Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-0186 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:28.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data queries with a long content-type parameter, aka "Unchecked Buffer in SQLXML ISAPI Extension." Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/811371 - http://www.osvdb.org/5347 - http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0100.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-030 - http://www.securit
02-q2/0100.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-030 - http://www.securityfocus.com/bid/5004 - http://www.iss.net/security_center/static/9328.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A484 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A489 - http://marc.info/?l=bugtraq&m=102397345410856&w=2
CVE ID: CVE-2002-0187 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:27.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part of an XML SQL query, aka "Script Injection via XML Tag." Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0100.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-030 - http://marc.info/?l=bugtraq&m=102397345410856&w=2
CVE ID: CVE-2002-0188 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:42:27.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the second variant of the "Content Disposition" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023 - http://archiv
ntainer: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023 - http://archives.neohapsis.com/archives/bugtraq/2002-05/0126.html - http://www.lac.co.jp/security/english/snsadv_e/48_e.html - http://www.iss.net/security_center/static/9086.php
CVE ID: CVE-2002-0189 State: PUBLISHED Published: 2002-05-17T04:00:00 Last Updated: 2024-08-08T02:42:27.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in Internet Explorer 6.0 allows remote attackers to execute scripts in the Local Computer zone via a URL that exploits a local HTML resource file, aka the "Cross-Site Scripting in Local HTML Resource" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023
CVE ID: CVE-2002-0190 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:28.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code under fewer security restrictions via a malformed web page that requires NetBIOS connectivity, aka "Zone Spoofing through Malformed Web Page" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023 - http://www.iss.net/security_center/static/9084.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova
.iss.net/security_center/static/9084.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A923 - http://www.kb.cert.org/vuls/id/242891 - http://www.securityfocus.com/bid/4753
CVE ID: CVE-2002-0191 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:28.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to view arbitrary files that contain the "{" character via script containing the cssText property of the stylesheet object, aka "Local Information Disclosure through HTML Object" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023 - http://www.securityfocus.com/bid/4411 - http://marc.info/?l=bugtraq&m=101778302030981&w=2 - http://www.iss.net/security
http://www.securityfocus.com/bid/4411 - http://marc.info/?l=bugtraq&m=101778302030981&w=2 - http://www.iss.net/security_center/static/8740.php
CVE ID: CVE-2002-0192 State: REJECTED Published: 2002-05-17T04:00:00 Last Updated: 2005-02-04T00:00:00 Description: No description available.
CVE ID: CVE-2002-0193 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:42:28.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the first variant of the "Content Disposition" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023 - http://www.sec
tainer: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023 - http://www.securityfocus.com/bid/4752 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A99 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A27 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9085
CVE ID: CVE-2002-0196 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:42:28.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: GetRelativePath in ACD Incorporated CwpAPI 1.1 only verifies if the server root is somewhere within the path, which could allow remote attackers to read or write files outside of the web root, in other directories whose path includes the web root. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3924 - http://www.iss.net/security_center/static/7981.php - http://sourceforge.net/forum/forum.php?forum_id=144966 - http://online.securityfocus.com/archive/1/251699
CVE ID: CVE-2002-0197 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:42:28.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: psyBNC 2.3 beta and earlier allows remote attackers to spoof encrypted, trusted messages by sending lines that begin with the "[B]" sequence, which makes the message appear legitimate. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/251832 - http://marc.info/?l=bugtraq&m=101173478806580&w=2 - http://www.securityfocus.com/bid/3931 - http://www.iss.net/security_center/static/7985.php
CVE ID: CVE-2002-0198 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in plDaniels ripMime 1.2.6 and earlier, as used in other programs such as xamime and inflex, allows remote attackers to execute arbitrary code via an attachment in a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101182636812381&w=2 - http://www.iss.net/security_center/static/7983.php - http://pldaniels.org/ripmime/CHANGELOG - http://www.securityfocus.com/bid/3941
CVE ID: CVE-2002-0199 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:27.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in admin.cgi for Nullsoft Shoutcast Server 1.8.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an argument with a large number of backslashes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3934 - http://marc.info/?l=bugtraq&m=101167484012724&w=2
CVE ID: CVE-2002-0200 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101174569103289&w=2 - http://www.iss.net/security_center/static/7959.php - http://www.securityfocus.com/bid/3929
CVE ID: CVE-2002-0201 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request, possibly triggering a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101174569103289&w=2 - http://www.iss.net/security_center/static/7960.php - http://www.securityfocus.com/bid/3930
CVE ID: CVE-2002-0202 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:27.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: PaintBBS 1.2 installs certain files and directories with insecure permissions, which allows local users to (1) obtain the encrypted server password via the world-readable oekakibbs.conf file, or (2) modify the server configuration via the world-writeable /oekaki/ folder. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/251985 - http://www.securityfocus.com/bid/3948 - http://www.iss.net/security_center/static/7982.php
CVE ID: CVE-2002-0203 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: ttawebtop.cgi in Tarantella Enterprise 3.20 on SPARC Solaris and Linux, and 3.1x and 3.0x including 3.11.903, allows remote attackers to view directory contents via an empty pg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101190195430376&w=2 - http://www.tarantella.com/security/bulletin-03.html
CVE ID: CVE-2002-0204 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in GNU Chess (gnuchess) 5.02 and earlier, if modified or used in a networked capacity contrary to its own design as a single-user application, may allow local or remote attackers to execute arbitrary code via a long command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3949 - http://www.iss.net/security_center/static/7991.php - http://marc.info/?l=bugtraq&m=101189688815514&w=2
CVE ID: CVE-2002-0205 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (CSS) vulnerability in error.asp for Plumtree Corporate Portal 3.5 through 4.5 allows remote attackers to execute arbitrary script on other clients via the "Description" parameter. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/82/248396 - http://www.iss.net/security_center/static/7817.php - http://www.securityfocus.com/bid/3799 - http://marc.info/?l=bugtraq&m=101189911121808&w=2
CVE ID: CVE-2002-0206 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:27.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by specifying a URL to the malicious code in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/221683 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7914 - http://www.securityfocus.com/bid/3889 - http://marc.info/?l=bugtraq&m=101121913914205&w=2
CVE ID: CVE-2002-0207 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:42:28.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Real Networks RealPlayer 8.0 and earlier allows remote attackers to execute arbitrary code via a header length value that exceeds the actual length of the header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3809 - http://archives.neohapsis.com/archives/vuln-dev/2002-q1/0044.html - http://online.securityfocus.com/archive/1/252414 - http://online.securityfocus.com/archive/1/252425 - http://sentinelchicken.com/advisories/realplayer/ - http://www.iss.net/secu
/online.securityfocus.com/archive/1/252425 - http://sentinelchicken.com/advisories/realplayer/ - http://www.iss.net/security_center/static/7839.php
CVE ID: CVE-2002-0208 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: PGP Security PGPfire 7.1 for Windows alters the system's TCP/IP stack and modifies packets in ICMP error messages in a way that allows remote attackers to determine that the system is running PGPfire. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3961 - http://online.securityfocus.com/archive/1/252407 - http://www.iss.net/security_center/static/8008.php
CVE ID: CVE-2002-0209 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:42:27.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing (SLB) and Cookie-Based Persistence features enabled, allows remote attackers to determine the real IP address of a web server with a half-closed session, which causes ACEdirector to send packets from the server without changing the address to the virtual IP address. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8010.php - http://online.securityfocus.com/archive/1/261548 - http://www.securityfocus.com
ss.net/security_center/static/8010.php - http://online.securityfocus.com/archive/1/261548 - http://www.securityfocus.com/bid/3964 - http://online.securityfocus.com/archive/1/252455
CVE ID: CVE-2002-0210 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: setlicense for TOLIS Group Backup and Restore Utility (BRU) 17.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/brutest.$$ temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3970 - http://online.securityfocus.com/archive/1/252614 - http://www.iss.net/security_center/static/8003.php
CVE ID: CVE-2002-0211 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:42:28.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary "gunzip" program before executing it, which could allow local users to execute arbitrary commands by modifying the program before it is executed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3966 - http://marc.info/?l=bugtraq&m=101208650722179&w=2 - http://online.securityfocus.com/archive/1/265845 - http://www.tarantella.com/security/bulletin-04.html -
50722179&w=2 - http://online.securityfocus.com/archive/1/265845 - http://www.tarantella.com/security/bulletin-04.html - http://www.iss.net/security_center/static/7996.php
CVE ID: CVE-2002-0212 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login for Hosting Controller 1.1 through 1.4.1 returns different error messages when a valid or invalid user is provided, which allows remote attackers to determine the existence of valid usernames and makes it easier to conduct a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://hostingcontroller.com/English/patches/ForAll/index.html - http://www.iss.net/security_center/static/8006.php - http://www.securityfocus.com/bid/3971 - http://marc.info/?l=bugtraq&m=101224151705897&w=2
CVE ID: CVE-2002-0213 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:28.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: xkas in Xinet K-AShare 0.011.01 for IRIX allows local users to read arbitrary files via a symlink attack on the VOLICON file, which is copied to the .HSicon file in a shared directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8002.php - ftp://patches.sgi.com/support/free/security/advisories/20020604-01-I - http://marc.info/?l=bugtraq&m=101223525118717&w=2 - http://www.securityfocus.com/bid/3969
CVE ID: CVE-2002-0214 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Compaq Intel PRO/Wireless 2011B LAN USB Device Driver 1.5.16.0 through 1.5.18.0 stores the 128-bit WEP (Wired Equivalent Privacy) key in plaintext in a registry key with weak permissions, which allows local users to decrypt network traffic by reading the WEP key from the registry key. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3968 - http://online.securityfocus.com/archive/1/252607 - http://www.iss.net/security_center/static/8015.php
CVE ID: CVE-2002-0215 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi file by requesting a non-existent .html file, which leaks the pathname in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8011.php - http://www.securityfocus.com/bid/3976 - http://online.securityfocus.com/archive/1/252761
CVE ID: CVE-2002-0216 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: userinfo.php in XOOPS 1.0 RC1 allows remote attackers to obtain sensitive information via a SQL injection attack in the "uid" parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3977 - http://www.iss.net/security_center/static/8028.php - http://online.securityfocus.com/archive/1/252827
CVE ID: CVE-2002-0217 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (CSS) vulnerabilities in the Private Message System for XOOPS 1.0 RC1 allow remote attackers to execute Javascript on other web clients via (1) the Title field or a Private Message Box or (2) the image field parameter in pmlite.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3981 - http://online.securityfocus.com/archive/1/252828 - http://www.iss.net/security_center/static/8025.php - http://www.securityfocus.com/bid/3978 - http://www.iss.net/security_c
tp://www.iss.net/security_center/static/8025.php - http://www.securityfocus.com/bid/3978 - http://www.iss.net/security_center/static/8030.php
CVE ID: CVE-2002-0218 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via format specifiers in a command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3980 - http://www.sas.com/service/techsup/unotes/SN/004/004201.html - http://online.securityfocus.com/archive/1/252847 - http://www.iss.net/security_center/static/8018.php - http://online.securityfocus.com/archiv
focus.com/archive/1/252847 - http://www.iss.net/security_center/static/8018.php - http://online.securityfocus.com/archive/1/252891 - http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0032.html
CVE ID: CVE-2002-0219 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via large command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.sas.com/service/techsup/unotes/SN/004/004201.html - http://www.iss.net/security_center/static/8017.php - http://online.securityfocus.com/archive/1/252847 - http://online.securityfocus.com/archive/1/252891 - http://www.securityfocus.com/bid/3979 - http://archives.
e/1/252847 - http://online.securityfocus.com/archive/1/252891 - http://www.securityfocus.com/bid/3979 - http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0032.html
CVE ID: CVE-2002-0220 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpsmssend.php in PhpSmsSend 1.0 allows remote attackers to execute arbitrary commands via an SMS message containing shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3982 - http://online.securityfocus.com/archive/1/252918 - http://www.iss.net/security_center/static/8019.php
CVE ID: CVE-2002-0221 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Etype Eserv 2.97 allows remote attackers to cause a denial of service (resource exhaustion) via a large number of PASV commands that consume ports 1024 through 5000, which prevents the server from accepting valid PASV. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3983 - http://www.iss.net/security_center/static/8020.php - http://online.securityfocus.com/archive/1/252944
CVE ID: CVE-2002-0222 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Etype Eserv 2.97 allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/252944 - http://www.securityfocus.com/bid/3986 - http://www.iss.net/security_center/static/8021.php