Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-0687 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "through the web code" capability for Zope 2.0 through 2.5.1 b1 allows untrusted users to shut down the Zope server via certain headers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5813 - http://www.redhat.com/support/errata/RHSA-2002-060.html - http://www.osvdb.org/5166 - http://www.iss.net/security_center/static/9621.php - http://www.zope.org/Products/Zope/Hotfix_2002-04-15/security_alert
CVE ID: CVE-2002-0688 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZCatalog plug-in index support capability for Zope 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2004/dsa-490 - http://www.iss.net/security_center/static/9610.php - http://www.redhat.com/support/errata/RHSA-2002-060.html - http://www.securityfocus.com/bid/5812 - http://www.zope.org/Products/Zope/Hotfix_2002-06-14/security_alert
CVE ID: CVE-2002-0690 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T02:56:38.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in McAfee Security ePolicy Orchestrator (ePO) 2.5.1 allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing format strings. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/4375 - http://www.securityfocus.com/archive/1/315230/30/25490/threaded - http://secunia.com/advisories/8311 - http://www.atstake.com/research/advisories/2003/a031703-1.txt - http://www.securityfocus.com/bid/7111 - https://exchange.xforce.ibmcloud.com/vul
esearch/advisories/2003/a031703-1.txt - http://www.securityfocus.com/bid/7111 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11559
CVE ID: CVE-2002-0691 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01 and 5.5 allows remote attackers to execute scripts in the Local Computer zone via a URL that references a local HTML resource file, a variant of "Cross-Site Scripting in Local HTML Resource" as identified by CAN-2002-0189. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-047 - http://www.iss.net/security_center/static/9938.php - http://www.securityfocus.com/bid/5561
CVE ID: CVE-2002-0692 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:56:38.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in SmartHTML Interpreter (shtml.dll) in Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to cause a denial of service (CPU consumption) or run arbitrary code, respectively, via a certain type of web file request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5804 - http://www.kb.cert.org/vuls/id/723537 - http://www.iss.net/security_center/static/10194.php - http://www.iss.net/security_center/static/10195.php - https://docs.mic
://www.iss.net/security_center/static/10194.php - http://www.iss.net/security_center/static/10195.php - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-053
CVE ID: CVE-2002-0693 State: PUBLISHED Published: 2002-10-05T04:00:00 Last Updated: 2024-08-08T02:56:38.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink function, or (2) script containing a long argument to the showHelp function. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A374 - http://www.securityfocus
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A374 - http://www.securityfocus.com/bid/5874 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-055 - http://marc.info/?l=bugtraq&m=103365849505409&w=2 - http://marc.info/?l=bugtraq&m=103435279404182&w=2 - http://www.iss.net/security_center/static/10253.php - http://marc.info/?l=bugtraq&m=103419115517344&w=2
CVE ID: CVE-2002-0694 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:56:38.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP uses the Local Computer Security Zone when opening .chm files from the Temporary Internet Files folder, which allows remote attackers to execute arbitrary code via HTML mail that references or inserts a malicious .chm file containing shortcuts that can be executed, aka "Code Execution via Compiled HTML Help File." Additional Analyst Notes: - CVE Program Container: Reference
executed, aka "Code Execution via Compiled HTML Help File." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-055 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A403 - http://www.iss.net/security_center/static/10254.php
CVE ID: CVE-2002-0695 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code via a query that calls the OpenRowSet command. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-040 - http://www.securityfocus.com/bid/5372 - http://www.iss.net/security_center/static/9734.php - http://www.nextgenss.com/advisories/mssql-
rityfocus.com/bid/5372 - http://www.iss.net/security_center/static/9734.php - http://www.nextgenss.com/advisories/mssql-ors.txt
CVE ID: CVE-2002-0696 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:56:38.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Visual FoxPro 6.0 does not register its associated files with Internet Explorer, which allows remote attackers to execute Visual FoxPro applications without warning via HTML that references specially-crafted filenames. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-049 - http://www.ciac.org/ciac/bulletins/m-120.shtml - http://www.iss.net/security_center/static/10035.php - http://www.securityfocus.com/bid/5633
CVE ID: CVE-2002-0697 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP client to directly connect to MMS and bypass the checks for MMS credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9657.php - http://www.securityfocus.com/bid/5308 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-036
CVE ID: CVE-2002-0698 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Internet Mail Connector (IMC) for Microsoft Exchange Server 5.5 allows remote attackers to execute arbitrary code via an EHLO request from a system with a long name as obtained through a reverse DNS lookup, which triggers the overflow in IMC's hello response. Additional Analyst Notes: - CVE Program Container: References: - http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20759 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-037 - http://support.microsoft.com/d
759 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-037 - http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ326322 - http://www.iss.net/security_center/static/9658.php - http://www.securityfocus.com/bid/5306
CVE ID: CVE-2002-0699 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T02:56:38.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0, Windows 2000, and Windows XP allow remote attackers to delete digital certificates on a user's system via HTML. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-048 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A190
CVE ID: CVE-2002-0700 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a system function that performs user authentication for Microsoft Content Management Server (MCMS) 2001 allows attackers to execute code in the Local System context by authenticating to a web page that calls the function, aka "Unchecked Buffer in MDAC Function Could Enable SQL Server Compromise." Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9783.php - http://www.securityfocus.com/bid/5420 - https://docs.microsoft.com/en-us/security-updates/securit
nter/static/9783.php - http://www.securityfocus.com/bid/5420 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-041 - http://www.osvdb.org/4862
CVE ID: CVE-2002-0701 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: ktrace in BSD-based operating systems allows the owner of a process with special privileges to trace the process after its privileges have been lowered, which may allow the owner to obtain sensitive information that the process obtained while it was running with the extra privileges. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=102650797504351&w=2 - http://www.securityfocus.com/bid/5133 - http://www.iss.net/security_center/static/9474.php - http://www.openbsd.org/errata.html#kt
.securityfocus.com/bid/5133 - http://www.iss.net/security_center/static/9474.php - http://www.openbsd.org/errata.html#ktrace
CVE ID: CVE-2002-0702 State: PUBLISHED Published: 2002-07-23T04:00:00 Last Updated: 2024-08-08T02:56:38.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4701 - http://www.kb.cert.org/vuls/id/854315 - http://www.novell.com/linux/security/advisories/2002_19_dhcp.html - http://www.cert.org/advisories/CA-2002-12.html - htt
http://www.novell.com/linux/security/advisories/2002_19_dhcp.html - http://www.cert.org/advisories/CA-2002-12.html - http://marc.info/?l=bugtraq&m=102089498828206&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000483 - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-037.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0063.html - http://www.iss.net/security_center/static/9039.php - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-028.0.txt
CVE ID: CVE-2002-0703 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: An interaction between the Perl MD5 module (perl-Digest-MD5) and Perl could produce incorrect MD5 checksums for UTF-8 data, which could prevent a system from properly verifying the integrity of the data. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2002-081.html - http://www.iss.net/security_center/static/9051.php - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-035.php - http://www.securityfocus.com/bid/4716
CVE ID: CVE-2002-0704 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Network Address Translation (NAT) capability for Netfilter ("iptables") 1.2.6a and earlier leaks translated IP addresses in ICMP error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4699 - http://marc.info/?l=bugtraq&m=102088521517722&w=2 - http://www.redhat.com/support/errata/RHSA-2002-086.html - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-030.php - http://www.iss.net/security_center/static/9043.php - http://online.securityfocus.com/advisories/4116
CVE ID: CVE-2002-0705 State: PUBLISHED Published: 2002-10-03T04:00:00 Last Updated: 2024-08-08T02:56:38.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Reports Server for SurfControl SuperScout WebFilter stores the "scwebusers" username and password file in a web-accessible directory, which allows remote attackers to obtain valid usernames and crack the passwords. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=103359690824103&w=2 - http://www.osvdb.org/3489 - http://www.westpoint.ltd.uk/advisories/wp-02-0005.txt - http://www.iss.net/security_center/static/10248.php - http://www.securityfocus.com/bid/5856
CVE ID: CVE-2002-0706 State: PUBLISHED Published: 2002-10-03T04:00:00 Last Updated: 2024-08-08T02:56:38.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows remote attackers to decrypt the administrative password using a hard-coded key in a Javascript function. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=103359690824103&w=2 - http://www.iss.net/security_center/static/10247.php - http://www.westpoint.ltd.uk/advisories/wp-02-0005.txt - http://www.osvdb.org/3491
CVE ID: CVE-2002-0707 State: PUBLISHED Published: 2002-10-03T04:00:00 Last Updated: 2024-08-08T02:56:38.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to cause a denial of service (CPU consumption) via large GET requests, possibly due to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=103359690824103&w=2 - http://www.securityfocus.com/bid/5854 - http://www.iss.net/security_center/static/10242.php
CVE ID: CVE-2002-0708 State: PUBLISHED Published: 2002-10-03T04:00:00 Last Updated: 2024-08-08T02:56:38.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to read arbitrary files via an HTTP request containing ... (triple dot) sequences. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=103359690824103&w=2 - http://www.securityfocus.com/bid/5857 - http://www.iss.net/security_center/static/10244.php
CVE ID: CVE-2002-0709 State: PUBLISHED Published: 2002-10-03T04:00:00 Last Updated: 2024-08-08T02:56:38.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote attackers to execute arbitrary SQL queries via the RunReport option to SimpleBar.dll, and possibly other DLLs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5859 - http://marc.info/?l=bugtraq&m=103359690824103&w=2 - http://www.iss.net/security_center/static/10245.php
CVE ID: CVE-2002-0710 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in sendform.cgi 1.44 and earlier allows remote attackers to read arbitrary files by specifying the desired files in the BlurbFilePath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/3568 - http://www.scn.org/~bb615/scripts/sendform.html - http://marc.info/?l=bugtraq&m=102809084218422&w=2 - http://www.securityfocus.com/bid/5286 - http://www.iss.net/security_center/static/9725.php
CVE ID: CVE-2002-0711 State: PUBLISHED Published: 2002-11-10T05:00:00 Last Updated: 2024-08-08T02:56:38.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Cluster Interconnect for HP TruCluster Server 5.0A, 5.1, and 5.1A may allow local and remote attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/advisories/4633 - http://www.securityfocus.com/bid/6102 - http://www.iss.net/security_center/static/10551.php - http://marc.info/?l=bugtraq&m=103651974926272&w=2
CVE ID: CVE-2002-0712 State: PUBLISHED Published: 2004-01-14T05:00:00 Last Updated: 2024-08-08T02:56:38.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Entrust Authority Security Manager (EASM) 6.0 does not properly require multiple master users to change the password of a master user, which could allow a master user to perform operations that require multiple authorizations. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/720017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11724 - http://www.kb.cert.org/vuls/id/AAMN-5KKVXC - http://www.securityfocus.com/bid/7284
CVE ID: CVE-2002-0713 State: PUBLISHED Published: 2002-07-23T04:00:00 Last Updated: 2024-08-08T02:56:38.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper (msnt_auth) when using denyusers or allowusers files, (2) via the gopher client, or (3) via the FTP server directory listing parser when HTML output is generated. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9481.php - http://marc.info/?l=bugtraq&m=102674543407606&w=2 - ftp://ftp.caldera.com/pub/sec
.net/security_center/static/9481.php - http://marc.info/?l=bugtraq&m=102674543407606&w=2 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-046.0.txt - http://www.iss.net/security_center/static/9480.php - http://www.securityfocus.com/bid/5157 - http://www.iss.net/security_center/static/9482.php - http://www.squid-cache.org/Versions/v2/2.4/bugs/ - http://rhn.redhat.com/errata/RHSA-2002-051.html - http://www.securityfocus.com/bid/5155 - http://www.securityfocus.com/bid/5156 - http://www.squid-cache.org/Advisories/SQUID-2002_3.txt - http://rhn.redhat.com/errata/RHSA-2002-130.html - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-044.php
CVE ID: CVE-2002-0714 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=102674543407606&w=2 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-046.0.txt - http://www.squid-cache.org/Versions/v2/2.4/bugs/ - http://rhn.redhat.com/errata/RHSA-2002-051.html - http://www.squid-cache.org/Advisorie
cache.org/Versions/v2/2.4/bugs/ - http://rhn.redhat.com/errata/RHSA-2002-051.html - http://www.squid-cache.org/Advisories/SQUID-2002_3.txt - http://rhn.redhat.com/errata/RHSA-2002-130.html - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-044.php - http://www.securityfocus.com/bid/5158 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000506 - http://www.iss.net/security_center/static/9479.php - http://www.osvdb.org/5924
CVE ID: CVE-2002-0715 State: PUBLISHED Published: 2002-07-23T04:00:00 Last Updated: 2024-08-08T02:56:38.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in Squid before 2.4.STABLE6 related to proxy authentication credentials may allow remote web sites to obtain the user's proxy login and password. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=102674543407606&w=2 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-046.0.txt - http://www.squid-cache.org/Versions/v2/2.4/bugs/ - http://rhn.redhat.com/errata/RHSA-2002-051.html - http://www.squid-cache.org/Advisories/SQUID-2002_3.txt - http://rhn.redhat.com/errata/R
.com/errata/RHSA-2002-051.html - http://www.squid-cache.org/Advisories/SQUID-2002_3.txt - http://rhn.redhat.com/errata/RHSA-2002-130.html - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-044.php - http://www.iss.net/security_center/static/9478.php - http://www.securityfocus.com/bid/5154
CVE ID: CVE-2002-0716 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 allows local users to gain privileges via format string specifiers in the file name argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9271.php - http://marc.info/?l=vuln-dev&m=102323386107641&w=2 - http://www.securityfocus.com/bid/4938 - http://marc.info/?l=bugtraq&m=102323070305101&w=2
CVE ID: CVE-2002-0717 State: PUBLISHED Published: 2002-07-23T04:00:00 Last Updated: 2024-08-08T02:56:38.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP 4.2.0 and 4.2.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP POST request with certain arguments in a multipart/form-data form, which generates an error condition that is not properly handled and causes improper memory to be freed. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=102734515923277&w=2 - http://www.cert.org/advisories/CA-2002-21.html - http://marc.info/?l=bugtraq&m=102734516023281&w=2 - http://www.kb.cert.org
p://www.cert.org/advisories/CA-2002-21.html - http://marc.info/?l=bugtraq&m=102734516023281&w=2 - http://www.kb.cert.org/vuls/id/929115 - http://www.iss.net/security_center/static/9635.php
CVE ID: CVE-2002-0718 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web authoring command in Microsoft Content Management Server (MCMS) 2001 allows attackers to authenticate and upload executable content, by modifying the upload location, aka "Program Execution via MCMS Authoring Function." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5421 - http://www.iss.net/security_center/static/9784.php - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-041