Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-0821 State: PUBLISHED Published: 2002-08-02T04:00:00 Last Updated: 2024-08-08T03:03:48.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in Ethereal 0.9.4 and earlier allow remote attackers to cause a denial of service or execute arbitrary code via (1) the BGP dissector, or (2) the WCP dissector. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000505 - http://www.ethereal.com/appnotes/enpa-sa-00005.html
CVE ID: CVE-2002-0822 State: PUBLISHED Published: 2002-08-02T04:00:00 Last Updated: 2024-08-08T03:03:49.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ethereal 0.9.4 and earlier allows remote attackers to cause a denial of service and possibly excecute arbitrary code via the (1) SOCKS, (2) RSVP, (3) AFS, or (4) LMP dissectors, which can be caused to core dump. Additional Analyst Notes: - CVE Program Container: References: - http://www.ethereal.com/appnotes/enpa-sa-00005.html - http://www.securityfocus.com/bid/5167
CVE ID: CVE-2002-0823 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:48.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Winhlp32.exe allows remote attackers to execute arbitrary code via an HTML document that calls the HTML Help ActiveX control (HHCtrl.ocx) with a long pathname in the Item parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4857 - http://www.osvdb.org/2991 - http://www.iss.net/security_center/static/9746.php - http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3Bq293338 - http://marc.info/?l=bugtraq&m=102822806329440&w=2
CVE ID: CVE-2002-0824 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:48.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specified as a tty device. Additional Analyst Notes: - CVE Program Container: References: - http://www.openbsd.org/errata31.html - http://www.iss.net/security_center/static/9738.php - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-010.txt.asc - http://marc.info/?l=bugtraq&m=102812546815606&w=2 - http://www.securityfocus.com/bid/5355
CVE ID: CVE-2002-0825 State: PUBLISHED Published: 2002-08-07T04:00:00 Last Updated: 2024-08-08T03:03:48.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the DNS SRV code for nss_ldap before nss_ldap-198 allows remote attackers to cause a denial of service and possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.padl.com/Articles/PotentialBufferOverflowin.html
CVE ID: CVE-2002-0826 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in WS_FTP FTP Server 3.1.1 allows remote authenticated users to execute arbitrary code via a long SITE CPWD command. Additional Analyst Notes: - CVE Program Container: References: - http://www.ipswitch.com/Support/WS_FTP-Server/patch-upgrades.html - http://www.atstake.com/research/advisories/2002/a080802-1.txt - http://www.securityfocus.com/bid/5427 - http://www.iss.net/security_center/static/9794.php
CVE ID: CVE-2002-0827 State: PUBLISHED Published: 2002-08-07T04:00:00 Last Updated: 2024-08-08T03:03:49.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in pppd on UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to gain root privileges via (1) ppptalk or (2) ppp, a different vulnerability than CVE-2002-0824. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9380.php - http://www.securityfocus.com/bid/5051 - ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.27/CSSA-2002-SCO.27.txt
CVE ID: CVE-2002-0828 State: REJECTED Published: 2002-08-07T04:00:00 Last Updated: 2005-02-04T00:00:00 Description: No description available.
CVE ID: CVE-2002-0829 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:48.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the Berkeley Fast File System (FFS) in FreeBSD 4.6.1 RELEASE-p4 and earlier allows local users to access arbitrary file contents within FFS to gain privileges by creating a file that is larger than allowed by the virtual memory system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5399 - http://marc.info/?l=bugtraq&m=102865404413458&w=2 - http://www.osvdb.org/5073 - http://www.iss.net/security_center/static/9771.php
CVE ID: CVE-2002-0830 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Network File System (NFS) in FreeBSD 4.6.1 RELEASE-p7 and earlier, NetBSD 1.5.3 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service (hang) via an RPC message with a zero length payload, which causes NFS to reference a previous payload and enter an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.info.apple.com/usen/security/security_updates.html - http://www.securityfocus.com/bid/5402 - http://www.osvdb.org/5072 - https://exchange.xfo
ecurity/security_updates.html - http://www.securityfocus.com/bid/5402 - http://www.osvdb.org/5072 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9772 - http://marc.info/?l=bugtraq&m=102865517214722&w=2 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-013.txt.asc
CVE ID: CVE-2002-0831 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kqueue mechanism in FreeBSD 4.3 through 4.6 STABLE allows local users to cause a denial of service (kernel panic) via a pipe call in which one end is terminated and an EVFILT_WRITE filter is registered for the other end. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9774.php - http://marc.info/?l=bugtraq&m=102865142610126&w=2 - http://www.securityfocus.com/bid/5405 - http://www.osvdb.org/5069
CVE ID: CVE-2002-0832 State: PUBLISHED Published: 2002-08-07T04:00:00 Last Updated: 2024-08-08T03:03:49.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5, 5.6, and 6 allows remote attackers to bypass cookie privacy settings and store information across browser sessions via the userData (storeuserData) feature. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=102864890006745&w=2
CVE ID: CVE-2002-0833 State: PUBLISHED Published: 2002-08-07T04:00:00 Last Updated: 2024-08-08T03:03:48.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Eudora 5.1.1 and 5.0-J for Windows, and possibly other versions, allows remote attackers to execute arbitrary code via a multi-part message with a long boundary string. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=102858453720304&w=2 - http://www.securityfocus.com/bid/5397 - http://www.iss.net/security_center/static/9765.php - http://marc.info/?l=bugtraq&m=102883538924494&w=2
CVE ID: CVE-2002-0834 State: PUBLISHED Published: 2002-08-23T04:00:00 Last Updated: 2024-08-08T03:03:49.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ISIS dissector for Ethereal 0.9.5 and earlier allows remote attackers to cause a denial of service or execute arbitrary code via malformed packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.ethereal.com/appnotes/enpa-sa-00006.html
CVE ID: CVE-2002-0835 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:03:49.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Preboot eXecution Environment (PXE) server allows remote attackers to cause a denial of service (crash) via certain DHCP packets from Voice-Over-IP (VOIP) phones. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5596 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-044.0.txt - http://www.iss.net/security_center/static/10003.php - http://online.securityfocus.com/advisories/4449 - http://www.redhat.com/support/errata/RHSA-2002-162.html - http://www.redhat.com/support/errat
ocus.com/advisories/4449 - http://www.redhat.com/support/errata/RHSA-2002-162.html - http://www.redhat.com/support/errata/RHSA-2002-165.html
CVE ID: CVE-2002-0836 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:03:49.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=103497852330838&w=2 - http://www.securityfocus.com/bid/5978 - http://marc.info/?l=bugtraq&m=104005975415582&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000537 - http://www.kb.cert.org/vuls/id/169841 - http://w
=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000537 - http://www.kb.cert.org/vuls/id/169841 - http://www.debian.org/security/2002/dsa-207 - http://www.securityfocus.com/advisories/4567 - http://www.redhat.com/support/errata/RHSA-2002-195.html - http://www.iss.net/security_center/static/10365.php - http://www.redhat.com/support/errata/RHSA-2002-194.html - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-070.php
CVE ID: CVE-2002-0837 State: PUBLISHED Published: 2002-09-10T04:00:00 Last Updated: 2024-08-08T03:03:49.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: wordtrans 1.1pre8 and earlier in the wordtrans-web package allows remote attackers to (1) execute arbitrary code or (2) conduct cross-site scripting attacks via certain parameters (possibly "dict") to the wordtrans.php script. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5674 - http://www.iss.net/security_center/static/10063.php - http://rhn.redhat.com/errata/RHSA-2002-188.html - http://marc.info/?l=bugtraq&m=103158607631137&w=2 - http://www.guardent.com/comp_news_wordtrans-
ta/RHSA-2002-188.html - http://marc.info/?l=bugtraq&m=103158607631137&w=2 - http://www.guardent.com/comp_news_wordtrans-web.html# - http://www.securityfocus.com/bid/5671 - http://www.iss.net/security_center/static/10059.php
CVE ID: CVE-2002-0838 State: PUBLISHED Published: 2002-10-01T04:00:00 Last Updated: 2024-08-08T03:03:49.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed (a) PDF or (b) PostScript file, which is processed by an unsafe call to sscanf. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2002/dsa-179 - http://www.mandriva.com/security/advisories?name=MDKSA-2002:069 - http://www.kde.org/info/security/advisory-200210
179 - http://www.mandriva.com/security/advisories?name=MDKSA-2002:069 - http://www.kde.org/info/security/advisory-20021008-1.txt - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-053.0.txt - http://www.debian.org/security/2002/dsa-182 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000542 - http://marc.info/?l=bugtraq&m=103305615613319&w=2 - http://www.mandriva.com/security/advisories?name=MDKSA-2002:071 - http://www.securityfocus.com/bid/5808 - http://www.debian.org/security/2002/dsa-176 - http://www.iss.net/security_center/static/10201.php - http://www.redhat.com/support/errata/RHSA-2002-212.html - http://www.redhat.com/support/errata/RHSA-2002-220.html - http://www.redh
redhat.com/support/errata/RHSA-2002-212.html - http://www.redhat.com/support/errata/RHSA-2002-220.html - http://www.redhat.com/support/errata/RHSA-2002-207.html - http://www.kb.cert.org/vuls/id/600777 - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/47780&zone_32=category:security - http://marc.info/?l=bugtraq&m=103487806800388&w=2 - http://marc.info/?l=bugtraq&m=103305778615625&w=2
CVE ID: CVE-2002-0839 State: PUBLISHED Published: 2002-10-05T04:00:00 Last Updated: 2024-08-08T03:03:49.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1 signal to any process as root, resulting in a denial of service (process kill) or possibly other behaviors that would not normally be allowed, by modifying the parent[].pid and parent[].last_rtime segments in the scoreboard. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2002/dsa-188 - http://marc.info/?l=apache-httpd-announce&m=1033679382304
r: References: - http://www.debian.org/security/2002/dsa-188 - http://marc.info/?l=apache-httpd-announce&m=103367938230488&w=2 - http://www.linuxsecurity.com/advisories/other_advisory-2414.html - ftp://patches.sgi.com/support/free/security/advisories/20021105-01-I - http://online.securityfocus.com/advisories/4617 - http://www.debian.org/security/2002/dsa-187 - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0012.html - http://www.apacheweek.com/issues/02-10-04 - http://www.securityfocus.com/bid/5884 - http://www.debian.org/security/2002/dsa-195 - http://marc.info/?l=bugtraq&m=103376585508776&w=2 - http://www.iss.net/security_center
ebian.org/security/2002/dsa-195 - http://marc.info/?l=bugtraq&m=103376585508776&w=2 - http://www.iss.net/security_center/static/10280.php - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-068.php - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000530 - http://archives.neohapsis.com/archives/bugtraq/2002-10/0254.html - http://archives.neohapsis.com/archives/bugtraq/2002-10/0195.html - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apa
g%3E - https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2002-0840 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:03:48.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header, a different vulnerability than CAN-2002-1157. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2002/dsa-188 - http://marc.info/?l=apache-httpd-announce&m=103367938230488&w=2 - http://www.linuxsecurity.c
org/security/2002/dsa-188 - http://marc.info/?l=apache-httpd-announce&m=103367938230488&w=2 - http://www.linuxsecurity.com/advisories/other_advisory-2414.html - http://online.securityfocus.com/advisories/4617 - http://www.debian.org/security/2002/dsa-187 - http://www.apacheweek.com/issues/02-10-04 - http://www.debian.org/security/2002/dsa-195 - http://marc.info/?l=bugtraq&m=103376585508776&w=2 - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-068.php - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000530 - http://archives.neohapsis.com/archives/bugtraq/2002-10/0254.html - http://marc.info/?l=bugtraq&m=103357160425708&w=2 - http://www.redhat.com/support/errata/RHSA-2002-
/2002-10/0254.html - http://marc.info/?l=bugtraq&m=103357160425708&w=2 - http://www.redhat.com/support/errata/RHSA-2002-243.html - http://www.osvdb.org/862 - http://www.redhat.com/support/errata/RHSA-2002-222.html - http://www.redhat.com/support/errata/RHSA-2003-106.html - http://www.redhat.com/support/errata/RHSA-2002-251.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10241 - ftp://patches.sgi.com/support/free/security/advisories/20021105-02-I - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0003.html - http://www.kb.cert.org/vuls/id/240329 - http://www.securityfocus.com/bid/5847 - http://www.redhat.com/support/errata/RHSA-2002-248.html - http://www.redhat.com/support
www.securityfocus.com/bid/5847 - http://www.redhat.com/support/errata/RHSA-2002-248.html - http://www.redhat.com/support/errata/RHSA-2002-244.html - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8
f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E -
://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2002-0841 State: REJECTED Published: 2003-02-21T05:00:00 Last Updated: 2004-01-26T10:00:00 Description: No description available.
CVE ID: CVE-2002-0842 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:03:49.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in certain third party modifications to mod_dav for logging bad gateway messages (e.g. Oracle9i Application Server 9.0.2) allows remote attackers to execute arbitrary code via a destination URI that forces a "502 Bad Gateway" response, which causes the format string specifiers to be returned from dav_lookup_uri() in mod_dav.c, which is then used in a call to ap_log_rerror(). Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2003-05.html - http://www.c
onal Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2003-05.html - http://www.ciac.org/ciac/bulletins/n-046.shtml - http://otn.oracle.com/deploy/security/pdf/2003alert52.pdf - http://marc.info/?l=bugtraq&m=104549708626309&w=2 - http://www.kb.cert.org/vuls/id/849993 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0076.html - http://www.iss.net/security_center/static/11330.php - http://www.securityfocus.com/bid/6846 - http://marc.info/?l=bugtraq&m=104549708626309&w=2 - http://marc.info/?l=bugtraq&m=104560577227981&w=2 - http://marc.info/?l=bugtraq&m=104559446010858&w=2 - http://www.nextgenss.com/advisories/ora-appservfmtst.txt
CVE ID: CVE-2002-0843 State: PUBLISHED Published: 2002-10-05T04:00:00 Last Updated: 2024-08-08T03:03:49.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a malicious web server to cause a denial of service and possibly execute arbitrary code via a long response. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2002/dsa-188 - http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000530 - http://marc.info/?l=apache-httpd-announce&m=103367938230488&w=2 - http://www.linuxsecurity.com/advisories/other_adviso
- http://marc.info/?l=apache-httpd-announce&m=103367938230488&w=2 - http://www.linuxsecurity.com/advisories/other_advisory-2414.html - http://www.securityfocus.com/bid/5996 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY87070&apar=only - ftp://patches.sgi.com/support/free/security/advisories/20021105-01-I - http://online.securityfocus.com/advisories/4617 - http://www.vupen.com/english/advisories/2006/3263 - http://archives.neohapsis.com/archives/bugtraq/2002-10/0229.html - http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000530 - http://www.debian.org/security/2002/dsa-187 - http://www.apacheweek.com/issues/02-10-04 - http://www.securityfocus.com/bid/5887 - http://www.debian.org/se
2/dsa-187 - http://www.apacheweek.com/issues/02-10-04 - http://www.securityfocus.com/bid/5887 - http://www.debian.org/security/2002/dsa-195 - http://marc.info/?l=bugtraq&m=103376585508776&w=2 - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-068.php - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=2871 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000530 - http://secunia.com/advisories/21425 - http://archives.neohapsis.com/archives/bugtraq/2002-10/0254.html - http://www.securityfocus.com/bid/5995 - http://www.iss.net/security_center/static/10281.php - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be
ity_center/static/10281.php - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf2
c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E