Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-0117 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 and earlier allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/249031 - http://www.yabbforum.com/ - http://www.iss.net/security_center/static/7840.php - http://online.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3828 - http://www.osvdb.org/2019
CVE ID: CVE-2002-0118 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T02:35:17.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/249031 - http://www.iss.net/security_center/static/7838.php - http://www.securityfocus.com/bid/3829
CVE ID: CVE-2002-0119 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T02:35:17.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service (reboot) via a network scan with unusual packets, such as nmap with OS detection. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7893.php - http://online.securityfocus.com/archive/1/249746 - http://www.securityfocus.com/bid/3851
CVE ID: CVE-2002-0120 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:35:17.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Palm Desktop 4.0b76 and 4.0b77 creates world-readable backup files and folders when a hotsync is performed, which could allow a local user to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/250093 - http://www.securityfocus.com/bid/3863 - http://www.iss.net/security_center/static/7937.php
CVE ID: CVE-2002-0121 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3873 - http://www.iss.net/security_center/static/7908.php - http://online.securityfocus.com/archive/1/250196
CVE ID: CVE-2002-0122 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T02:35:17.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens 3568i WAP mobile phones allows remote attackers to cause a denial of service (crash) via an SMS message containing unusual characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7902.php - http://online.securityfocus.com/archive/1/250115 - http://www.securityfocus.com/bid/3870
CVE ID: CVE-2002-0123 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:35:17.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: MDG Computer Services Web Server 4D WS4D/eCommerce 3.0 and earlier, and possibly 3.5.3, allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7879.php - http://online.securityfocus.com/archive/1/250242 - http://www.securityfocus.com/bid/3874
CVE ID: CVE-2002-0124 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T02:35:17.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: MDG Computer Services Web Server 4D/eCommerce 3.5.3 allows remote attackers to exploit directory traversal vulnerability via a ../ (dot dot) containing URL-encoded slashes in the HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7878.php - http://www.securityfocus.com/bid/3872 - http://online.securityfocus.com/archive/1/250231
CVE ID: CVE-2002-0125 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T02:35:17.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ClanLib library 0.5 may allow local users to execute arbitrary code in games that use the library, such as (1) Super Methane Brothers, (2) Star War, (3) Kwirk, (4) Clankanoid, and others, via a long HOME environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3877 - http://online.securityfocus.com/archive/1/250414 - http://www.iss.net/security_center/static/7905.php
CVE ID: CVE-2002-0126 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T02:35:17.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in BlackMoon FTP Server 1.0 through 1.5 allows remote attackers to execute arbitrary code via a long argument to (1) USER, (2) PASS, or (3) CWD. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/250543 - http://www.securityfocus.com/bid/3884 - http://www.iss.net/security_center/static/7895.php - http://members.rogers.com/blackmoon2k/pages/news_page.html
CVE ID: CVE-2002-0127 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T02:35:17.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26, when configured to block traffic below port 1024, allows remote attackers to cause a denial of service (hang) via a port scan of the WAN port. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3876 - http://online.securityfocus.com/archive/1/250405
CVE ID: CVE-2002-0128 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:42:27.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.sambar.com/security.htm - http://www.securityfocus.com/archive/1/250545 - http://www.der-keiler.de/Mailing-Lists/securityfocus/bugtraq/2002-02/0083.html - http://www.securityfocus.com/bid/3885 - http://www.iss.net/security_center/static/7894.php
CVE ID: CVE-2002-0129 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T02:42:27.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which prints the contents of the file in a warning message. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2002/Jan/0212.html - http://www.iss.net/security_center/static/7921.php - http://www.securityfocus.com/bid/3895 - http://marc.info/?l=vuln-dev&m=101114350330912&w=2
CVE ID: CVE-2002-0130 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T02:42:27.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in efax 0.9 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -x argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=vuln-dev&m=101133782204289&w=2 - http://seclists.org/bugtraq/2002/Jan/0212.html - http://www.iss.net/security_center/static/7920.php - http://www.securityfocus.com/bid/3894
CVE ID: CVE-2002-0131 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T02:42:27.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prevent a script from reading files from the client's filesystem, which allows remote attackers to read arbitrary files via a malicious web page containing Python script. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/250814 - http://marc.info/?t=101113015900001&r=1&w=2 - http://www.securityfocus.com/bid/3893 - http://www.iss.net/security_center/static/7910.php
CVE ID: CVE-2002-0132 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T02:42:27.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Chinput 3.0 allows local users to execute arbitrary code via a long HOME environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/250815 - http://www.iss.net/security_center/static/7911.php - http://www.securityfocus.com/bid/3896
CVE ID: CVE-2002-0133 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T02:42:27.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in Avirt Gateway Suite 4.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long header fields to the HTTP proxy, or (2) a long string to the telnet proxy. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7918.php - http://marc.info/?l=bugtraq&m=101366658112809&w=2 - http://marc.info/?l=bugtraq&m=101164598828092&w=2 - http://online.securityfocus.com/archive/1/251055 - http://www.iss.net/security_center/stat
gtraq&m=101164598828092&w=2 - http://online.securityfocus.com/archive/1/251055 - http://www.iss.net/security_center/static/7916.php - http://www.securityfocus.com/bid/3905 - http://www.securityfocus.com/bid/3904 - http://marc.info/?l=bugtraq&m=101424723728817&w=2
CVE ID: CVE-2002-0134 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T02:42:27.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system itself, which allows remote attackers to list file contents of the proxy and execute arbitrary commands via a "dos" command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3901 - http://marc.info/?l=bugtraq&m=101131669102843&w=2 - http://www.iss.net/security_center/static/7915.php - http://marc.info/?l=bugtraq&m=101424723728817&w=2
CVE ID: CVE-2002-0135 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T02:42:27.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netopia Timbuktu Pro 6.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a series of connections to one of the ports (1417 - 1420). Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/251582 - http://www.iss.net/security_center/static/7935.php - http://www.securityfocus.com/bid/3918
CVE ID: CVE-2002-0136 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T02:42:27.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.5 on Windows 98 allows remote web pages to cause a denial of service (hang) via extremely long values for form fields such as INPUT and TEXTAREA, which can be automatically filled via Javascript. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3892 - http://online.securityfocus.com/archive/1/250592 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7938
CVE ID: CVE-2002-0137 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T02:42:27.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101102759631000&w=2 - http://www.securityfocus.com/bid/3865
CVE ID: CVE-2002-0138 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T02:42:27.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101102759631000&w=2 - http://marc.info/?l=bugtraq&m=101111688819855&w=2
CVE ID: CVE-2002-0139 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:42:27.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pi-Soft SpoonFTP 1.1 and earlier allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command. Additional Analyst Notes: - CVE Program Container: References: - http://www.pi-soft.com/spoonftp/index.shtml - http://www.securityfocus.com/bid/3910 - http://www.iss.net/security_center/static/7943.php - http://online.securityfocus.com/archive/1/251422
CVE ID: CVE-2002-0140 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T02:42:27.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Domain Name Relay Daemon (dnrd) 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parse_query, get_objectname, and possibly other functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7957.php - http://www.securityfocus.com/bid/3928 - http://online.securityfocus.com/archive/1/251619
CVE ID: CVE-2002-0141 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T02:42:27.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Maelstrom GPL 3.0.1 allows local users to overwrite arbitrary files of other Maelstrom users via a symlink attack on the /tmp/f file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3911 - http://online.securityfocus.com/archive/1/251419 - http://www.iss.net/security_center/static/7939.php
CVE ID: CVE-2002-0142 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T02:42:27.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of service (crash) via a series of requests whose physical path is exactly 260 characters long and ends in a series of . (dot) characters. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/tracker/index.php?func=detail&aid=505583&group_id=17753&atid=317753 - http://online.securityfocus.com/archive/1/250126 - http://www.iss.net/security_center/static/7880.php - http://marc.info/?l=bugtraq&m
.securityfocus.com/archive/1/250126 - http://www.iss.net/security_center/static/7880.php - http://marc.info/?l=bugtraq&m=101164598828093&w=2 - http://marc.info/?l=ntbugtraq&m=101102275316307&w=2 - http://www.securityfocus.com/bid/3866
CVE ID: CVE-2002-0143 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:42:27.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary code via a long HOME environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3868 - http://online.securityfocus.com/archive/1/251597 - http://online.securityfocus.com/archive/1/250145 - http://www.iss.net/security_center/static/7896.php
CVE ID: CVE-2002-0144 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T02:42:27.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in chuid 1.2 and earlier allows remote attackers to change the ownership of files outside of the upload directory via a .. (dot dot) attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7976.php - http://online.securityfocus.com/archive/1/251763 - http://www.securityfocus.com/bid/3937
CVE ID: CVE-2002-0145 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T02:42:27.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: chuid 1.2 and earlier does not properly verify the ownership of files that will be changed, which allows remote attackers to change files owned by other users, such as root. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/251763 - http://www.securityfocus.com/bid/3938 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7976
CVE ID: CVE-2002-0146 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:27.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/advisories/4145 - http://www.iss.net/security_center/static/9133.php - http://www.securityfocus.com/bid/4788 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-027.0.txt - http://www.redhat.com/support/errata/RH
om/bid/4788 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-027.0.txt - http://www.redhat.com/support/errata/RHSA-2002-047.html - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-036.php
CVE ID: CVE-2002-0147 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:27.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service or execute code, aka "Microsoft-discovered variant of Chunked Encoding buffer overrun." Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8796.php - http://www.securityfocus.com/bid/4490 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A72 - https://docs.microsoft.com/en-us/se
/oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A72 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018 - http://www.osvdb.org/3301 - http://www.kb.cert.org/vuls/id/669779 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A22 - http://www.cert.org/advisories/CA-2002-09.html - http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml
CVE ID: CVE-2002-0148 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:27.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8803.php - http://www.osvdb.org/3339 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A81 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018 - https://oval.cisecurity.org/re
A81 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A92 - http://www.cert.org/advisories/CA-2002-09.html - http://www.kb.cert.org/vuls/id/886699 - http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml - http://www.securityfocus.com/bid/4486
CVE ID: CVE-2002-0149 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:27.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via long file names. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A132 - http://www.osvdb.org/3320 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A95 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/
earch/definition/oval%3Aorg.mitre.oval%3Adef%3A95 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018 - http://www.kb.cert.org/vuls/id/721963 - http://www.iss.net/security_center/static/8798.php - http://www.securityfocus.com/bid/4478 - http://www.cert.org/advisories/CA-2002-09.html - http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml
CVE ID: CVE-2002-0150 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:27.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/3316 - http://www.iss.net/security_center/static/8797.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A137 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2
rch/definition/oval%3Aorg.mitre.oval%3Adef%3A137 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018 - http://www.kb.cert.org/vuls/id/454091 - http://www.securityfocus.com/bid/4476 - http://www.cert.org/advisories/CA-2002-09.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A39 - http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml
CVE ID: CVE-2002-0151 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:42:27.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Multiple UNC Provider (MUP) in Microsoft Windows operating systems allows local users to cause a denial of service or possibly gain SYSTEM privileges via a long UNC request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4426 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-017 - http://marc.info/?l=bugtraq&m=101793727306282&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A145 - http:
101793727306282&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A145 - http://www.iss.net/security_center/static/8752.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A89
CVE ID: CVE-2002-0152 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:42:27.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large number of / characters, which affects Internet Explorer 5.1, Outlook Express 5.0 through 5.0.2, Entourage v. X and 2001, PowerPoint v. X, 2001, and 98, and Excel v. X and 2001 for Macintosh. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101897994314015&w=2 - https://docs.microsoft.com