Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-1378 State: PUBLISHED Published: 2002-12-17T05:00:00 Last Updated: 2024-08-08T03:19:28.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allow remote attackers to execute arbitrary code via (1) long -t or -r parameters to slurpd, (2) a malicious ldapfilter.conf file that is not properly handled by getfilter functions, (3) a malicious ldaptemplates.conf that causes an overflow in libldap, (4) a certain access control list that causes an overflow in slapd, or (5) a long generated filename for logging rejected replication requests. Additional Analyst Notes: - CVE Program Container: References: -
ted filename for logging rejected replication requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6328 - http://www.ciac.org/ciac/bulletins/n-043.shtml - http://www.redhat.com/support/errata/RHSA-2003-040.html - http://www.securityfocus.com/advisories/4827 - http://www.turbolinux.com/security/TLSA-2003-5.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/10800 - http://www.novell.com/linux/security/advisories/2002_047_openldap2.html - http://www.mandriva.com/security/advisories?name=MDKSA-2003:006 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000556 - http://www.debian.org/security/2003/dsa-227 - http://www.linuxse
ro.conectiva.com.br/atualizacoes/?id=a&anuncio=000556 - http://www.debian.org/security/2003/dsa-227 - http://www.linuxsecurity.com/advisories/gentoo_advisory-2704.html
CVE ID: CVE-2002-1379 State: PUBLISHED Published: 2002-12-17T05:00:00 Last Updated: 2024-08-08T03:19:28.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads the .ldaprc file within applications that are running with extra privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2002_047_openldap2.html - http://www.mandriva.com/security/advisories?name=MDKSA-2003:006 - http://www.debian.org/security/2003/dsa-227
CVE ID: CVE-2002-1380 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.2.x allows local users to cause a denial of service (crash) by using the mmap() function with a PROT_READ parameter to access non-readable memory pages through the /proc/pid/mem interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-336 - http://www.redhat.com/support/errata/RHSA-2003-088.html - http://www.linuxsecurity.com/advisories/engarde_advisory-2976.html - http://www.securityfocus.com/bid/6420 - http://www.mandrakesoft.com/security/advisories?na
/engarde_advisory-2976.html - http://www.securityfocus.com/bid/6420 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:039 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10884 - http://www.trustix.net/errata/misc/2002/TSL-2002-0083-kernel.asc.txt
CVE ID: CVE-2002-1381 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code by modifying the pid_file_path value. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10761 - http://www.securityfocus.com/bid/6314 - http://marc.info/?l=bugtraq&m=103903403527788&w=2 - http://marc.info/?l=bugtraq&m=104006219018664&w=2 - http://groups.yahoo.com/group/exim-users/message/42358 - http://www.exim.org
arc.info/?l=bugtraq&m=104006219018664&w=2 - http://groups.yahoo.com/group/exim-users/message/42358 - http://www.exim.org/pipermail/exim-users/Week-of-Mon-20021202/046978.html
CVE ID: CVE-2002-1382 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: Macromedia Flash Player before 6.0.65.0 allows remote attackers to execute arbitrary code via certain malformed data headers in Shockwave Flash file format (SWF) files, a different issue than CAN-2002-0846. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10861 - http://www.securityfocus.com/bid/6383 - http://marc.info/?l=vulnwatch&m=104013370116670 - http://www.macromedia.com/v1/handlers/index.cfm?ID=23569 - http://marc.info/?l=bugtraq&m=104014220727109&w=2
CVE ID: CVE-2002-1383 State: PUBLISHED Published: 2002-12-20T05:00:00 Last Updated: 2024-08-08T03:19:28.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via (1) the CUPSd HTTP interface, as demonstrated by vanilla-coke, and (2) the image handling code in CUPS filters, as demonstrated by mksun. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/7858 - http://secunia.com/advisories/7843 - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html - http://secunia.com/advisories/9325/ - ftp://ft
43 - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html - http://secunia.com/advisories/9325/ - ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-004.0.txt - http://secunia.com/advisories/7756/ - http://secunia.com/advisories/7907 - http://secunia.com/advisories/7913/ - http://secunia.com/advisories/7794 - http://www.novell.com/linux/security/advisories/2003_002_cups.html - http://www.idefense.com/advisory/12.19.02.txt - http://www.redhat.com/support/errata/RHSA-2002-295.html - http://secunia.com/advisories/7803 - http://secunia.com/advisories/8080/ - http://marc.info/?l=bugtraq&m=104032149026670&w=2
CVE ID: CVE-2002-1384 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-232 - http://www.redhat.com/support/errata/RHSA-2002-295.html - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:002 - http://www.novell.com/linux/security/advisories/2003_002_cups.html -
esoft.com/security/advisories?name=MDKSA-2003:002 - http://www.novell.com/linux/security/advisories/2003_002_cups.html - http://www.securityfocus.com/bid/6475 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001 - http://marc.info/?l=bugtraq&m=104152282309980&w=2 - http://www.idefense.com/advisory/12.23.02.txt - http://www.redhat.com/support/errata/RHSA-2002-307.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10937 - http://www.redhat.com/support/errata/RHSA-2003-216.html - http://www.debian.org/security/2003/dsa-226 - http://www.redhat.com/support/errata/RHSA-2003-037.html - http://www.debian.org/security/2003/dsa-222
CVE ID: CVE-2002-1385 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: openwebmail_init in Open WebMail 1.81 and earlier allows local users to execute arbitrary code via .. (dot dot) sequences in a login name, such as the name provided in the sessionid parameter for openwebmail-abook.pl, which is used to find a configuration file that specifies additional code to be executed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6425 - http://marc.info/?l=bugtraq&m=104032263328026&w=2 - http://marc.info/?l=bugtraq&m=104031696120743&w=2 - http://sourcefo
http://marc.info/?l=bugtraq&m=104032263328026&w=2 - http://marc.info/?l=bugtraq&m=104031696120743&w=2 - http://sourceforge.net/forum/forum.php?thread_id=782605&forum_id=108435 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10904
CVE ID: CVE-2002-1386 State: PUBLISHED Published: 2002-12-31T05:00:00 Last Updated: 2024-08-08T03:19:28.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in traceroute-nanog (aka traceroute-ng) may allow local users to execute arbitrary code via a long hostname argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-254 - http://www.securityfocus.com/bid/6274 - http://www.iss.net/security_center/static/10608.php - http://marc.info/?l=bugtraq&m=103849968732634&w=2
CVE ID: CVE-2002-1387 State: PUBLISHED Published: 2002-12-31T05:00:00 Last Updated: 2024-08-08T03:19:28.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: The spray mode in traceroute-nanog (aka traceroute-ng) may allow local users to overwrite arbitrary memory locations via an array index overflow using the nprobes (number of probes) argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=103849968732634&w=2
CVE ID: CVE-2002-1388 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MHonArc before 2.5.14 allows remote attackers to inject arbitrary HTML into web archive pages via HTML mail messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6479 - http://www.debian.org/security/2002/dsa-221 - http://www.mhonarc.org/archive/cgi-bin/mesg.cgi?a=mhonarc-users&i=200212220120.gBM1K8502180%40mcguire.earlhood.com - https://exchange.xforce.ibmcloud.com/vulnerabilities/10950
CVE ID: CVE-2002-1389 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in typespeed 0.4.2 and earlier allows local users to gain privileges via long input. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10936 - http://www.securityfocus.com/bid/6485 - http://www.debian.org/security/2002/dsa-217
CVE ID: CVE-2002-1390 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: The daemon for GeneWeb before 4.09 does not properly handle requested paths, which allows remote attackers to read arbitrary files via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6549 - http://www.debian.org/security/2003/dsa-223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11021 - http://cristal.inria.fr/~ddr/GeneWeb/en/version/4.09.html
CVE ID: CVE-2002-1391 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in cnd-program for mgetty before 1.1.29 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a Caller ID string with a long CallerName argument. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11072 - http://www.redhat.com/support/errata/RHSA-2003-036.html - http://www.securityfocus.com/bid/7303 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-021.0.txt - http://marc.info/?l=bugtraq&m=1051544133
m/bid/7303 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-021.0.txt - http://marc.info/?l=bugtraq&m=105154413326136&w=2 - http://www.redhat.com/support/errata/RHSA-2003-008.html - http://search.alphanet.ch/cgi-bin/search.cgi?msgid=20021125142338.E12094%40greenie.muc.de&max_results=1&type=long&domain=ml-mgetty
CVE ID: CVE-2002-1392 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:29.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which allows local users to modify fax transmission privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11070 - http://www.securityfocus.com/bid/7302 - http://www.redhat.com/support/errata/RHSA-2003-036.html - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-021.0.txt - http://marc.info/?l=bugtraq&m=105154413326136&w=2 - http://www.redhat.com/support/erra
y/OpenLinux/CSSA-2003-021.0.txt - http://marc.info/?l=bugtraq&m=105154413326136&w=2 - http://www.redhat.com/support/errata/RHSA-2003-008.html - http://search.alphanet.ch/cgi-bin/search.cgi?msgid=20021125142338.E12094%40greenie.muc.de&max_results=1&type=long&domain=ml-mgetty
CVE ID: CVE-2002-1393 State: PUBLISHED Published: 2003-01-08T05:00:00 Last Updated: 2024-08-08T03:19:28.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in KDE 2 and KDE 3.x through 3.0.5 do not quote certain parameters that are inserted into a shell command, which could allow remote attackers to execute arbitrary commands via (1) URLs, (2) filenames, or (3) e-mail addresses. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-243 - http://www.debian.org/security/2003/dsa-236 - http://www.debian.org/security/2003/dsa-234 - http://www.debian.org/security/2003/dsa-242 - http://www.debian.org/security/2
://www.debian.org/security/2003/dsa-234 - http://www.debian.org/security/2003/dsa-242 - http://www.debian.org/security/2003/dsa-235 - http://www.debian.org/security/2003/dsa-241 - http://secunia.com/advisories/8103 - http://secunia.com/advisories/8067 - http://www.debian.org/security/2003/dsa-239 - http://www.redhat.com/support/errata/RHSA-2003-002.html - http://www.debian.org/security/2003/dsa-240 - http://www.redhat.com/support/errata/RHSA-2003-003.html - http://marc.info/?l=bugtraq&m=104049734911544&w=2 - http://www.securityfocus.com/bid/6462 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000569 - http://www.debian.org/security/2003/dsa-238 - http://www.mandriva.com/security/
m.br/atualizacoes/?id=a&anuncio=000569 - http://www.debian.org/security/2003/dsa-238 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:004 - http://marc.info/?l=bugtraq&m=104066520330397&w=2 - http://www.kde.org/info/security/advisory-20021220-1.txt - http://www.debian.org/security/2003/dsa-237
CVE ID: CVE-2002-1394 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=103470282514938&w=2 - http://marc.info/?l=tomcat-dev&m=103417249325526&w=2 - http://www.debian.org/security/2003/dsa-225 - http://www.redhat.com/support/errata/RHSA-2003-075.html - http://www.securityfocus.com/bid/6562 - ht
rity/2003/dsa-225 - http://www.redhat.com/support/errata/RHSA-2003-075.html - http://www.securityfocus.com/bid/6562 - http://issues.apache.org/bugzilla/show_bug.cgi?id=13365 - http://www.redhat.com/support/errata/RHSA-2003-082.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10376 - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2002-1395 State: PUBLISHED Published: 2003-01-08T05:00:00 Last Updated: 2024-08-08T03:19:29.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obtain unauthorized directory permissions via a temporary directory used by impwagent, and (2) overwrite and create arbitrary files via immknmz. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2002/dsa-202 - http://www.iss.net/security_center/static/10766.php - http://www.securityfocus.com/bid/6307 - http://secunia.com/advisories/8242 - http://secunia.com/advisories
c/10766.php - http://www.securityfocus.com/bid/6307 - http://secunia.com/advisories/8242 - http://secunia.com/advisories/8166 - http://www.iss.net/security_center/static/10767.php - http://www.redhat.com/support/errata/RHSA-2003-039.html
CVE ID: CVE-2002-1396 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the wordwrap function in PHP after 4.1.2 and before 4.3.0 may allow attackers to cause a denial of service or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10944 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:019 - http://www.securityfocus.com/bid/6488 - http://www.redhat.com/support/errata/RHSA-2003-017.html - http://archives.neohapsis.com/archives/linux/engarde/2003-q1/0003.html - h
edhat.com/support/errata/RHSA-2003-017.html - http://archives.neohapsis.com/archives/linux/engarde/2003-q1/0003.html - http://marc.info/?l=bugtraq&m=104102689503192&w=2 - http://www.securityfocus.com/advisories/4862 - http://bugs.php.net/bug.php?id=20927 - http://www.novell.com/linux/security/advisories/2003_009_mod_php4.html
CVE ID: CVE-2002-1397 State: PUBLISHED Published: 2003-01-08T05:00:00 Last Updated: 2024-08-08T03:19:28.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in the cash_words() function for PostgreSQL 7.2 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a large negative argument, possibly triggering an integer signedness error or buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000524 - http://marc.info/?l=bugtraq&m=102977465204357&w=2 - http://secunia.com/advisories/8034 - http://www.securityfocus.com/bid/5497 - http://www.red
traq&m=102977465204357&w=2 - http://secunia.com/advisories/8034 - http://www.securityfocus.com/bid/5497 - http://www.redhat.com/support/errata/RHSA-2003-001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/9891 - http://developer.postgresql.org/cvsweb.cgi/pgsql-server/src/backend/utils/adt/cash.c.diff?r1=1.51&r2=1.52
CVE ID: CVE-2002-1398 State: PUBLISHED Published: 2003-01-08T05:00:00 Last Updated: 2024-08-08T03:19:28.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the date parser for PostgreSQL before 7.2.2 allows attackers to cause a denial of service and possibly execute arbitrary code via a long date string, aka a vulnerability "in handling long datetime input." Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=postgresql-announce&m=103062536330644 - http://secunia.com/advisories/8034 - http://www.redhat.com/support/errata/RHSA-2003-001.html - http://www.debian.org/security/2002/dsa-165 - http://marc.info/?l=bugtraq&m=102996089613
ort/errata/RHSA-2003-001.html - http://www.debian.org/security/2002/dsa-165 - http://marc.info/?l=bugtraq&m=102996089613404&w=2 - http://marc.info/?l=bugtraq&m=102978152712430&w=2 - http://www.novell.com/linux/security/advisories/2002_038_postgresql.html - http://marc.info/?l=bugtraq&m=103036987114437&w=2 - http://marc.info/?l=bugtraq&m=103021186622725&w=2 - http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php
CVE ID: CVE-2002-1399 State: PUBLISHED Published: 2003-01-08T05:00:00 Last Updated: 2024-08-08T03:19:28.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in cash_out and possibly other functions in PostgreSQL 7.2.1 and earlier, and possibly later versions before 7.2.3, with unknown impact, based on an invalid integer input which is processed as a different data type, as demonstrated using cash_out(2). Additional Analyst Notes: - CVE Program Container: References: - http://archives.postgresql.org/pgsql-hackers/2002-08/msg00713.php - http://archives.postgresql.org/pgsql-hackers/2002-08/msg00708.php - http://marc.info/?l=bugtraq&m=102978152712430&w=2
CVE ID: CVE-2002-1400 State: PUBLISHED Published: 2003-01-08T05:00:00 Last Updated: 2024-08-08T03:19:28.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the repeat() function for PostgreSQL before 7.2.2 allows attackers to execute arbitrary code by causing repeat() to generate a large string. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=postgresql-announce&m=103062536330644 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000524 - http://marc.info/?l=bugtraq&m=102987306029821&w=2 - http://secunia.com/advisories/8034 - http://www.redhat.com/support/errata/RHSA-2003-001.html - http://www.mandriva.co
- http://secunia.com/advisories/8034 - http://www.redhat.com/support/errata/RHSA-2003-001.html - http://www.mandriva.com/security/advisories?name=MDKSA-2002:062 - http://www.novell.com/linux/security/advisories/2002_038_postgresql.html - http://marc.info/?l=bugtraq&m=103036987114437&w=2 - http://marc.info/?l=bugtraq&m=103021186622725&w=2 - http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php
CVE ID: CVE-2002-1401 State: PUBLISHED Published: 2003-01-08T05:00:00 Last Updated: 2024-08-08T03:26:27.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in (1) circle_poly, (2) path_encode and (3) path_add (also incorrectly identified as path_addr) for PostgreSQL 7.2.3 and earlier allow attackers to cause a denial of service and possibly execute arbitrary code, possibly as a result of an integer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000524 - http://archives.postgresql.org/pgsql-hackers/2002-08/msg02047.php - http://secunia.com/advisories/8034 - http://archives.postgr
archives.postgresql.org/pgsql-hackers/2002-08/msg02047.php - http://secunia.com/advisories/8034 - http://archives.postgresql.org/pgsql-hackers/2002-08/msg02081.php - http://www.redhat.com/support/errata/RHSA-2003-001.html - http://www.debian.org/security/2002/dsa-165
CVE ID: CVE-2002-1402 State: PUBLISHED Published: 2003-01-08T05:00:00 Last Updated: 2024-08-08T03:26:27.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in the (1) TZ and (2) SET TIME ZONE enivronment variables for PostgreSQL 7.2.1 and earlier allow local users to cause a denial of service and possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000524 - http://secunia.com/advisories/8034 - http://www.redhat.com/support/errata/RHSA-2003-001.html - http://www.debian.org/security/2002/dsa-165 - http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php
html - http://www.debian.org/security/2002/dsa-165 - http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php - http://www.mandriva.com/security/advisories?name=MDKSA-2002:062 - http://marc.info/?l=bugtraq&m=103036987114437&w=2 - http://marc.info/?l=bugtraq&m=103021186622725&w=2