Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-0428 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:49:28.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1 allows clients to bypass the "authentication timeout" by modifying the to_expire or expire values in the client's users.C configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8423.php - http://online.securityfocus.com/archive/1/260662 - http://www.securityfocus.com/bid/4253
CVE ID: CVE-2002-0429 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:28.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iBCS routines in arch/i386/kernel/traps.c for Linux kernels 2.4.18 and earlier on x86 systems allow local users to kill arbitrary processes via a a binary compatibility interface (lcall). Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-336 - http://www.debian.org/security/2003/dsa-311 - http://www.debian.org/security/2003/dsa-332 - http://www.debian.org/security/2003/dsa-312 - http://www.debian.org/security/2004/dsa-442 - http://www.redhat.com/support/errata/RHSA-200
.org/security/2003/dsa-312 - http://www.debian.org/security/2004/dsa-442 - http://www.redhat.com/support/errata/RHSA-2002-158.html - http://marc.info/?l=bugtraq&m=101561298818888&w=2 - http://www.iss.net/security_center/static/8420.php - http://www.securityfocus.com/bid/4259 - http://www.openwall.com/linux/
CVE ID: CVE-2002-0430 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:49:28.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4252 - http://archives.neohapsis.com/archives/bugtraq/2002-03/0081.html
CVE ID: CVE-2002-0431 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:28.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: XTux allows remote attackers to cause a denial of service (CPU consumption) via random inputs in the initial connection. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8422.php - http://online.securityfocus.com/archive/1/260912 - http://www.securityfocus.com/bid/4260 - https://sourceforge.net/tracker/index.php?func=detail&aid=529046&group_id=206&atid=100206
CVE ID: CVE-2002-0432 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:49:28.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in (1) lprintf and (2) cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attacks such as a long HELO command to the SMTP server. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8426.php - http://uncensored.citadel.org/pub/citadel/citadel-ux-5.91.tar.gz - http://online.securityfocus.com/archive/1/260934 - http://www.securityfocus.com/bid/4263
CVE ID: CVE-2002-0433 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:49:28.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pi3Web 2.0.0 allows remote attackers to view restricted files via an HTTP request containing a "*" (wildcard or asterisk) character. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/260734 - http://www.iss.net/security_center/static/8429.php - http://www.securityfocus.com/bid/4262
CVE ID: CVE-2002-0434 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:49:28.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Marcus S. Xenakis directory.php script allows remote attackers to execute arbitrary commands via shell metacharacters in the dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4278 - http://www.securityfocus.com/archive/1/261512 - http://www.iss.net/security_center/static/8440.php
CVE ID: CVE-2002-0435 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:28.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the recursive (1) directory deletion and (2) directory move in GNU File Utilities (fileutils) 4.1 and earlier allows local users to delete directories as the user running fileutils by moving a low-level directory to a higher level as it is being deleted, which causes fileutils to chdir to a ".." directory that is higher than expected, possibly up to the root file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-016.html - http://www.linux-
otes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-016.html - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-031.php - http://mail.gnu.org/archive/html/bug-fileutils/2002-03/msg00028.html - http://www.redhat.com/support/errata/RHSA-2003-015.html - http://www.securityfocus.com/bid/4266 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-018.1.txt - http://www.securityfocus.com/archive/1/260936 - http://www.iss.net/security_center/static/8432.php
CVE ID: CVE-2002-0436 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:49:28.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: sscd_suncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/261544 - http://www.securityfocus.com/bid/4269 - http://www.iss.net/security_center/static/8435.php
CVE ID: CVE-2002-0437 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:28.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Smsd in SMS Server Tools (SMStools) before 1.4.8 allows remote attackers to execute arbitrary commands via shell metacharacters (backquotes) in message text, as described with the term "string format vulnerability" by some sources. Additional Analyst Notes: - CVE Program Container: References: - http://www.isis.de/members/~s.frings/smstools/history.html - http://www.securityfocus.com/bid/4268 - http://www.iss.net/security_center/static/8433.php - http://archives.neohapsis.com/archives/bugtraq/2002-03/0103.html
CVE ID: CVE-2002-0438 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:49:28.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZyXEL ZyWALL 10 before 3.50 allows remote attackers to cause a denial of service via an ARP packet with the firewall's IP address and an incorrect MAC address, which causes the firewall to disable the LAN interface. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.zyxel.com/public/zywall10/firmware/zywall10_V3.50%28WA.2%29C0_Standard.zip - http://www.iss.net/security_center/static/8436.php - http://www.securityfocus.com/bid/4272 - http://www.securityfocus.com/archive/1/261411 - http://archives.neohaps
36.php - http://www.securityfocus.com/bid/4272 - http://www.securityfocus.com/archive/1/261411 - http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0067.html
CVE ID: CVE-2002-0439 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:49:28.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal credit card numbers or delete items by injecting the script into new customer information fields such as the message field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4270 - http://www.securityfocus.com/archive/1/261218 - http://www.iss.net/security_center/static/8431.php
CVE ID: CVE-2002-0440 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:49:28.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trend Micro InterScan VirusWall HTTP proxy 3.6 with the "Skip scanning if Content-length equals 0" option enabled allows malicious web servers to bypass content scanning via a Content-length header set to 0, which is often ignored by HTTP clients. Additional Analyst Notes: - CVE Program Container: References: - http://www.inside-security.de/vwall_cl0.html - http://seclists.org/lists/bugtraq/2002/Mar/0162.html - http://www.iss.net/security_center/static/8425.php - http://www.securityfocus.com/bid/4265
CVE ID: CVE-2002-0441 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:28.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in imlist.php for Php Imglist allows remote attackers to read arbitrary code via a .. (dot dot) in the cwd parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.liquidpulse.net/get.lp?id=17 - http://www.securityfocus.com/archive/1/261221 - http://www.iss.net/security_center/static/8441.php - http://www.securityfocus.com/bid/4276
CVE ID: CVE-2002-0442 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:28.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in dlvr_audit for Caldera OpenServer 5.0.5 and 5.0.6 allows local users to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4273 - ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.8/CSSA-2002-SCO.8.txt - http://www.iss.net/security_center/static/8442.php
CVE ID: CVE-2002-0443 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:49:28.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 2000 allows local users to bypass the policy that prohibits reusing old passwords by changing the current password before it expires, which does not enable the check for previous passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8402.php - http://online.securityfocus.com/archive/1/260704 - http://www.securityfocus.com/bid/4256
CVE ID: CVE-2002-0444 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:49:28.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number of licenses, which can allow remote authenticated users to bypass group policies. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/266729 - http://www.iss.net/security_center/static/8813.php - http://www.securityfocus.com/bid/44
ityfocus.com/archive/1/266729 - http://www.iss.net/security_center/static/8813.php - http://www.securityfocus.com/bid/4464
CVE ID: CVE-2002-0445 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:49:28.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: article.php in PHP FirstPost 0.1 allows allows remote attackers to obtain the full pathname of the server via an invalid post number in the post parameter, which leaks the pathname in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8434.php - http://www.securityfocus.com/archive/1/261337 - http://www.securityfocus.com/bid/4274 - http://www.osvdb.org/7170
CVE ID: CVE-2002-0446 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:49:28.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: categorie.php3 in Black Tie Project (BTP) 0.4b through 0.5b allows remote attackers to determine the absolute path of the web server via an invalid category ID (cid) parameter, which leaks the pathname in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8439.php - http://www.securityfocus.com/archive/1/261681 - http://www.securityfocus.com/bid/4275
CVE ID: CVE-2002-0447 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:49:28.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Xerver Free Web Server 2.10 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in an HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8421.php - http://archives.neohapsis.com/archives/bugtraq/2002-03/0155.html - http://www.securityfocus.com/bid/4255 - http://archives.neohapsis.com/archives/bugtraq/2002-03/0091.html
CVE ID: CVE-2002-0448 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:49:28.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request that contains many "C:/" sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8419.php - http://archives.neohapsis.com/archives/bugtraq/2002-03/0155.html - http://www.securityfocus.com/bid/4254 - http://archives.neohapsis.com/archives/bugtraq/2002-03/0091.html
CVE ID: CVE-2002-0449 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:49:28.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in webpsvc.exe for Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long argument to webplus.exe program, which triggers the overflow in webpsvc.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/159907 - http://www.securityfocus.com/bid/4233 - http://www.talentsoft.com/Issues/IssueDetail.wml?ID=WP943 - http://www.iss.net/security_center/static/8361.php - http://marc.info/?l=bugtraq&m=101535141925150&w=2
CVE ID: CVE-2002-0450 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:49:28.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long Web Markup Language (wml) file name to (1) webplus.dll or (2) webplus.exe. Additional Analyst Notes: - CVE Program Container: References: - http://cert.uni-stuttgart.de/archive/bugtraq/2002/03/msg00208.html - http://www.iss.net/security_center/static/8446.php - http://www.securityfocus.com/bid/4282 - http://www.talentsoft.com/Issues/IssueDetail.wml?ID=WP943
CVE ID: CVE-2002-0451 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:28.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: filemanager_forms.php in PHProjekt 3.1 and 3.1a allows remote attackers to execute arbitrary PHP code by specifying the URL to the code in the lib_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8448.php - http://www.securityfocus.com/bid/4284 - http://www.phprojekt.com/modules.php?op=modload&name=News&file=article&sid=19&mode=&order= - http://www.securityfocus.com/archive/1/261676
CVE ID: CVE-2002-0452 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:49:28.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foundry Networks ServerIron switches do not decode URIs when applying "url-map" rules, which could make it easier for attackers to cause the switch to forward traffic to a different server than intended and exploit vulnerabilities that would otherwise be inaccessible. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/261834 - http://www.securityfocus.com/bid/4286 - http://www.iss.net/security_center/static/8459.php
CVE ID: CVE-2002-0453 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:49:28.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout period, which makes it easier for remote attackers to conduct brute force password guessing by waiting until the lockout period ends, then guessing passwords without being locked out again. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4288 - http://www.securityfocus.com/archive/1/262066 - http://www.iss.net/security_center/static/8461.php
CVE ID: CVE-2002-0454 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:28.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Qpopper (aka in.qpopper or popper) 4.0.3 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a very large string, which causes an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/262213 - http://www.securityfocus.com/bid/4295 - http://www.iss.net/security_center/static/8458.php - ftp://ftp.qualcomm.com/eudora/servers/unix/popper/qpopper4.0.4.tar.gz
CVE ID: CVE-2002-0455 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:49:28.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: IncrediMail stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known pathnames. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/262262 - http://www.iss.net/security_center/static/8460.php - http://www.securityfocus.com/bid/4297
CVE ID: CVE-2002-0456 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:49:28.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eudora 5.1 and earlier versions stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known pathnames. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/262704 - http://www.iss.net/security_center/static/8487.php - http://marc.info/?l=bugtraq&m=101622857703677&w=2 - http://www.securityfocus.com/bid/4306
CVE ID: CVE-2002-0457 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:49:28.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in signgbook.php for BG GuestBook 1.0 allows remote attackers to execute arbitrary Javascript via encoded tags such as &lt;, &gt;, and &amp; in fields such as (1) name, (2) email, (3) AIM screen name, (4) website, (5) location, or (6) message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/262693 - http://www.iss.net/security_center/static/8474.php - http://www.securityfocus.com/bid/4308
CVE ID: CVE-2002-0458 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:49:28.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in News-TNK 1.2.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-03/0206.html - http://www.securityfocus.com/bid/14145 - http://translate.google.com/translate?u=http%3A%2F%2Fwww.linux-sottises.net%2Findex.php%3Fnews_init%3D13%23newstag&langpair=fr%7Cen&hl=en&ie=UTF8&oe=UTF8&prev=%2Flanguage_tools - http://www.linux-sottises.net/softwa
init%3D13%23newstag&langpair=fr%7Cen&hl=en&ie=UTF8&oe=UTF8&prev=%2Flanguage_tools - http://www.linux-sottises.net/software/news-tnk/CHANGES - http://www.iss.net/security_center/static/8477.php
CVE ID: CVE-2002-0459 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:49:28.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in Board-TNK 1.3.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8475.php - http://www.securityfocus.com/bid/4305 - http://translate.google.com/translate?u=http%3A%2F%2Fwww.linux-sottises.net%2Findex.php%3Fnews_init%3D13%23newstag&langpair=fr%7Cen&hl=en&ie=UTF8&oe=UTF8&prev=%2Flanguage_tools - http://www.securityfocus.com/archive/1/262694
CVE ID: CVE-2002-0460 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:49:28.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bitvise WinSSHD before 2002-03-16 allows remote attackers to cause a denial of service (resource exhaustion) via a large number of incomplete connections that are not properly terminated, which are not properly freed by SSHd. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0068.html - http://www.iss.net/security_center/static/8470.php - http://www.securityfocus.com/bid/4300 - http://online.securityfocus.com/archive/1/262681
CVE ID: CVE-2002-0461 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:49:28.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.01 through 6 allows remote attackers to cause a denial of service (application crash) via Javascript in a web page that calls location.replace on itself, causing a loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4322 - http://online.securityfocus.com/archive/1/262994 - http://www.iss.net/security_center/static/8488.php
CVE ID: CVE-2002-0462 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:28.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: bigsam_guestbook.php for Big Sam (Built-In Guestbook Stand-Alone Module) 1.1.08 and earlier allows remote attackers to cause a denial of service (CPU consumption) or obtain the absolute path of the web server via a displayBegin parameter with a very large number, which leaks the web path in an error message when PHP safe_mode is enabled, or consumes resources when safe_mode is not enabled. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4312 - http://www.osvdb.org/5288 - http:/
Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4312 - http://www.osvdb.org/5288 - http://www.iss.net/security_center/static/8478.php - http://www.securityfocus.com/archive/1/262735 - http://www.iss.net/security_center/static/8479.php - http://www.osvdb.org/5287 - http://www.gezzed.net/bigsam/bigsam.1_1_12.php.txt
CVE ID: CVE-2002-0463 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:49:28.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: home.php in ARSC (Really Simple Chat) 1.0.1 and earlier allows remote attackers to determine the full pathname of the web server via an invalid language in the arsc_language parameter, which leaks the pathname in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8472.php - http://www.securityfocus.com/archive/1/262802 - http://www.securityfocus.com/bid/4307 - http://www.securityfocus.com/archive/1/262652