaris 8 for Intel and Solaris 8 and 9 for SPARC allows remote attackers to cause a denial of service via certain packets that cause some network interfaces to stop responding to TCP traffic.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-48601-1, http://www.securityfocus.com/bid/6147, https://exchange.xforce.ibmcloud.com/vulnerabilities/10600
CVE-2002-0792
The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to cause a denial of service (soft reset) via (1) an HTTPS POST request, or (2) malformed XML data.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: webns, content_services_switch_11000
References: http://www.cisco.com/warp/public/707/css-http-post-pub.shtml, http://www.iss.net/security_center/static/9083.php, http://www.kb.cert.org/vuls/id/330275
CVE-2002-2296
Cross-site scripting (XSS) vulnerability in YaBB.pl in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 allows remote attackers to inject arbitrary web script or HTML via the num parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: yabb
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0003.html, http://www.securityfocus.com/bid/6272, https://exchange.xforce.ibmcloud.com/vulnerabilities/10737
CWE: CWE-79
CVE-2002-0176
The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: libsafe
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0070.html, http://online.securityfocus.com/archive/1/263121, http://www.iss.net/security_center/static/8594.php
CVE-2002-2107
Cross-site scripting (XSS) vulnerability in the lookup script in Veridis OpenKeyServer (OKS) 1.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: openkeyserver
References: http://www.iss.net/security_center/static/8651.php, http://www.securiteam.com/securitynews/5BP0R1P6KE.html, http://www.securityfocus.com/bid/4369
CVE-2002-0442
Buffer overflow in dlvr_audit for Caldera OpenServer 5.0.5 and 5.0.6 allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openserver
References: ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.8/CSSA-2002-SCO.8.txt, http://www.iss.net/security_center/static/8442.php, http://www.securityfocus.com/bid/4273
CVE-2002-0629
The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service (crash) via multiple connections to the server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: viewstation_sp_384, viewstation_mp, viewstation_v.35, viewstation_dcp, viewstation_fx_vs4000
References: http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21089, http://www.ciac.org/ciac/bulletins/m-123.shtml, http://www.iss.net/security_center/static/9349.php
CVE-2002-2154
Directory traversal vulnerability in Monkey HTTP Daemon 0.1.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: monkey
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0298.html, http://www.iss.net/security_center/static/10188.php, http://www.securityfocus.com/bid/5792
CWE: CWE-22
CVE-2002-0480
ISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d is configured to allow a user "skank" on a machine "starscream" to become a key manager when the "first time connection" feature is enabled and before any legitimate administrators have connected, which could allow remote attackers to gain access to the device during installation.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: realsecure_nokia
References: http://marc.info/?l=bugtraq&m=101666833321138&w=2, http://marc.info/?l=bugtraq&m=101675086010051&w=2, http://marc.info/?l=bugtraq&m=101684141308876&w=2
CVE-2002-1995
Cross-site scripting (XSS) vulnerability in phptonuke.php for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the filnavn parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phptonuke.php
References: http://archives.neohapsis.com/archives/vuln-dev/2002-q1/0048.html, http://www.iss.net/security_center/static/7837.php, http://www.securityfocus.com/bid/3807
CVE-2002-2113
search.cgi in AGH HTMLsearch 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the template parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: htmlsearch
References: http://www.iss.net/security_center/static/8032.php, http://www.securiteam.com/securitynews/5WP0R2K60O.html, http://www.securityfocus.com/bid/3985
CVE-2002-0526
Vulnerability in (1) inews or (2) rnews for INN 2.2.3 and earlier, related to insecure open() calls.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: inn
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0140.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/42803, http://archives.neohapsis.com/archives/bugtraq/2002-04/0140.html
CVE-2002-0218
Format string vulnerability in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via format specifiers in a command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sas_integration_technologies, sas_base
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0032.html, http://online.securityfocus.com/archive/1/252847, http://online.securityfocus.com/archive/1/252891
CVE-2002-0253
PHP, when not configured with the "display_errors = Off" setting in php.ini, allows remote attackers to obtain the physical path for an include file via a trailing slash in a request to a directly accessible PHP program, which modifies the base path, causes the include directive to fail, and produces an error message that contains the path.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: php
References: http://marc.info/?l=bugtraq&m=101318944130790&w=2, http://www.iss.net/security_center/static/8122.php, http://www.securityfocus.com/bid/4063
CVE-2002-2250
Multiple buffer overflows in Sybase Adaptive Server 12.0 and 12.5 allow remote attackers to execute arbitrary code via (1) a long parameter to the xp_freedll extended stored procedure or (2) a long database name argument to the DBCC CHECKVERIFY function.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: adaptive_server
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0080.html, http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0082.html, http://cert.uni-stuttgart.de/archive/bugtraq/2002/11/msg00361.html
CWE: CWE-119
CVE-2002-1463
Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial sequence numbers (ISN), which allows remote attackers to spoof connections.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gateway_security, raptor_firewall, velociraptor, enterprise_firewall
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0492.html, http://www.osvdb.org/855, http://www.securityfocus.com/bid/5387
CVE-2002-1708
Cross-site scripting vulnerability (XSS) in BasiliX Webmail 1.10 allows remote attackers to execute arbitrary script as other users by injecting script into the (1) subject or (2) message fields.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: basilix_webmail
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0117.html, http://online.securityfocus.com/archive/1/277710, http://www.securityfocus.com/bid/5060
CVE-2002-1998
Buffer overflow in rpc.cmsd in SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows remote attackers to execute arbitrary commands via a long parameter to rtable_create (procedure 21).
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: open_unix, unixware
References: ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.12/CSSA-2002-SCO.12.txt, http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-01/0127.html, http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-01/0129.html
CVE-2002-0133
Buffer overflows in Avirt Gateway Suite 4.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long header fields to the HTTP proxy, or (2) a long string to the telnet proxy.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: avirt_gateway, avirt_soho, avirt_gateway_suite
References: http://marc.info/?l=bugtraq&m=101164598828092&w=2, http://marc.info/?l=bugtraq&m=101366658112809&w=2, http://marc.info/?l=bugtraq&m=101424723728817&w=2
CVE-2002-0269
Internet Explorer 5.x and 6 interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote attackers to execute arbitrary script in documents that the user does not expect, possibly through web applications that use a text/plain type to prevent cross-site scripting attacks.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://marc.info/?l=bugtraq&m=101363764421623&w=2, http://marc.info/?l=bugtraq&m=101363764421623&w=2
CVE-2002-0727
The Host function in Microsoft Office Web Components (OWC) 2000 and 2002 is exposed in components that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via the setTimeout method.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: project, office_web_components
References: http://marc.info/?l=bugtraq&m=101829645415486&w=2, http://www.iss.net/security_center/static/8777.php, http://www.osvdb.org/3006
CVE-2002-0286
The GetPassword function in function.php of SiteNews 0.10 and 0.11 allows remote attackers to gain privileges and add users by providing a non-existent user name and the MD5 checksum for an empty password to add_user.php, which causes GetPassword to produce and compare a blank password for the non-existent user.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sitenews
References: http://marc.info/?l=bugtraq&m=101388393808699&w=2, http://www.securityfocus.com/bid/4046, https://exchange.xforce.ibmcloud.com/vulnerabilities/8181
CVE-2002-1990
Resin 2.0.5 through 2.1.2 allows remote attackers to reveal physical path information via a URL request for the example Java class file HelloServlet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: resin
References: http://online.securityfocus.com/archive/1/278747, http://www.iss.net/security_center/static/9419.php, http://www.securityfocus.com/bid/5095
CVE-2002-2124
The recvn and sendn functions in nylon 0.2 do not check when the recv function call returns 0, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) by closing the connection while recv is executing.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: nylon
References: http://secunia.com/advisories/7281, http://www.security-express.com/archives/bugtraq/2002-10/0146.html, http://www.securityfocus.com/bid/5938
CVE-2002-0415
Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow local users to read files that are accessible to RealPlayer via a .. (dot dot) in an HTTP GET request to port 1275.
CVSS v2.0 Score: 1.7 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:S/C:P/I:N/A:N
Affected Products: realplayer
References: http://www.iss.net/security_center/static/8336.php, http://www.securityfocus.com/archive/1/259333, http://www.securityfocus.com/bid/4221
CVE-2002-2126
restrictEnabled in Integrity Protection Driver (IPD) 1.2 delays driver installation for 20 minutes, which allows local users to insert malicious code by setting system clock to an earlier time.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: integrity_protection_driver
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0021.html, http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0087.html, http://www.iss.net/security_center/static/10745.php
CVE-2002-2350
Cross-site scripting (XSS) vulnerability in z_user_show.php in dbtreelistproperty_method.php in Zorum 2.4 allows remote attackers to inject arbitrary web script or HTML via the class parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: zorum
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0152.html, http://www.iss.net/security_center/static/10337.php, http://archives.neohapsis.com/archives/bugtraq/2002-10/0152.html
CWE: CWE-79
CVE-2002-0045
slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls without any values, which causes OpenLDAP to delete non-mandatory attributes that would otherwise be protected by ACLs.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux, openldap
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-001.0.txt, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000459, http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:013
CVE-2002-1549
Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: light_httpd
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0138.html, http://www.iss.net/security_center/static/10607.php, http://www.securityfocus.com/bid/6162
CVE-2002-1497
Cross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and earlier allows remote attackers to insert arbitrary HTML into a "404 Not Found" response.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: null_httpd
References: http://freshmeat.net/releases/97910/, http://www.securityfocus.com/bid/5603, https://exchange.xforce.ibmcloud.com/vulnerabilities/10004
CVE-2002-1512
xbru in BRU Workstation 17.0 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the xbru_dscheck.dd temporary file.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: bru
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0154.html, http://www.iss.net/security_center/static/10101.php, http://www.securityfocus.com/bid/5708
CVE-2002-1453
Cross-site scripting (XSS) vulnerability in MyWebServer 1.0.2 allows remote attackers to insert script and HTML via a long request followed by the malicious script, which is echoed back to the user in an error message.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: mywebserver
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0077.html, http://marc.info/?l=bugtraq&m=102935720109934&w=2, http://www.iss.net/security_center/static/9861.php
CVE-2002-1334
Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi, or (2) nph-build.cgi.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: imagefolio
References: http://marc.info/?l=bugtraq&m=103842773205148&w=2, http://securitytracker.com/id?1005681, http://www.securityfocus.com/bid/6265
CVE-2002-0684
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bind, glibc
References: http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000507, http://marc.info/?l=bugtraq&m=102581482511612&w=2, http://rhn.redhat.com/errata/RHSA-2002-139.html
CVE-2002-1788
Format string vulnerability in the nn_exitmsg function in nn 6.6.0 through 6.6.3 allows remote NNTP servers to execute arbitrary code via format strings in server responses.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: nn
References: http://online.securityfocus.com/archive/1/280639, http://www.iss.net/security_center/static/9491.php, http://www.osvdb.org/27086
CVE-2002-0209
Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing (SLB) and Cookie-Based Persistence features enabled, allows remote attackers to determine the real IP address of a web server with a half-closed session, which causes ACEdirector to send packets from the server without changing the address to the virtual IP address.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: alteon_acedirector
References: http://online.securityfocus.com/archive/1/252455, http://online.securityfocus.com/archive/1/261548, http://www.iss.net/security_center/static/8010.php
CVE-2002-2402
SURECOM broadband router EP-4501 uses a default SNMP read community string of "public" and a default SNMP read/write community string of "secret," which allows remote attackers to read and modify router configuration information.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ep-4501
References: http://marc.info/?l=bugtraq&m=103722782812519&w=2, http://www.iss.net/security_center/static/10621.php, http://www.securityfocus.com/bid/6176
CVE-2002-0874
Vulnerability in Interchange 4.8.6, 4.8.3, and other versions, when running in INET mode, allows remote attackers to read arbitrary files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: interchange
References: http://www.debian.org/security/2002/dsa-150, http://www.debian.org/security/2002/dsa-150
CVE-2002-1936
UTStarcom BAS 1000 3.1.10 creates several default or back door accounts and passwords, which allows remote attackers to gain access via (1) field account with a password of "*field", (2) guru account with a password of "*3noguru", (3) snmp account with a password of "snmp", or (4) dbase account with a password of "dbase".
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bas_1000
References: http://online.securityfocus.com/archive/1/288866, http://www.iss.net/security_center/static/9951.php, http://www.securityfocus.com/bid/5564
CVE-2002-1969
Magic Notebook 1.0b and 1.1b allows remote attackers to cause a denial of service (crash) via an invalid username during login.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: the_magic_notebook
References: http://www.iss.net/security_center/static/10562.php, http://www.securityfocus.com/bid/6106, http://www.iss.net/security_center/static/10562.php
CVE-2002-0481
An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security settings and execute Javascript via an IFRAME in an HTML email message that references .WMS (Windows Media Skin) or other WMP media files, whose onload handlers execute the player.LaunchURL() Javascript function.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: outlook
References: http://online.securityfocus.com/archive/1/263429, http://www.iss.net/security_center/static/8604.php, http://www.securityfocus.com/bid/4340
CVE-2002-1917
CRLF injection vulnerability in the "User Profile: Send Email" feature in Geeklog 1.35 and 1.3.5sr1 allows remote attackers to obtain e-mail addresses by injecting a CRLF into the Subject field and adding a BCC mail header.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: geeklog
References: http://online.securityfocus.com/archive/1/283140, http://www.iss.net/security_center/static/9639.php, http://www.securityfocus.com/bid/5271
CVE-2002-0921
CGIScript.net csNews.cgi allows remote attackers to obtain potentially sensitive information, such as the full server pathname and other configuration settings, via the viewnews command with an invalid database, which leaks the information in error messages.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: csnews
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0091.html, http://www.iss.net/security_center/static/9331.php, http://archives.neohapsis.com/archives/bugtraq/2002-06/0091.html
CVE-2002-0216
userinfo.php in XOOPS 1.0 RC1 allows remote attackers to obtain sensitive information via a SQL injection attack in the "uid" parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: xoops
References: http://online.securityfocus.com/archive/1/252827, http://www.iss.net/security_center/static/8028.php, http://www.securityfocus.com/bid/3977
CVE-2002-1450
IBM UniVerse with UV/ODBC allows attackers to cause a denial of service (client crash or server CPU consumption) via a query with an invalid link between tables, possibly via a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: u2_universe
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0442.html, http://www.iss.net/security_center/static/9736.php, http://archives.neohapsis.com/archives/bugtraq/2002-07/0442.html