Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-0339 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:27.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 11.1CC through 12.2 with Cisco Express Forwarding (CEF) enabled includes portions of previous packets in the padding of a MAC level packet when the MAC packet's length is less than the IP level packet length. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/IOS-CEF-pub.shtml - http://www.securityfocus.com/bid/4191 - http://www.iss.net/security_center/static/8296.php - http://www.osvdb.org/806 - http://www.kb.cert.org/vuls/id/310387
CVE ID: CVE-2002-0340 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:49:27.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows Media Player (WMP) 8.00.00.4477, and possibly other versions, automatically detects and executes .wmf and other content, even when the file's extension or content type does not specify .wmf, which could make it easier for attackers to conduct unauthorized activities via Trojan horse files containing .wmf content. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101447771102582&w=2
CVE ID: CVE-2002-0341 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:49:27.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: GWWEB.EXE in GroupWise Web Access 5.5, and possibly other versions, allows remote attackers to determine the full pathname of the web server via an HTTP request with an invalid HTMLVER parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101494830315071&w=2
CVE ID: CVE-2002-0342 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:49:27.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kmail 1.2 on KDE 2.1.1 allows remote attackers to cause a denial of service (crash) via an email message whose body is approximately 55 K long. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101475683425671&w=2 - http://www.iss.net/security_center/static/8283.php - http://www.securityfocus.com/bid/4177
CVE ID: CVE-2002-0343 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:49:28.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hotline Client 1.8.5 stores sensitive user information, including passwords, in plaintext in the bookmarks file, which could allow local users with access to the bookmarks file to gain privileges by extracting the passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4210 - http://www.iss.net/security_center/static/8327.php - http://marc.info/?l=bugtraq&m=101495128121299&w=2
CVE ID: CVE-2002-0344 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:49:27.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers to impersonate the LiveUpdate server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4170 - http://www.iss.net/security_center/static/8282.php - http://marc.info/?l=bugtraq&m=101466781122312&w=2 - http://marc.info/?l=bugtraq&m=101496301307285&w=2
CVE ID: CVE-2002-0345 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:49:27.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, which could allow an attacker to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/258293 - http://marc.info/?l=bugtraq&m=101529792821615&w=2 - http://www.iss.net/security_center/static/8305.php - http://www.securityfocus.com/bid/4181
CVE ID: CVE-2002-0346 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:49:27.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to (1) service.cgi or (2) alert.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8321.php - http://marc.info/?l=bugtraq&m=101495944202452&w=2 - http://www.securityfocus.com/bid/4211
CVE ID: CVE-2002-0347 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:49:28.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. (dot dot) in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101495944202452&w=2 - http://www.securityfocus.com/bid/4208 - http://www.iss.net/security_center/static/8322.php
CVE ID: CVE-2002-0348 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:49:27.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4209 - http://marc.info/?l=bugtraq&m=101495944202452&w=2 - http://www.iss.net/security_center/static/8323.php
CVE ID: CVE-2002-0349 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:49:27.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tiny Personal Firewall (TPF) 2.0.15, under certain configurations, will pop up an alert to the system even when the screen is locked, which could allow an attacker with physical access to the machine to hide activities or bypass access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8324.php - http://marc.info/?l=bugtraq&m=101494587110288&w=2 - http://www.securityfocus.com/bid/4207
CVE ID: CVE-2002-0350 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:49:28.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Procurve Switch 4000M running firmware C.08.22 and C.09.09 allows remote attackers to cause a denial of service via a port scan of the management IP address, which disables the telnet service. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101500123900612&w=2 - http://www.securityfocus.com/bid/4212 - http://www.iss.net/security_center/static/8329.php
CVE ID: CVE-2002-0351 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:49:27.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in CFS daemon (cfsd) before 1.3.3-8.1, and 1.4x before 1.4.1-5, allow remote attackers to cause a denial of service and possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2002/dsa-116 - http://www.securityfocus.com/bid/4219 - http://www.iss.net/security_center/static/8330.php
CVE ID: CVE-2002-0352 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:49:27.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phorum 3.3.2 allows remote attackers to determine the email addresses of the 10 most active users via a direct HTTP request to the stats.php program, which does not require authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8344.php - http://www.securityfocus.com/bid/4226 - http://marc.info/?l=bugtraq&m=101508207206900&w=2
CVE ID: CVE-2002-0353 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:49:28.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ASN.1 parser in Ethereal 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a certain malformed packet, which causes Ethereal to allocate memory incorrectly, possibly due to zero-length fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.ethereal.com/appnotes/enpa-sa-00003.html - http://www.securityfocus.com/bid/4604 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000474 - http://www.redhat.com/support/errata/RHSA-2002-088.html - http://www.iss.net
.com.br/atualizacoes/?id=a&anuncio=000474 - http://www.redhat.com/support/errata/RHSA-2002-088.html - http://www.iss.net/security_center/static/8952.php - http://www.debian.org/security/2002/dsa-130
CVE ID: CVE-2002-0354 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:49:27.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XMLHttpRequest object (XMLHTTP) in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files and list directories on a client system by opening a URL that redirects the browser to the file on the client, then reading the result using the responseText property. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=102017952204097&w=2 - http://marc.info/?l=ntbugtraq&m=102020343728766&w=2
CVE ID: CVE-2002-0355 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:27.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the system, even if the users do not have the appropriate permissions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4682 - ftp://patches.sgi.com/support/free/security/advisories/20020503-01-I - http://www.iss.net/security_center/static/9023.php
CVE ID: CVE-2002-0356 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:27.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in XFS filesystem reorganizer (fsr_xfs) in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20020504-01-I - http://www.securityfocus.com/bid/4706 - http://www.iss.net/security_center/static/9042.php
CVE ID: CVE-2002-0357 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:49:27.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in rpc.passwd in the nfs.sw.nis subsystem of SGI IRIX 6.5.15 and earlier allows local users to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20020601-01-P - http://www.ciac.org/ciac/bulletins/m-087.shtml - http://www.iss.net/security_center/static/9261.php - http://www.securityfocus.com/bid/4939 - http://www.kb.cert.org/vuls/id/430419 - http://www.osvdb.org/834
CVE ID: CVE-2002-0358 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:28.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaMail and MediaMail Pro in SGI IRIX 6.5.16 and earlier allows local users to force the program to dump core via certain arguments, which could allow the users to read sensitive data or gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4959 - ftp://patches.sgi.com/support/free/security/advisories/20020602-01-I - http://www.iss.net/security_center/static/9292.php
CVE ID: CVE-2002-0359 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:28.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC functions, including those that can mount or unmount xfs file systems, to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20020606-01-I - http://marc.info/?l=bugtraq&m=102459162909825&w=2 - http://www.iss.net/security_center/static/9401.php - http://www.securityfocus.com/bid/5072 - http://www.kb.cert.org/vuls/id/521147
CVE ID: CVE-2002-0360 State: PUBLISHED Published: 2002-05-21T04:00:00 Last Updated: 2024-08-08T02:49:28.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbitmap CGI program. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9117.php - http://marc.info/?l=vulnwatch&m=102194510509450&w=2 - http://marc.info/?l=bugtraq&m=102198846905064&w=2 - http://www.eSecurityOnline.com/advisories/eSO5063.asp - http://www.securityfocus.com/bid/4784
CVE ID: CVE-2002-0362 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:49:27.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in AOL Instant Messenger (AIM) 4.2 and later allows remote attackers to execute arbitrary code via a long AddExternalApp request and a TLV type greater than 0x2711. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9017.php - http://marc.info/?l=bugtraq&m=102071080509955&w=2 - http://www.securityfocus.com/bid/4677
CVE ID: CVE-2002-0363 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:27.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: ghostscript before 6.53 allows attackers to execute arbitrary commands by using .locksafe or .setsafe to reset the current pagedevice. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-209.html - http://www.securityfocus.com/bid/4937 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-026.0.txt - http://www.iss.net/security_center/static/9254.php - http://www.ghostscript.com/pipermail/gs-code-review/2002-February/001900.html - http://www.redhat.com/support/erra
php - http://www.ghostscript.com/pipermail/gs-code-review/2002-February/001900.html - http://www.redhat.com/support/errata/RHSA-2002-083.html - http://www.ghostscript.com/pipermail/gs-code-review/2002-January/001801.html - http://www.redhat.com/support/errata/RHSA-2002-123.html
CVE ID: CVE-2002-0364 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:28.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to execute arbitrary code via the processing of HTR request sessions, aka "Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4855 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-028 - http://www.kb.cert.org/vuls/id/313819 - http://marc.info/?l=ntbugtraq&m=102392308608100&w=2 - http:
tins/2002/ms02-028 - http://www.kb.cert.org/vuls/id/313819 - http://marc.info/?l=ntbugtraq&m=102392308608100&w=2 - http://www.iss.net/security_center/static/9327.php - http://online.securityfocus.com/archive/1/276767 - http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0099.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A182 - http://marc.info/?l=bugtraq&m=102392069305962&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A29
CVE ID: CVE-2002-0366 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:27.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A63 - http://online.securityfocus.com/archive/1/276776 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef
ecurityfocus.com/archive/1/276776 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A61 - http://online.securityfocus.com/archive/1/278145 - http://www.nextgenss.com/vna/ms-ras.txt - http://www.securityfocus.com/bid/4852 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-029
CVE ID: CVE-2002-0367 State: PUBLISHED Published: 2003-04-02T05:00:00.000Z Last Updated: 2025-10-22T00:05:57.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/archive/1/264441 - http://marc.info/?l=ntbugtraq&m=101614320402695&w=2 - http://www.securityfocus.com/bid/4287 - https://docs.micr
264441 - http://marc.info/?l=ntbugtraq&m=101614320402695&w=2 - http://www.securityfocus.com/bid/4287 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-024 - http://www.securityfocus.com/archive/1/264927 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A76 - http://www.securityfocus.com/archive/1/262074 - http://www.iss.net/security_center/static/8462.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A158
CVE ID: CVE-2002-0368 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:27.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service (CPU consumption) via a mail message with a malformed RFC message attribute, aka "Malformed Mail Attribute can Cause Exchange 2000 to Exhaust CPU Resources." Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9195.php - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-025 - http://www.securityfocus.com/bid/4881
CVE ID: CVE-2002-0369 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:28.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ASP.NET Worker Process allows remote attackers to cause a denial of service (restart) and possibly execute arbitrary code via a routine that processes cookies while in StateServer mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4958 - http://www.iss.net/security_center/static/9276.php - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-026
CVE ID: CVE-2002-0370 State: PUBLISHED Published: 2002-10-05T04:00:00 Last Updated: 2024-08-08T02:49:28.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including (1) Microsoft Windows 98 with Plus! Pack, (2) Windows XP, (3) Windows ME, (4) Lotus Notes R4 through R6 (pre-gold), (5) Verity KeyView, and (6) Stuffit Expander before 7.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.info.apple.com/usen/security/security_updates.html - http://www.info-zip.org/FAQ
ram Container: References: - http://www.info.apple.com/usen/security/security_updates.html - http://www.info-zip.org/FAQ.html - http://www.iss.net/security_center/static/10251.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0009.html - http://securityreason.com/securityalert/587 - http://marc.info/?l=bugtraq&m=103428193409223&w=2 - http://www.kb.cert.org/vuls/id/383779 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-054 - http://www.securityfocus.com/bid/5873
CVE ID: CVE-2002-0371 State: PUBLISHED Published: 2002-06-15T04:00:00 Last Updated: 2024-08-08T02:49:27.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a gopher:// URL that redirects the user to a real or simulated gopher server that sends a long response. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4930 - http://www.iss.net/security_center/static/9247.php - http://marc.info/?l=bugtraq&m=102320516707940&w=2 - http://marc.info/?l=bugtraq&m=10239795521761
enter/static/9247.php - http://marc.info/?l=bugtraq&m=102320516707940&w=2 - http://marc.info/?l=bugtraq&m=102397955217618&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A98 - http://www.kb.cert.org/vuls/id/440275 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-027 - http://online.securityfocus.com/archive/1/276848 - http://www.pivx.com/workaround_fail.html
CVE ID: CVE-2002-0372 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:28.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Media Player versions 6.4 and 7.1 and Media Player for Windows XP allow remote attackers to bypass Internet Explorer's (IE) security mechanisms and run code via an executable .wma media file with a license installation requirement stored in the IE cache, aka the "Cache Path Disclosure via Windows Media Player". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5107 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A281 - htt
ityfocus.com/bid/5107 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A281 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-032 - http://www.iss.net/security_center/static/9420.php
CVE ID: CVE-2002-0373 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:28.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows Media Device Manager (WMDM) Service in Microsoft Windows Media Player 7.1 on Windows 2000 systems allows local users to obtain LocalSystem rights via a program that calls the WMDM service to connect to an invalid local storage device, aka "Privilege Elevation through Windows Media Device Manager Service". Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9421.php - http://www.securityfocus.com/bid/5109 - https://docs.microsoft.com/en-us/security-updates/secur
center/static/9421.php - http://www.securityfocus.com/bid/5109 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-032
CVE ID: CVE-2002-0374 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:28.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the logging function for the pam_ldap PAM LDAP module before version 144 allows attackers to execute arbitrary code via format strings in the configuration file name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4679 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-041.0.txt - http://www.redhat.com/support/errata/RHSA-2002-084.html - http://www.redhat.com/support/errata/RHSA-2002-141.html - http://www.redhat.com/support/errata/RHSA-2002