DuyTa/cve-kgrag-db huggingface dataset:
CVE-2002-0779
FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service (network connectivity loss) via a connection to port 21 with a large amount of random data.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: bordermanager
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0060.html, http://online.securityfocus.com/archive/1/271475, http://www.iss.net/security_center/static/9031.php
CVE-2002-1874
astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request.  NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: astrocam
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup, http://securitytracker.com/id?1005523, http://www.iss.net/security_center/static/10538.php
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2002-2226
Buffer overflow in tftpd of TFTP32 2.21 and earlier allows remote attackers to execute arbitrary code via a long filename argument.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tftpd32
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://securityreason.com/securityalert/3160, http://tftpd32.jounin.net/, http://www.kb.cert.org/vuls/id/632633
CWE: CWE-119
CVE-2002-0972
Buffer overflows in PostgreSQL 7.2 allow attackers to cause a denial of service and possibly execute arbitrary code via long arguments to the functions (1) lpad or (2) rpad.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: postgresql
References: http://marc.info/?l=bugtraq&m=102987608300785&w=2, http://secunia.com/advisories/8034, http://www.redhat.com/support/errata/RHSA-2003-001.html
CVE-2002-2137
GlobalSunTech Wireless Access Points (1) WISECOM GL2422AP-0T, and possibly OEM products such as (2) D-Link DWL-900AP+ B1 2.1 and 2.2, (3) ALLOY GL-2422AP-S, (4) EUSSO GL2422-AP, and (5) LINKSYS WAP11-V2.2, allow remote attackers to obtain sensitive information like WEP keys, the administrator password, and the MAC filter via a "getsearch" request to UDP port 27155.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: gl-2422ap-s, gl2422ap-0t, wap11, dwl-900ap\+, gl2422_ap
References: http://online.securityfocus.com/archive/1/298432, http://www.iss.net/security_center/static/10536.php, http://www.securityfocus.com/bid/6100
CVE-2002-1411
Directory traversal vulnerability in update.dpgs in Duma Photo Gallery System (DPGS) 0.99.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the id parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: photo_gallery_system
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0265.html, http://www.iss.net/security_center/static/9414.php, http://www.securityfocus.com/bid/5081
CVE-2002-1409
ptrace on HP-UX 11.00 through 11.11 allows local users to cause a denial of service (data page fault panic) via "an incorrect reference to thread register state."
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: hp-ux
References: http://archives.neohapsis.com/archives/hp/2002-q3/0041.html, http://www.iss.net/security_center/static/9818.php, http://www.securityfocus.com/bid/5425
CVE-2002-0060
IRC connection tracking helper module in the netfilter subsystem for Linux 2.4.18-pre9 and earlier does not properly set the mask for conntrack expectations for incoming DCC connections, which could allow remote attackers to bypass intended firewall restrictions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux_kernel
References: http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:041, http://marc.info/?l=bugtraq&m=101483396412051&w=2, http://marc.info/?l=vuln-dev&m=101486352429653&w=2
CVE-2002-0600
Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the client via a long response to a passive (PASV) mode request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: kth_kerberos, lukemftp
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0339.html, http://www.iss.net/security_center/static/8938.php, http://www.securityfocus.com/bid/4592
CVE-2002-2207
Buffer overflow in ssldump 0.9b2 and earlier, when running in decryption mode, allows remote attackers to execute arbitrary code via a long RSA PreMasterSecret.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ssldump
References: http://www.iss.net/security_center/static/10086.php, http://www.rtfm.com/ssldump/, http://www.securityfocus.com/archive/1/291329
CVE-2002-1521
Web Server 4D (WS4D) 3.6 stores passwords in plaintext in the Ws4d.4DD file, which allows attackers to gain privileges.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: web_server_4d
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0128.html, http://www.iss.net/security_center/static/10198.php, http://www.securityfocus.com/bid/5803
CVE-2002-1647
The quick login feature in Slash Slashcode does not redirect the user to an alternate URL when the wrong password is provided, which makes it easier for remote web sites to guess the proper passwords by reading the username and password from the Referrer URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: slash
References: http://marc.info/?l=bugtraq&m=103176636403241&w=2, http://marc.info/?l=bugtraq&m=103177860017930&w=2, http://marc.info/?l=bugtraq&m=103238514720237&w=2
CVE-2002-0220
phpsmssend.php in PhpSmsSend 1.0 allows remote attackers to execute arbitrary commands via an SMS message containing shell metacharacters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpsmssend
References: http://online.securityfocus.com/archive/1/252918, http://www.iss.net/security_center/static/8019.php, http://www.securityfocus.com/bid/3982
CVE-2002-1593
mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a denial of service (CPU consumption) in a preforked multi-processing module.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: http_server
References: http://securitytracker.com/id?1005285, http://www.apache.org/dist/httpd/CHANGES_2.0, http://www.kb.cert.org/vuls/id/406121
CVE-2002-0514
PF in OpenBSD 3.0 with the return-rst rule sets the TTL to 128 in the RST packet, which allows remote attackers to determine if a port is being filtered because the TTL is different than the default TTL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: openbsd
Related CWEs: CWE-203
Related CAPECs: CAPEC-189
References: http://www.iss.net/security_center/static/8738.php, http://www.securityfocus.com/archive/1/265188, http://www.securityfocus.com/bid/4401
CWE: CWE-203
CVE-2002-2264
Unspecified vulnerability in Internet Group Management Protocol (IGMP) of HP Tru64 4.0F through 5.1A allows remote attackers to cause a denial of service via unknown attack vectors.  NOTE: this might be the same issue as CVE-2002-2185, but there are insufficient details to be certain.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: secure_web_server_for_tru64
References: http://archives.neohapsis.com/archives/compaq/2002-q4/0013.html, http://archives.neohapsis.com/archives/compaq/2002-q4/0013.html
CVE-2002-1935
Pingtel Xpressa 1.2.5 through 2.0.1 uses predictable (1) Call-ID, (2) CSeq, and (3) "To" and "From" SIP URL values in a Session Identification Protocol (SIP) request, which allows remote attackers to avoid registering with the SIP registrar.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: xpressa
References: http://online.securityfocus.com/archive/1/288383, http://www.iss.net/security_center/static/9949.php, http://www.securityfocus.com/bid/5537
CVE-2002-2202
Outlook Express 6.0 does not delete messages from dbx files, even when a user empties the Deleted items folder, which allows local users to read other users email.
CVSS v2.0 Score: 3.8 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:S/C:C/I:N/A:N
Affected Products: outlook_express
References: http://www.iss.net/security_center/static/10500.php, http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0210&L=ntbugtraq&F=P&S=&P=5732, http://www.iss.net/security_center/static/10500.php
CVE-2002-0246
Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privileges by modifying the LC_MESSAGE environment variable to read other message catalogs containing format strings from setuid programs such as vxprint.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unixware
References: ftp://stage.caldera.com/pub/security/unixware/CSSA-2002-SCO.3/CSSA-2002-SCO.3.txt, http://online.securityfocus.com/archive/1/255414, http://www.iss.net/security_center/static/8113.php
CVE-2002-0918
CGIScript.net csPassword.cgi leaks sensitive information such as the pathname of the server in debug messages that are presented when the script fails, which allows remote attackers to obtain the information via a "remove" option in the command parameter, which generates an error.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cspassword
References: http://online.securityfocus.com/archive/1/274727, http://www.iss.net/security_center/static/9221.php, http://www.securityfocus.com/bid/4887
CVE-2002-2267
bogopass in bogofilter 0.9.0.4 allows local users to overwrite arbitrary files via a symlink attack on the bogopass temporary file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bogopass_email_filter
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0367.html, http://www.securityfocus.com/bid/6278, https://exchange.xforce.ibmcloud.com/vulnerabilities/10726
CVE-2002-1006
Cross-site scripting (XSS) vulnerability in BBC Education Text to Speech Internet Enhancer (Betsie) 1.5.11 and earlier allows remote attackers to execute arbitrary web script via parserl.pl.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: betsie
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0002.html, http://www.bbc.co.uk/education/betsie/parser.pl.txt, http://www.iss.net/security_center/static/9468.php
CVE-2002-0001
Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mutt
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-002.0.txt, ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:04.mutt.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000449
CVE-2002-0578
Buffer overflow in 4D WebServer 6.7.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP request with Basic Authentication containing a long (1) user name or (2) password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: 4d_webserver
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0013.html, http://www.securityfocus.com/bid/4665, http://archives.neohapsis.com/archives/bugtraq/2002-05/0013.html
CVE-2002-0095
The default configuration of BSCW (Basic Support for Cooperative Work) 3.x and possibly version 4 enables user self registration, which could allow remote attackers to upload files and possibly join a user community that was intended to be closed.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bscw
References: http://www.iss.net/security_center/static/7775.php, http://www.securityfocus.com/archive/1/248000, http://www.securityfocus.com/bid/3777
CVE-2002-0152
Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large number of / characters, which affects Internet Explorer 5.1, Outlook Express 5.0 through 5.0.2, Entourage v. X and 2001, PowerPoint v. X, 2001, and 98, and Excel v. X and 2001 for Macintosh.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: powerpoint, excel, entourage, office, outlook_express
References: http://marc.info/?l=bugtraq&m=101897994314015&w=2, http://www.iss.net/security_center/static/8850.php, http://www.osvdb.org/5357
CVE-2002-1372
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service (resource exhaustion) by causing file descriptors to be assigned and not released, as demonstrated by fanta.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mac_os_x, debian_linux, cups
Related CWEs: CWE-252
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702, http://marc.info/?l=bugtraq&m=104032149026670&w=2
CWE: CWE-252
CVE-2002-1387
The spray mode in traceroute-nanog (aka traceroute-ng) may allow local users to overwrite arbitrary memory locations via an array index overflow using the nprobes (number of probes) argument.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tracesroute
References: http://marc.info/?l=bugtraq&m=103849968732634&w=2, http://marc.info/?l=bugtraq&m=103849968732634&w=2
CVE-2002-0488
Linux Directory Penguin traceroute.pl CGI script 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the host parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_directory_penguin_traceroute
References: http://www.iss.net/security_center/static/8600.php, http://www.linux-directory.com/scripts/traceroute.pl, http://www.securityfocus.com/archive/1/263285
CVE-2002-1103
Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service via (1) malformed or (2) large ISAKMP packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: vpn_3002_hardware_client, vpn_3000_concentrator_series_software
References: http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml, http://www.kb.cert.org/vuls/id/761651, http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml
CVE-2002-1383
Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via (1) the CUPSd HTTP interface, as demonstrated by vanilla-coke, and (2) the image handling code in CUPS filters, as demonstrated by mksun.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mac_os_x, cups
References: ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-004.0.txt, http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html, http://marc.info/?l=bugtraq&m=104032149026670&w=2
CVE-2002-1567
Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: tomcat
References: http://archives.neohapsis.com/archives/vuln-dev/2002-q3/0482.html, http://tomcat.apache.org/security-4.html, https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E
CVE-2002-0607
members.asp in Snitz Forums 2000 version 3.3.03 and earlier allows remote attackers to execute arbitrary code via a SQL injection attack on the parameters (1) M_NAME, (2) UserName, (3) FirstName, (4) LastName, or (5) INITIAL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: snitz_forums_2000
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0279.html, http://forum.snitz.com/forum/topic.asp?TOPIC_ID=26770, http://www.iss.net/security_center/static/8898.php
CVE-2002-1858
Oracle Oracle9i Application Server 1.0.2.2 and 9.0.2 through 9.0.2.0.1, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF.").
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: application_server
References: http://online.securityfocus.com/archive/1/279582, http://otn.oracle.com/deploy/security/pdf/2002alert47rev1.pdf, http://www.iss.net/security_center/static/9446.php
CVE-2002-2285
eTrust InoculateIT 6.0 with the "Incremental Scan" option enabled may certify that a file is free of viruses before the file has been completely downloaded, which allows remote attackers to bypass virus detection.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: inoculateit
Related CWEs: CWE-16
References: http://securitytracker.com/id?1005740, http://www.derkeiler.com/Mailing-Lists/NT-Bugtraq/2002-12/0003.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/10770
CWE: CWE-16
CVE-2002-0757
(1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass authentication and gain privileges via certain control characters in the authentication information, which can force Webmin or Usermin to accept arbitrary username/session ID combinations.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: usermin, webmin
References: http://online.securityfocus.com/archive/1/271466, http://www.iss.net/security_center/static/9037.php, http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-033.php
CVE-2002-1681
Cross-site scripting (XSS) vulnerability in Slashcode CVS releases June 17 through July 1 2002 allows remote attackers to execute arbitrary script as other users by injecting script into the paragraph <P> tag.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: slashcode
References: http://online.securityfocus.com/archive/1/280218, http://online.securityfocus.com/archive/1/280255, http://www.securityfocus.com/bid/5140
CVE-2002-1630
The sendmail.jsp sample page in Oracle 9i Application Server (9iAS) allows remote attackers to send arbitrary emails.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: application_server
References: http://www.kb.cert.org/vuls/id/717827, http://www.kb.cert.org/vuls/id/SVIM-576QLZ, http://www.nextgenss.com/papers/hpoas.pdf
CVE-2002-0821
Buffer overflows in Ethereal 0.9.4 and earlier allow remote attackers to cause a denial of service or execute arbitrary code via (1) the BGP dissector, or (2) the WCP dissector.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ethereal
References: http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000505, http://www.ethereal.com/appnotes/enpa-sa-00005.html, http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000505
CVE-2002-1902
CGIForum 1.0 through 1.05 allows remote attackers to cause a denial of service (infinite recursion) by creating a message board post that is a child of an outdated parent.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: cgiforum
References: http://freshmeat.net/releases/86842/, http://www.iss.net/security_center/static/10055.php, http://www.securityfocus.com/bid/4960
CVE-2002-1810
D-Link DWL-900AP+ Access Point 2.1 and 2.2 allows remote attackers to access the TFTP server without authentication and read the config.img file, which contains sensitive information such as the administrative password, the WEP encryption keys, and network configuration information.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: dwl-900ap\+_firmware, dwl-900ap\+
Related CWEs: CWE-306
Related CAPECs: CAPEC-216, CAPEC-12, CAPEC-36
References: http://online.securityfocus.com/archive/1/296374, http://www.iss.net/security_center/static/10424.php, http://www.securityfocus.com/bid/6015
CWE: CWE-306
CVE-2002-2034
The Email Sanitizer before 1.133 for Procmail allows remote attackers to bypass the mail filter and execute arbitrary code via crafted recursive multipart MIME attachments.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: procmail_email_sanitizer
References: http://www.impsec.org/email-tools/sanitizer-changelog.html, http://www.iss.net/security_center/static/7847.php, http://www.securityfocus.com/bid/3820
CVE-2002-1956
ROX Filer 1.1.9 and 1.2 is installed with world writable permissions, which allows local users to write to arbitrary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: filer
References: http://www.iss.net/security_center/static/9504.php, http://www.securityfocus.com/bid/5172, http://www.iss.net/security_center/static/9504.php
CVE-2002-1897
MyWebServer LLC MyWebServer 1.0.2 allows remote attackers to cause a denial of service (crash) via a long HTTP request, possibly triggering a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mywebserver
References: http://seclists.org/lists/bugtraq/2002/Oct/0177.html, http://www.iss.net/security_center/static/10349.php, http://www.mywebserver.org/us/downloads/whats_new_in_this_version.shtml
CVE-2002-0861
Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy method of the Cell object or (2) the Paste method of the Range object.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: project, office_web_components
References: http://marc.info/?l=bugtraq&m=101829726516346&w=2, http://www.iss.net/security_center/static/8779.php, http://www.securityfocus.com/bid/4457
CVE-2002-2162
Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user accounts.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: trillian
References: http://www.iss.net/security_center/static/10092.php, http://www.securityfocus.com/archive/1/291071, http://www.securityfocus.com/bid/5677
CVE-2002-1190
Cisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers to gain access and place arbitrary calls.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: unity_server
References: http://www.cisco.com/warp/public/707/toll-fraud-pub.shtml, http://www.iss.net/security_center/static/10282.php, https://exchange.xforce.ibmcloud.com/vulnerabilities/44545
CVE-2002-1697
Electronic Code Book (ECB) mode in VTun 2.0 through 2.5 uses a weak encryption algorithm that produces the same ciphertext from the same plaintext blocks, which could allow remote attackers to gain sensitive information.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: vtun
Related CWEs: CWE-326
Related CAPECs: CAPEC-112, CAPEC-192, CAPEC-20
MITRE ATT&CK Techniques: T1110
References: http://seclists.org/bugtraq/2002/Jan/0119.html, http://www.securityfocus.com/bid/3845, https://exchange.xforce.ibmcloud.com/vulnerabilities/7904
CWE: CWE-326
MITRE ATT&CK techniques: T1110
CVE-2002-2128
editform.php in w-Agora 4.1.5 allows local users to execute arbitrary PHP code via .. (dot dot) sequences in the file parameter.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: w-agora
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0222.html, http://archives.neohapsis.com/archives/bugtraq/2002-12/0225.html, http://www.iss.net/security_center/static/10919.php
CVE-2002-2095
Joe Testa hellbent 01 webserver allows attackers to read files that are specified in the hellbent.prefs file by creating a file with a similar name in the web root, as demonstrated using (1) index.webroot and (2) index.ipallow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: hellbent
References: http://archives.neohapsis.com/archives/bugtraq/2002-01/0228.html, http://www.iss.net/security_center/static/7931.php, http://www.securityfocus.com/bid/3909
CVE-2002-2443
schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a communication loop, as demonstrated by krb_pingpong.nasl, a related issue to CVE-1999-0103.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: debian_linux, opensuse, enterprise_linux_server_aus, enterprise_linux_workstation, fedora
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7637, http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105879.html, http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105978.html
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2002-0055
SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer (BDAT) request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000, windows_xp, exchange_server
Related CWEs: CWE-669
References: http://marc.info/?l=bugtraq&m=101558498401274&w=2, http://www.iss.net/security_center/static/8307.php, http://www.securityfocus.com/bid/4204
CWE: CWE-669
CVE-2002-2082
FTGate and FTGate Pro 1.05 lock user mailboxes before authentication succeeds, which allows remote attackers to lock the mailboxes of other users.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ftgatepro, ftgateoffice
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0053.html, http://www.iss.net/security_center/static/8751.php, http://www.securityfocus.com/bid/4429
CVE-2002-0613
dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user_logged_in or user_dnstools_administrator parameters.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: dnstools
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0390.html, http://www.dnstools.com/dnstools_2.0.1.tar.gz, http://www.iss.net/security_center/static/8948.php
CVE-2002-0009
show_bug.cgi in Bugzilla before 2.14.1 allows a user with "Bugs Access" privileges to see other products that are not accessible to the user, by submitting a bug and reading the resulting Product pulldown menu.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: bugzilla
References: http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html, http://bugzilla.mozilla.org/show_bug.cgi?id=102141, http://rhn.redhat.com/errata/RHSA-2002-001.html
CVE-2002-1282
Unknown vulnerability in the telnet KIO subsystem (telnet.protocol) of KDE 2.x 2.1 and later allows local and remote attackers to execute arbitrary code via a certain URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: kde
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-012.0.txt, http://marc.info/?l=bugtraq&m=103712550205730&w=2, http://marc.info/?l=bugtraq&m=103728981029342&w=2
CVE-2002-1072
ZyXEL Prestige 642R 2.50(FA.1) and Prestige 310 V3.25(M.01), allows remote attackers to cause a denial of service via an oversized, fragmented "jolt" style ICMP packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: prestige
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0036.html, http://online.securityfocus.com/archive/1/283999, http://www.iss.net/security_center/static/9655.php
CVE-2002-0889
Buffer overflow in Qpopper (popper) 4.0.4 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a long bulldir argument in the user's .qpopper-options configuration file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: qpopper
References: http://marc.info/?l=vuln-dev&m=102003707432457&w=2, http://online.securityfocus.com/archive/1/269969, http://www.iss.net/security_center/static/8949.php
CVE-2002-0751
CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a "spam proxy" and send mail to arbitrary users via modified (1) form-to, (2) form-from, and (3) form-results parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: csmailto
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0326.html, http://www.cgiscript.net/cgi-script/csNews/csNews.cgi?database=cgi.db&command=viewone&id=5, http://www.securityfocus.com/bid/4579
CVE-2002-1437
Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to read arbitrary files via an HTTP request containing "..%5c" (URL-encoded dot-dot backslash) sequences.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: netware
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0202.html, http://support.novell.com/servlet/tidfinder/2963307, http://www.iss.net/security_center/static/9915.php
CVE-2002-2358
Cross-site scripting (XSS) vulnerability in the FTP view feature in Opera 6.0 and 6.01 through 6.04 allows remote attackers to inject arbitrary web script or HTML via the title tag of an FTP URL.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: opera_web_browser
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0061.html, http://online.securityfocus.com/archive/1/286151, http://www.iss.net/security_center/static/9757.php
CWE: CWE-79
CVE-2002-1721
Off-by-one error in alterMIME 0.1.10 and 0.1.11 allows remote attackers to cause a denial of service (crash) via an x-header that causes snprintf overwrite the FFGET_FILE variable with a (null) byte.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: altermime
Related CWEs: CWE-193
References: http://www.pldaniels.com/altermime/CHANGELOG, http://www.securityfocus.com/bid/4650, https://exchange.xforce.ibmcloud.com/vulnerabilities/8992
CWE: CWE-193
CVE-2002-0351
Buffer overflows in CFS daemon (cfsd) before 1.3.3-8.1, and 1.4x before 1.4.1-5, allow remote attackers to cause a denial of service and possibly execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cfs
References: http://www.debian.org/security/2002/dsa-116, http://www.iss.net/security_center/static/8330.php, http://www.securityfocus.com/bid/4219
CVE-2002-2390
Buffer overflow in the IDENT daemon (identd) in Trillian 0.6351, 0.725, 0.73, 0.74 and 1.0 pro allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: trillian, trillian_pro
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0206.html, http://archives.neohapsis.com/archives/bugtraq/2002-09/0224.html, http://lists.grok.org.uk/pipermail/full-disclosure/2002-September/001890.html
CWE: CWE-119
CVE-2002-1845
Cross-site scripting (XSS) vulnerability in index.php in Yet Another Bulletin Board (YaBB) 1.40 and 1.41 allows remote attackers to inject arbitrary web script or HTML via the password (passwrd) parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: yabb
References: http://online.securityfocus.com/archive/1/296121, http://www.iss.net/security_center/static/10406.php, http://www.securityfocus.com/bid/6004
CVE-2002-1711
BasiliX 1.1.0 saves attachments in a world readable /tmp/BasiliX directory, which allows local users to read other users' attachments.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: basilix_webmail
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0117.html, http://online.securityfocus.com/archive/1/277710, http://www.securityfocus.com/bid/5065
CVE-2002-2339
Cross-site scripting (XSS) vulnerability in configure.asp in Script-Shed GuestBook 1.0 allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in (1) image, (2) img, (3) image=right, (4) img=right, (5) image=left, and (6) img=left tags.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: ssgbook
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://archives.neohapsis.com/archives/bugtraq/2003-10/0009.html, http://online.securityfocus.com/archive/1/294299, http://www.iss.net/security_center/static/10331.php
CWE: CWE-79
CVE-2002-2389
TheServer 1.74 web server stores server.ini under the web document root with insufficient access control, which allows remote attackers to obtain cleartext passwords and gain access to server log files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: the_server
Related CWEs: CWE-255
References: http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000138.html, http://securitytracker.com/id?1004799, http://www.iss.net/security_center/static/9624.php
CWE: CWE-255
CVE-2002-0184
Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded.
CVSS v3.1 Score: 7.8 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sudo, debian_linux
Related CWEs: CWE-131
Related CAPECs: CAPEC-100, CAPEC-47
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000475, http://marc.info/?l=bugtraq&m=101974610509912&w=2, http://marc.info/?l=bugtraq&m=101975443619600&w=2
CWE: CWE-131
CVE-2002-1319
The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a denial of service (hang) via the emulation mode, which does not properly clear TF and NT EFLAGs.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel, secure_linux
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000553, http://marc.info/?l=bugtraq&m=103714004623587&w=2, http://marc.info/?l=bugtraq&m=103737292709297&w=2
CVE-2002-0796
Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gain root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://marc.info/?l=bugtraq&m=102321107714554&w=2, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/219, http://www.iss.net/security_center/static/9241.php
CVE-2002-0140
Domain Name Relay Daemon (dnrd) 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parse_query, get_objectname, and possibly other functions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: dnrd
References: http://online.securityfocus.com/archive/1/251619, http://www.iss.net/security_center/static/7957.php, http://www.securityfocus.com/bid/3928
CVE-2002-0467
Buffer overflows in Ecartis (formerly Listar) 1.0.0 before snapshot 20020125 allows remote attackers to execute arbitrary code via (1) address_match() of mystring.c or (2) other functions in tolist.c.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: listar, ecartis
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0063.html, http://www.debian.org/security/2002/dsa-123, http://www.ecartis.org/
CVE-2002-0379
Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 2001.315) with legacy RFC 1730 support, and imapd 2000.287 and earlier, allows remote authenticated users to execute arbitrary code via a long BODY request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: uw-imap
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-021.0.txt, http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000487, http://marc.info/?l=bugtraq&m=102107222100529&w=2
CVE-2002-1350
The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers to cause a denial of service (application crash).
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tcpdump
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-050.0.txt, http://marc.info/?l=bugtraq&m=104032975103398&w=2, http://www.debian.org/security/2002/dsa-206
CVE-2002-1025
JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in an HTTP GET request, which causes the server to send the .JSP file unparsed.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: jrun
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0138.html, http://online.securityfocus.com/archive/1/280062, http://www.iss.net/security_center/static/9459.php
CVE-2002-0851
Format string vulnerability in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the ISDN4Linux (i4l) package allows local users to gain root privileges via format strings in the device name command line argument, which is not properly handled in a call to syslog.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: isdn4linux
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0068.html, http://www.iss.net/security_center/static/9811.php, http://www.securityfocus.com/bid/5437
CVE-2002-0423
Buffer overflow in efingerd 1.5 and earlier, and possibly up to 1.61, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a finger request from an IP address with a long hostname that is obtained via a reverse DNS lookup.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: efingerd
References: http://archives.neohapsis.com/archives/bugtraq/2002-03/0050.html, http://melkor.dnp.fmph.uniba.sk/~garabik/efingerd/efingerd_1.5.tar.gz, http://www.iss.net/security_center/static/8380.php
CVE-2002-0373
The Windows Media Device Manager (WMDM) Service in Microsoft Windows Media Player 7.1 on Windows 2000 systems allows local users to obtain LocalSystem rights via a program that calls the WMDM service to connect to an invalid local storage device, aka "Privilege Elevation through Windows Media Device Manager Service".
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_media_player
References: http://www.iss.net/security_center/static/9421.php, http://www.securityfocus.com/bid/5109, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-032
CVE-2002-1096
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.1, allows restricted administrators to obtain user passwords that are stored in plaintext in HTML source code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vpn_3002_hardware_client, vpn_3000_concentrator_series_software
References: http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml, http://www.iss.net/security_center/static/10019.php, http://www.securityfocus.com/bid/5611
CVE-2002-1690
Unknown vulnerability in AIX before 4.0 with unknown attack vectors and unknown impact, aka "security issue," as fixed by APAR IY28225.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://archives.neohapsis.com/archives/aix/2002-q1/0005.html, http://archives.neohapsis.com/archives/aix/2002-q1/0005.html
CVE-2002-1112
Mantis before 0.17.4 allows remote attackers to list project bugs without authentication by modifying the cookie that is used by the "View Bugs" page.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mantis
References: http://mantisbt.sourceforge.net/advisories/2002/2002-03.txt, http://marc.info/?l=bugtraq&m=102978673018271&w=2, http://www.debian.org/security/2002/dsa-153
CVE-2002-1967
Buffer overflow in XiRCON 1.0 Beta 4 allows remote attackers to cause a denial of service (disconnect) via a long (1) ctcp, (2) primsg, (3) msg, or (4) notice command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: xircon
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0005.html, http://www.iss.net/security_center/static/9516.php, http://www.securityfocus.com/bid/5185
CVE-2002-2133
Telindus 1100 ASDL router running firmware 6.0.x uses weak encryption for UDP session traffic, which allows remote attackers to gain unauthorized access by sniffing and decrypting the administrative password.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: 1120_adsl_router
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0262.html, http://archives.neohapsis.com/archives/bugtraq/2003-02/0277.html, http://www.iss.net/security_center/static/10951.php
CVE-2002-0125
Buffer overflow in ClanLib library 0.5 may allow local users to execute arbitrary code in games that use the library, such as (1) Super Methane Brothers, (2) Star War, (3) Kwirk, (4) Clankanoid, and others, via a long HOME environment variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: clanlib
References: http://online.securityfocus.com/archive/1/250414, http://www.iss.net/security_center/static/7905.php, http://www.securityfocus.com/bid/3877
CVE-2002-0872
l2tpd 0.67 does not initialize the random number generator, which allows remote attackers to hijack sessions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: l2tpd
References: http://www.debian.org/security/2002/dsa-152, http://www.iss.net/security_center/static/9845.php, http://www.securityfocus.com/bid/5451
CVE-2002-0825
Buffer overflow in the DNS SRV code for nss_ldap before nss_ldap-198 allows remote attackers to cause a denial of service and possibly execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: nss_ldap
References: http://www.padl.com/Articles/PotentialBufferOverflowin.html, http://www.padl.com/Articles/PotentialBufferOverflowin.html
CVE-2002-1578
The default installation of SAP R/3, when using Oracle and SQL*net V2 3.x, 4.x, and 6.10, allows remote attackers to obtain arbitrary, sensitive SAP data by directly connecting to the Oracle database and executing queries against the database, which is not password-protected.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sap_r_3
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0387.html, http://www.securityfocus.com/bid/4613, https://exchange.xforce.ibmcloud.com/vulnerabilities/8972
CVE-2002-0911
Caldera Volution Manager 1.1 stores the Directory Administrator password in cleartext in the slapd.conf file, which could allow local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: volution_manager
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-024.0.txt, http://www.iss.net/security_center/static/9240.php, http://www.securityfocus.com/bid/4923
CVE-2002-0870
The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability (CVE-2001-0622) was incomplete, which still allows remote attackers to gain additional privileges by directly requesting the web management URL instead of navigating through the interface, possibly via a variant of the original attack, as identified by Cisco bug ID CSCdw08549.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webns, content_services_switch_11000
References: http://www.cisco.com/warp/public/707/arrowpoint-webmgmt-vuln-pub.shtml, http://www.cisco.com/warp/public/707/arrowpoint-webmgmt-vuln-pub.shtml
CVE-2002-0187
Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part of an XML SQL query, aka "Script Injection via XML Tag."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sql_server
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0100.html, http://marc.info/?l=bugtraq&m=102397345410856&w=2, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-030
CVE-2002-0838
Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed (a) PDF or (b) PostScript file, which is processed by an unsafe call to sscanf.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gv, ghostview, ggv
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-053.0.txt, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000542, http://marc.info/?l=bugtraq&m=103305615613319&w=2
CVE-2002-2210
The installation of OpenOffice 1.0.1 allows local users to overwrite files and possibly gain privileges via a symlink attack on the USERNAME_autoresponse.conf temporary file.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: openoffice
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0161.html, http://www.iss.net/security_center/static/10346.php, http://www.securityfocus.com/bid/5950