Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-2317 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-16T20:53:13.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the (1) httpd, (2) nntpd, and (3) vpn driver in VelociRaptor 1.0 allows remote attackers to cause a denial of service (memory consumption) via an unknown method. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10317.php - http://www.securityfocus.com/bid/5909 - http://www.symantec.com/techsupp/enterprise/products/sym_velociraptor/sym_velociraptor_1/files.html
CVE ID: CVE-2002-2318 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-16T21:08:53.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and executed by 404 error messages. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/lists/bugtraq/2002/Aug/0158.html - http://www.iss.net/security_center/static/9812.php - http://lists.grok.org.uk/pipermail/full-disclosure/2002-August/000934.html - http://www.securityfocus.com/bid/54
2.php - http://lists.grok.org.uk/pipermail/full-disclosure/2002-August/000934.html - http://www.securityfocus.com/bid/5435
CVE ID: CVE-2002-2319 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-17T01:30:45.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in users.php in MySimpleNews allows remote attackers to inject arbitrary PHP code and HTML via the (1) LOGIN, (2) DATA, and (3) MESS parameters, which are inserted into news.php3. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10296.php - http://www.securityfocus.com/bid/5865 - http://archives.neohapsis.com/archives/bugtraq/2002-10/0027.html
CVE ID: CVE-2002-2320 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-16T22:19:40.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySimpleNews 1.0 allows remote attackers to delete arbitrary email messages via a direct request to vider.php3. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10299.php - http://archives.neohapsis.com/archives/bugtraq/2002-10/0027.html
CVE ID: CVE-2002-2321 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-16T19:40:07.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in (1) showcat.php and (2) addyoursite.php in phpLinkat 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-10/0065.html - http://www.iss.net/security_center/static/10269.php - http://www.securityfocus.com/bid/5890
CVE ID: CVE-2002-2322 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-17T02:51:50.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ultimate PHP Board (UPB) 1.0b stores the users.dat data file under the web root with insufficient access control, which allows remote attackers to obtain usernames and passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5858 - http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html - http://www.iss.net/security_center/static/10300.php
CVE ID: CVE-2002-2323 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-16T19:25:43.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun PC NetLink 1.0 through 1.2 does not properly set the access control list (ACL) for files and directories that use symbolic links and have been restored from backup, which could allow local or remote attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-27807-1 - http://www.iss.net/security_center/static/9665.php - http://www.securityfocus.com/bid/5281
CVE ID: CVE-2002-2324 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-16T23:46:16.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "System Restore" directory and subdirectories, and possibly other subdirectories in the "System Volume Information" directory on Windows XP Professional, have insecure access control list (ACL) permissions, which allows local users to access restricted files and modify registry settings. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5894 - http://archives.neohapsis.com/archives/bugtraq/2002-10/0070.html - http://www.iss.net/security_center/static/10279.php
CVE ID: CVE-2002-2325 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-16T17:58:57.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: The c-client library in Internet Message Access Protocol (IMAP) dated before 2002 RC2, as used by Pine 4.20 through 4.44, allows remote attackers to cause a denial of service (client crash) via a MIME-encoded email with Content-Type header containing an empty boundary field. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9668.php - http://online.securityfocus.com/archive/1/284086 - http://www.securityfocus.com/bid/5301
CVE ID: CVE-2002-2326 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-16T22:31:20.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authentication credentials in cleartext when connecting to Mac.com, which could allow remote attackers to obtain passwords by sniffing network traffic. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-07/0281.html - http://www.iss.net/security_center/static/9670.php - http://archives.neohapsis.com/archives/bugtraq/2002-07/0276.html - http://www.securityfo
curity_center/static/9670.php - http://archives.neohapsis.com/archives/bugtraq/2002-07/0276.html - http://www.securityfocus.com/bid/5303
CVE ID: CVE-2002-2327 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-17T02:11:26.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the environmental monitoring subsystem in Solaris 8 running on Sun Fire 280R, V480 and V880 allows local users to cause a denial of service by setting volatile properties. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-43908-1 - http://www.securityfocus.com/bid/5288 - http://www.iss.net/security_center/static/9675.php
CVE ID: CVE-2002-2328 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-17T00:56:03.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Active Directory in Windows 2000, when supporting Kerberos V authentication and GSSAPI, allows remote attackers to cause a denial of service (hang) via an LDAP client that sets the page length to zero during a large request. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/273771 - http://www.iss.net/security_center/static/9159.php - http://www.securityfocus.com/bid/4804
CVE ID: CVE-2002-2329 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-17T00:10:39.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: ICQ client 2001b, 2002a and 2002b allows remote attackers to cause a denial of service (CPU consumption or crash) via a message with a large number of emoticons. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5295 - http://www.iss.net/security_center/static/9677.php - http://online.securityfocus.com/archive/1/284036
CVE ID: CVE-2002-2330 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-16T22:15:42.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in stat.pl in StatsPlus 1.25 allows remote attackers to inject arbitrary web script or HTML via (1) HTTP_USER_AGENT or (2) HTTP_REFERER, which is written to stats.html and executed in client browsers. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9678.php - http://www.securityfocus.com/bid/5316 - http://online.securityfocus.com/archive/1/284254
CVE ID: CVE-2002-2331 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-17T00:42:18.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: W3Mail 1.0.2 through 1.0.5 with server side scripting (SSI) enabled in the attachments directory does not properly restrict the types of files that can be uploaded as attachments, which allows remote attackers to execute arbitrary code by sending code in MIME attachments, then requesting the attachments. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/284232 - http://www.securityfocus.com/bid/5314 - http://www.iss.net/security_center/static/9680.php
CVE ID: CVE-2002-2332 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-16T17:28:20.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Opera 6.01 allows remote attackers to cause a denial of service (crash) via an IMG tag with large width and height attributes. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10126.php - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-09/0167.html - http://www.securityfocus.com/bid/5717
CVE ID: CVE-2002-2333 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-16T17:03:07.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in konqueror in KDE 2.1 through 3.0 and 3.0.2 allows remote attackers to cause a denial of service (crash) via an IMG tag with large width and height attributes. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10126.php - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-09/0177.html - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-09/0167.html - http://www.securityfocus.com/bid/5721
CVE ID: CVE-2002-2334 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-16T17:53:53.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joe text editor 2.8 through 2.9.7 does not remove the group and user setuid bits for backup files, which could allow local users to execute arbitrary setuid and setgid root programs when root edits scripts owned by other users. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/292138 - http://www.securityfocus.com/bid/5732 - http://www.iss.net/security_center/static/10125.php
CVE ID: CVE-2002-2335 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-16T20:02:33.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: Killer Protection 1.0 stores the vars.inc include file under the web root with insufficient access control, which allows remote attackers to obtain user names and passwords and log in using protection.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10315.php - http://www.securityfocus.com/bid/5905 - http://online.securityfocus.com/archive/1/294208
CVE ID: CVE-2002-2336 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-17T00:06:36.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Norton Personal Firewall 2002 4.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-10/0156.html - http://online.securityfocus.com/archive/1/294411 - http://www.securityfocus.com/bid/5917 - http://www.iss.net/security_center/static/10314.php
CVE ID: CVE-2002-2337 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-16T16:14:00.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kaspersky Anti-Hacker 1.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/315631 - http://online.securityfocus.com/archive/1/294411 - http://www.securityfocus.com/bid/5917
CVE ID: CVE-2002-2338 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-16T20:06:54.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail) via a mail message containing a dot (.) at a newline, which is interpreted as the end of the message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/276946 - http://online.securityfocus.com/archive/1/276628 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:074 - http://bugzilla.mozilla.org/show_bug
ve/1/276628 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:074 - http://bugzilla.mozilla.org/show_bug.cgi?id=144228 - http://www.securityfocus.com/bid/5002 - http://mozilla.org/releases/mozilla1.0.1/security-fixes-1.0.1.html - http://www.iss.net/security_center/static/9343.php
CVE ID: CVE-2002-2339 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-16T18:55:39.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in configure.asp in Script-Shed GuestBook 1.0 allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in (1) image, (2) img, (3) image=right, (4) img=right, (5) image=left, and (6) img=left tags. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/294299 - http://www.securityfocus.com/bid/5915 - http://archives.neohapsis.com/archives/bugtraq/2003-10/0009.html - http://www.iss.net/security_center/static/
bid/5915 - http://archives.neohapsis.com/archives/bugtraq/2003-10/0009.html - http://www.iss.net/security_center/static/10331.php
CVE ID: CVE-2002-2340 State: PUBLISHED Published: 2007-10-29T19:00:00 Last Updated: 2024-08-08T03:59:11.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in read.php in Phorum 3.3.2a allows remote attackers to inject arbitrary web script or HTML via (1) the t parameter or (2) the body of an email response. Additional Analyst Notes: - CVE Program Container: References: - http://www.ifrance.com/kitetoua/tuto/5holes5.txt - http://marc.info/?l=vuln-dev&m=102121925428844&w=2 - http://www.phorum.org/changelog.txt - http://www.securityfocus.com/bid/4739
CVE ID: CVE-2002-2341 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-17T02:57:09.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in content blocking in SonicWALL SOHO3 6.3.0.0 allows remote attackers to inject arbitrary web script or HTML via a blocked URL. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/272935 - http://www.securityfocus.com/bid/4755 - http://www.iss.net/security_center/static/9103.php
CVE ID: CVE-2002-2342 State: PUBLISHED Published: 2007-10-29T19:00:00 Last Updated: 2024-08-08T03:59:11.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bannermatic 1, 2, and 3 stores the (1) ban.log, (2) ban.bak, (3) ban.dat and (4) banmat.pwd data files under the web document root with insufficient access control, which allows attackers to obtain sensitive information via a direct request for the files. Additional Analyst Notes: - CVE Program Container: References: - http://www.ifrance.com/kitetoua/tuto/5holes5.txt - http://marc.info/?l=vuln-dev&m=102121925428844&w=2 - http://www.securityfocus.com/bid/4738
CVE ID: CVE-2002-2343 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-17T01:55:52.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in NOCC 0.9 through 0.9.5 allows remote attackers to inject arbitrary web script or HTML via email messages. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/tracker/index.php?func=detail&aid=555897&group_id=12177&atid=112177 - http://www.securityfocus.com/bid/4740 - http://www.iss.net/security_center/static/9071.php - http://archives.neohapsis.com/archives/bugtraq/2002-05/0107.html
CVE ID: CVE-2002-2344 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-16T18:49:34.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ensim WEBppliance 3.0 and 3.1 allows remote attackers to read mail intended for other users by defining an alias that is the target's email address. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1004938 - http://www.securityfocus.com/bid/5418 - http://xwss.org/thread.jsp?forum=107&thread=864
CVE ID: CVE-2002-2345 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-16T22:01:35.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle 9i Application Server 9.0.2 stores the web cache administrator interface password in plaintext, which allows remote attackers to gain access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7395 - http://www.iss.net/security_center/static/9841.php - http://otn.oracle.com/deploy/security/pdf/2002alert39rev1.pdf
CVE ID: CVE-2002-2346 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-16T23:20:37.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpBB 2.0 through 2.0.3 generates names for uploaded avatar files with the hex-encoded IP address of the client system, which allows remote attackers to obtain client IP addresses. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10323.php - http://online.securityfocus.com/archive/1/294560 - http://www.securityfocus.com/bid/5923
CVE ID: CVE-2002-2347 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-17T00:26:44.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Oracle Java Server Page (OJSP) demo files (1) hellouser.jsp, (2) welcomeuser.jsp and (3) usebean.jsp in Oracle 9i Application Server 9.0.2, 1.0.2.2, 1.0.2.1s and 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the text entry field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5452 - http://otn.oracle.com/deploy/security/pdf/2002alert41rev1.pdf - http://www.iss.net/security_center/static/9842.php
CVE ID: CVE-2002-2348 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-17T03:17:24.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in athcgi.exe in Authoria HR allows remote attackers to inject arbitrary web script or HTML via the command parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/294624 - http://www.iss.net/security_center/static/10324.php - http://www.securityfocus.com/bid/5932
CVE ID: CVE-2002-2349 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-16T18:13:24.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpinfo.php in phpBBmod 1.3.3 executes the phpinfo function, which allows remote attackers to obtain sensitive environment information. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10335.php - http://www.securityfocus.com/archive/1/294701 - http://www.securityfocus.com/bid/5942
CVE ID: CVE-2002-2350 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-16T17:22:37.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in z_user_show.php in dbtreelistproperty_method.php in Zorum 2.4 allows remote attackers to inject arbitrary web script or HTML via the class parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-10/0152.html - http://www.iss.net/security_center/static/10337.php
CVE ID: CVE-2002-2351 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-16T21:08:11.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eudora 5.1 allows remote attackers to bypass security warnings and possibly execute arbitrary code via attachments with names containing a trailing "." (dot). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5432 - http://cert.uni-stuttgart.de/archive/bugtraq/2002/08/msg00142.html - http://www.eudora.com/download/eudora/windows/5.2/RelNotes.txt
CVE ID: CVE-2002-2352 State: PUBLISHED Published: 2007-10-29T19:00:00 Last Updated: 2024-08-08T03:59:11.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NBActiveX.ocx ActiveX control in NeoBook 4 allows remote attackers to install and execute arbitrary programs. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10645.php - http://www.securityfocus.com/bid/6191 - http://securityreason.com/securityalert/3317 - http://online.securityfocus.com/archive/1/300073
CVE ID: CVE-2002-2353 State: PUBLISHED Published: 2007-10-29T19:00:00 Last Updated: 2024-08-08T03:59:11.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: tftpd32 2.50 and 2.50.2 allows remote attackers to read or write arbitrary files via a full pathname in GET and PUT requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/632633 - http://www.securiteam.com/windowsntfocus/6D00D2061G.html - http://www.iss.net/security_center/static/10646.php - http://www.securityfocus.com/bid/6198 - http://tftpd32.jounin.net/
CVE ID: CVE-2002-2354 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-16T19:56:19.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear FM114P firmware 1.3 wireless firewall allows remote attackers to cause a denial of service (crash or hang) via a large number of TCP connection requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10340.php - http://www.securityfocus.com/archive/1/294702 - http://www.securityfocus.com/bid/5940
CVE ID: CVE-2002-2355 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-17T02:36:17.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear FM114P firmware 1.3 wireless firewall, when configured to backup configuration information, stores DDNS (DynDNS) user name and password, MAC address filtering table and possibly other information in cleartext, which could allow local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5943 - http://www.iss.net/security_center/static/10341.php - http://www.securityfocus.com/archive/1/294740