DuyTa/cve-kgrag-db huggingface dataset:
CVE-2002-0374
Format string vulnerability in the logging function for the pam_ldap PAM LDAP module before version 144 allows attackers to execute arbitrary code via format strings in the configuration file name.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pam_ldap
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-041.0.txt, http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0053.html, http://marc.info/?l=bugtraq&m=103601912505261&w=2
CVE-2002-1247
Buffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME environment variable for the resLISa daemon.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: lisa, klisa, kde
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0068.html, http://marc.info/?l=bugtraq&m=103704823501757&w=2, http://marc.info/?l=bugtraq&m=103712329102632&w=2
CVE-2002-0416
Buffer overflow in SH39 MailServer 1.21 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long command to the SMTP port.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mailserver
References: http://www.iss.net/security_center/static/8379.php, http://www.securityfocus.com/archive/1/259818, http://www.securityfocus.com/bid/4232
CVE-2002-2370
SWS web server 0.0.4, 0.0.3 and 0.1.0 allows remote attackers to cause a denial of service (crash) via a URL request that does not end with a newline.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sws_simple_web_server
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0011.html, http://www.iss.net/security_center/static/10005.php, http://www.securityfocus.com/bid/5664
CVE-2002-0813
Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote attackers to cause a denial of service (reset) or modify configuration via a long filename.
CVSS v2.0 Score: 7.1 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Affected Products: ios
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://marc.info/?l=bugtraq&m=103002169829669&w=2, http://online.securityfocus.com/archive/1/284634, http://www.cisco.com/warp/public/707/ios-tftp-long-filename-pub.shtml
CWE: CWE-119
CVE-2002-0079
Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_information_server, internet_information_services
References: http://marc.info/?l=bugtraq&m=101846993304518&w=2, http://www.cert.org/advisories/CA-2002-09.html, http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml
CVE-2002-2222
isakmpd/message.c in isakmpd in FreeBSD before isakmpd-20020403_1, and in OpenBSD 3.1, allows remote attackers to cause a denial of service (crash) by sending Internet Key Exchange (IKE) payloads out of sequence.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: openbsd, ports_collection
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc, http://www.kb.cert.org/vuls/id/287771, http://www.openbsd.org/errata31.html#isakmpd
CVE-2002-1570
Heap-based buffer overflow in snmpnetstat for ucd-snmp 4.2.3 and earlier, and net-snmp, allows remote attackers to execute arbitrary code via multiple getnextrequest PDU messages with conflicting ifindex variables, which cause snmpnetstat to write variable data past the end of an array.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ucd-snmp
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000696, http://www.securityfocus.com/archive/1/248141, http://www.securityfocus.com/bid/3780
CVE-2002-1008
Cross-site scripting vulnerability in PowerBASIC urlcount.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via a request to urlcount.cgi that contains the script, which is not filtered when the REPORT capability prints the original request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: lil_http_server
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0332.html, http://archives.neohapsis.com/archives/bugtraq/2002-07/0072.html, http://www.iss.net/security_center/static/9445.php
CVE-2002-0104
AFTPD 5.4.4 allows remote attackers to gain sensitive information via a CD (CWD) ~ (tilde) command, which causes a core dump.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: aftpd
References: http://marc.info/?l=bugtraq&m=101041333323486&w=2, http://www.iss.net/security_center/static/7832.php, http://www.securityfocus.com/bid/3806
CVE-2002-1744
Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary files via a hex-encoded "%c0%ae%c0%ae" string, which is the Unicode representation for ".." (dot dot).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_services
References: http://online.securityfocus.com/archive/1/267945, http://online.securityfocus.com/archive/1/268065, http://www.securityfocus.com/bid/4525
CVE-2002-1877
NETGEAR FM114P allows remote attackers to bypass access restrictions for web sites via a URL that uses the IP address instead of the hostname.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: fm114p
Related CWEs: CWE-264
References: http://online.securityfocus.com/archive/1/290849, http://www.iss.net/security_center/static/10061.php, http://www.securityfocus.com/bid/5667
CWE: CWE-264
CVE-2002-0547
Buffer overflow in the mini-browser for Winamp 2.79 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the title field of an ID3v2 tag.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: winamp
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0373.html, http://www.iss.net/security_center/static/8946.php, http://www.securityfocus.com/bid/4609
CVE-2002-1313
nullmailer 1.00RC5 and earlier allows local users to cause a denial of service via an email to a local user that does not exist, which generates an error that causes nullmailer to stop sending mail to all users.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: nullmailer
References: http://www.debian.org/security/2002/dsa-198, http://www.securityfocus.com/bid/6193, https://exchange.xforce.ibmcloud.com/vulnerabilities/10649
CVE-2002-0460
Bitvise WinSSHD before 2002-03-16 allows remote attackers to cause a denial of service (resource exhaustion) via a large number of incomplete connections that are not properly terminated, which are not properly freed by SSHd.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: winsshd
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0068.html, http://online.securityfocus.com/archive/1/262681, http://www.iss.net/security_center/static/8470.php
CVE-2002-0178
uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which could allow attackers to overwrite files or execute commands.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sharutils
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-040.0.txt, http://marc.info/?l=bugtraq&m=103599320902432&w=2, http://online.securityfocus.com/advisories/4132
CVE-2002-1285
runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux
References: http://www.iss.net/security_center/static/10525.php, http://www.novell.com/linux/security/advisories/2002_040_lprng_html2ps.html, http://www.securityfocus.com/bid/6077
CVE-2002-0970
The SSL capability for Konqueror in KDE 3.0.2 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: konqueror, kde
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-047.0.txt, http://archives.neohapsis.com/archives/bugtraq/2002-08/0170.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000519
CVE-2002-0445
article.php in PHP FirstPost 0.1 allows allows remote attackers to obtain the full pathname of the server via an invalid post number in the post parameter, which leaks the pathname in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: php_firstpost
References: http://www.iss.net/security_center/static/8434.php, http://www.osvdb.org/7170, http://www.securityfocus.com/archive/1/261337
CVE-2002-1796
ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, which allows local users to load unauthorized Chai services.
CVSS v3.1 Score: 7.8 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: laserjet_8150, laserjet_4500, laserjet_4550, chaivm_ezloader, laserjet_4100
Related CWEs: CWE-347
Related CAPECs: CAPEC-475, CAPEC-463
References: http://online.securityfocus.com/advisories/4317, http://www.iss.net/security_center/static/9695.php, http://www.phenoelit.de/stuff/HP_Chai.txt
CWE: CWE-347
CVE-2002-1509
A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of the new user's group (mode 660), which allows other users in the same group to read or modify the new user's incoming email.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: linux
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=75418, http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:026, http://www.redhat.com/support/errata/RHSA-2003-057.html
CVE-2002-0237
Buffer overflow in ISS BlackICE Defender 2.9 and earlier, BlackICE Agent 3.0 and 3.1, and RealSecure Server Sensor 6.0.1 and 6.5 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a flood of large ICMP ping packets.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: blackice_defender, blackice_agent, realsecure_server_sensor
References: http://marc.info/?l=bugtraq&m=101286393404301&w=2, http://marc.info/?l=bugtraq&m=101302424803268&w=2, http://marc.info/?l=bugtraq&m=101321744807452&w=2
CVE-2002-0887
scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using log files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: openserver
References: ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.22/CSSA-2002-SCO.22.txt, http://marc.info/?l=bugtraq&m=99057164129869&w=2, http://www.iss.net/security_center/static/9210.php
CVE-2002-0320
Buffer overflow in Yahoo! Messenger 5.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) message or (2) IMvironment field.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: messenger
References: http://marc.info/?l=bugtraq&m=101439616623230&w=2, http://www.cert.org/advisories/CA-2002-16.html, http://www.iss.net/security_center/static/8264.php
CVE-2002-0074
Cross-site scripting vulnerability in Help File search facility for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to embed scripts into another user's session.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_information_server, internet_information_services
References: http://seclists.org/bugtraq/2002/Apr/0126.html, http://www.cert.org/advisories/CA-2002-09.html, http://www.cgisecurity.com/advisory/9.txt
CVE-2002-0431
XTux allows remote attackers to cause a denial of service (CPU consumption) via random inputs in the initial connection.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: xtux
References: http://online.securityfocus.com/archive/1/260912, http://www.iss.net/security_center/static/8422.php, http://www.securityfocus.com/bid/4260
CVE-2002-2106
PHP remote file inclusion vulnerability in WikkiTikkiTavi before 0.21 allows remote attackers to execute arbitrary PHP code via the TemplateDir variable, as demonstrated using conflict.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wikkitikkitavi
References: http://securitytracker.com/id?1003307, http://sourceforge.net/mailarchive/message.php?msg_id=185752, http://www.securityfocus.com/bid/3946
CVE-2002-1032
Buffer overflow in KeyFocus (KF) web server 1.0.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed HTTP header.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: kf_web_server
References: http://www.keyfocus.net/kfws/support/, http://www.keyfocus.net/kfws/support/
CVE-2002-2112
RCA Digital Cable Modem DCM225 and DCM225E, and other modems that must conform to the Data-over-Cable Service Interface Specifications DOCSIS standard, uses the "public" community string for SNMP access, which allows remote attackers to read or write MIB information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: digital_cable_modem
References: http://archives.neohapsis.com/archives/bugtraq/2002-03/0335.html, http://archives.neohapsis.com/archives/bugtraq/2002-03/0336.html, http://www.iss.net/security_center/static/8662.php
CVE-2002-2240
Directory traversal vulnerability in MyServer 0.11 and 0.2 allows remote attackers to read arbitrary files via a ".." (dot dot) in an HTTP GET request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: myserver
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0092.html, http://www.securityfocus.com/bid/6359, https://exchange.xforce.ibmcloud.com/vulnerabilities/10827
CWE: CWE-22
CVE-2002-2068
Eraser 5.3 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: eraser
Related CWEs: CWE-459
References: http://www.ciac.org/ciac/bulletins/m-034.shtml, http://www.iss.net/security_center/static/7953.php, http://www.securityfocus.com/archive/1/251565
CWE: CWE-459
CVE-2002-0484
move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attackers to upload files to unintended locations on the system.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: php
References: http://bugs.php.net/bug.php?id=16128, http://marc.info/?l=bugtraq&m=101683938806677&w=2, http://online.securityfocus.com/archive/1/262999
CVE-2002-2300
Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denial of service (crash) via a long CEL command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webbngss3nbxnts
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://marc.info/?l=bugtraq&m=103886644126011&w=2, http://seclists.org/lists/bugtraq/2003/Apr/0344.html, http://securitytracker.com/id?1005732
CWE: CWE-119
CVE-2002-1028
Multiple buffer overflows in the CGI programs for Oddsock Song Requester WinAmp plugin 2.1 allow remote attackers to cause a denial of service (crash) via long arguments.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: song_requester
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0175.html, http://www.iss.net/security_center/static/9585.php, http://www.oddsock.org/tools/gen_songrequester/#Release%202.2%20Notes%20:
CVE-2002-0068
Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arbitrary code with an ftp:// URL with a larger number of special characters, which exceed the buffer when Squid URL-escapes the characters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: squid, linux
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:12.squid.asc, http://archives.neohapsis.com/archives/linux/caldera/2002-q1/0014.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000464
CVE-2002-0363
ghostscript before 6.53 allows attackers to execute arbitrary commands by using .locksafe or .setsafe to reset the current pagedevice.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ghostscript
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-026.0.txt, http://www.ghostscript.com/pipermail/gs-code-review/2002-February/001900.html, http://www.ghostscript.com/pipermail/gs-code-review/2002-January/001801.html
CVE-2002-1336
TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tightvnc
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000640, http://marc.info/?l=bugtraq&m=102753170201524&w=2, http://marc.info/?l=bugtraq&m=102769183913594&w=2
CVE-2002-0089
Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to (1) the -d command line option, or (2) the PRODVERS argument in the .cdtoc file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://online.securityfocus.com/archive/1/270122, http://www.esecurityonline.com/advisories/eSO2397.asp, http://www.iss.net/security_center/static/8954.php
CVE-2002-0114
EMC NetWorker (formerly Legato NetWorker) before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain privileges by reading the password from the file.  NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: networker
References: http://online.securityfocus.com/archive/1/249420, http://www.iss.net/security_center/static/7898.php, http://www.securityfocus.com/bid/3842
CVE-2002-1484
DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems (port scan) via a request for a URL that specifies the target IP address and port, which produces a connection status in the resulting error message.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: db4web
Related CWEs: CWE-918
Related CAPECs: CAPEC-664
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0201.html, http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0125.html, http://www.iss.net/security_center/static/10136.php
CWE: CWE-918
CVE-2002-1385
openwebmail_init in Open WebMail 1.81 and earlier allows local users to execute arbitrary code via .. (dot dot) sequences in a login name, such as the name provided in the sessionid parameter for  openwebmail-abook.pl, which is used to find a configuration file that specifies additional code to be executed.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: open_webmail
References: http://marc.info/?l=bugtraq&m=104031696120743&w=2, http://marc.info/?l=bugtraq&m=104032263328026&w=2, http://sourceforge.net/forum/forum.php?thread_id=782605&forum_id=108435
CVE-2002-2100
Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: outlook
References: http://archives.neohapsis.com/archives/bugtraq/2002-03/0267.html, http://www.iss.net/security_center/static/8611.php, http://www.securityfocus.com/bid/4334
CVE-2002-1889
Off-by-one buffer overflow in the context_action function in context.c of Logsurfer 1.41 through 1.5a allows remote attackers to cause a denial of service (crash) via a malformed log entry.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: logsurfer
References: ftp://ftp.cert.dfn.de/pub/tools/audit/logsurfer/logsurfer.README.asc, http://online.securityfocus.com/archive/1/294131, http://www.iss.net/security_center/static/10287.php
CVE-2002-0456
Eudora 5.1 and earlier versions stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known pathnames.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: eudora
References: http://marc.info/?l=bugtraq&m=101622857703677&w=2, http://www.iss.net/security_center/static/8487.php, http://www.securityfocus.com/archive/1/262704
CVE-2002-1528
MsmMask.exe in MondoSearch 4.4 allows remote attackers to obtain the source code of scripts via the mask parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mondosearch
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0147.html, http://www.iss.net/security_center/static/10350.php, http://www.securityfocus.com/bid/5941
CVE-2002-1400
Heap-based buffer overflow in the repeat() function for PostgreSQL before 7.2.2 allows attackers to execute arbitrary code by causing repeat() to generate a large string.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: postgresql
References: http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000524, http://marc.info/?l=bugtraq&m=102987306029821&w=2
CVE-2002-1393
Multiple vulnerabilities in KDE 2 and KDE 3.x through 3.0.5 do not quote certain parameters that are inserted into a shell command, which could allow remote attackers to execute arbitrary commands via (1) URLs, (2) filenames, or (3) e-mail addresses.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: kde
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000569, http://marc.info/?l=bugtraq&m=104049734911544&w=2, http://marc.info/?l=bugtraq&m=104066520330397&w=2
CVE-2002-0167
Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain weaknesses of NetPBM.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: imlib
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-019.0.txt, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000470, http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-029.php
CVE-2002-0648
The legacy <script> data-island capability for XML in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to read arbitrary XML files, and portions of other files, via a URL whose "src" attribute redirects to a local file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: http://marc.info/?l=bugtraq&m=103011639524314&w=2, http://www.iss.net/security_center/static/9936.php, http://www.securityfocus.com/bid/5560
CVE-2002-0259
InstantServers MiniPortal 1.1.5 and earlier stores sensitive login and account data in plaintext in (1) .pwd files in the miniportal/apache directory, or (2) mplog.txt, which could allow local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: miniportal
References: http://marc.info/?l=bugtraq&m=101329397901071&w=2, http://www.instantservers.com/releases.html, http://www.iss.net/security_center/static/8170.php
CVE-2002-2356
HAMweather 2.x allows remote attackers to modify administrative settings and obtain sensitive information via a direct request to hwadmin.cgi.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: hamweather
Related CWEs: CWE-264
References: http://securitytracker.com/id?1005270, http://www.hamweather.net/hw3/hw2securityalert.shtml, http://www.iss.net/security_center/static/10182.php
CWE: CWE-264
CVE-2002-1719
Unknown vulnerability in Bavo 0.3 allows remote attackers to modify posted messages.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: bavo
References: http://securitytracker.com/id?1003503, http://www.securityfocus.com/bid/4079, https://exchange.xforce.ibmcloud.com/vulnerabilities/40988
CVE-2002-2085
Directory traversal vulnerability in page.cgi of WWWeBBB Forum 3.82 beta and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: wwwebbb_forum
References: http://archives.neohapsis.com/archives/vuln-dev/2002-q1/0369.html, http://securitytracker.com/id?1003456, http://archives.neohapsis.com/archives/vuln-dev/2002-q1/0369.html
CVE-2002-1674
procfs on FreeBSD before 4.5 allows local users to cause a denial of service (kernel panic) by removing a file that the fstatfs function refers to.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:N/A:P
Affected Products: freebsd
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:09.fstatfs.asc, http://www.securityfocus.com/bid/4040, https://exchange.xforce.ibmcloud.com/vulnerabilities/8112
CVE-2002-1395
Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obtain unauthorized directory permissions via a temporary directory used by impwagent, and (2) overwrite and create arbitrary files via immknmz.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: internet_message
References: http://secunia.com/advisories/8166, http://secunia.com/advisories/8242, http://www.debian.org/security/2002/dsa-202
CVE-2002-1361
overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to execute arbitrary code via a POST request with shell metacharacters in the email parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cobalt_raq_4
References: http://marc.info/?l=bugtraq&m=103912513522807&w=2, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/49377, http://www.cert.org/advisories/CA-2002-35.html
CVE-2002-1876
Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a large number of rapid requests, which consumes all of the licenses that are granted to Exchange by IIS.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: exchange_server
Related CWEs: CWE-400
Related CAPECs: CAPEC-147, CAPEC-492, CAPEC-227
MITRE ATT&CK Techniques: T1499
References: http://online.securityfocus.com/archive/1/286220, http://www.iss.net/security_center/static/9791.php, http://www.securityfocus.com/bid/5413
CWE: CWE-400
MITRE ATT&CK techniques: T1499
CVE-2002-0570
The encrypted loop device in Linux kernel 2.4.10 and earlier does not authenticate the entity that is encrypting data, which allows local users to modify encrypted data without knowing the key.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: linux_kernel
References: http://archives.neohapsis.com/archives/bugtraq/2002-01/0010.html, http://www.securityfocus.com/bid/3775, https://exchange.xforce.ibmcloud.com/vulnerabilities/7769
CVE-2002-0273
Buffer overflow in CWMail.exe in NetWin before 2.8a allows remote authenticated users to execute arbitrary code via a long item parameter.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cwmail
References: http://marc.info/?l=bugtraq&m=101362100602008&w=2, http://www.iss.net/security_center/static/8185.php, http://www.securityfocus.com/bid/4093
CVE-2002-0211
Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary "gunzip" program before executing it, which could allow local users to execute arbitrary commands by modifying the program before it is executed.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: tarantella_enterprise
References: http://marc.info/?l=bugtraq&m=101208650722179&w=2, http://online.securityfocus.com/archive/1/265845, http://www.iss.net/security_center/static/7996.php
CVE-2002-2180
The setitimer(2) system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments, which allows local users to write to kernel memory and possibly gain root privileges, possibly via an integer signedness error.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C
Affected Products: openbsd
References: ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.0/common/032_kerntime.patch, http://www.iss.net/security_center/static/10278.php, http://www.openbsd.org/plus32.html
CVE-2002-1558
Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote attackers to gain privileges by connecting to the account via Telnet.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: optical_networking_systems_software
References: http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml, http://www.iss.net/security_center/static/10510.php, http://www.securityfocus.com/bid/6083
CVE-2002-0470
PHPNetToolpack 0.1 relies on its environment's PATH to find and execute the traceroute program, which could allow local users to gain privileges by inserting a Trojan horse program into the search path.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: phpnettoolpack
References: http://seclists.org/bugtraq/2002/Mar/0263.html, http://www.iss.net/security_center/static/8484.php, http://www.securityfocus.com/bid/4304
CVE-2002-2377
Cross-site scripting (XSS) vulnerability in addentry.cgi in ZAP 1.0.3 allows remote attackers to inject arbitrary SSi directives, web script, and HTML via the entry field.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: zap_book
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://online.securityfocus.com/archive/1/279707, http://www.iss.net/security_center/static/9471.php, http://www.iss.net/security_center/static/9472.php
CWE: CWE-79
CVE-2002-1050
Buffer overflow in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long line of image data.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hylafax
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0358.html, http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=312, http://www.debian.org/security/2002/dsa-148
CVE-2002-1196
editproducts.cgi in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, when the "usebuggroups" feature is enabled and more than 47 groups are specified, does not properly calculate bit values for large numbers, which grants extra permissions to users via known features of Perl math that set multiple bits.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bugzilla
References: http://bugzilla.mozilla.org/show_bug.cgi?id=167485#c12, http://marc.info/?l=bugtraq&m=103349804226566&w=2, http://www.debian.org/security/2002/dsa-173
CVE-2002-1968
Com21 DOXport 1100 series cable modem running firmware 2.1.1.106, and possibly other versions before 2.1.1.108.003, downloads a DOCSIS configuration file from a TFTP server running on the internal network, which allows local users to modify configuration of the modem via a malicious TFTP server.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: doxport_1100
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0017.html, http://securitytracker.com/id?1005524, http://www.iss.net/security_center/static/10543.php
CVE-2002-2327
Unspecified vulnerability in the environmental monitoring subsystem in Solaris 8 running on Sun Fire 280R, V480 and V880 allows local users to cause a denial of service by setting volatile properties.
CVSS v2.0 Score: 4.9 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
Affected Products: sunos, sun_fire
Related CWEs: CWE-264
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-43908-1, http://www.iss.net/security_center/static/9675.php, http://www.securityfocus.com/bid/5288
CWE: CWE-264
CVE-2002-1566
netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of service (crash) via a long string to port 9284.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netris
References: http://marc.info/?l=vuln-dev&m=103158692532256&w=2, http://www.securityfocus.com/bid/5680, https://exchange.xforce.ibmcloud.com/vulnerabilities/10081
CVE-2002-1905
Buffer overflow in the web server of Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: viavideo
References: http://online.securityfocus.com/archive/1/295146, http://www.iss.net/security_center/static/10359.php, http://www.polycom.com/common/pw_item_show_doc/0%2C1449%2C1442%2C00.pdf
CVE-2002-0292
Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and authentication information from other users via Javascript in a URL, possibly in the formkey field.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: slashcode
References: http://marc.info/?l=bugtraq&m=101414005501708&w=2, http://www.iss.net/security_center/static/8221.php, http://www.securityfocus.com/bid/4116
CVE-2002-2304
SQL injection vulnerability in admin/auth/checksession.php in MyPHPLinks 2.1.9 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the idsession parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: myphplinks
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0134.html, http://www.securityfocus.com/bid/6395, https://exchange.xforce.ibmcloud.com/vulnerabilities/10864
CWE: CWE-89
CVE-2002-1290
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read and modify the contents of the Clipboard via an applet that accesses the (1) ClipBoardGetText and (2) ClipBoardSetText methods of the INativeServices class.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: java_virtual_machine
References: http://marc.info/?l=bugtraq&m=103682630823080&w=2, http://marc.info/?l=ntbugtraq&m=103684360031565&w=2, http://www.iss.net/security_center/static/10583.php
CVE-2002-1909
Click2Learn Ingenium Learning Management System 5.1 and 6.1 stores the hashed administrative password in a config.txt file under the htdocs directory, which allows remote attackers to obtain the administrative password.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ingenium_learning_management_system
References: http://online.securityfocus.com/archive/1/295309, http://www.iss.net/security_center/static/10387.php, http://www.securityfocus.com/bid/5969
CVE-2002-0580
WorkforceROI Xpede 4.1 allows remote attackers to obtain the database username via a request to datasource.asp, which leaks the username in a form and allows the attacker to more easily conduct brute force password guessing attacks.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xpede
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html, http://www.iss.net/security_center/static/8902.php, http://www.securityfocus.com/bid/4553
CVE-2002-1268
Mac OS X 10.2.2 allows local users to gain privileges via a mounted ISO 9600 CD, aka "User Privilege Elevation via Mounting an ISO 9600 CD."
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mac_os_x
References: http://www.info.apple.com/usen/security/security_updates.html, http://www.osvdb.org/7059, https://exchange.xforce.ibmcloud.com/vulnerabilities/10828
CVE-2002-0243
Cross-site scripting vulnerability in Opera 6.0 and earlier allows remote attackers to execute arbitrary script via an Extended HTML Form, whose output from the remote server is not properly cleansed.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: opera_web_browser
References: http://marc.info/?l=bugtraq&m=101309907709138&w=2, http://marc.info/?l=bugtraq&m=101309907709138&w=2
CVE-2002-0787
Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 allow remote attackers to execute script as the administrator via administrator URLs with modified (1) LOCID or (2) OC parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: injoin_directory_server
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0068.html, http://www.iss.net/security_center/static/9053.php, http://www.securityfocus.com/bid/4717
CVE-2002-1150
The Remote Desktop Sharing (RDS) Screen Saver Protection capability for Microsoft NetMeeting 3.01 through SP2 (4.4.3396) allows attackers with physical access to hijack remote sessions by entering certain logoff or shutdown sequences (such as CTRL-ALT-DEL) and canceling out of the resulting user confirmation prompts, such as when the remote user is editing a document.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netmeeting
References: http://marc.info/?l=bugtraq&m=103228375116204&w=2, http://www.iss.net/security_center/static/10119.php, http://www.securityfocus.com/bid/5715
CVE-2002-2302
3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their shopping carts by modifying the price in a hidden form field.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: shopfactory
Related CWEs: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0018.html, http://cert.uni-stuttgart.de/archive/bugtraq/2003/03/msg00081.html, http://www.securityfocus.com/bid/6296
CWE: CWE-264
CVE-2002-2059
BIOS D845BG, D845HV, D845PT and D845WN on Intel motherboards does not properly restrict access to configuration information when BIOS passwords are enabled, which could allow local users to change the default boot device via the F8 key.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: d845hv_motherboard, d845bg_motherboard, d845wn_motherboard, d845pt_motherboard
References: ftp://download.intel.com/design/motherbd/bg/P06-0027.pdf, ftp://download.intel.com/design/motherbd/hv/P12-0041d.pdf, ftp://download.intel.com/design/motherbd/pt/P06-0027.pdf
CVE-2002-0986
The mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments, which could allow remote attackers to modify mail message content, including mail headers, and possibly use PHP as a "spam proxy."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: php
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-008.0.txt, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000545, http://marc.info/?l=bugtraq&m=103011916928204&w=2
CVE-2002-0451
filemanager_forms.php in PHProjekt 3.1 and 3.1a allows remote attackers to execute arbitrary PHP code by specifying the URL to the code in the lib_path parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpprojekt
References: http://www.iss.net/security_center/static/8448.php, http://www.phprojekt.com/modules.php?op=modload&name=News&file=article&sid=19&mode=&order=, http://www.securityfocus.com/archive/1/261676
CVE-2002-1272
Alcatel OmniSwitch 7700/7800 switches running AOS 5.1.1 contains a back door telnet server that was intended for development but not removed before distribution, which allows remote attackers to gain administrative privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aos
References: http://www.cert.org/advisories/CA-2002-32.html, http://www.kb.cert.org/vuls/id/181721, http://www.securityfocus.com/bid/6220
CVE-2002-1901
Cross-site scripting (XSS) vulnerability in Bodo Bauer BBGallery 1.0 allows remote attackers to inject arbitrary web script or HTML via image tags.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: bbgallery
References: http://www.securityfocus.com/bid/4992, http://www.securityfocus.com/bid/4992
CVE-2002-1057
Buffer overflow in SmartMax MailMax POP3 daemon (popmax) 4.8 allows remote attackers to execute arbitrary code via a long USER command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mailmax
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0245.html, http://www.iss.net/security_center/static/9651.php, http://www.securityfocus.com/bid/5285
CVE-2002-1030
Race condition in Performance Pack in BEA WebLogic Server and Express 5.1.x, 6.0.x, 6.1.x and 7.0 allows remote attackers to cause a denial of service (crash) via a flood of data and connections.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: weblogic_server
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0008.html, http://dev2dev.bea.com/resourcelibrary/advisoriesdetail.jsp?highlight=advisoriesnotifications&path=components%2Fdev2dev%2Fresourcelibrary%2Fadvisoriesnotifications%2Fadvisory_BEA02-19.htm, http://online.securityfocus.com/archive/1/281046
CVE-2002-0800
BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at the end.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: badblue
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0003.html, http://www.iss.net/security_center/static/9239.php, http://www.securityfocus.com/bid/4912
CVE-2002-1830
Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to bypass authentication and access modifier options via a direct request to moderator.php with the action and ismod parameters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: openbb
References: http://marc.info/?l=vuln-dev&m=102221487407632&w=2, http://www.iss.net/security_center/static/9160.php, http://www.securityfocus.com/bid/4823
CVE-2002-0369
Buffer overflow in ASP.NET Worker Process allows remote attackers to cause a denial of service (restart) and possibly execute arbitrary code via a routine that processes cookies while in StateServer mode.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: .net_framework
References: http://www.iss.net/security_center/static/9276.php, http://www.securityfocus.com/bid/4958, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-026
CVE-2002-1752
csChatRBox.cgi in CGIScript.net csChat-R-Box allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cschat-r-box
Related CWEs: CWE-94
Related CAPECs: CAPEC-242, CAPEC-77, CAPEC-35
MITRE ATT&CK Techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK Tactics: T1564, T1027
References: http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html, http://www.securityfocus.com/bid/4452, https://exchange.xforce.ibmcloud.com/vulnerabilities/8636
CWE: CWE-94
MITRE ATT&CK techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK tactics: T1564, T1027
CVE-2002-0750
CGIscript.net csMailto.cgi program allows remote attackers to read arbitrary files by specifying the target filename in the form-attachment field.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: csmailto
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0326.html, http://www.cgiscript.net/cgi-script/csNews/csNews.cgi?database=cgi.db&command=viewone&id=5, http://archives.neohapsis.com/archives/bugtraq/2002-04/0326.html
CVE-2002-1685
Cross-site scripting vulnerability (XSS) in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute arbitrary script as other users by injecting script into ext.dll ISAPI.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: badblue
References: http://online.securityfocus.com/archive/1/281088, http://www.securityfocus.com/bid/5086, https://exchange.xforce.ibmcloud.com/vulnerabilities/9513
CVE-2002-0388
Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via (1) the admin login page, or (2) the Pipermail index summaries.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mailman
References: http://mail.python.org/pipermail/mailman-announce/2002-May/000042.html, http://www.securityfocus.com/bid/4826, http://mail.python.org/pipermail/mailman-announce/2002-May/000042.html
CVE-2002-2217
Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal (WSC-WebPortal) 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) l parameter to customize.php or the (2) pg parameter to index.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: web_server_creator
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0303.html, http://securitytracker.com/id?1005712, http://www.frog-man.org/tutos/WSC-WebPortal.txt
CVE-2002-0036
Integer signedness error in MIT Kerberos V5 ASN.1 decoder before krb5 1.2.5 allows remote attackers to cause a denial of service via a large unsigned data element length, which is later used as a negative value.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: kerberos_5
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000639, http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-001-multiple.txt, http://www.kb.cert.org/vuls/id/587579