Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-1357 State: PUBLISHED Published: 2002-12-17T05:00:00 Last Updated: 2024-08-08T03:19:28.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1005812 - http://www.cert.org/advisories/CA-2002-36.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5849 - http://www.k
002-36.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5849 - http://www.kb.cert.org/vuls/id/389665 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10868 - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html - http://www.securityfocus.com/bid/6405 - http://securitytracker.com/id?1005813
CVE ID: CVE-2002-1358 State: PUBLISHED Published: 2002-12-17T05:00:00 Last Updated: 2024-08-08T03:19:28.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1005812 - http://www.cert.org/advisories/CA-2002-36.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5721 - http://archives.neohapsis.com/arc
/oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5721 - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html - http://securitytracker.com/id?1005813
CVE ID: CVE-2002-1359 State: PUBLISHED Published: 2002-12-17T05:00:00 Last Updated: 2024-08-08T03:19:28.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1005812 - http://www.cert.org/advisories/CA-2002-36.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10870 - http://archives.neohapsis.com/archives/vulnwa
002-36.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10870 - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html - http://www.securityfocus.com/bid/6407 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5848 - http://securitytracker.com/id?1005813
CVE ID: CVE-2002-1360 State: PUBLISHED Published: 2002-12-17T05:00:00 Last Updated: 2024-08-08T03:19:28.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a length field, which could allow remote attackers to cause a denial of service or possibly execute arbitrary code due to interactions with the use of null-terminated strings as implemented using languages such as C, as demonstrated by the SSHredder SSH protocol test suite. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1005812 - https://oval.cisecu
tional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1005812 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5797 - http://www.cert.org/advisories/CA-2002-36.html - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html - http://securitytracker.com/id?1005813
CVE ID: CVE-2002-1361 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to execute arbitrary code via a POST request with shell metacharacters in the email parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/n-025.shtml - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/49377 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10776 - http://www.cert.org/advisories/CA-2002-35.html - http://www.kb.cert.org/vuls/id/
ce.ibmcloud.com/vulnerabilities/10776 - http://www.cert.org/advisories/CA-2002-35.html - http://www.kb.cert.org/vuls/id/810921 - http://www.securityfocus.com/bid/6326 - http://marc.info/?l=bugtraq&m=103912513522807&w=2
CVE ID: CVE-2002-1362 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: mICQ 0.4.9 and earlier allows remote attackers to cause a denial of service (crash) via malformed ICQ message types without a 0xFE separator character. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-118.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10872 - http://www.securityfocus.com/bid/6392 - http://www.debian.org/security/2002/dsa-211
CVE ID: CVE-2002-1363 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a buffer overflow attack on the row buffers. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2004-402.html - https://bugzilla.fedora.us/show_bug.cgi?id=1943 - http://www.securityfocus.com/bid/6431 - http://www.redhat.com/support/errata/RHSA-2003-007.html - https:
g.cgi?id=1943 - http://www.securityfocus.com/bid/6431 - http://www.redhat.com/support/errata/RHSA-2003-007.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3657 - http://www.debian.org/security/2002/dsa-213 - http://www.redhat.com/support/errata/RHSA-2003-157.html - http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10925 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:063 - http://www.redhat.com/support/errata/RHSA-2003-119.html - http://www.redhat.com/support/errata/RHSA-2004-249.html - http://www.redhat.com/support/errata/RHSA-2003-006.html - http://www.n
ww.redhat.com/support/errata/RHSA-2004-249.html - http://www.redhat.com/support/errata/RHSA-2003-006.html - http://www.novell.com/linux/security/advisories/2003_004_libpng.html
CVE ID: CVE-2002-1364 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the get_origin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOIS responses. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-254 - http://www.securityfocus.com/bid/6166 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10778 - http://marc.info/?l=bugtraq&m=103858895600963&w=2 - http://www.novell.com/linux/security/advisories/2002_043_traceroute_nanog_nkitb.html
CVE ID: CVE-2002-1365 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the "@" character when determining buffer lengths for local addresses, which allows remote attackers to execute arbitrary code via a header with a large number of local addresses. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6390 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:011 - http://marc.info/?l=bugtraq&m=103979751818638&w=2 - http://marc.info/?l=bugtraq&m=104004858802000&
name=MDKSA-2003:011 - http://marc.info/?l=bugtraq&m=103979751818638&w=2 - http://marc.info/?l=bugtraq&m=104004858802000&w=2 - http://www.debian.org/security/2002/dsa-216 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10839 - http://www.redhat.com/support/errata/RHSA-2002-293.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000554 - http://www.redhat.com/support/errata/RHSA-2002-294.html - http://www.redhat.com/support/errata/RHSA-2003-155.html - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-001.0.txt - http://security.e-matters.de/advisories/052002.html
CVE ID: CVE-2002-1366 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html - http://www.debian.org/security/2003/dsa-232 - http://www.novell.com/linux/security/advisories/2003_002_cups.html - http://www.idefense.com/advisory/12.19.02.txt - http://www.redhat.com/support/errata/RHSA-200
ories/2003_002_cups.html - http://www.idefense.com/advisory/12.19.02.txt - http://www.redhat.com/support/errata/RHSA-2002-295.html - http://marc.info/?l=bugtraq&m=104032149026670&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10907 - http://www.securityfocus.com/bid/6435 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001
CVE ID: CVE-2002-1367 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need authorization" page, as demonstrated by new-coke. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=
archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702 - http://www.debian.org/security/2003/dsa-232 - http://www.novell.com/linux/security/advisories/2003_002_cups.html - http://www.idefense.com/advisory/12.19.02.txt - http://www.redhat.com/support/errata/RHSA-2002-295.html - http://marc.info/?l=bugtraq&m=104032149026670&w=2 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001 - http://www.securityfocus.com/bid/6436 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10908
CVE ID: CVE-2002-1368 State: PUBLISHED Published: 2002-12-20T05:00:00 Last Updated: 2024-08-08T03:19:28.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing negative arguments to be fed into memcpy() calls via HTTP requests with (1) a negative Content-Length value or (2) a negative length in a chunked transfer encoding. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10909 - http://secunia.com/advisories/7858 - http://secunia.com/advisories/7843 - ht
xforce.ibmcloud.com/vulnerabilities/10909 - http://secunia.com/advisories/7858 - http://secunia.com/advisories/7843 - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html - http://secunia.com/advisories/9325/ - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702 - ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-004.0.txt - http://secunia.com/advisories/7756/ - http://secunia.com/advisories/7907 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:001 - http://secunia.com/advisories/7913/ - http://secunia.com/advisories/7794 - http://www.debian.org/security/2003/dsa-232 - http://www.novell.com/linux/security/advisories/2003_002_cups.html - http://www.ide
w.debian.org/security/2003/dsa-232 - http://www.novell.com/linux/security/advisories/2003_002_cups.html - http://www.idefense.com/advisory/12.19.02.txt - http://www.redhat.com/support/errata/RHSA-2002-295.html - http://www.securityfocus.com/bid/6437 - http://secunia.com/advisories/7803 - http://secunia.com/advisories/8080/ - http://marc.info/?l=bugtraq&m=104032149026670&w=2
CVE ID: CVE-2002-1369 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attackers to execute arbitrary code via a buffer overflow attack. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702 - http://www.debian.org/security/2003/dsa-232 - http://www.novell.com/linux/security/advisories/
es/?id=a&anuncio=000702 - http://www.debian.org/security/2003/dsa-232 - http://www.novell.com/linux/security/advisories/2003_002_cups.html - http://www.idefense.com/advisory/12.19.02.txt - http://www.redhat.com/support/errata/RHSA-2002-295.html - http://marc.info/?l=bugtraq&m=104032149026670&w=2 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10910 - http://www.securityfocus.com/bid/6438
CVE ID: CVE-2002-1370 State: REJECTED Published: 2005-04-15T04:00:00Z Last Updated: 2024-09-16T20:37:14.873Z Description: No description available.
CVE ID: CVE-2002-1371 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702 - http://www.debian.org/security/2003/dsa-232 - http://www.novell.com/linux/security/adviso
izacoes/?id=a&anuncio=000702 - http://www.debian.org/security/2003/dsa-232 - http://www.novell.com/linux/security/advisories/2003_002_cups.html - http://www.idefense.com/advisory/12.19.02.txt - http://www.redhat.com/support/errata/RHSA-2002-295.html - http://marc.info/?l=bugtraq&m=104032149026670&w=2 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10911 - http://www.securityfocus.com/bid/6439
CVE ID: CVE-2002-1372 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2025-01-16T17:42:09.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service (resource exhaustion) by causing file descriptors to be assigned and not released, as demonstrated by fanta. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000
hives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702 - http://www.debian.org/security/2003/dsa-232 - http://www.novell.com/linux/security/advisories/2003_002_cups.html - http://www.idefense.com/advisory/12.19.02.txt - http://www.redhat.com/support/errata/RHSA-2002-295.html - http://marc.info/?l=bugtraq&m=104032149026670&w=2 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001 - http://www.securityfocus.com/bid/6440 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10912
CVE ID: CVE-2002-1373 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Signed integer vulnerability in the COM_TABLE_DUMP package for MySQL 3.23.x before 3.23.54 allows remote attackers to cause a denial of service (crash or hang) in mysqld by causing large negative integers to be provided to a memcpy call. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=103971644013961&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555 - http://security.e-matters.de/advisories/042002.html - http://www.debian.org/security/2002/dsa-212 - http://www
=000555 - http://security.e-matters.de/advisories/042002.html - http://www.debian.org/security/2002/dsa-212 - http://www.redhat.com/support/errata/RHSA-2002-288.html - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:087 - http://www.redhat.com/support/errata/RHSA-2003-166.html - http://www.securityfocus.com/bid/6368 - http://marc.info/?l=bugtraq&m=104004857201968&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10846 - http://www.novell.com/linux/security/advisories/2003_003_mysql.html - http://www.redhat.com/support/errata/RHSA-2002-289.html - http://www.trustix.net/errata/misc/2002/TSL-2002-0086-mysql.asc.txt - http://www.securityfocus.com/advisories/5269
CVE ID: CVE-2002-1374 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the real password. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=103971644013961&w=2 - http://marc.info/?l=bugtraq&m=104005886114500&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555 - http://www
rc.info/?l=bugtraq&m=104005886114500&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555 - http://www.linuxsecurity.com/advisories/engarde_advisory-2660.html - http://security.e-matters.de/advisories/042002.html - http://www.debian.org/security/2002/dsa-212 - http://www.redhat.com/support/errata/RHSA-2002-288.html - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:087 - http://www.redhat.com/support/errata/RHSA-2003-166.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10847 - http://marc.info/?l=bugtraq&m=104004857201968&w=2 - http://www.novell.com/linux/security/advisories/2003_003_mysql.html - http://www.redhat.com/support/errata/RHSA-2002-289.h
tp://www.novell.com/linux/security/advisories/2003_003_mysql.html - http://www.redhat.com/support/errata/RHSA-2002-289.html - http://www.trustix.net/errata/misc/2002/TSL-2002-0086-mysql.asc.txt - http://www.securityfocus.com/bid/6373 - http://www.securityfocus.com/advisories/5269
CVE ID: CVE-2002-1375 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=103971644013961&w=2 - http://marc.info/?l=bugtraq&m=104005886114500&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555 - http://www.linuxsecurity.com/advisories/engarde_advisory-2660.html - http://security.e-matters.de/advisories/042002.html - http://www.debian.org/secur
dvisories/engarde_advisory-2660.html - http://security.e-matters.de/advisories/042002.html - http://www.debian.org/security/2002/dsa-212 - http://www.redhat.com/support/errata/RHSA-2002-288.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10848 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:087 - http://www.redhat.com/support/errata/RHSA-2003-166.html - http://marc.info/?l=bugtraq&m=104004857201968&w=2 - http://www.novell.com/linux/security/advisories/2003_003_mysql.html - http://www.securityfocus.com/bid/6375 - http://www.redhat.com/support/errata/RHSA-2002-289.html - http://www.trustix.net/errata/misc/2002/TSL-2002-0086-mysql.asc.txt - http://www.securityfocus
rata/RHSA-2002-289.html - http://www.trustix.net/errata/misc/2002/TSL-2002-0086-mysql.asc.txt - http://www.securityfocus.com/advisories/5269
CVE ID: CVE-2002-1376 State: PUBLISHED Published: 2002-12-17T05:00:00 Last Updated: 2024-08-08T03:19:28.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_one_row routines, which allows remote attackers to cause a denial of service and possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=103971644013961&w=2 - http://marc.info/?l=bugtraq&m=104005886114500&w=2 - http://marc.info/?l=bugtraq&m=104033188706000&w=2 - http://www.securityfocus.com/b
fo/?l=bugtraq&m=104005886114500&w=2 - http://marc.info/?l=bugtraq&m=104033188706000&w=2 - http://www.securityfocus.com/bid/6370 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555 - http://www.mandriva.com/security/advisories?name=MDKSA-2002:087 - http://marc.info/?l=bugtraq&m=104004857201968&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10850 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10849 - http://www.linuxsecurity.com/advisories/engarde_advisory-2660.html - http://security.e-matters.de/advisories/042002.html - http://www.securityfocus.com/bid/6374 - http://www.debian.org/security/2002/dsa-212 - http://www.redhat.com/support/errata/RHSA-2002-288.htm
ocus.com/bid/6374 - http://www.debian.org/security/2002/dsa-212 - http://www.redhat.com/support/errata/RHSA-2002-288.html
CVE ID: CVE-2002-1377 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: vim 6.0 and 6.1, and possibly other versions, allows attackers to execute arbitrary commands using the libcall feature in modelines, which are not sandboxed but may be executed when vim is used to edit a malicious file, as demonstrated using mutt. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6384 - http://www.redhat.com/support/errata/RHSA-2002-302.html - http://www.guninski.com/vim1.html - http://lists.grok.org.uk/pipermail/full-disclosure/2002-December/002948.html - http:/
ttp://www.guninski.com/vim1.html - http://lists.grok.org.uk/pipermail/full-disclosure/2002-December/002948.html - http://www.redhat.com/support/errata/RHSA-2002-297.html - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/55700 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000812 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:012 - http://marc.info/?l=bugtraq&m=108077992208690&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10835