Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-0640 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authentication (PAMAuthenticationViaKbdInt). Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2002/dsa-134 - http://www.redhat.com/support/errata/RHSA-2002-127.html - http://marc.info/?l=bugtraq&m=102514371522793&w=2 - http://www.novell.com/linux
.com/support/errata/RHSA-2002-127.html - http://marc.info/?l=bugtraq&m=102514371522793&w=2 - http://www.novell.com/linux/security/advisories/2002_024_openssh_txt.html - http://marc.info/?l=bugtraq&m=102532054613894&w=2 - http://www.osvdb.org/839 - http://www.cert.org/advisories/CA-2002-18.html - http://marc.info/?l=bugtraq&m=102521542826833&w=2 - http://www.redhat.com/support/errata/RHSA-2002-131.html - http://www.securityfocus.com/bid/5093 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-030.0.txt - http://www.linuxsecurity.com/advisories/other_advisory-2177.html - http://www.kb.cert.org/vuls/id/369347 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000502 - http://www1.
http://www.kb.cert.org/vuls/id/369347 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000502 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0206-195 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:040 - http://marc.info/?l=bugtraq&m=102514631524575&w=2 - http://www.openwall.com/lists/oss-security/2024/07/01/3
CVE ID: CVE-2002-0641 State: PUBLISHED Published: 2002-07-12T04:00:00 Last Updated: 2024-08-08T02:56:38.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database administration privileges to execute arbitrary code via a long filename in the BULK INSERT query. Additional Analyst Notes: - CVE Program Container: References: - http://www.ngssoftware.com/advisories/ms-sqlbi.txt - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034 - http://www.kb.cert.org/vuls/id/682620 - https://oval.cisecurity.org/rep
curity-updates/securitybulletins/2002/ms02-034 - http://www.kb.cert.org/vuls/id/682620 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A316 - http://marc.info/?l=bugtraq&m=102639885223746&w=2 - http://www.securityfocus.com/bid/4847
CVE ID: CVE-2002-0642 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, has insecure permissions, which allows local users to gain privileges, aka "Incorrect Permission on SQL Server Service Account Registry Key." Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2002-22.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034 - http://www.kb.cert.org/vuls/id/7
l - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034 - http://www.kb.cert.org/vuls/id/796313 - http://www.iss.net/security_center/static/9523.php - http://www.securityfocus.com/bid/5205 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1025
CVE ID: CVE-2002-0643 State: PUBLISHED Published: 2002-07-12T04:00:00 Last Updated: 2024-08-08T02:56:38.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with insecure permissions and does not delete them after installation, which allows local users to obtain sensitive data, including weakly encrypted passwords, to gain privileges, aka "SQL Server Installation Process May Leave Passwords on System." Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=102640092826731&w=2 - https://docs.microsoft.com/en-us/security-updates/secu
References: - http://marc.info/?l=bugtraq&m=102640092826731&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-035 - http://marc.info/?l=vuln-dev&m=102640394131103&w=2 - http://www.kb.cert.org/vuls/id/338195 - http://www.securityfocus.com/bid/5203
CVE ID: CVE-2002-0644 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T02:56:38.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the db_owner and db_ddladmin roles to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-038
CVE ID: CVE-2002-0645 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T02:56:38.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 may allow authenticated users to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-038
CVE ID: CVE-2002-0646 State: REJECTED Published: 2002-10-15T04:00:00 Last Updated: 2005-02-06T10:00:00 Description: No description available.
CVE ID: CVE-2002-0647 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a legacy ActiveX control used to display specially formatted text in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code, aka "Buffer Overrun in Legacy Text Formatting ActiveX Control". Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-047 - http://www.securityfocus.com/bid/5558 - http://www.iss.net/security_center/static/9935.php
CVE ID: CVE-2002-0648 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: The legacy <script> data-island capability for XML in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to read arbitrary XML files, and portions of other files, via a URL whose "src" attribute redirects to a local file. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-047 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1207 - http://www.securityfocus.com/bid/5560 - https:/
ty.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1207 - http://www.securityfocus.com/bid/5560 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1026 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A776 - http://www.iss.net/security_center/static/9936.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1148 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A608 - http://marc.info/?l=bugtraq&m=103011639524314&w=2
CVE ID: CVE-2002-0649 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T02:56:38.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archi
ammer/Sapphire worm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/308396/30/26150/threaded - http://www.securityfocus.com/archive/1/308418/30/26150/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1077 - http://www.cert.org/advisories/CA-2002-22.html - http://www.kb.cert.org/vuls/id/484891 - http://www.kb.cert.org/vuls/id/399260 - http://marc.info/?l=ntbugtraq&m=102760479902411&w=2 - http://secunia.com/advisories/7945 - http://www.securityfocus.com/archive/1/308806/30/26120/threaded - http://www.securityfocus.com/archive/1/308324/30/26180/threaded - http://www.securityfocus.com/archive
/26120/threaded - http://www.securityfocus.com/archive/1/308324/30/26180/threaded - http://www.securityfocus.com/archive/1/308388/30/26180/threaded - http://www.securityfocus.com/archive/1/308306/30/26180/threaded - http://www.securityfocus.com/archive/1/308321/30/26180/threaded - http://www.securityfocus.com/archive/1/308760/30/26120/threaded - http://www.securityfocus.com/archive/1/309096/30/26120/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-039 - http://www.securityfocus.com/archive/1/308419/30/26150/threaded - http://marc.info/?l=bugtraq&m=102760196931518&w=2 - http://www.securityfocus.com/archive/1/308393/30/26180/threaded - http://www.cert.or
/?l=bugtraq&m=102760196931518&w=2 - http://www.securityfocus.com/archive/1/308393/30/26180/threaded - http://www.cert.org/advisories/CA-2003-04.html - http://www.securityfocus.com/bid/5310 - http://www.securityfocus.com/archive/1/309324/30/26120/threaded - http://www.securityfocus.com/archive/1/309776/30/26090/threaded
CVE ID: CVE-2002-0650 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: The keep-alive mechanism for Microsoft SQL Server 2000 allows remote attackers to cause a denial of service (bandwidth consumption) via a "ping" style packet to the Resolution Service (UDP port 1434) with a spoofed IP address of another SQL Server system, which causes the two servers to exchange packets in an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=ntbugtraq&m=102760479902411&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-039 - htt
tbugtraq&m=102760479902411&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-039 - http://marc.info/?l=bugtraq&m=102760196931518&w=2 - http://www.securityfocus.com/bid/5312 - http://www.iss.net/security_center/static/9662.php - http://www.osvdb.org/878
CVE ID: CVE-2002-0651 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:56:38.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the DNS resolver code used in libc, glibc, and libbind, as derived from ISC BIND, allows remote malicious DNS servers to cause a denial of service and possibly execute arbitrary code via the stub resolvers. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000507 - http://rhn.redhat.com/errata/RHSA-2002-139.html - http://archives.neohapsis.com/archives/linux/engarde/2002-q3/0002.html - https://oval.cisecurity.org/repository/search/definiti
archives.neohapsis.com/archives/linux/engarde/2002-q3/0002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4190 - http://marc.info/?l=bugtraq&m=102513011311504&w=2 - http://www.redhat.com/support/errata/RHSA-2002-119.html - http://www.kb.cert.org/vuls/id/803539 - http://www.iss.net/security_center/static/9432.php - ftp://ftp.caldera.com/pub/updates/OpenServer/CSSA-2002-SCO.39 - http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:038 - http://archives.neohapsis.com/archives/aix/2002-q3/0001.html - http://www.redhat.com/support/errata/RHSA-2002-167.html - http://www.redhat.com/support/errata/RHSA-2003-154.html - ftp://patches.sgi.com/s
om/support/errata/RHSA-2002-167.html - http://www.redhat.com/support/errata/RHSA-2003-154.html - ftp://patches.sgi.com/support/free/security/advisories/20020701-01-I/ - http://archives.neohapsis.com/archives/aix/2002-q3/0001.html - http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0000.html - http://marc.info/?l=bugtraq&m=102579743329251&w=2 - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-043.php - http://www.redhat.com/support/errata/RHSA-2002-133.html - ftp://ftp.caldera.com/pub/updates/UnixWare/CSSA-2002-SCO.37 - http://marc.info/?l=bugtraq&m=102520962320134&w=2 - http://www.cert.org/advisories/CA-2002-19.html - http://www.securityfocus.com/bid/5100 - ftp://ftp.NetBSD.O
320134&w=2 - http://www.cert.org/advisories/CA-2002-19.html - http://www.securityfocus.com/bid/5100 - ftp://ftp.NetBSD.ORG/pub/NetBSD/security/advisories/NetBSD-SA2002-006.txt.asc - http://www.pine.nl/advisories/pine-cert-20020601.txt
CVE ID: CVE-2002-0652 State: PUBLISHED Published: 2002-07-01T04:00:00 Last Updated: 2024-08-08T02:56:38.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered from several calls to the popen() function, such as export_fs(). Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20020606-01-I - http://marc.info/?l=bugtraq&m=102459162909825&w=2 - ftp://patches.sgi.com/support/free/security/advisories/20020605-01-I
CVE ID: CVE-2002-0653 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one buffer overflow in the ssl_compat_directive function, as called by the rewrite_command hook for mod_ssl Apache module 2.8.9 and earlier, allows local users to execute arbitrary code as the Apache server user via .htaccess files with long entries. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2002-164.html - http://www.iss.net/security_center/static/9415.php - http://www.redhat.com/support/errata/RHSA-2003-106.html - ftp://ftp.caldera.com/pub/security/OpenLinux/CSS
ic/9415.php - http://www.redhat.com/support/errata/RHSA-2003-106.html - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-031.0.txt - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000504 - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-048.php - http://www.novell.com/linux/security/advisories/2002_028_mod_ssl.html - http://www.redhat.com/support/errata/RHSA-2002-134.html - http://www.redhat.com/support/errata/RHSA-2002-136.html - http://marc.info/?l=vuln-dev&m=102477330617604&w=2 - http://archives.neohapsis.com/archives/bugtraq/2002-06/0350.html - http://www.securityfocus.com/bid/5084 - http://marc.info/?l=bugtraq&m=102513970919836&w=2 - http://www.redhat.com/supp
- http://www.securityfocus.com/bid/5084 - http://marc.info/?l=bugtraq&m=102513970919836&w=2 - http://www.redhat.com/support/errata/RHSA-2002-135.html - http://www.redhat.com/support/errata/RHSA-2002-146.html - http://archives.neohapsis.com/archives/hp/2002-q3/0018.html - http://www.debian.org/security/2002/dsa-135 - http://marc.info/?l=bugtraq&m=102563469326072&w=2
CVE ID: CVE-2002-0654 State: PUBLISHED Published: 2002-08-20T04:00:00 Last Updated: 2024-08-08T02:56:38.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a request for a .var file, which leaks the pathname in the resulting error message, or (2) via an error message that occurs when a script (child process) cannot be invoked. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9876.php - http://www.apache.org/dist/httpd/CHANGES_2.0 - http://www.securityfocus.com/bid/5485 - http://www.iss.net/sec
9876.php - http://www.apache.org/dist/httpd/CHANGES_2.0 - http://www.securityfocus.com/bid/5485 - http://www.iss.net/security_center/static/9875.php - http://www.securityfocus.com/bid/5486 - http://marc.info/?l=bugtraq&m=102951160411052&w=2 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e
63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread
rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2002-0655 State: PUBLISHED Published: 2002-07-31T04:00:00 Last Updated: 2024-08-08T02:56:38.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-046.php - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt - http://www.cert.org/advisories/CA-2002-23.html - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-20
A-2002-033.0.txt - http://www.cert.org/advisories/CA-2002-23.html - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000513 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc - http://www.kb.cert.org/vuls/id/308891 - http://www.securityfocus.com/bid/5364
CVE ID: CVE-2002-0656 State: PUBLISHED Published: 2002-07-31T04:00:00 Last Updated: 2024-08-08T02:56:38.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5363 - http://www.securityfocus.com/bid/5362 - http://www.kb.cert.org/vuls/id/102795 - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-046.php - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt - http://ww
e.com/en/security/2002/MDKSA-2002-046.php - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt - http://www.kb.cert.org/vuls/id/258555 - http://www.iss.net/security_center/static/9714.php - http://www.cert.org/advisories/CA-2002-23.html - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000513 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc - http://www.iss.net/security_center/static/9716.php
CVE ID: CVE-2002-0657 State: PUBLISHED Published: 2002-07-31T04:00:00 Last Updated: 2024-08-08T02:56:38.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master key. Additional Analyst Notes: - CVE Program Container: References: - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-046.php - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt - http://www.cert.org/advisories/CA-2002-23.html - http://www.kb.cert.org/vuls/id/561275 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt - http://distro.conectiva.com.br/atu
g/vuls/id/561275 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000513 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc - http://www.iss.net/security_center/static/9715.php - http://www.securityfocus.com/bid/5361
CVE ID: CVE-2002-0658 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: OSSP mm library (libmm) before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2002-164.html - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc - http://rhn.redhat.com/errata/RHSA-2002-156.html - http://www.redhat.com/support/errata/RHSA-2003-158.html - http://rhn.redhat.com/errata/RHSA-2002-154.html - http://www.iss.net/security_center/static/9
rrata/RHSA-2003-158.html - http://rhn.redhat.com/errata/RHSA-2002-154.html - http://www.iss.net/security_center/static/9719.php - http://www.novell.com/linux/security/advisories/2002_028_mod_ssl.html - http://www.redhat.com/support/errata/RHSA-2002-163.html - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-032.0.txt - http://www.debian.org/security/2002/dsa-137 - http://www.securityfocus.com/bid/5352 - http://rhn.redhat.com/errata/RHSA-2002-153.html - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-045.php - http://online.securityfocus.com/advisories/4392
CVE ID: CVE-2002-0659 State: PUBLISHED Published: 2002-07-31T04:00:00 Last Updated: 2024-08-08T02:56:38.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2002-164.html - http://rhn.redhat.com/errata/RHSA-2002-161.html - http://www.kb.cert.org/vuls/id/748355 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt - http://www.cert.org/advisories/CA-2002-23.html - http://rhn.redhat.com/errata/RHSA-2002-160.html - ftp://ft
-033.0.txt - http://www.cert.org/advisories/CA-2002-23.html - http://rhn.redhat.com/errata/RHSA-2002-160.html - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt - http://www.iss.net/security_center/static/9718.php - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000516 - http://www.securityfocus.com/bid/5366 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc