Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-0980 State: PUBLISHED Published: 2002-08-23T04:00:00 Last Updated: 2024-08-08T03:12:15.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Folder component for Internet Explorer 5.5 and 6.0 writes an error message to a known location in the temporary folder, which allows remote attackers to execute arbitrary code by injecting it into the error message, then referring to the error message file via a mhtml: URL. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-014 - http://marc.info/?l=vuln-dev&m=102943486811091&w=2 - http://marc.info/?l=bugtraq&m=102942234427691&w
ins/2003/ms03-014 - http://marc.info/?l=vuln-dev&m=102943486811091&w=2 - http://marc.info/?l=bugtraq&m=102942234427691&w=2 - http://www.iss.net/security_center/static/9881.php - http://www.securityfocus.com/bid/5473 - http://marc.info/?l=ntbugtraq&m=102937705527922&w=2
CVE ID: CVE-2002-0981 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:12:16.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ndcfg command for UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to execute arbitrary code via a long command line. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.36/CSSA-2002-SCO.36.txt - http://www.securityfocus.com/bid/5551 - http://www.iss.net/security_center/static/9945.php
CVE ID: CVE-2002-0982 State: PUBLISHED Published: 2002-08-23T04:00:00 Last Updated: 2024-08-08T03:12:15.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft SQL Server 2000 SP2, when configured as a distributor, allows attackers to execute arbitrary code via the @scriptfile parameter to the sp_MScopyscript stored procedure. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=103004505027360&w=2
CVE ID: CVE-2002-0983 State: PUBLISHED Published: 2002-08-24T04:00:00 Last Updated: 2024-08-08T03:12:17.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: IRC client irssi in irssi-text before 0.8.4 allows remote attackers to cause a denial of service (crash) via an IRC channel that has a long topic followed by a certain string, possibly triggering a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A05.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/9395 - http://www.debian.org/security/2002/dsa-157 - http://www.securityfocus.com/bid/5055
CVE ID: CVE-2002-0984 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:12:16.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC allows remote attackers to execute arbitrary code if the user joins a channel whose topic includes EPIC4 code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5555 - http://www.iss.net/security_center/static/9943.php - http://archives.neohapsis.com/archives/bugtraq/2002-08/0231.html - http://www.debian.org/security/2002/dsa-156
CVE ID: CVE-2002-0985 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:16.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify command line arguments to the MTA (e.g. sendmail) in the 5th argument to mail(), altering MTA behavior and possibly executing commands. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105760591228031&w=2 - http://www.debian.org/security/2002/dsa-168 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9966 - http://marc.info/?l=bugtraq&m=1030
g/security/2002/dsa-168 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9966 - http://marc.info/?l=bugtraq&m=103011916928204&w=2 - http://www.redhat.com/support/errata/RHSA-2002-243.html - http://www.redhat.com/support/errata/RHSA-2003-159.html - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:082 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-008.0.txt - http://www.novell.com/linux/security/advisories/2002_036_modphp4.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000545 - http://www.redhat.com/support/errata/RHSA-2002-213.html - http://www.redhat.com/support/errata/RHSA-2002-248.html - http://www.redhat.com/support/errata/RHSA-2002-244.htm
.html - http://www.redhat.com/support/errata/RHSA-2002-248.html - http://www.redhat.com/support/errata/RHSA-2002-244.html - http://www.osvdb.org/2111 - http://www.redhat.com/support/errata/RHSA-2002-214.html
CVE ID: CVE-2002-0986 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:16.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments, which could allow remote attackers to modify mail message content, including mail headers, and possibly use PHP as a "spam proxy." Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105760591228031&w=2 - http://www.debian.org/security/2002/dsa-168 - http://www.kb.cert.org/vuls/id/410609 - http://marc.info/?l=bugtraq&m=103011916928204&w=2 - http://www.redhat.com/support/errata/RHSA-2002-
org/vuls/id/410609 - http://marc.info/?l=bugtraq&m=103011916928204&w=2 - http://www.redhat.com/support/errata/RHSA-2002-243.html - http://www.osvdb.org/2160 - http://www.redhat.com/support/errata/RHSA-2003-159.html - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:082 - http://www.securityfocus.com/bid/5562 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-008.0.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/9959 - http://www.novell.com/linux/security/advisories/2002_036_modphp4.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000545 - http://www.redhat.com/support/errata/RHSA-2002-213.html - http://www.redhat.com/support/errata/RHSA-2002-24
cio=000545 - http://www.redhat.com/support/errata/RHSA-2002-213.html - http://www.redhat.com/support/errata/RHSA-2002-248.html - http://www.redhat.com/support/errata/RHSA-2002-244.html - http://www.redhat.com/support/errata/RHSA-2002-214.html
CVE ID: CVE-2002-0987 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:12:16.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5044 - ftp://ftp.sco.com/pub/updates/OpenUNIX/CSSA-2002-SCO.38 - http://www.securityfocus.com/bid/5575 - http://www.iss.net/security_center/static/9976.php
CVE ID: CVE-2002-0988 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:12:17.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5577 - ftp://ftp.sco.com/pub/updates/OpenUNIX/CSSA-2002-SCO.38 - http://www.iss.net/security_center/static/9977.php
CVE ID: CVE-2002-0989 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:12:17.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: The URL handler in the manual browser option for Gaim before 0.59.1 allows remote attackers to execute arbitrary script via shell metacharacters in a link. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=103046442403404&w=2 - http://online.securityfocus.com/advisories/4471 - http://www.osvdb.org/5033 - http://www.securityfocus.com/bid/5574 - http://www.redhat.com/support/errata/RHSA-2002-190.html - http://www.redhat.com/support/errata/RHSA-2002-191.html - http://distro.conectiva.c
/support/errata/RHSA-2002-190.html - http://www.redhat.com/support/errata/RHSA-2002-191.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000521 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:06.asc - http://gaim.sourceforge.net/ChangeLog - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=72728 - http://www.redhat.com/support/errata/RHSA-2003-156.html - http://www.iss.net/security_center/static/9978.php - http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:054 - http://www.redhat.com/support/errata/RHSA-2002-189.html - http://www.debian.org/security/2002/dsa-158
CVE ID: CVE-2002-0990 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:16.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web proxy component in Symantec Enterprise Firewall (SEF) 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociRaptor, and Symantec Gateway Security allow remote attackers to cause a denial of service (connection resource exhaustion) via multiple connection requests to domains whose DNS server is unresponsive or does not exist, which generates a long timeout. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10364.php - http://marc.info/?l=bugtraq&m=10346386950312
tainer: References: - http://www.iss.net/security_center/static/10364.php - http://marc.info/?l=bugtraq&m=103463869503124&w=2 - http://securityresponse.symantec.com/avcenter/security/Content/2002.10.11.html - http://www.securityfocus.com/bid/5958
CVE ID: CVE-2002-0991 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:17.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier, based on the Sharity package, allows local users to gain root privileges via long (1) -U, (2) -D, (3) -P, (4) -S, (5) -N, or (6) -u parameters. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/hp/2002-q3/0016.html - http://www.iss.net/security_center/static/9431.php - http://archives.neohapsis.com/archives/bugtraq/2002-06/0300.html - http://www.securityfocus.com/bid/5088
CVE ID: CVE-2002-0992 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in IPV6 functionality for DCE daemons (1) dced or (2) rpcd on HP-UX 11.11 allows attackers to cause a denial of service (crash) via an attack that modifies internal data. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/advisories/4258 - http://www.securityfocus.com/bid/5143 - http://www.iss.net/security_center/static/9475.php
CVE ID: CVE-2002-0993 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:17.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in HP Instant Support Enterprise Edition (ISEE) product U2512A for HP-UX 11.00 and 11.11 may allow authenticated users to access restricted files. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9620.php - http://www.securityfocus.com/bid/5267 - http://archives.neohapsis.com/archives/hp/2002-q3/0023.html
CVE ID: CVE-2002-0994 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: SunPCi II VNC uses a weak authentication scheme, which allows remote attackers to obtain the VNC password by sniffing the random byte challenge, which is used as the key for encrypted communications. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9476.php - http://www.securityfocus.com/bid/5146 - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0003.html
CVE ID: CVE-2002-0995 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:12:16.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login.php with the action parameter set to "insert," which adds the provided username to the adminUsers table. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5141 - http://www.phpauction.org/viewnew.php?id=5 - http://archives.neohapsis.com/archives/bugtraq/2002-07/0014.html - http://www.iss.net/security_center/static/9462.php
CVE ID: CVE-2002-0996 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Novell NetMail (NIMS) 3.0.3 before 3.0.3C allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) WebAdmin or (2) ModWeb. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-07/0153.html - http://www.iss.net/security_center/static/9560.php - http://support.novell.com/servlet/tidfinder/2963051 - http://www.securityfocus.com/bid/5230 - http://www.securityfocus.com/bid/5231
CVE ID: CVE-2002-0997 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in IMAP Agent (imapd) for Novell NetMail (NIMS) 3.0.3 before 3.0.3A allows remote attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9559.php - http://www.securityfocus.com/bid/5232 - http://support.novell.com/servlet/tidfinder/2962974 - http://archives.neohapsis.com/archives/bugtraq/2002-07/0152.html
CVE ID: CVE-2002-0998 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in cafenews.php for CARE 2002 before beta 1.0.02 allows remote attackers to read arbitrary files via .. (dot dot) sequences and null characters in the lang parameter, which is processed by a call to the include function. Additional Analyst Notes: - CVE Program Container: References: - http://www.care2x.com/modul.php?thispage=headlines&m_titel=NEWS&m_item=Headlines&lang=en - http://www.securityfocus.com/bid/5218 - http://www.iss.net/security_center/static/9552.php - http://archives.neohapsis.co
ttp://www.securityfocus.com/bid/5218 - http://www.iss.net/security_center/static/9552.php - http://archives.neohapsis.com/archives/bugtraq/2002-07/0128.html
CVE ID: CVE-2002-0999 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in CARE 2002 before beta 1.0.02 allow remote attackers to perform unauthorized database operations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5219 - http://www.care2x.com/modul.php?thispage=headlines&m_titel=NEWS&m_item=Headlines&lang=en - http://archives.neohapsis.com/archives/bugtraq/2002-07/0128.html - http://www.iss.net/security_center/static/9553.php
CVE ID: CVE-2002-1000 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:12:16.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in AnalogX SimpleServer:Shout 1.0 allows remote attackers to cause a denial of service and execute arbitrary code via a long request to TCP port 8001. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9427.php - http://archives.neohapsis.com/archives/bugtraq/2002-06/0338.html - http://www.securityfocus.com/bid/5104 - http://www.osvdb.org/3782 - http://www.analogx.com/contents/download/network/ssshout.htm
CVE ID: CVE-2002-1001 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:17.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in AnalogX Proxy before 4.12 allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long HTTP request to TCP port 6588 or (2) a SOCKS 4A request to TCP port 1080 with a long DNS hostname. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5139 - http://www.securityfocus.com/bid/5138 - http://www.iss.net/security_center/static/9456.php - http://archives.neohapsis.com/archives/bugtraq/2002-07/0006.html - http://www.analogx
/security_center/static/9456.php - http://archives.neohapsis.com/archives/bugtraq/2002-07/0006.html - http://www.analogx.com/contents/download/network/proxy.htm - http://www.iss.net/security_center/static/9455.php
CVE ID: CVE-2002-1002 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:12:17.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Novell iManager (eMFrame 1.2.1) allows remote attackers to cause a denial of service (crash) via a long user name. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-08/0093.html - http://www.iss.net/security_center/static/9444.php - http://online.securityfocus.com/archive/1/279683 - http://www.securityfocus.com/bid/5117
CVE ID: CVE-2002-1003 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MyWebServer 1.02 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-07/0073.html - http://www.iss.net/security_center/static/9501.php - http://www.securityfocus.com/bid/5184
CVE ID: CVE-2002-1004 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:12:17.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in webmail feature of ArGoSoft Mail Server Plus or Pro 1.8.1.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.argosoft.com/applications/mailserver/changelist.asp - http://archives.neohapsis.com/archives/bugtraq/2002-07/0029.html - http://www.securityfocus.com/bid/5144 - http://www.iss.net/security_center/static/9477.php
CVE ID: CVE-2002-1005 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: ArGoSoft Mail Server 1.8.1.7 and earlier allows a webmail user to cause a denial of service (CPU consumption) by forwarding the email to the user while autoresponse is enabled, which creates an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-07/0515.html - http://www.securityfocus.com/bid/5395 - http://www.iss.net/security_center/static/9759.php
CVE ID: CVE-2002-1006 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:12:16.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in BBC Education Text to Speech Internet Enhancer (Betsie) 1.5.11 and earlier allows remote attackers to execute arbitrary web script via parserl.pl. Additional Analyst Notes: - CVE Program Container: References: - http://www.bbc.co.uk/education/betsie/parser.pl.txt - http://archives.neohapsis.com/archives/bugtraq/2002-07/0002.html - http://www.iss.net/security_center/static/9468.php - http://www.securityfocus.com/bid/5135
CVE ID: CVE-2002-1007 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via (1) the course_id parameter in a link to login.pl, (2) the CTID parameter in ProcessInfo.cgi, or (3) the Message parameter in index.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9467.php - http://www.securityfocus.com/bid/5137 - http://archives.neohapsis.com/archives/bugtraq/2002-07/0005.html
CVE ID: CVE-2002-1008 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in PowerBASIC urlcount.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via a request to urlcount.cgi that contains the script, which is not filtered when the REPORT capability prints the original request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5115 - http://www.iss.net/security_center/static/9445.php - http://archives.neohapsis.com/archives/bugtraq/2002-07/0072.ht
15 - http://www.iss.net/security_center/static/9445.php - http://archives.neohapsis.com/archives/bugtraq/2002-07/0072.html - http://archives.neohapsis.com/archives/bugtraq/2002-06/0332.html
CVE ID: CVE-2002-1009 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the (1) "Name" or (2) "E-mail" parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9548.php - http://www.securityfocus.com/bid/5211 - http://archives.neohapsis.com/archives/bugtraq/2002-07/0112.html
CVE ID: CVE-2002-1010 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lotus Domino R4 allows remote attackers to bypass access restrictions for files in the web root via an HTTP request appended with a "?" character, which is treated as a wildcard character and bypasses the web handlers. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0001.html
CVE ID: CVE-2002-1011 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in web server for Tivoli Management Framework (TMF) Endpoint 3.6.x through 3.7.1, before Fixpack 2, allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5235 - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0023.html - http://www.tivoli.com/secure/support/documents/security/mgt-fwk-http-vul.html - http://www.iss.net/security_center/static/9555.php - h
oli.com/secure/support/documents/security/mgt-fwk-http-vul.html - http://www.iss.net/security_center/static/9555.php - http://online.securityfocus.com/archive/1/282292
CVE ID: CVE-2002-1012 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in web server for Tivoli Management Framework (TMF) ManagedNode 3.6.x through 3.7.1 allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5233 - http://online.securityfocus.com/archive/1/282283 - http://www.tivoli.com/secure/support/documents/security/mgt-fwk-http-vul.html - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0024.html - http://www.iss.net/