Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-0537 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:49:28.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: The admin.html file in StepWeb Search Engine (SWS) 2.5 stores passwords in links to manager.pl, which allows remote attackers who can access the admin.html file to gain administrative privileges to SWS. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8849.php - http://www.securityfocus.com/bid/4503 - http://archives.neohapsis.com/archives/bugtraq/2002-04/0148.html
CVE ID: CVE-2002-0538 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:28.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0 rewrites an FTP server's "FTP PORT" responses in a way that allows remote attackers to redirect FTP data connections to arbitrary ports, a variant of the "FTP bounce" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4522 - http://archives.neohapsis.com/archives/bugtraq/2002-04/0166.html - http://www.iss.net/security_center/static/8847.php - http://archives.neohapsis.com/archives/bugtraq/2002-04/0224.ht
ml - http://www.iss.net/security_center/static/8847.php - http://archives.neohapsis.com/archives/bugtraq/2002-04/0224.html - http://securityresponse.symantec.com/avcenter/security/Content/2002.04.17.html
CVE ID: CVE-2002-0539 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:29.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Demarc PureSecure 1.05 allows remote attackers to gain administrative privileges via a SQL injection attack in a session ID that is stored in the s_key cookie. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-04/0168.html - http://www.osvdb.org/5239 - http://www.securityfocus.com/bid/4520 - http://online.securityfocus.com/archive/1/267941 - http://www.iss.net/security_center/static/8854.php
CVE ID: CVE-2002-0540 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:56:37.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and modify the CVX configuration. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-04/0272.html - http://www.kb.cert.org/vuls/id/403315 - http://online.securityfocus.com/archive/1/267627 - http://www.securityfocus.com/bid/4507 - http://www.iss.net/security_center/static/8848.php
CVE ID: CVE-2002-0541 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:56:37.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Tivoli Storage Manager TSM (1) Server or Storage Agents 3.1 through 5.1, and (2) the TSM Client Acceptor Service 4.2 and 5.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request to port 1580 or port 1581. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-04/0126.html - http://www.iss.net/security_center/static/8817.php - http://www.securityfocus.com/bid/4500 - http://www
2-04/0126.html - http://www.iss.net/security_center/static/8817.php - http://www.securityfocus.com/bid/4500 - http://www.iss.net/security_center/static/8825.php - http://www.securityfocus.com/bid/4492 - http://online.securityfocus.com/archive/1/267143 - http://www.tivoli.com/support/storage_mgr/flash_httpport.html
CVE ID: CVE-2002-0542 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:37.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is not in interactive mode, which could allow local users to gain root privileges via calls to mail in cron. Additional Analyst Notes: - CVE Program Container: References: - http://www.openbsd.org/errata30.html#mail - http://marc.info/?l=bugtraq&m=101855467811695&w=2 - http://www.securityfocus.com/bid/4495 - http://www.iss.net/security_center/static/8818.php - http://online.securityfocus.com/archive/1/267089 - http://www.osvdb.org/5269
CVE ID: CVE-2002-0543 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:37.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Aprelium Abyss Web Server (abyssws) before 1.0.0.2 allows remote attackers to read files outside the web root, including the abyss.conf file, via URL-encoded .. (dot dot) sequences in the HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.aprelium.com/forum/viewtopic.php?t=24 - http://www.iss.net/security_center/static/8805.php - http://archives.neohapsis.com/archives/bugtraq/2002-04/0110.html - http://www.securityfocus.com/bid/4466
CVE ID: CVE-2002-0544 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:56:37.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aprelium Abyss Web Server (abyssws) before 1.0.3 stores the administrative console password in plaintext in the abyss.conf file, which allows local users with access to the file to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.aprelium.com/news/abws103.html - http://www.securityfocus.com/bid/4467
CVE ID: CVE-2002-0545 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:37.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Aironet before 11.21 with Telnet enabled allows remote attackers to cause a denial of service (reboot) via a series of login attempts with invalid usernames and passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8788.php - http://www.cisco.com/warp/public/707/Aironet-Telnet.shtml - http://www.securityfocus.com/bid/4461
CVE ID: CVE-2002-0546 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:56:37.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in the mini-browser for Winamp 2.78 and 2.79 allows remote attackers to execute script via an ID3v1 or ID3v2 tag in an MP3 file. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-04/0049.html - http://archives.neohapsis.com/archives/bugtraq/2002-04/0026.html - http://www.iss.net/security_center/static/8753.php - http://www.securityfocus.com/bid/4414
CVE ID: CVE-2002-0547 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:56:37.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the mini-browser for Winamp 2.79 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the title field of an ID3v2 tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8946.php - http://www.securityfocus.com/bid/4609 - http://archives.neohapsis.com/archives/bugtraq/2002-04/0373.html - http://www.winamp.com/download/newfeatures.jhtml
CVE ID: CVE-2002-0548 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:56:37.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Anthill allows remote attackers to bypass authentication and file bug reports by directly accessing the postbug.php program instead of enterbug.php. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-04/0089.html - http://www.iss.net/security_center/static/8771.php - http://www.securityfocus.com/bid/4443
CVE ID: CVE-2002-0549 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:56:37.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerabilities in Anthill allow remote attackers to execute script as other Anthill users. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-04/0089.html - http://www.iss.net/security_center/static/8770.php - http://www.securityfocus.com/bid/4442
CVE ID: CVE-2002-0550 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:56:37.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dynamic Guestbook 3.0 allows remote attackers to execute arbitrary code via shell metacharacters in the gbdaten parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8762.php - http://archives.neohapsis.com/archives/bugtraq/2002-04/0052.html - http://www.securityfocus.com/bid/4423
CVE ID: CVE-2002-0551 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:56:37.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in Dynamic Guestbook 3.0 allows remote attackers to execute code in clients who access guestbook pages via the parameters (1) name, (2) mail, or (3) kommentar. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4422 - http://archives.neohapsis.com/archives/bugtraq/2002-04/0052.html - http://www.iss.net/security_center/static/8763.php
CVE ID: CVE-2002-0552 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:56:37.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Melange Chat server 2.02 allow remote or local attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a long argument in the /yell command, (2) long lines in the /etc/melange.conf configuration file, (3) long file names, or possibly other attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4509 - http://www.iss.net/security_center/static/8842.php - http://www.securityfocus.com/bid/4510 - http://www.securityfo
509 - http://www.iss.net/security_center/static/8842.php - http://www.securityfocus.com/bid/4510 - http://www.securityfocus.com/bid/4508 - http://www.iss.net/security_center/static/8845.php - http://www.iss.net/security_center/static/8846.php - http://archives.neohapsis.com/archives/bugtraq/2002-04/0157.html - http://online.securityfocus.com/archive/1/267932
CVE ID: CVE-2002-0553 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:37.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in SunShop 2.5 and earlier allows remote attackers to gain administrative privileges to SunShop by injecting the script into fields during new customer registration. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4506 - http://www.iss.net/security_center/static/8840.php - http://archives.neohapsis.com/archives/bugtraq/2002-04/0154.html
CVE ID: CVE-2002-0554 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:56:37.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: webdriver in IBM Informix Web DataBlade 4.12 allows remote attackers to bypass user access levels or read arbitrary files via a SQL injection attack in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4496 - http://archives.neohapsis.com/archives/bugtraq/2002-04/0135.html - http://www.iss.net/security_center/static/8826.php
CVE ID: CVE-2002-0555 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:56:37.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which could allow remote attackers to execute SQL code in a web form even when the developer has attempted to escape it. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4498 - http://archives.neohapsis.com/archives/bugtraq/2002-04/0137.html - http://www.iss.net/security_center/static/8827.php
CVE ID: CVE-2002-0556 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:56:37.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Quik-Serv HTTP server 1.1B allows remote attackers to read arbitrary files via a .. (dot dot) in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-04/0051.html - http://www.iss.net/security_center/static/8754.php - http://www.securityfocus.com/bid/4425
CVE ID: CVE-2002-0557 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:56:38.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in OpenBSD 3.0, when using YP with netgroups in the password database, causes (1) rexec or (2) rsh to run another user's shell, or (3) atrun to change to a different user's directory, possibly due to memory allocation failures or an incorrect call to auth_approval(). Additional Analyst Notes: - CVE Program Container: References: - http://www.openbsd.org/errata30.html#approval - http://www.iss.net/security_center/static/8625.php - http://www.securityfocus.com/bid/4338
CVE ID: CVE-2002-0558 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:56:37.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in TYPSoft FTP server 0.97.1 and earlier allows a remote authenticated user (possibly anonymous) to list arbitrary directories via a .. in a LIST (ls) command ending in wildcard *.* characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2489 - http://archives.neohapsis.com/archives/bugtraq/2002-04/0090.html - http://www.iss.net/security_center/static/6165.php
CVE ID: CVE-2002-0559 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:56:37.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allow remote attackers to cause a denial of service or execute arbitrary code via (1) a long help page request without a dadname, which overflows the resulting HTTP Location header, (2) a long HTTP request to the plsql module, (3) a long password in the HTTP Authorization, (4) a long Access Descriptor (DAD) password in the addadd form, or (5) a long cache directory name. Additional Analyst Notes: - CVE Program Container: References: - http://ww
add form, or (5) a long cache directory name. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/750299 - http://www.kb.cert.org/vuls/id/878603 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8098 - http://www.cert.org/advisories/CA-2002-08.html - http://www.kb.cert.org/vuls/id/659043 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8097 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8096 - http://online.securityfocus.com/archive/1/254426 - http://www.kb.cert.org/vuls/id/313280 - http://www.nextgenss.com/papers/hpoas.pdf - http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf - http://www.securityfocus.com/bid/4032
rs/hpoas.pdf - http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf - http://www.securityfocus.com/bid/4032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8095 - http://www.kb.cert.org/vuls/id/923395
CVE ID: CVE-2002-0560 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:56:37.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to obtain sensitive information via the OWA_UTIL stored procedures (1) OWA_UTIL.signature, (2) OWA_UTIL.listprint, or (3) OWA_UTIL.show_query_columns. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101301813117562&w=2 - http://www.kb.cert.org/vuls/id/307835 - http://www.cert.org/advisories/CA-2002-08.html - http://www.nextgenss.com/papers/hpoas.pdf - http://otn.oracle.com/deploy/security/pdf/i
org/advisories/CA-2002-08.html - http://www.nextgenss.com/papers/hpoas.pdf - http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf - http://www.securityfocus.com/bid/4294
CVE ID: CVE-2002-0561 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:56:37.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the PL/SQL Gateway web administration interface in Oracle 9i Application Server 1.0.2.x uses null authentication, which allows remote attackers to gain privileges and modify DAD settings. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101301813117562&w=2 - http://www.securityfocus.com/bid/4292 - http://www.cert.org/advisories/CA-2002-08.html - http://www.kb.cert.org/vuls/id/611776 - http://www.nextgenss.com/papers/hpoas.pdf - http://otn.oracle.com/dep
-08.html - http://www.kb.cert.org/vuls/id/611776 - http://www.nextgenss.com/papers/hpoas.pdf - http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf
CVE ID: CVE-2002-0562 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:56:38.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote attackers to gain sensitive information including usernames and passwords via a direct HTTP request to globals.jsa. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2002-08.html - http://www.kb.cert.org/vuls/id/698467 - http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf - http://www.securityfocus.com/bid/4034 - h
id/698467 - http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf - http://www.securityfocus.com/bid/4034 - http://marc.info/?l=bugtraq&m=101301440005580&w=2
CVE ID: CVE-2002-0563 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:56:37.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including Dynamic Monitoring Services (1) dms0, (2) dms/DMSDump, (3) servlet/DMSDump, (4) servlet/Spy, (5) soap/servlet/Spy, and (6) dms/AggreSpy; and Oracle Java Process Manager (7) oprocmgr-status and (8) oprocmgr-service, which can be used to control Java processes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4293 - https://
esses. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4293 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8455 - http://marc.info/?l=bugtraq&m=101301813117562&w=2 - http://www.osvdb.org/13152 - http://www.cert.org/advisories/CA-2002-08.html - http://securitytracker.com/id?1009167 - http://www.appsecinc.com/Policy/PolicyCheck7024.html - http://www.kb.cert.org/vuls/id/168795 - http://www.nextgenss.com/papers/hpoas.pdf - http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf - http://www.osvdb.org/705
CVE ID: CVE-2002-0564 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:56:37.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a Database Access Descriptor (DAD) by modifying the URL to reference an alternate DAD that already has valid credentials. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101301813117562&w=2 - http://www.cert.org/advisories/CA-2002-08.html - http://www.nextgenss.com/papers/hpoas.pdf - http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf - http://www.kb.ce
www.nextgenss.com/papers/hpoas.pdf - http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf - http://www.kb.cert.org/vuls/id/193523
CVE ID: CVE-2002-0565 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:56:37.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle 9iAS 1.0.2.x compiles JSP files in the _pages directory with world-readable permissions under the web root, which allows remote attackers to obtain sensitive information derived from the JSP code, including usernames and passwords, via a direct HTTP request to _pages. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2002-08.html - http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf - http://www.kb.cert.org/vuls/id/547459 - https://exchange.xforce.ibmcloud.co
deploy/security/pdf/ias_modplsql_alert.pdf - http://www.kb.cert.org/vuls/id/547459 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8100 - http://www.securityfocus.com/bid/4034 - http://marc.info/?l=bugtraq&m=101301440005580&w=2
CVE ID: CVE-2002-0566 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:56:37.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to cause a denial of service (crash) via an HTTP Authorization header without an authentication type. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2002-08.html - http://www.securityfocus.com/bid/4037 - http://www.kb.cert.org/vuls/id/805915 - http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/8099
CVE ID: CVE-2002-0567 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:37.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle 8i and 9i with PL/SQL package for External Procedures (EXTPROC) allows remote attackers to bypass authentication and execute arbitrary functions by using the TNS Listener to directly connect to the EXTPROC process. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2002-08.html - http://marc.info/?l=bugtraq&m=101301332402079&w=2 - http://otn.oracle.com/deploy/security/pdf/plsextproc_alert.pdf - http://www.securityfocus.com/bid/4033 - https://exchange.xforce.ibmcloud.com/vu
ploy/security/pdf/plsextproc_alert.pdf - http://www.securityfocus.com/bid/4033 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8089 - http://www.kb.cert.org/vuls/id/180147
CVE ID: CVE-2002-0568 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:56:38.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information including usernames and passwords by requesting (1) XSQLConfig.xml or (2) soapConfig.xml through a virtual directory. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101301813117562&w=2 - http://www.cert.org/advisories/CA-2002-08.html - http://www.securityfocus.com/bid/4290 - http://www.nextgenss.com/papers/hpoas.pdf - http://www.kb.cert.org/vu
-08.html - http://www.securityfocus.com/bid/4290 - http://www.nextgenss.com/papers/hpoas.pdf - http://www.kb.cert.org/vuls/id/476619