Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-1546 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:29.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityoffice.net/articles/webweaver/ - http://www.iss.net/security_center/static/10467.php - http://www.securityfocus.com/bid/6041 - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0043.html
CVE ID: CVE-2002-1547 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netscreen running ScreenOS 4.0.0r6 and earlier allows remote attackers to cause a denial of service via a malformed SSH packet to the Secure Command Shell (SCS) management interface, as demonstrated via certain CRC32 exploits, a different vulnerability than CVE-2001-0144. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10528.php - http://archives.neohapsis.com/archives/bugtraq/2002-10/0443.html - http://www.netscreen.com/support/alerts/11_06_02.html - http://www.osvdb.
apsis.com/archives/bugtraq/2002-10/0443.html - http://www.netscreen.com/support/alerts/11_06_02.html - http://www.osvdb.org/4376 - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0053.html - http://www.kb.cert.org/vuls/id/930161 - http://archives.neohapsis.com/archives/bugtraq/2002-10/0446.html - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0054.html
CVE ID: CVE-2002-1548 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in autofs on AIX 4.3.0, when using executable maps, allows attackers to execute arbitrary commands as root, possibly related to "string handling around how the executable map is called." Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/aix/2002-q4/0002.html
CVE ID: CVE-2002-1549 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-11/0138.html - http://www.securityfocus.com/bid/6162 - http://www.iss.net/security_center/static/10607.php
CVE ID: CVE-2002-1550 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: dump_smutil.sh in IBM AIX allows local users to overwrite arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/aix/2002-q4/0002.html - http://www.securityfocus.com/bid/8802
CVE ID: CVE-2002-1551 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in nslookup in IBM AIX may allow attackers to cause a denial of service or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/aix/2002-q4/0002.html
CVE ID: CVE-2002-1552 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell eDirectory (eDir) 8.6.2 and Netware 5.1 eDir 85.x allows users with expired passwords to gain inappropriate permissions when logging in from Remote Manager. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=103712790808781&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10604 - http://marc.info/?l=bugtraq&m=103712498905027&w=2 - http://www.securityfocus.com/bid/6163
CVE ID: CVE-2002-1553 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco ONS15454 and ONS15327 running ONS before 3.4 allows remote attackers to modify the system configuration and delete files by establishing an FTP connection to the TCC, TCC+ or XTC using a username and password that does not exist. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10505.php - http://www.securityfocus.com/bid/6076 - http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml
CVE ID: CVE-2002-1554 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could allow attackers to gain privileges by obtaining the passwords from the image database or a backup. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10506.php - http://www.securityfocus.com/bid/6078 - http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml
CVE ID: CVE-2002-1555 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco ONS15454 and ONS15327 running ONS before 3.4 uses a "public" SNMP community string that cannot be changed, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10507.php - http://www.securityfocus.com/bid/6081 - http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml
CVE ID: CVE-2002-1556 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset) via an HTTP request to the TCC, TCC+ or XTC, in which the request contains an invalid CORBA Interoperable Object Reference (IOR). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6084 - http://www.iss.net/security_center/static/10508.php - http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml
CVE ID: CVE-2002-1557 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset to TCC, TCC+, TCCi or XTC) via a malformed HTTP request that does not contain a leading / (slash) character. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6082 - http://www.iss.net/security_center/static/10509.php - http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml
CVE ID: CVE-2002-1558 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote attackers to gain privileges by connecting to the account via Telnet. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10510.php - http://www.securityfocus.com/bid/6083 - http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml
CVE ID: CVE-2002-1559 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ion-p.exe (aka ion-p) allows remote attackers to read arbitrary files via (1) C: (drive letter) or (2) .. (dot-dot) sequences in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10518.php - http://archives.neohapsis.com/archives/bugtraq/2002-10/0448.html - http://www.securityfocus.com/bid/6091 - http://archives.neohapsis.com/archives/bugtraq/2002-10/0447.html
CVE ID: CVE-2002-1560 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by setting the login parameter to true. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-10/0328.html - http://www.iss.net/security_center/static/10455.php - http://www.securityfocus.com/bid/6033
CVE ID: CVE-2002-1561 State: PUBLISHED Published: 2003-03-26T05:00:00 Last Updated: 2024-08-08T03:26:29.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service) via a malformed packet to the RPC Endpoint Mapper at TCP port 135, which triggers a null pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6005 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A59 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-010 -
n/oval%3Aorg.mitre.oval%3Adef%3A59 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-010 - http://www.kb.cert.org/vuls/id/261537 - http://www.securityfocus.com/archive/1/296114/2002-10-14/2002-10-20/0
CVE ID: CVE-2002-1562 State: PUBLISHED Published: 2003-04-26T04:00:00 Last Updated: 2024-08-08T03:26:28.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in thttpd, when using virtual hosting, allows remote attackers to read arbitrary files via .. (dot dot) sequences in the Host: header. Additional Analyst Notes: - CVE Program Container: References: - http://news.php.net/article.php?group=php.cvs&article=15698 - http://marc.info/?l=thttpd&m=103609565110472&w=2 - https://www.debian.org/security/2003/dsa-396 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000777
CVE ID: CVE-2002-1563 State: PUBLISHED Published: 2003-04-26T04:00:00 Last Updated: 2024-08-08T03:26:28.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: stunnel 4.0.3 and earlier allows attackers to cause a denial of service (crash) via SIGCHLD signal handler race conditions that cause an inconsistency in the child counter. Additional Analyst Notes: - CVE Program Container: References: - http://www.linuxsecurity.com/advisories/engarde_advisory-3535.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000736 - http://marc.info/?l=bugtraq&m=104247606910598 - http://www.redhat.com/support/errata/RHSA-2003-223.html - http://marc.info/?l=stunnel-users&m=103600188215117&
6910598 - http://www.redhat.com/support/errata/RHSA-2003-223.html - http://marc.info/?l=stunnel-users&m=103600188215117&w=2 - http://www.securityfocus.com/bid/6592 - http://marc.info/?l=bugtraq&m=106029168514511&w=2 - http://www.redhat.com/support/errata/RHSA-2003-221.html
CVE ID: CVE-2002-1564 State: PUBLISHED Published: 2003-05-30T04:00:00 Last Updated: 2024-08-08T03:26:29.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.5 and 6.0 allows remote attackers to steal potentially sensitive information from cookies via a cookie that contains script which is executed when a page is loaded, aka the "Script within Cookies Reading Cookies" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023
CVE ID: CVE-2002-1565 State: PUBLISHED Published: 2003-06-05T04:00:00 Last Updated: 2024-08-08T03:26:28.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in url_filename function for wget 1.8.1 allows attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long URL. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc - ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-003.0.txt - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000716 - http://www.debian.org/security/2002/dsa-209 - http://marc.info/?l=bugtraq&m=10547435701
alizacoes/?id=a&anuncio=000716 - http://www.debian.org/security/2002/dsa-209 - http://marc.info/?l=bugtraq&m=105474357016184&w=2 - http://www.redhat.com/support/errata/RHSA-2003-372.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10851
CVE ID: CVE-2002-1566 State: PUBLISHED Published: 2003-08-15T04:00:00 Last Updated: 2024-08-08T03:26:29.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of service (crash) via a long string to port 9284. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=vuln-dev&m=103158692532256&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10081 - http://www.securityfocus.com/bid/5680
CVE ID: CVE-2002-1567 State: PUBLISHED Published: 2003-09-19T04:00:00 Last Updated: 2024-08-08T03:26:29.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script. Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html - http://archives.neohapsis.com/archives/vuln-dev/2002-q3/0482.html - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.or
https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2002-1568 State: PUBLISHED Published: 2003-10-08T04:00:00 Last Updated: 2024-08-08T03:26:29.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSL 0.9.6e uses assertions when detecting buffer overflow attacks instead of less severe mechanisms, which allows remote attackers to cause a denial of service (crash) via certain messages that cause OpenSSL to abort from a failed assertion, as demonstrated using SSLv2 CLIENT_MASTER_KEY messages, which are not properly handled in s2_srvr.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.ebitech.sk/patrik/SA/SA-20031002.txt - http://cvs.openssl.org/chngview?cn=7659 - http://marc.info/?l=bugtraq&
http://www.ebitech.sk/patrik/SA/SA-20031002.txt - http://cvs.openssl.org/chngview?cn=7659 - http://marc.info/?l=bugtraq&m=106511018214983
CVE ID: CVE-2002-1569 State: PUBLISHED Published: 2003-10-25T04:00:00 Last Updated: 2024-08-08T03:26:28.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the filename for (1) a PDF file or (2) a gzip file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5840 - http://www.epita.fr/~bevand_m/asa/asa-0000 - http://archives.neohapsis.com/archives/bugtraq/2002-10/0033.html - http://marc.info/?l=bugtraq&m=103348446009076&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10231
CVE ID: CVE-2002-1570 State: PUBLISHED Published: 2003-10-30T05:00:00 Last Updated: 2024-08-08T03:26:28.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in snmpnetstat for ucd-snmp 4.2.3 and earlier, and net-snmp, allows remote attackers to execute arbitrary code via multiple getnextrequest PDU messages with conflicting ifindex variables, which cause snmpnetstat to write variable data past the end of an array. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/248141 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000696 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7776 - http
ro.conectiva.com.br/atualizacoes/?id=a&anuncio=000696 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7776 - http://www.securityfocus.com/bid/3780
CVE ID: CVE-2002-1571 State: PUBLISHED Published: 2006-01-23T22:00:00 Last Updated: 2024-08-08T03:26:28.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on processors that do not clear all relevant SSE registers. Additional Analyst Notes: - CVE Program Container: References: - http://search.luky.org/linux-kernel.2002/msg24003.html - http://www.cs.helsinki.fi/linux/linux-kernel/2002-15/0760.html - http://search.luky.org/linux-kernel.2002/msg24992.html - http://www.cs.helsinki.fi/linux/linux-kernel/2002-15/0628.html - http://linux.bkbits.net:8080/l
nel.2002/msg24992.html - http://www.cs.helsinki.fi/linux/linux-kernel/2002-15/0628.html - http://linux.bkbits.net:8080/linux-2.4/diffs/arch/i386/kernel/i387.c%401.6
CVE ID: CVE-2002-1572 State: PUBLISHED Published: 2006-01-27T22:00:00 Last Updated: 2024-08-08T03:26:29.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Signed integer overflow in the bttv_read function in the bttv driver (bttv-driver.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2002-206.html - http://www.redhat.com/support/errata/RHSA-2002-205.html - http://linux.bkbits.net:8080/linux-2.4/cset%403d6badc0mxsPaOTT_GuPVxCp1_ormw
CVE ID: CVE-2002-1573 State: PUBLISHED Published: 2006-01-27T22:00:00 Last Updated: 2024-08-08T03:26:29.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the pcilynx ieee1394 firewire driver (pcilynx.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors, related to "wrap handling." Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2002-206.html - http://www.redhat.com/support/errata/RHSA-2002-205.html - http://linux.bkbits.net:8080/linux-2.4/cset%403d6aadcbBIDX67Zl6zZnVKRcsilCVQ
CVE ID: CVE-2002-1574 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:29.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ixj telephony card driver in Linux before 2.4.20 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2002-206.html - http://www.redhat.com/support/errata/RHSA-2004-044.html - http://www.redhat.com/support/errata/RHSA-2002-205.html - http://www.redhat.com/support/errata/RHSA-2004-106.html - http://www.ciac.org/ciac/bulletins/n-096.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/10417 - http://www.sec
://www.ciac.org/ciac/bulletins/n-096.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/10417 - http://www.securityfocus.com/bid/5985
CVE ID: CVE-2002-1575 State: PUBLISHED Published: 2004-02-11T05:00:00 Last Updated: 2024-08-08T03:26:28.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgiemail allows remote attackers to use cgiemail as a spam proxy via CRLF injection of encoded newline (%0a) characters in parameters such as "required-subject," which can be used to modify the CC, BCC, and other header fields in the generated email message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/9361 - http://www.securityfocus.com/bid/5013 - http://marc.info/?l=bugtraq&m=106520691705768&w=2 - http://marc.info/?l=bugtraq&m=102406554627053&w=2 - http
/bid/5013 - http://marc.info/?l=bugtraq&m=106520691705768&w=2 - http://marc.info/?l=bugtraq&m=102406554627053&w=2 - http://www.debian.org/security/2004/dsa-437
CVE ID: CVE-2002-1576 State: PUBLISHED Published: 2004-03-16T05:00:00 Last Updated: 2024-08-08T03:26:29.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called from a directory that has a symlink to the lserver program. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10762 - http://www.securityfocus.com/bid/6316 - http://www.sapdb.org/sap_db_alert.htm - http://marc.info/?l=bugtraq&m=103903565829796&w=2
CVE ID: CVE-2002-1577 State: PUBLISHED Published: 2004-03-16T05:00:00 Last Updated: 2024-08-08T03:26:29.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain privileges via the (1) SAP*, (2) SAPCPIC, (3) DDIC, (4) EARLYWATCH, or (5) TMSADM accounts. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/9964 - http://marc.info/?l=bugtraq&m=103038238228119&w=2
CVE ID: CVE-2002-1578 State: PUBLISHED Published: 2004-03-16T05:00:00 Last Updated: 2024-08-08T03:26:29.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default installation of SAP R/3, when using Oracle and SQL*net V2 3.x, 4.x, and 6.10, allows remote attackers to obtain arbitrary, sensitive SAP data by directly connecting to the Oracle database and executing queries against the database, which is not password-protected. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/8972 - http://archives.neohapsis.com/archives/bugtraq/2002-04/0387.html - http://www.securityfocus.com/bid/4613
CVE ID: CVE-2002-1579 State: PUBLISHED Published: 2004-03-16T05:00:00 Last Updated: 2024-08-08T03:26:29.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP GUI (Sapgui) 4.6D allows remote attackers to cause a denial of service (crash) via a connection to a high-numbered port, which generates an "unknown connection data" error. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-01/0334.html - http://www.securityfocus.com/bid/3972 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8007
CVE ID: CVE-2002-1580 State: PUBLISHED Published: 2004-05-20T04:00:00 Last Updated: 2024-08-08T03:26:29.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000557 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000557 - http://www.debian.org/security/2002/dsa-215 - http://asg.web.cmu.edu/cyrus/download/imapd/changes.html
anuncio=000557 - http://www.debian.org/security/2002/dsa-215 - http://asg.web.cmu.edu/cyrus/download/imapd/changes.html - http://www.kb.cert.org/vuls/id/740169 - http://www.securityfocus.com/bid/6298 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10744 - http://www.securityfocus.com/archive/1/301864