Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-0223 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Infopop UBB.Threads 5.4 and Wired Community Software WWWThreads 5.0 through 5.0.9 allows remote attackers to upload arbitrary files by using a filename that contains an accepted extension, but ends in a different extension. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3993 - http://www.iss.net/security_center/static/8022.php - http://online.securityfocus.com/archive/1/253172
CVE ID: CVE-2002-0224 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through SQL 2000 0.0 allows remote attackers to cause a denial of service (crash or hang) via malformed (random) input. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/268593 - http://www.iss.net/security_center/static/8046.php - http://online.securityfocus.com/archive/1/253360 - http://www.securityfocus.com/bid/4006
CVE ID: CVE-2002-0225 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: tac_plus Tacacs+ daemon F4.0.4.alpha, originally maintained by Cisco, creates files from the accounting directive with world-readable and writable permissions, which allows local users to access and modify sensitive files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4003 - http://online.securityfocus.com/archive/1/253288 - http://www.iss.net/security_center/static/8061.php
CVE ID: CVE-2002-0226 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:42:28.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: retrieve_password.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remote attackers to request a new password on behalf of another user and use the sessionID to calculate the new password for that user. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/3866 - http://marc.info/?l=bugtraq&m=101258311519504&w=2 - http://www.iss.net/security_center/static/8044.php - http://www.dcscripts.com/bugtrac/DCForumID7/3.html - http://www.osvdb.org/2038 - h
net/security_center/static/8044.php - http://www.dcscripts.com/bugtrac/DCForumID7/3.html - http://www.osvdb.org/2038 - http://www.securityfocus.com/bid/4014
CVE ID: CVE-2002-0227 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: KICQ 2.0.0b1 allows remote attackers to cause a denial of service (crash) via a malformed message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4018 - http://marc.info/?l=bugtraq&m=101266856410129&w=2 - http://www.iss.net/security_center/static/8064.php
CVE ID: CVE-2002-0228 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft MSN Messenger allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information such as display names and web site navigation, and possibly more when the user is connected to certain Microsoft sites (or DNS-spoofed sites). Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/254021 - http://www.iss.net/security_center/static/8084.php - http://www.securityfocus.com/bid/4028
CVE ID: CVE-2002-0229 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using "LOAD DATA INFILE LOCAL" SQL statements. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=ntbugtraq&m=101303819613337&w=2 - http://marc.info/?l=ntbugtraq&m=101303065423534&w=2 - http://marc.info/?l=bugtraq&m=101304702002321&w=2 - http://marc.info/?l=bugtraq&m=101286577109716&w=2 - http://marc.info/?l=ntbugtraq&m=10128
ugtraq&m=101304702002321&w=2 - http://marc.info/?l=bugtraq&m=101286577109716&w=2 - http://marc.info/?l=ntbugtraq&m=101285016125377&w=2 - http://www.iss.net/security_center/static/8105.php - http://www.securityfocus.com/bid/4026
CVE ID: CVE-2002-0230 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascript on other clients via the cmd parameter, which causes the script to be inserted into an error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101293973111873&w=2 - http://sourceforge.net/mailarchive/forum.php?thread_id=464940&forum_id=6367 - http://marc.info/?l=bugtraq&m=101285834018701&w=2 - http://www.debian.org/security/2002/dsa-109
CVE ID: CVE-2002-0231 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in mIRC 5.91 and earlier allows a remote server to execute arbitrary code on the client via a long nickname. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4027 - http://marc.info/?l=bugtraq&m=101286747013955&w=2 - http://www.iss.net/security_center/static/8083.php - http://www.uuuppz.com/research/adv-001-mirc.htm - http://online.securityfocus.com/archive/1/254105
CVE ID: CVE-2002-0232 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Multi Router Traffic Grapher (MRTG) allows remote attackers to read portions of arbitrary files via a .. (dot dot) in the cfg parameter for (1) 14all.cgi, (2) 14all-1.1.cgi, (3) traffic.cgi, or (4) mrtg.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8062.php - http://marc.info/?l=bugtraq&m=101266821909189&w=2 - http://www.securityfocus.com/bid/4017
CVE ID: CVE-2002-0233 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in eshare Expressions 4 Web server allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8079.php - http://www.securityfocus.com/bid/4029 - http://marc.info/?l=bugtraq&m=101292885809975&w=2
CVE ID: CVE-2002-0234 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetScreen ScreenOS before 2.6.1 does not support a maximum number of concurrent sessions for a system, which allows an attacker on the trusted network to cause a denial of service (resource exhaustion) via a port scan to an external network, which consumes all available connections. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101258887105690&w=2 - http://marc.info/?l=bugtraq&m=101258281818524&w=2 - http://online.securityfocus.com/archive/1/254268 - http://www.iss.net/security_
.info/?l=bugtraq&m=101258281818524&w=2 - http://online.securityfocus.com/archive/1/254268 - http://www.iss.net/security_center/static/8057.php - http://www.securityfocus.com/bid/4015
CVE ID: CVE-2002-0235 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Castelle FaxPress, possibly 6.3 and other versions, when configured to use the Network print queue, allows attackers to obtain the username and password by submitting an incorrect login, which causes Faxpress to leak the correct username and password in plaintext in an error event. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4030 - http://www.iss.net/security_center/static/8086.php - http://online.securityfocus.com/archive/1/254168
CVE ID: CVE-2002-0236 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote attackers to bypass authentication via a direct HTTP request to the VsSetCookie.exe program, which returns a valid cookie for the desired user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3784 - http://marc.info/?l=bugtraq&m=101294507827698&w=2 - http://www.iss.net/security_center/static/7936.php
CVE ID: CVE-2002-0237 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:42:28.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ISS BlackICE Defender 2.9 and earlier, BlackICE Agent 3.0 and 3.1, and RealSecure Server Sensor 6.0.1 and 6.5 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a flood of large ICMP ping packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8058.php - http://www.iss.net/security_center/alerts/advise109.php - http://marc.info/?l=ntbugtraq&m=101353165915171&w=2 - http://marc.info/?l=bugtraq&m=1012863
enter/alerts/advise109.php - http://marc.info/?l=ntbugtraq&m=101353165915171&w=2 - http://marc.info/?l=bugtraq&m=101286393404301&w=2 - http://marc.info/?l=bugtraq&m=101321744807452&w=2 - http://www.securityfocus.com/bid/4025 - http://marc.info/?l=bugtraq&m=101302424803268&w=2
CVE ID: CVE-2002-0238 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in web administration interface for NetGear RT314 and RT311 Gateway Routers allows remote attackers to execute arbitrary script on another client via a URL that contains the script. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8082.php - http://www.securityfocus.com/bid/4024 - http://marc.info/?l=bugtraq&m=101286360203461&w=2
CVE ID: CVE-2002-0239 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in hanterm 3.3.1 and earlier allows local users to execute arbitrary code via a long string in the (1) -fn, (2) -hfb, or (3) -hfn argument. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1001950 - http://www.securityfocus.com/bid/4050 - http://www.iss.net/security_center/static/8109.php - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:41.hanterm.asc - http://www.debian.org/security/2002/dsa-112 - http://marc.info/?l=bugtraq&m=101310874106455&w=2 -
SA-01:41.hanterm.asc - http://www.debian.org/security/2002/dsa-112 - http://marc.info/?l=bugtraq&m=101310874106455&w=2 - http://online.securityfocus.com/archive/1/255168
CVE ID: CVE-2002-0240 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4057 - http://marc.info/?l=bugtraq&m=101311746611160&w=2 - http://www.iss.net/security_center/static/8119.php
CVE ID: CVE-2002-0241 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:28.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services (NDS), which could allow those users to authenticate to the server. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8106.php - http://www.securityfocus.com/bid/4048 - http://www.cisco.com/warp/public/707/ciscosecure-acs-nds-authentication-vuln-pub.shtml
CVE ID: CVE-2002-0242 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in Internet Explorer 6 earlier allows remote attackers to execute arbitrary script via an Extended HTML Form, whose output from the remote server is not properly cleansed. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101309907709138&w=2
CVE ID: CVE-2002-0243 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in Opera 6.0 and earlier allows remote attackers to execute arbitrary script via an Extended HTML Form, whose output from the remote server is not properly cleansed. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101309907709138&w=2
CVE ID: CVE-2002-0244 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in chroot function in AtheOS 0.3.7 allows attackers to escape the jail via a .. (dot dot) in the pathname argument to chdir. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/8108 - http://www.securityfocus.com/bid/4051 - http://marc.info/?l=bugtraq&m=101310622531303&w=2
CVE ID: CVE-2002-0245 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to (1) determine the physical path of the server via a request for a nonexistent file with a .pl (Perl) extension, which leaks the pathname in the error message, or (2) make any request that causes an HTTP 500 error, which leaks the server's version name in the HTTP error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4049 - http://marc.info/?l=bugtraq&m=101310812804716&w=2 - http://www-1.ibm.com/
ces: - http://www.securityfocus.com/bid/4049 - http://marc.info/?l=bugtraq&m=101310812804716&w=2 - http://www-1.ibm.com/support/manager.wss?rs=1&rt=0&org=sims&doc=07B32060E4CC97E985256B64005AEB0F - http://www.iss.net/security_center/static/8160.php
CVE ID: CVE-2002-0246 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:28.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privileges by modifying the LC_MESSAGE environment variable to read other message catalogs containing format strings from setuid programs such as vxprint. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/255414 - http://www.iss.net/security_center/static/8113.php - ftp://stage.caldera.com/pub/security/unixware/CSSA-2002-SCO.3/CSSA-2002-SCO.3.txt - http://www
_center/static/8113.php - ftp://stage.caldera.com/pub/security/unixware/CSSA-2002-SCO.3/CSSA-2002-SCO.3.txt - http://www.securityfocus.com/bid/4060
CVE ID: CVE-2002-0247 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in wmtv 0.6.5 and earlier may allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4054 - http://www.iss.net/security_center/static/8111.php - http://www.debian.org/security/2002/dsa-108
CVE ID: CVE-2002-0248 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: wmtv 0.6.5 and earlier allows local users to modify arbitrary files via a symlink attack on a configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8110.php - http://www.debian.org/security/2002/dsa-108 - http://www.securityfocus.com/bid/4052
CVE ID: CVE-2002-0249 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote attackers to obtain the physical path of the php.exe via a request with malformed arguments such as /123, which leaks the pathname in the error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101311698909691&w=2 - http://www.securityfocus.com/bid/4056 - http://www.iss.net/security_center/static/8121.php
CVE ID: CVE-2002-0250 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:28.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allows unauthorized users to bypass authentication via a direct HTTP request to the web_access.html file, which allows the user to change the switch's configuration and modify the administrator password. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101318469216213&w=2 - http://www.iss.net/security_center/static/8124.php - http://online.securityfocus.com/advisories/
m=101318469216213&w=2 - http://www.iss.net/security_center/static/8124.php - http://online.securityfocus.com/advisories/3870 - http://www.securityfocus.com/bid/4062
CVE ID: CVE-2002-0251 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:42:28.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in licq 1.0.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string of format string characters such as "%d". Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101301254432079&w=2 - http://marc.info/?l=bugtraq&m=101318594420200&w=2 - http://www.iss.net/security_center/static/8107.php - http://www.securityfocus.com/bid/4036
CVE ID: CVE-2002-0252 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:29.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute arbitrary code via a response containing a long Content-Type MIME header. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8126.php - https://www.exploit-db.com/exploits/4673 - http://marc.info/?l=bugtraq&m=101320742616105&w=2 - http://www.securityfocus.com/bid/4064
CVE ID: CVE-2002-0253 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP, when not configured with the "display_errors = Off" setting in php.ini, allows remote attackers to obtain the physical path for an include file via a trailing slash in a request to a directly accessible PHP program, which modifies the base path, causes the include directive to fail, and produces an error message that contains the path. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101318944130790&w=2 - http://www.iss.net/security_center/static/8122.php - http://www.security
://marc.info/?l=bugtraq&m=101318944130790&w=2 - http://www.iss.net/security_center/static/8122.php - http://www.securityfocus.com/bid/4063
CVE ID: CVE-2002-0254 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: ICQ 2001b Build 3659 allows remote attackers to cause a denial of service (crash) via a malformed picture that contains large height and width values, which causes the crash when viewed in Userdetails. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101320492009565&w=2
CVE ID: CVE-2002-0255 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Arescom NetDSL 800 does not require authentication, which allows remote attackers to cause a denial of service or reconfigure the router. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8125.php - http://www.securityfocus.com/bid/4066 - http://marc.info/?l=bugtraq&m=101323620111951&w=2
CVE ID: CVE-2002-0256 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: The telnet port in Arescom NetDSL 1000 router allows remote attackers to cause a denial of service via a series of connections with long strings, which causes a large number of login failures and causes the telnet service to stop. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101328827420630&w=2 - http://www.securityfocus.com/bid/4067 - http://www.iss.net/security_center/static/8123.php
CVE ID: CVE-2002-0257 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in auction.pl of MakeBid Auction Deluxe 3.30 allows remote attackers to obtain information from other users via the form fields (1) TITLE, (2) DESCTIT, (3) DESC, (4) searchstring, (5) ALIAS, (6) EMAIL, (7) ADDRESS1, (8) ADDRESS2, (9) ADDRESS3, (10) PHONE1, (11) PHONE2, (12) PHONE3, or (13) PHONE4. Additional Analyst Notes: - CVE Program Container: References: - http://www.netcreations.addr.com/dcforum/DCForumID2/126.html - http://marc.info/?l=bugtraq&m=101328880521775&w=2 - http://www.iss.net
tcreations.addr.com/dcforum/DCForumID2/126.html - http://marc.info/?l=bugtraq&m=101328880521775&w=2 - http://www.iss.net/security_center/static/8161.php - http://www.securityfocus.com/bid/4069
CVE ID: CVE-2002-0258 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T02:42:28.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Merak Mail IceWarp Web Mail uses a static identifier as a user session ID that does not change across sessions, which could allow remote attackers with access to the ID to gain privileges as that user, e.g. by extracting the ID from the user's answer or forward URLs. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101328887821909&w=2