Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-1865 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T02:17:04.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Embedded HTTP server, as used in (1) D-Link DI-804 4.68, Dl-704 V2.56b6, and Dl-704 V2.56b5 and (2) Linksys Etherfast BEFW11S4 Wireless AP + Cable/DSL Router 1.37.2 through 1.42.7 and Linksys WAP11 1.3 and 1.4, allows remote attackers to cause a denial of service (crash) via a long header, as demonstrated using the Host header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6090 - http://www.iss.net/security_center/static/10537.php - http://archives.neo
ces: - http://www.securityfocus.com/bid/6090 - http://www.iss.net/security_center/static/10537.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0052.html
CVE ID: CVE-2002-1866 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T01:46:36.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Web Server (SWS) 0.0.4 through 0.1.0 does not close file descriptors for 404 error messages, which could allow remote attackers to cause a denial of service (file descriptor exhaustion) via multiple requests for pages that do not exist. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5659 - http://www.iss.net/security_center/static/10071.php - http://archives.neohapsis.com/archives/bugtraq/2002-09/0047.html
CVE ID: CVE-2002-1867 State: PUBLISHED Published: 2005-06-28T04:00:00 Last Updated: 2024-08-08T03:43:32.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of BizDesign ImageFolio 2.23 through 2.26 does not control access to (1) admin/setup.cgi, which allows remote attackers to create an administrative account, or (2) admin/nph-build.cgi, which allows remote attackers to cause a denial of service (CPU consumption). Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9308.php - http://www.securityfocus.com/bid/4975 - http://marc.info/?l=bugtraq&m=102373053829427&w=2
CVE ID: CVE-2002-1868 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T20:11:39.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dispair 0.1 and 0.2 allows remote attackers to execute arbitrary shell commands via certain form fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9787.php - http://www.contactor.se/~dast/dispair/dispair.cgi?file=dispair-0.3.tar.gz&dir=&view=CHANGES - http://www.securityfocus.com/bid/5392
CVE ID: CVE-2002-1869 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T16:18:31.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heysoft EventSave 5.1 and 5.2 and Heysoft EventSave+ 5.1 and 5.2 does not check whether the log file can be written to, which allows attackers to prevent events from being recorded by opening the log file using an application such as Microsoft's Event Viewer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6095 - http://www.heysoft.de/nt/eventlog/hsb01e.htm - http://www.iss.net/security_center/static/10535.php - http://securitytracker.com/id?1005517
CVE ID: CVE-2002-1870 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T19:41:44.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Web Server (SWS) 0.0.4 through 0.1.0 does not properly handle when the recv function call fails, which may allow remote attackers to overwrite program data or perform actions on an uninitialized heap, leading to a denial of service and possibly code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10072.php - http://www.securityfocus.com/bid/5660 - http://archives.neohapsis.com/archives/bugtraq/2002-09/0047.html
CVE ID: CVE-2002-1871 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T03:54:26.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: pkgadd in Sun Solaris 2.5.1 through 8 installs files setuid/setgid root if the pkgmap file contains a "?" (question mark) in the (1) mode, (2) owner, or (3) group fields, which allows attackers to elevate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5208 - http://www.iss.net/security_center/static/9544.php - http://sunsolve.sun.com/search/document.do?assetkey=1-26-45693-1
CVE ID: CVE-2002-1872 State: PUBLISHED Published: 2005-06-28T04:00:00 Last Updated: 2024-08-08T03:43:32.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers to sniff and decrypt the password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6097 - http://www.iss.net/security_center/static/10542.php - http://online.securityfocus.com/archive/1/298361 - http://www.nextgenss.com/papers/tp-SQL2000.pdf
CVE ID: CVE-2002-1873 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T17:59:15.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Exchange 2000, when used with Microsoft Remote Procedure Call (MSRPC), allows remote attackers to cause a denial of service (crash or memory consumption) via malformed MSRPC calls. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/286220 - http://www.iss.net/security_center/static/9789.php - http://www.securityfocus.com/bid/5412
CVE ID: CVE-2002-1874 State: PUBLISHED Published: 2005-06-28T04:00:00 Last Updated: 2024-08-08T03:43:33.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request. NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect. Additional Analyst Notes: - CVE Program Container: References: - http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup - http://securitytracker.com/id?1005523 - http://www.iss.net/security_center/static/10538.php - http://www
S?view=markup - http://securitytracker.com/id?1005523 - http://www.iss.net/security_center/static/10538.php - http://www.securityfocus.com/bid/6105
CVE ID: CVE-2002-1875 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T02:41:48.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Entercept Agent 2.5 agent for Windows, released before May 21, 2002, allows local administrative users to obtain the entercept agent password, which could allow the administrators to log on as the entercept_agent account and conceal their identity. Additional Analyst Notes: - CVE Program Container: References: - http://www.derkeiler.com/Mailing-Lists/NT-Bugtraq/2002-07/0010.html - http://www.securityfocus.com/bid/5206 - http://www.iss.net/security_center/static/9546.php
CVE ID: CVE-2002-1876 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T23:11:02.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a large number of rapid requests, which consumes all of the licenses that are granted to Exchange by IIS. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/286220 - http://www.iss.net/security_center/static/9791.php - http://www.securityfocus.com/bid/5413
CVE ID: CVE-2002-1877 State: PUBLISHED Published: 2005-06-28T04:00:00 Last Updated: 2024-08-08T03:43:33.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR FM114P allows remote attackers to bypass access restrictions for web sites via a URL that uses the IP address instead of the hostname. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10061.php - http://online.securityfocus.com/archive/1/290849 - http://www.securityfocus.com/bid/5667
CVE ID: CVE-2002-1878 State: PUBLISHED Published: 2005-06-28T04:00:00 Last Updated: 2024-08-08T03:43:33.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in w-Agora 4.1.3 allows remote attackers to execute arbitrary PHP code via the inc_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.w-agora.net/current/view.php?site=support&bn=support_dl&key=1023878911&first=1023878911&last=957369563 - http://www.securityfocus.com/bid/4977 - http://www.iss.net/security_center/static/9317.php - http://archives.neohapsis.com/archives/bugtraq/2002-06/0055.html - http://www.ifrance.com/kitetoua/tuto/W-Agora.txt
CVE ID: CVE-2002-1879 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T02:10:31.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in LokwaBB 1.2.2 allows remote attackers to execute arbitrary SQL commands via the (1) member parameter to member.php or (2) loser parameter to misc.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.ifrance.com/kitetoua/tuto/LokwaBB.txt - http://www.iss.net/security_center/static/9318.php - http://archives.neohapsis.com/archives/bugtraq/2002-06/0055.html - http://www.securityfocus.com/bid/4981
CVE ID: CVE-2002-1880 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T23:06:19.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: LokwaBB 1.2.2 allows remote attackers to read arbitrary messages by modifying the pmid parameter to pm.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.ifrance.com/kitetoua/tuto/LokwaBB.txt - http://archives.neohapsis.com/archives/bugtraq/2002-06/0055.html
CVE ID: CVE-2002-1881 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T18:35:01.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Macromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote attackers to cause a denial of service (web browser crash) via malformed content in a Flash Shockwave (.SWF) file, as demonstrated by by ROT13 encoding the body of the file but not the headers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5445 - http://archives.neohapsis.com/archives/bugtraq/2002-08/0088.html - http://www.iss.net/security_center/static/9843.php
CVE ID: CVE-2002-1882 State: PUBLISHED Published: 2005-06-28T04:00:00 Last Updated: 2024-08-08T03:43:33.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in AolSecurityPrivate.class in Oracle E-Business Suite 11i 11.1 through 11.6 allows remote attackers to bypass user authentication checks via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5901 - http://www.iss.net/security_center/static/10285.php - http://www.oracle.com/technology/deploy/security/pdf/2002alert44rev1.pdf
CVE ID: CVE-2002-1883 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T02:05:43.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trolltech Qt Assistant 1.0 in Trolltech Qt 3.0.3, when loaded from the Designer, opens port 7358 for interprocess communication, which allows remote attackers to open arbitrary HTML pages and cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://lists.trolltech.com/qt-interest/2002-09/thread00549-0.html - http://www.securityfocus.com/bid/5833 - http://online.securityfocus.com/archive/1/293556 - http://www.iss.net/security_center/static/10227.php
CVE ID: CVE-2002-1884 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T03:32:32.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Py-Membres 3.1 allows remote attackers to log in as an administrator by setting the pymembs parameter to "admin". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5849 - http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html - http://www.iss.net/security_center/static/10308.php
CVE ID: CVE-2002-1885 State: PUBLISHED Published: 2005-06-28T04:00:00 Last Updated: 2024-08-08T03:43:32.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in showhits.php3 for PowerPhlogger (PPhlogger) 2.0.9 through 2.2.2 allows remote attackers to execute arbitrary PHP code via the rel_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10309.php - http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html - http://www.securityfocus.com/bid/5860
CVE ID: CVE-2002-1886 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T20:37:36.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: TightAuction 3.0 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain the database username and password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5850 - http://www.iss.net/security_center/static/10310.php - http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html
CVE ID: CVE-2002-1887 State: PUBLISHED Published: 2005-06-28T04:00:00 Last Updated: 2024-08-08T03:43:32.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in customize.php for phpMyNewsletter 0.6.10 allows remote attackers to execute arbitrary PHP code via the l parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5886 - http://archives.neohapsis.com/archives/bugtraq/2002-10/0060.html - http://secunia.com/advisories/7220 - http://www.iss.net/security_center/static/10288.php
CVE ID: CVE-2002-1888 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T03:08:34.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: CommonName Toolbar 3.5.2.0 sends unqualified domain name requests to the CommonName organization and possibly other web servers for name resolution, which allows those organizations to obtain internal server names. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5878 - http://archives.neohapsis.com/archives/bugtraq/2002-10/0043.html - http://www.iss.net/security_center/static/10293.php
CVE ID: CVE-2002-1889 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T20:01:51.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one buffer overflow in the context_action function in context.c of Logsurfer 1.41 through 1.5a allows remote attackers to cause a denial of service (crash) via a malformed log entry. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5898 - ftp://ftp.cert.dfn.de/pub/tools/audit/logsurfer/logsurfer.README.asc - http://www.iss.net/security_center/static/10287.php - http://online.securityfocus.com/archive/1/294131
CVE ID: CVE-2002-1890 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T22:45:42.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: rhmask 1.0-9 in Red Hat Linux 7.1 allows local users to overwrite arbitrary files via a symlink attack on the mask file. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9335.php - http://online.securityfocus.com/archive/1/276317 - http://www.securityfocus.com/bid/4984
CVE ID: CVE-2002-1891 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T03:03:35.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IRCIT 0.3.1 IRC client allows remote attackers to execute arbitrary code via a long invite request. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9340.php - http://online.securityfocus.com/archive/1/276537 - http://www.securityfocus.com/bid/4998
CVE ID: CVE-2002-1892 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T00:55:55.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR FVS318 running firmware 1.1 stores the username and password in a readable format when a backup of the configuration file is made, which allows local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10216.php - http://www.securityfocus.com/bid/5830 - http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00004.html - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0133.html
CVE ID: CVE-2002-1893 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T19:10:20.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ArGoSoft Mail Server Pro 1.8.1.9 allows remote attackers to inject arbitrary web script or HTML via the e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10301.php - http://archives.neohapsis.com/archives/bugtraq/2002-10/0085.html - http://www.securityfocus.com/bid/5906
CVE ID: CVE-2002-1894 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T18:03:34.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in viewtopic.php in phpBB 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6195 - http://www.phpbb.com/phpBB/viewtopic.php?t=56283 - http://www.iss.net/security_center/static/10653.php - http://online.securityfocus.com/archive/1/300362
CVE ID: CVE-2002-1895 State: PUBLISHED Published: 2005-06-28T04:00:00 Last Updated: 2024-08-08T03:43:33.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: The servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3 connector, allows remote attackers to cause a denial of service (crash) via a large number of HTTP GET requests for an MS-DOS device such as AUX, LPT1, CON, or PRN. Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html - http://www.iss.net/security_center/static/10348.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0020.html - https://lists.apache.org/thread.html/29dc6c2b62
p - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0020.html - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2002-1896 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T03:38:56.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Alsaplayer 0.99.71, when installed setuid root, allows local users to execute arbitrary code via a long (1) -f or (2) -o command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5767 - http://alsaplayer.org/changelog.php3 - http://www.iss.net/security_center/static/10157.php - http://lists.grok.org.uk/pipermail/full-disclosure/2002-September/001730.html - http://cvs.sourceforge.net/viewcvs.py/alsaplayer/alsaplayer/app/Main.cpp.diff?r1=1.66&r2=1
/2002-September/001730.html - http://cvs.sourceforge.net/viewcvs.py/alsaplayer/alsaplayer/app/Main.cpp.diff?r1=1.66&r2=1.67
CVE ID: CVE-2002-1897 State: PUBLISHED Published: 2005-06-28T04:00:00 Last Updated: 2024-08-08T03:43:33.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyWebServer LLC MyWebServer 1.0.2 allows remote attackers to cause a denial of service (crash) via a long HTTP request, possibly triggering a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/lists/bugtraq/2002/Oct/0177.html - http://www.securityfocus.com/bid/5954 - http://www.mywebserver.org/us/downloads/whats_new_in_this_version.shtml - http://www.iss.net/security_center/static/10349.php
CVE ID: CVE-2002-1898 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T18:03:46.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link, which is executed by Terminal.app window. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2002/Sep/msg00001.html - http://www.securityfocus.com/bid/5768 - http://www.iss.net/security_center/static/10156.php - http://apple.slashdot.org/apple/02/09/21/122236.shtml?tid=172
CVE ID: CVE-2002-1899 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T03:59:10.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IceWarp Web Mail 3.3.3 and 3.4.5 allows remote attackers to inject arbitrary web script or HTML via the "Full Name" (addressname) parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9866.php - http://www.icewarp.com/Products/IceWarp_Web_Mail/releasenotes.txt - http://archives.neohapsis.com/archives/bugtraq/2002-11/0172.html - http://archives.neohapsis.com/archives/bugtraq/2002-08/0135.html
CVE ID: CVE-2002-1900 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T02:11:22.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Pinboard 1.0 allows remote attackers to inject arbitrary web script or HTML via tasklists. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4988
CVE ID: CVE-2002-1901 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T23:32:06.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Bodo Bauer BBGallery 1.0 allows remote attackers to inject arbitrary web script or HTML via image tags. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4992
CVE ID: CVE-2002-1902 State: PUBLISHED Published: 2005-06-28T04:00:00 Last Updated: 2024-08-08T03:43:33.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: CGIForum 1.0 through 1.05 allows remote attackers to cause a denial of service (infinite recursion) by creating a message board post that is a child of an outdated parent. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10055.php - http://www.securityfocus.com/bid/4960 - http://freshmeat.net/releases/86842/
CVE ID: CVE-2002-1903 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T22:21:08.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pine 4.2.1 through 4.4.4 puts Unix usernames and/or uid into Sender: and X-Sender: headers, which could allow remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9297.php - http://online.securityfocus.com/archive/1/276029 - http://www.securityfocus.com/bid/4963