Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-1151 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:16.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 through 3.0.3 does not properly initialize the domains on sub-frames and sub-iframes, which can allow remote attackers to execute script and steal cookies from subframes that are in other domains. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2002-220.html - http://www.kde.org/info/security/advisory-20020908-2.txt - http://www.iss.net/security_center/static/10039.php - http://www.linux-mandrake.co
fo/security/advisory-20020908-2.txt - http://www.iss.net/security_center/static/10039.php - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-064.php - http://www.debian.org/security/2002/dsa-167 - http://www.redhat.com/support/errata/RHSA-2002-221.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000525 - http://www.securityfocus.com/bid/5689 - http://www.osvdb.org/7867 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-047.0.txt - http://marc.info/?l=bugtraq&m=103175850925395&w=2
CVE ID: CVE-2002-1152 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:16.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Konqueror in KDE 3.0 through 3.0.2 does not properly detect the "secure" flag in an HTTP cookie, which could cause Konqueror to send the cookie across an unencrypted channel, which could allow remote attackers to steal the cookie via sniffing. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2002-220.html - http://www.kde.org/info/security/advisory-20020908-1.txt - http://www.securityfocus.com/bid/5691 - http://marc.info/?l=bugtraq&m=103175827225044&w=2 - http://www.iss
20908-1.txt - http://www.securityfocus.com/bid/5691 - http://marc.info/?l=bugtraq&m=103175827225044&w=2 - http://www.iss.net/security_center/static/10083.php
CVE ID: CVE-2002-1153 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:17.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Websphere 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with long HTTP headers, such as "Host". Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/2092 - http://www.securityfocus.com/bid/5749 - http://marc.info/?l=bugtraq&m=103244572803950&w=2 - ftp://ftp.software.ibm.com/software/websphere/appserv/support/fixes/pq62144/readme.txt - http://www.iss.net/security_center/static/10140.php
CVE ID: CVE-2002-1154 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:17.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to cause a denial of service (disk consumption) by using the command to report updates more frequently and fill the web server error log. Additional Analyst Notes: - CVE Program Container: References: - http://www.analog.cx/security5.html - http://www.redhat.com/support/errata/RHSA-2002-059.html - http://www.iss.net/security_center/static/10344.php - http://www.osvdb.org/3779
CVE ID: CVE-2002-1155 State: PUBLISHED Published: 2003-06-05T04:00:00 Last Updated: 2024-08-08T03:12:17.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in KON kon2 0.3.9b and earlier allows local users to execute arbitrary code via a long -Coding command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105577912106710&w=2 - http://www.redhat.com/support/errata/RHSA-2003-050.html - http://www.mandriva.com/security/advisories?name=MDKSA-2003:064 - http://www.redhat.com/support/errata/RHSA-2003-047.html - http://marc.info/?l=bugtraq&m=105474080512376&w=2
CVE ID: CVE-2002-1156 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache 2.0.42 allows remote attackers to view the source code of a CGI script via a POST request to a directory with both WebDAV and CGI enabled. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/advisories/4617 - http://www.apacheweek.com/issues/02-10-04 - http://www.apache.org/dist/httpd/CHANGES_2.0 - http://www.kb.cert.org/vuls/id/910713 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10499 - http://www.securityfocus.com/bid/6065 - https://lists.apache.org/thread.html/54
rce.ibmcloud.com/vulnerabilities/10499 - http://www.securityfocus.com/bid/6065 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.
- https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7
397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2002-1157 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in the mod_ssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wildcard DNS is enabled, allows remote attackers to execute script as other web site visitors, via the server name in an HTTPS response on the SSL port, which is used in a self-referencing URL, a different vulnerability than CAN-2002-0840. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-10/0374.html - http://www.redhat.com/support/errata/RHSA-20
ences: - http://archives.neohapsis.com/archives/bugtraq/2002-10/0374.html - http://www.redhat.com/support/errata/RHSA-2002-243.html - http://www.securityfocus.com/bid/6029 - http://www.redhat.com/support/errata/RHSA-2002-222.html - http://www.redhat.com/support/errata/RHSA-2003-106.html - http://www.redhat.com/support/errata/RHSA-2002-251.html - http://www.debian.org/security/2002/dsa-181 - http://www.osvdb.org/2107 - http://www.linuxsecurity.com/advisories/other_advisory-2512.html - http://www.iss.net/security_center/static/10457.php - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-072.php - http://online.securityfocus.com/archive/1/296753 - http://distro.conectiva.com.br/atualiz
rity/2002/MDKSA-2002-072.php - http://online.securityfocus.com/archive/1/296753 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000541 - http://www.redhat.com/support/errata/RHSA-2002-248.html - http://www.redhat.com/support/errata/RHSA-2002-244.html
CVE ID: CVE-2002-1158 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the irw_through function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as the bin user. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-224 - http://www.securityfocus.com/bid/6351 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10831 - http://www.redhat.com/support/errata/RHSA-2002-246.html - http://www.redhat.com/support/errata/RHSA-2002-261.html - http://marc.info/?l=bugtraq&m=104041812206344&w=2 - http://www.redhat.
ww.redhat.com/support/errata/RHSA-2002-261.html - http://marc.info/?l=bugtraq&m=104041812206344&w=2 - http://www.redhat.com/support/errata/RHSA-2003-115.html - http://canna.sourceforge.jp/sec/Canna-2002-01.txt
CVE ID: CVE-2002-1159 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Canna 3.6 and earlier does not properly validate requests, which allows remote attackers to cause a denial of service or information leak. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-224 - http://www.securityfocus.com/bid/6354 - http://www.redhat.com/support/errata/RHSA-2002-246.html - http://www.redhat.com/support/errata/RHSA-2002-261.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10832 - http://www.redhat.com/support/errata/RHSA-2003-115.html - http://
//exchange.xforce.ibmcloud.com/vulnerabilities/10832 - http://www.redhat.com/support/errata/RHSA-2003-115.html - http://canna.sourceforge.jp/sec/Canna-2002-01.txt
CVE ID: CVE-2002-1160 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the pam_xauth module forwards MIT-Magic-Cookies to new X sessions, which could allow local users to gain root privileges by stealing the cookies from a temporary .xauth file, which is created with the original user's credentials after root uses su. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/911505 - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/55760 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000693 - http://marc.info/?
gi/retrieve.pl?doc=fsalert/55760 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000693 - http://marc.info/?l=bugtraq&m=104431622818954&w=2 - http://www.iss.net/security_center/static/11254.php - http://www.redhat.com/support/errata/RHSA-2003-035.html - http://www.redhat.com/support/errata/RHSA-2003-028.html - http://www.securityfocus.com/bid/6753 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:017
CVE ID: CVE-2002-1161 State: REJECTED Published: 2002-12-18T05:00:00 Last Updated: 2004-01-26T10:00:00 Description: No description available.
CVE ID: CVE-2002-1165 State: PUBLISHED Published: 2002-10-03T04:00:00 Last Updated: 2024-08-08T03:19:27.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restrictions of smrsh by inserting additional commands after (1) "||" sequences or (2) "/" characters, which are not properly filtered or verified. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-073.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000532 - ftp://ftp.netbsd.org/
ort/errata/RHSA-2003-073.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000532 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-023.txt.asc - http://marc.info/?l=bugtraq&m=103350914307274&w=2 - http://www.iss.net/security_center/static/10232.php - http://www.mandriva.com/security/advisories?name=MDKSA-2002:083 - http://www.sendmail.org/smrsh.adv.txt - http://www.securityfocus.com/bid/5845 - http://secunia.com/advisories/7826
CVE ID: CVE-2002-1166 State: PUBLISHED Published: 2002-10-01T04:00:00 Last Updated: 2024-08-08T03:19:27.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in John Franks WN Server 1.18.2 through 2.0.0 allows remote attackers to execute arbitrary code via a long GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5831 - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0138.html - http://www.osvdb.org/9836 - http://marc.info/?l=bugtraq&m=103340145725050&w=2 - http://www.iss.net/security_center/static/10223.php
CVE ID: CVE-2002-1167 State: PUBLISHED Published: 2002-10-25T04:00:00 Last Updated: 2024-08-08T03:19:27.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6000 - http://www.iss.net/security_center/static/10453.php
CVE ID: CVE-2002-1168 State: PUBLISHED Published: 2002-10-25T04:00:00 Last Updated: 2024-08-08T03:19:27.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP request that contains an Location: header with a "%0a%0d" (CRLF) sequence, which echoes the Location as an HTTP header in the server response. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10454.php - http://www.securityfocus.com/bid/6001
CVE ID: CVE-2002-1169 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to cause a denial of service (crash) via an HTTP request to helpout.exe with a missing HTTP version number, which causes ibmproxy.exe to crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10452.php - http://www-1.ibm.com/support/search.wss?rs=0&q=IY35970&apar=only - http://www.rapid7.com/advisories/R7-0007.txt - http://www.securityfocus.com/bid/6002 - http://www.osvdb.o
70&apar=only - http://www.rapid7.com/advisories/R7-0007.txt - http://www.securityfocus.com/bid/6002 - http://www.osvdb.org/2090
CVE ID: CVE-2002-1170 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: The handle_var_requests function in snmp_agent.c for the SNMP daemon in the Net-SNMP (formerly ucd-snmp) package 5.0.1 through 5.0.5 allows remote attackers to cause a denial of service (crash) via a NULL dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2002-228.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10250 - http://www.securityfocus.com/bid/5862 - http://www.idefense.com/advisory/10.02.02.txt - http://sourceforge.net/forum/forum.php?for
.securityfocus.com/bid/5862 - http://www.idefense.com/advisory/10.02.02.txt - http://sourceforge.net/forum/forum.php?forum_id=216532 - http://marc.info/?l=bugtraq&m=103359362020365&w=2
CVE ID: CVE-2002-1174 State: PUBLISHED Published: 2002-10-01T04:00:00 Last Updated: 2024-08-08T03:19:27.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in Fetchmail 6.0.0 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) long headers that are not properly processed by the readheaders function, or (2) via long Received: headers, which are not properly parsed by the parse_received function. Additional Analyst Notes: - CVE Program Container: References: - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-063.php - http://www.securityfocus.com/bid/5827 - http://marc.info/?l=bugtraq&m=103340148625187&
ecurity/2002/MDKSA-2002-063.php - http://www.securityfocus.com/bid/5827 - http://marc.info/?l=bugtraq&m=103340148625187&w=2 - http://www.securityfocus.com/bid/5825 - http://rhn.redhat.com/errata/RHSA-2002-215.html - http://www.iss.net/security_center/static/10203.php - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000531 - http://www.linuxsecurity.com/advisories/other_advisory-2402.html - http://www.debian.org/security/2002/dsa-171
CVE ID: CVE-2002-1175 State: PUBLISHED Published: 2002-10-01T04:00:00 Last Updated: 2024-08-08T03:19:27.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary. Additional Analyst Notes: - CVE Program Container: References: - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-063.php - http://marc.info/?l=bugtraq&m=103340148625187&w=2 - http://rhn.redhat.com/errata/RHSA-2002-215.html - http
002-063.php - http://marc.info/?l=bugtraq&m=103340148625187&w=2 - http://rhn.redhat.com/errata/RHSA-2002-215.html - http://www.iss.net/security_center/static/10203.php - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000531 - http://www.linuxsecurity.com/advisories/other_advisory-2402.html - http://www.securityfocus.com/bid/5826 - http://www.debian.org/security/2002/dsa-171
CVE ID: CVE-2002-1176 State: PUBLISHED Published: 2002-12-20T05:00:00 Last Updated: 2024-08-08T03:19:27.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Winamp 2.81 allows remote attackers to execute arbitrary code via a long Artist ID3v2 tag in an MP3 file. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=104025874209567&w=2
CVE ID: CVE-2002-1177 State: PUBLISHED Published: 2002-12-20T05:00:00 Last Updated: 2024-08-08T03:19:27.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Winamp 3.0, when displaying an MP3 in the Media Library window, allows remote attackers to execute arbitrary code via an MP3 file containing a long (1) Artist or (2) Album ID3v2 tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6429 - http://marc.info/?l=bugtraq&m=104025874209567&w=2
CVE ID: CVE-2002-1178 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands via ..\ (dot-dot backslash) sequences in an HTTP request to the cgi-bin directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10246.php - http://www.westpoint.ltd.uk/advisories/wp-02-0011.txt - http://groups.yahoo.com/group/jetty-announce/message/45 - http://www.securityfocus.com/bid/5852 - http://marc.info/?l=bugtraq&m=10335
.yahoo.com/group/jetty-announce/message/45 - http://www.securityfocus.com/bid/5852 - http://marc.info/?l=bugtraq&m=103358725813039&w=2
CVE ID: CVE-2002-1179 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the S/MIME Parsing capability in Microsoft Outlook Express 5.5 and 6.0 allows remote attackers to execute arbitrary code via a digitally signed email with a long "From" address, which triggers the overflow when the user views or previews the message. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-058 - http://www.securityfocus.com/bid/5944 - http://marc.info/?l=ntbugtraq&m=103429681123297&w=2 - http://marc.info/?l
-058 - http://www.securityfocus.com/bid/5944 - http://marc.info/?l=ntbugtraq&m=103429681123297&w=2 - http://marc.info/?l=ntbugtraq&m=103429637822920&w=2 - http://marc.info/?l=bugtraq&m=103435413105661&w=2 - http://www.iss.net/security_center/static/10338.php
CVE ID: CVE-2002-1180 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: A typographical error in the script source access permissions for Internet Information Server (IIS) 5.0 does not properly exclude .COM files, which allows attackers with only write permissions to upload malicious .COM files, aka "Script Source Access Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/n-011.shtml - http://www.securityfocus.com/bid/6068 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062 - https://oval.cisecurity.org
d/6068 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A931 - http://www.securityfocus.com/bid/6071 - http://www.iss.net/security_center/static/10504.php
CVE ID: CVE-2002-1181 State: PUBLISHED Published: 2002-11-02T05:00:00 Last Updated: 2024-08-08T03:19:27.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the administrative web pages for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allow remote attackers to execute HTML script as other users through (1) a certain ASP file in the IISHELP virtual directory, or (2) possibly other unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10501.php - http://www.securityfocus.com/bid/6072 - https://oval.cisecurity.org/repository/search/definit
_center/static/10501.php - http://www.securityfocus.com/bid/6072 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A942 - http://www.ciac.org/ciac/bulletins/n-011.shtml - http://www.securityfocus.com/bid/6068 - http://www.lac.co.jp/security/intelligence/SNSAdvisory/58.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A944 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062 - http://marc.info/?l=bugtraq&m=103651224215736&w=2
CVE ID: CVE-2002-1182 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (crash) via malformed WebDAV requests that cause a large amount of memory to be assigned. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/n-011.shtml - http://www.securityfocus.com/bid/6068 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062 - http://www.securityfocus.com/bid/4846 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1009 - h
rityfocus.com/bid/4846 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1009 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10503 - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0048.html - http://www.nextgenss.com/vna/ms-iisdos.txt - http://www.nextgenss.com/advisories/ms-iisdos.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/10184 - http://www.securityfocus.com/bid/6070