DuyTa/cve-kgrag-db huggingface dataset:
CVE-2002-1904
Buffer overflow in the Log function in util.c in GazTek ghttpd 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long HTTP GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ghttpd
References: http://lynorics.sundawn.net/prog/ghttpd.html#versionen, http://online.securityfocus.com/archive/1/295141, http://www.iss.net/security_center/static/10361.php
CVE-2002-1629
Multi-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200 ship with a null password, which allows remote attackers to gain administrative privileges via Telnet or HTTP.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: proxyserver
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0105.html, http://www.kb.cert.org/vuls/id/495705, http://www.securityfocus.com/bid/7203
CVE-2002-1598
Buffer overflows in Computer Associates MLink (CA-MLink) 6.5 and earlier may allow local users to execute arbitrary code via long command line arguments to (1) mlclear or (2) mllock.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mlink
References: ftp://ftp.ca.com/pub/unicenter/mlink/mlink.13/MLINK13.README, http://www.kb.cert.org/vuls/id/544995, http://www.kb.cert.org/vuls/id/772915
CVE-2002-2196
Samba before 2.2.5 does not properly terminate the enum_csc_policy data structure, which may allow remote attackers to execute arbitrary code via a buffer overflow attack.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: samba
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc, http://lists.samba.org/archive/samba-technical/2002-June/022075.html, http://rhn.redhat.com/errata/RHBA-2002-209.html
CWE: CWE-119
CVE-2002-2017
sastcpd in SAS/Base 8.0 allows local users to execute arbitrary code by setting the authprog environment variable to reference a malicious program, which is then executed by sastcpd.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: base, integration_technologies
References: http://online.securityfocus.com/archive/1/253183, http://www.iss.net/security_center/static/8024.php, http://www.securityfocus.com/bid/3994
CVE-2002-0789
Buffer overflow in search.cgi in mnoGoSearch 3.1.19 and earlier allows remote attackers to execute arbitrary code via a long query (q) parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mnogosearch
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0092.html, http://www.iss.net/security_center/static/9060.php, http://www.mnogosearch.org/Download/mnogosearch-3.1.20.tar.gz
CVE-2002-1169
IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to cause a denial of service (crash) via an HTTP request to helpout.exe with a missing HTTP version number, which causes ibmproxy.exe to crash.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: websphere_caching_proxy_server
References: http://www-1.ibm.com/support/search.wss?rs=0&q=IY35970&apar=only, http://www.iss.net/security_center/static/10452.php, http://www.osvdb.org/2090
CVE-2002-0845
Buffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HTTP request using chunked transfer encoding.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: iplanet_web_server
References: http://marc.info/?l=bugtraq&m=102890933623192&w=2, http://www.iss.net/security_center/static/9799.php, http://www.securityfocus.com/bid/5433
CVE-2002-2310
ClickCartPro 4.0 stores the admin_user.db data file under the web document root with insufficient access control on servers other than Apache, which allows remote attackers to obtain usernames and passwords.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: clickcartpro
Related CWEs: CWE-255
References: http://securitytracker.com/id?1004825, http://www.iss.net/security_center/static/9648.php, http://www.securiteam.com/securitynews/5DP0T0K7PY.html
CWE: CWE-255
CVE-2002-1741
Directory traversal vulnerability in WorldClient.cgi in WorldClient for Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to delete arbitrary files via a ".." (dot dot) in the Attachments parameter.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: worldclient
References: http://online.securityfocus.com/archive/1/271374, http://www.securityfocus.com/bid/4687, https://exchange.xforce.ibmcloud.com/vulnerabilities/9027
CVE-2002-2168
SQL injection vulnerability in Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to execute arbitrary SQL queries via various programs including function_describe_item1.inc.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: 123tkshop
References: http://online.securityfocus.com/archive/1/282404, http://www.123tkshop.org/index.php, http://www.iss.net/security_center/static/9582.php
CVE-2002-0879
showtemp.cfm for Gafware CFXImage 1.6.6 allows remote attackers to read arbitrary files via (1) a .. or (2) a C: style pathname in the FILE parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cfximage
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0256.html, http://www.iss.net/security_center/static/9196.php, http://www.securityfocus.com/bid/4882
CVE-2002-2396
Buffer overflow in Advanced TFTP (atftp) 0.5 and 0.6, if installed setuid or setgid, may allow local users to execute arbitrary code via a long argument to the -g option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: advanced_tftp
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://www.iss.net/security_center/static/10142.php, http://www.netric.org/advisories/netric-adv010.txt, http://www.securityfocus.com/bid/5760
CWE: CWE-119
CVE-2002-2044
Cross-site scripting (XSS) vulnerability in x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a parameter to the phpinfo action.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: x-stat
References: http://seclists.org/lists/vuln-dev/2002/Mar/0156.html, http://securitytracker.com/id?1003827, http://www.ifrance.com/kitetoua/tuto/x_holes.txt
CVE-2002-1134
Unknown vulnerability in Compaq WEBES Service Tools 2.0 through WEBES 4.0 (Service Pack 5) allows local users to read privileged files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: webes_service_tools
References: http://marc.info/?l=bugtraq&m=103280973718587&w=2, http://online.securityfocus.com/advisories/4497, http://www.iss.net/security_center/static/10167.php
CVE-2002-1021
BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a hex-encoded null byte.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: badblue
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0143.html, http://www.iss.net/security_center/static/9557.php, http://www.securityfocus.com/bid/5226
CVE-2002-1289
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read restricted process memory, cause a denial of service (crash), and possibly execute arbitrary code via the getNativeServices function, which creates an instance of the com.ms.awt.peer.INativeServices (INativeServices) class, whose methods do not verify the memory addresses that are passed as parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: java_virtual_machine
References: http://marc.info/?l=bugtraq&m=103682630823080&w=2, http://marc.info/?l=ntbugtraq&m=103684360031565&w=2, http://www.iss.net/security_center/static/10582.php
CVE-2002-1576
lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called from a directory that has a symlink to the lserver program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sap_db
References: http://marc.info/?l=bugtraq&m=103903565829796&w=2, http://www.sapdb.org/sap_db_alert.htm, http://www.securityfocus.com/bid/6316
CVE-2002-0203
ttawebtop.cgi in Tarantella Enterprise 3.20 on SPARC Solaris and Linux, and 3.1x and 3.0x including 3.11.903, allows remote attackers to view directory contents via an empty pg parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: tarantella_enterprise
References: http://marc.info/?l=bugtraq&m=101190195430376&w=2, http://www.tarantella.com/security/bulletin-03.html, http://marc.info/?l=bugtraq&m=101190195430376&w=2
CVE-2002-1258
Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer and other applications, allow remote attackers to read files via a Java applet with a spoofed location in the CODEBASE parameter in the APPLET tag, possibly due to a parsing error.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_2000, windows_nt, windows_98se, windows_98, windows_me
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A582, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069
CVE-2002-1535
Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal network via a CONNECT request, which generates different error messages if the host is present.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: raptor_firewall, enterprise_firewall
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0190.html, http://securityresponse.symantec.com/avcenter/security/Content/2002.10.11a.html, http://www.iss.net/security_center/static/10363.php
CVE-2002-1926
Directory traversal vulnerability in source.php in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP query string.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: aquonics_file_manager
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0212.html, http://www.iss.net/security_center/static/9929.php, http://www.securityfocus.com/bid/5533
CVE-2002-1997
ZoneAlarm Pro 3.0 MailSafe allows remote attackers to bypass filtering and possibly execute arbitrary code via email attachments containing a trailing dot after the file extension.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: zonealarm
References: http://www.securityfocus.com/archive/1/265387, http://www.securityfocus.com/bid/4407, https://exchange.xforce.ibmcloud.com/vulnerabilities/8744
CVE-2002-1052
Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to (1) cause a denial of service using the "con" device, or (2) obtain the physical path of the server using two requests to the "aux" device.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: jigsaw
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0028.html, http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0031.html, http://marc.info/?l=bugtraq&m=102691753204392&w=2
CVE-2002-2009
Apache Tomcat 4.0.1 allows remote attackers to obtain the web root path via HTTP requests for JSP files preceded by (1) +/, (2) >/, (3) </, and (4) %20/, which leaks the pathname in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: tomcat
References: http://tomcat.apache.org/security-4.html, http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-04/0286.html, http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-04/0297.html
CVE-2002-2102
InfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of service (NullPointerException) via an invalid block of deflated data.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: jzlib
References: http://www.iss.net/security_center/static/8627.php, http://www.jcraft.com/jzlib/ChangeLog, http://www.securityfocus.com/bid/4359
CVE-2002-1920
Buffer overflow in FtpXQ 2.5 allows remote attackers to cause a denial of service (crash) via a MKD command with a long directory name.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ftpxq
References: http://online.securityfocus.com/archive/1/274279, http://www.iss.net/security_center/static/9189.php, http://www.securityfocus.com/bid/4862
CVE-2002-0458
Cross-site scripting vulnerability in News-TNK 1.2.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: news-tnk
References: http://archives.neohapsis.com/archives/bugtraq/2002-03/0206.html, http://translate.google.com/translate?u=http%3A%2F%2Fwww.linux-sottises.net%2Findex.php%3Fnews_init%3D13%23newstag&langpair=fr%7Cen&hl=en&ie=UTF8&oe=UTF8&prev=%2Flanguage_tools, http://www.iss.net/security_center/static/8477.php
CVE-2002-2219
chetcpasswd.cgi in Pedro Lineu Orso chetcpasswd before 2.1 allows remote attackers to read the last line of the shadow file via a long user (userid) field.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: chetcpasswd
References: http://securitytracker.com/id?1005847, http://sourceforge.net/project/shownotes.php?group_id=68912&release_id=466649, http://www.securiteam.com/unixfocus/6C00N0K6AO.html
CVE-2002-1079
Directory traversal vulnerability in Abyss Web Server 1.0.3 allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in an HTTP GET request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: abyss_web_server
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0229.html, http://www.aprelium.com/news/patch1033.html, http://www.iss.net/security_center/static/9940.php
CVE-2002-1043
Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) via a malformed Subject ("\t\t").
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: popcorn
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0117.html, http://www.iss.net/security_center/static/9547.php, http://www.securityfocus.com/bid/5212
CVE-2002-2087
Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_drop, (2) gds_lock_mgr, or (3) gds_inet_server.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: interbase
References: http://cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00222.html, http://www.iss.net/security_center/static/9392.php, http://www.securityfocus.com/bid/5044
CVE-2002-0044
GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: enscript, debian_linux, linux
References: http://www.debian.org/security/2002/dsa-105, http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-010.php3, http://www.redhat.com/support/errata/RHSA-2002-012.html
CVE-2002-2245
ftpd in NetBSD 1.5 through 1.5.3 and 1.6 does not properly quote a digit in response to a STAT command for a filename that contains a carriage return followed by a digit, which can cause firewalls and other intermediary devices to lose proper track of the FTP session.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: ftpd
Related CWEs: CWE-189
References: ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2002-027.txt.asc, ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2002-027.txt.asc
CWE: CWE-189
CVE-2002-0695
Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code via a query that calls the OpenRowSet command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: microsoft_data_access_components, data_access_components
References: http://www.iss.net/security_center/static/9734.php, http://www.nextgenss.com/advisories/mssql-ors.txt, http://www.securityfocus.com/bid/5372
CVE-2002-0097
Geeklog 1.3 allows remote attackers to hijack user accounts, including the administrator account, by modifying the UID of a user's permanent cookie to the target account.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: geeklog
References: http://geeklog.sourceforge.net/index.php?topic=Security, http://online.securityfocus.com/archive/1/249443, http://www.iss.net/security_center/static/7869.php
CVE-2002-2308
Netscape Communicator 6.2.1 allows remote attackers to cause a denial of service in client browsers via a webpage containing a recursive META refresh tag where the content tag is blank and the URL tag references itself.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: communicator
References: http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000600.html, http://www.iss.net/security_center/static/9645.php, http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000600.html
CVE-2002-2445
GE Healthcare Millennium MG, NC, and MyoSIGHT has a default password of (1) root.genie for the root user, (2) "service." for the service user, (3) admin.genie for the admin user, (4) reboot for the reboot user, and (5) shutdown for the shutdown user, which has unspecified impact and attack vectors.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: millennium_mg, millennium_nc, millennium_myosight
References: http://apps.gehealthcare.com/servlet/ClientServlet/2338955-100.pdf?REQ=RAA&DIRECTION=2338955-100&FILENAME=2338955-100.pdf&FILEREV=1&DOCREV_ORG=1, http://apps.gehealthcare.com/servlet/ClientServlet/2354459-100.pdf?REQ=RAA&DIRECTION=2354459-100&FILENAME=2354459-100.pdf&FILEREV=4&DOCREV_ORG=4, http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/
CVE-2002-0103
An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2) obtaining the administrator password from webcache.xml.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: application_server_web_cache
References: http://marc.info/?l=bugtraq&m=101041510727937&w=2, http://otn.oracle.com/deploy/security/pdf/webcache2.pdf, http://www.iss.net/security_center/static/7766.php
CVE-2002-2294
Multiple buffer overflows in Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 allow remote attackers to cause a denial of service (service termination) via (1) malformed RealAudio (rad) packets that are not properly handled by the RealAudio Proxy, or (2) crafted packets to the statistics service (statsd).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: velociraptor, raptor_firewall, gateway_security, enterprise_firewall
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://www.securityfocus.com/bid/6389, http://www.symantec.com/avcenter/security/Content/2002.12.12.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/10862
CWE: CWE-119
CVE-2002-1769
Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default password of LdapPassword_1, which allows remote attackers the "Log on locally" privilege.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: site_server_commerce, site_server
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0033.html, http://online.securityfocus.com/advisories/3843, http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3BQ248840
CVE-2002-0936
The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: tomcat
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0095.html, http://tomcat.apache.org/security-4.html, http://www.iss.net/security_center/static/9339.php
CVE-2002-1657
PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess passwords via a brute force attack.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: postgresql
Related CWEs: CWE-916
Related CAPECs: CAPEC-55
MITRE ATT&CK Techniques: T1110.002
MITRE ATT&CK Tactics: T1110
References: http://archives.postgresql.org/pgsql-admin/2002-08/msg00253.php, http://marc.info/?l=bugtraq&m=111402558115859&w=2, http://marc.info/?l=bugtraq&m=111403050902165&w=2
CWE: CWE-916
MITRE ATT&CK techniques: T1110.002
MITRE ATT&CK tactics: T1110
CVE-2002-0393
Buffer overflow in Red-M 1050 (Bluetooth Access Point) management web interface allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long administration password.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: 1050ap_lan_acess_point
References: http://www.atstake.com/research/advisories/2002/a060502-1.txt, http://www.securityfocus.com/bid/4942, https://exchange.xforce.ibmcloud.com/vulnerabilities/9262
CVE-2002-1054
Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote authenticated users to list arbitrary directories via "..\" (dot-dot backslash) sequences in a LIST command.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: pablo_ftp_server
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0035.html, http://online.securityfocus.com/archive/1/283665, http://www.iss.net/security_center/static/9647.php
CVE-2002-1166
Buffer overflow in John Franks WN Server 1.18.2 through 2.0.0 allows remote attackers to execute arbitrary code via a long GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wn_server
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0138.html, http://marc.info/?l=bugtraq&m=103340145725050&w=2, http://www.iss.net/security_center/static/10223.php
CVE-2002-1353
LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: localweb2000
References: http://secunia.com/advisories/7740/, http://securitytracker.com/id?1005830, http://www.idefense.com/application/poi/display?id=31&type=vulnerabilities&flashstatus=false
CVE-2002-1320
Pine 4.44 and earlier allows remote attackers to cause a denial of service (core dump and failed restart) via an email message with a From header that contains a large number of quotation marks (").
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: pine
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000551, http://marc.info/?l=bugtraq&m=103668430620531&w=2, http://marc.info/?l=bugtraq&m=103884988306241&w=2
CVE-2002-2241
Buffer overflow in httpd32.exe in Deerfield VisNetic WebSite before 3.5.15 allows remote attackers to cause a denial of service (crash) via a long HTTP OPTIONS request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: visnetic_website
Related CWEs: CWE-399
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0101.html, http://www.securityfocus.com/bid/6364, https://exchange.xforce.ibmcloud.com/vulnerabilities/10840
CWE: CWE-399
CVE-2002-2253
Multiple buffer overflows in Cyrus Sieve / libSieve 2.1.2 and earlier allow remote attackers to execute arbitrary code via (1) a long header name, (2) a long IMAP flag, or (3) a script that generates a large number of errors that overflow the resulting error string.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: libsieve
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0019.html, http://www.securityfocus.com/bid/6294, http://www.securityfocus.com/bid/6299
CWE: CWE-119
CVE-2002-0670
The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 uses Base64 encoded usernames and passwords for HTTP basic authentication, which allows remote attackers to steal and easily decode the passwords via sniffing.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xpressa
References: http://www.atstake.com/research/advisories/2002/a071202-1.txt, http://www.iss.net/security_center/static/9565.php, http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp
CVE-2002-0565
Oracle 9iAS 1.0.2.x compiles JSP files in the _pages directory with world-readable permissions under the web root, which allows remote attackers to obtain sensitive information derived from the JSP code, including usernames and passwords, via a direct HTTP request to _pages.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: application_server_web_cache, application_server, oracle9i
References: http://marc.info/?l=bugtraq&m=101301440005580&w=2, http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf, http://www.cert.org/advisories/CA-2002-08.html
CVE-2002-2254
The experimental IP packet queuing feature in Netfilter / IPTables in Linux kernel 2.4 up to 2.4.19 and 2.5 up to 2.5.31, when a privileged process exits and network traffic is not being queued, may allow a later process with the same Process ID (PID) to access certain network traffic that would otherwise be restricted.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: linux_kernel
Related CWEs: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0025.html, http://www.securityfocus.com/bid/6305, https://exchange.xforce.ibmcloud.com/vulnerabilities/10756
CWE: CWE-264
CVE-2002-0554
webdriver in IBM Informix Web DataBlade 4.12 allows remote attackers to bypass user access levels or read arbitrary files via a SQL injection attack in an HTTP request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: informix_web_datablade
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0135.html, http://www.iss.net/security_center/static/8826.php, http://www.securityfocus.com/bid/4496
CVE-2002-2326
The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authentication credentials in cleartext when connecting to Mac.com, which could allow remote attackers to obtain passwords by sniffing network traffic.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mac_os_x
Related CWEs: CWE-310
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0276.html, http://archives.neohapsis.com/archives/bugtraq/2002-07/0281.html, http://www.iss.net/security_center/static/9670.php
CWE: CWE-310
CVE-2002-1716
The Host() function in the Microsoft spreadsheet component on Microsoft Office XP allows remote attackers to create arbitrary files using the SaveAs capability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: office
References: http://online.securityfocus.com/archive/1/265087, http://www.guninski.com/m%24oxp-2.html, http://www.securityfocus.com/bid/4398
CVE-2002-0462
bigsam_guestbook.php for Big Sam (Built-In Guestbook Stand-Alone Module) 1.1.08 and earlier allows remote attackers to cause a denial of service (CPU consumption) or obtain the absolute path of the web server via a displayBegin parameter with a very large number, which leaks the web path in an error message when PHP safe_mode is enabled, or consumes resources when safe_mode is not enabled.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Affected Products: big_sam
References: http://www.gezzed.net/bigsam/bigsam.1_1_12.php.txt, http://www.iss.net/security_center/static/8478.php, http://www.iss.net/security_center/static/8479.php
CVE-2002-0747
Buffer overflow in lsmcode in AIX 4.3.3.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://archives.neohapsis.com/archives/aix/2002-q2/0005.html, http://archives.neohapsis.com/archives/aix/2002-q2/0005.html
CVE-2002-0134
Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system itself, which allows remote attackers to list file contents of the proxy and execute arbitrary commands via a "dos" command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: avirt_gateway_suite
References: http://marc.info/?l=bugtraq&m=101131669102843&w=2, http://marc.info/?l=bugtraq&m=101424723728817&w=2, http://www.iss.net/security_center/static/7915.php
CVE-2002-2031
Internet Explorer 5.0, 5.0.1 and 5.5 with JavaScript execution enabled allows remote attackers to determine the existence of arbitrary files via a script tag with a src parameter that references a non-JavaScript file, then using the onError event handler to monitor the results.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: http://archives.neohapsis.com/archives/bugtraq/2002-01/0019.html, http://www.iss.net/security_center/static/7784.php, http://www.securityfocus.com/bid/3779
CVE-2002-2346
phpBB 2.0 through 2.0.3 generates names for uploaded avatar files with the hex-encoded IP address of the client system, which allows remote attackers to obtain client IP addresses.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpbb
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: http://online.securityfocus.com/archive/1/294560, http://www.iss.net/security_center/static/10323.php, http://www.securityfocus.com/bid/5923
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-2002-1832
Unknown vulnerability in the "ipopts decode" functionality in Firestorm IDS 0.4.0 through 0.4.2 allows remote attackers to cause a denial of service (crash) via certain IP options.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: firestorm_ids
References: http://www.iss.net/security_center/static/9192.php, http://www.scaramanga.co.uk/firestorm/NEWS, http://www.securityfocus.com/bid/4871
CVE-2002-0536
PHPGroupware 0.9.12 and earlier, when running with the magic_quotes_gpc feature disabled, allows remote attackers to compromise the database via a SQL injection attack.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpgroupware
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0036.html, http://archives.neohapsis.com/archives/bugtraq/2002-04/0143.html, http://www.iss.net/security_center/static/8755.php
CVE-2002-1740
Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to execute arbitrary code via a long folder name (NewFolder parameter).
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: worldclient, mdaemon
References: http://online.securityfocus.com/archive/1/271374, http://www.securityfocus.com/bid/4689, https://exchange.xforce.ibmcloud.com/vulnerabilities/9026
CVE-2002-1335
Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitrary web script or HTML and access files or cookies.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: w3m
References: http://mi.med.tohoku.ac.jp/~satodai/w3m-dev-en/200211.month/838.html, http://secunia.com/advisories/8015, http://secunia.com/advisories/8016
CVE-2002-1827
Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an exclusive lock on the (1) alias, (2) map, (3) statistics, and (4) pid files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sendmail
References: http://online.securityfocus.com/archive/1/274033, http://www.iss.net/security_center/static/9162.php, http://www.securityfocus.com/bid/4822
CVE-2002-1538
Acuma Acusend 4, and possibly earlier versions, allows remote authenticated users to read the reports of other users by inferring the full URL, whose name is easily predictable.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: acusend
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0366.html, http://www.iss.net/security_center/static/10473.php, http://www.securityfocus.com/bid/6048
CVE-2002-0224
The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through SQL 2000 0.0 allows remote attackers to cause a denial of service (crash or hang) via malformed (random) input.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000, sql_server, internet_information_services
References: http://online.securityfocus.com/archive/1/253360, http://online.securityfocus.com/archive/1/268593, http://www.iss.net/security_center/static/8046.php
CVE-2002-1846
Yet Another Bulletin Board (YaBB) 1.40 and 1.41 does not require a user to submit the correct password before changing it to a new password, which allows remote attackers to modify passwords by stealing the cookie of another user, modifying the expiretime setting, and submitting the change in a profile2 action to index.php.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: yabb
References: http://online.securityfocus.com/archive/1/296121, http://online.securityfocus.com/archive/1/296121
CVE-2002-0382
XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS reverse lookup contains shell metacharacters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xchat
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000526, http://marc.info/?l=bugtraq&m=101725430425490&w=2, http://www.iss.net/security_center/static/8704.php
CVE-2002-1696
Microsoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a message to hard disk when "Automatically decrypt/verify when opening messages" option is checked, "Always use Secure Viewer when decrypting" option is not checked, and the user replies to an encrypted message.
CVSS v3.1 Score: 5.5 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: outlook, personal_privacy
Related CWEs: CWE-312
Related CAPECs: CAPEC-37
MITRE ATT&CK Techniques: T1005, T1552.004
MITRE ATT&CK Tactics: T1552
References: http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=528, http://www.securityfocus.com/bid/3825, https://exchange.xforce.ibmcloud.com/vulnerabilities/7900
CWE: CWE-312
MITRE ATT&CK techniques: T1005, T1552.004
MITRE ATT&CK tactics: T1552
CVE-2002-1941
Buffer overflow in RadioBird WebServer 4 Everyone 1.28 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request with the Host header set.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: web_server_4_everyone
References: http://online.securityfocus.com/archive/1/296759, http://www.iss.net/security_center/static/10447.php, http://www.securityfocus.com/bid/6034
CVE-2002-1403
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: dhcpcd
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000549, http://marc.info/?l=bugtraq&m=104189546709447&w=2, http://www.debian.org/security/2002/dsa-219
CVE-2002-1405
CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTTP request that is provided on the command line, via a URL containing encoded carriage return, line feed, and other whitespace characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: lynx, elinks, links
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-049.0.txt, http://marc.info/?l=bugtraq&m=102978118411977&w=2, http://marc.info/?l=bugtraq&m=103003793418021&w=2
CVE-2002-2000
ACMS 4.3 and 4.4 in OpenVMS Alpha 7.2 and 7.3 does not properly use process privileges, which allows attackers to access data.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: acms
References: http://ftp.support.compaq.com/patches/.new/html/SSRT0813.shtml, http://www.iss.net/security_center/static/8306.php, http://www.securityfocus.com/bid/4184
CVE-2002-0623
Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 and 2002 allows remote attackers to execute arbitrary code via long authentication data, aka "New Variant of the ISAPI Filter Buffer Overrun".
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: commerce_server
References: http://www.iss.net/security_center/static/9426.php, http://www.osvdb.org/5163, http://www.securityfocus.com/bid/5112
CVE-2002-1673
The web interface for Webmin 0.92 does not properly quote or filter script code in files that are displayed to the interface, which allows local users to execute script and possibly steal cookies by inserting the script into certain files or fields, such as a real user name entry in the passwd file.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: webmin
References: http://online.securityfocus.com/archive/1/263181, http://www.securityfocus.com/bid/4329, https://exchange.xforce.ibmcloud.com/vulnerabilities/8596
CVE-2002-0185
mod_python version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions from the imported module.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mod_python
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000477, http://www.iss.net/security_center/static/8997.php, http://www.modpython.org/pipermail/mod_python/2002-April/001991.html
CVE-2002-1363
Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a buffer overflow attack on the row buffers.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: libpng
References: http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:008, http://www.debian.org/security/2002/dsa-213, http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:063
CVE-2002-1309
Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia ColdFusion 6.0 allows remote attackers to execute arbitrary via an HTTP GET request with a long .cfm file name.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: coldfusion
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0149.html, http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0080.html, http://marc.info/?l=bugtraq&r=1&b=200211&w=2
CVE-2002-1342
Unknown vulnerability in smb2www 980804-16 and earlier allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: smb2www
References: http://www.debian.org/security/2002/dsa-203, http://www.iss.net/security_center/static/10768.php, http://www.securityfocus.com/bid/6313
CVE-2002-1499
Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database actions via (1) the authornumber parameter in author.asp, (2) the discussblurbid parameter in discuss.asp, (3) the name parameter in holdcomment.asp, and (4) the email parameter in holdcomment.asp.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: factosystem_weblog
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0097.html, http://online.securityfocus.com/archive/1/290021, http://sourceforge.net/tracker/index.php?func=detail&aid=602711&group_id=12668&atid=112668
CVE-2002-1606
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain privileges via (1) lpc, (2) lpd, (3) lpq, (4) lpr, or (5) lprm.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux, tru64
References: http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11, http://www.kb.cert.org/vuls/id/293305, http://www.kb.cert.org/vuls/id/557481
CVE-2002-1515
Directory traversal vulnerability in avatar.php in CoolForum 0.5 beta allows remote attackers to read arbitrary files via .. (dot dot) sequences in the img parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: coolforum
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0001.html, http://online.securityfocus.com/archive/1/295358, http://www.coolforum.net/index.php?p=dlcoolforum
CVE-2002-0124
MDG Computer Services Web Server 4D/eCommerce 3.5.3 allows remote attackers to exploit directory traversal vulnerability via a ../ (dot dot) containing URL-encoded slashes in the HTTP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: web_server_4d_ecommerce
References: http://online.securityfocus.com/archive/1/250231, http://www.iss.net/security_center/static/7878.php, http://www.securityfocus.com/bid/3872
CVE-2002-0265
Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows local users to gain privileges by modifying the file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sawmill
References: http://marc.info/?l=bugtraq&m=101346206921270&w=2, http://www.iss.net/security_center/static/8173.php, http://www.sawmill.net/version_history.html
CVE-2002-1786
SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users to read the core dumps and possibly obtain sensitive information.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20020902-01-I, http://www.iss.net/security_center/static/10138.php, http://www.securityfocus.com/bid/5737
CVE-2002-0718
Web authoring command in Microsoft Content Management Server (MCMS) 2001 allows attackers to authenticate and upload executable content, by modifying the upload location, aka "Program Execution via MCMS Authoring Function."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: content_management_server
References: http://www.iss.net/security_center/static/9784.php, http://www.securityfocus.com/bid/5421, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-041
CVE-2002-0989
The URL handler in the manual browser option for Gaim before 0.59.1 allows remote attackers to execute arbitrary script via shell metacharacters in a link.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gaim
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:06.asc, http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=72728, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000521
CVE-2002-1154
anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to cause a denial of service (disk consumption) by using the command to report updates more frequently and fill the web server error log.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: analog
References: http://www.analog.cx/security5.html, http://www.iss.net/security_center/static/10344.php, http://www.osvdb.org/3779
CVE-2002-0877
Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) LIST (ls) or (2) GET commands.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: shambala_server
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0282.html, http://www.iss.net/security_center/static/9224.php, http://www.securityfocus.com/bid/4896
CVE-2002-1436
The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary Perl code via an HTTP POST request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netware
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0202.html, http://support.novell.com/servlet/tidfinder/2963307, http://www.iss.net/security_center/static/9916.php
CVE-2002-0639
Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication (ChallengeResponseAuthentication) when OpenSSH is using SKEY or BSD_AUTH authentication.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openssh
Related CWEs: CWE-190
Related CAPECs: CAPEC-92
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-030.0.txt, http://archives.neohapsis.com/archives/bugtraq/2002-06/0335.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000502
CWE: CWE-190
CVE-2002-2036
Sun Ray Server Software (SRSS) 1.3, when Non-Smartcard Mobility (NSCM) is enabled, allows remote attackers to login as another user by running dtlogin from a system that supports the XDMCP client.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ray_server_software
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-44069-1, http://www.iss.net/security_center/static/9252.php, http://www.securityfocus.com/bid/4911